mammieke

Is dit het juiste ? ComboFix 09-03-19.02 - karine 2009-03-21 9:05:02.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.1790.1280 [GMT 1:00] Gestart vanuit: c:\documents and settings\karine\Bureaublad\ComboFix.exe AV: AntiVir Desktop *On-access scanning disabled* (Updated) . (((((((((((((((((((( Bestanden Gemaakt van 2009-02-21 to 2009-03-21 )))))))))))))))))))))))))))))) . 2009-03-21 08:53 . 2009-03-21 08:56 <DIR> d-------- C:\ComboFix1 2009-03-20 22:13 . 2009-03-20 22:13 <DIR> d-------- c:\documents and settings\karine\Application Data\Malwarebytes 2009-03-20 22:13 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-03-20 22:13 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-03-20 22:12 . 2009-03-20 22:13 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-03-20 22:12 . 2009-03-20 22:12 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-03-20 21:06 . 2009-03-20 21:06 <DIR> d-------- c:\program files\Trend Micro 2009-03-20 20:59 . 2006-10-26 19:56 32,592 --a------ c:\windows\system32\msonpmon.dll 2009-03-20 20:52 . 2009-03-20 20:52 <DIR> d-------- c:\program files\CCleaner 2009-03-20 16:30 . 2009-03-20 16:30 <DIR> d-------- c:\windows\system32\Logfiles 2009-03-20 16:30 . 2009-03-20 16:30 <DIR> d-------- C:\Inetpub 2009-03-19 17:01 . 2009-03-19 17:01 <DIR> d-------- c:\program files\TweakNow RegCleaner Std 2009-03-19 16:47 . 2009-03-19 16:47 <DIR> d-------- c:\documents and settings\karine\Application Data\Songbird2 2009-03-19 09:12 . 2009-03-19 09:12 <DIR> d-------- c:\program files\Avira 2009-03-19 09:12 . 2009-03-19 09:12 <DIR> d-------- c:\documents and settings\All Users\Application Data\Avira 2009-03-19 09:12 . 2009-02-13 11:31 55,640 --------- c:\windows\system32\drivers\avgntflt.sys 2009-03-19 08:48 . 2009-01-09 20:19 1,089,883 -----c--- c:\windows\system32\dllcache\ntprint.cat 2009-03-18 21:16 . 2009-03-18 21:16 <DIR> d-------- C:\b9e690456c02253fd2e9 2009-03-18 18:49 . 2009-03-18 18:49 <DIR> d-------- c:\windows\SxsCaPendDel 2009-03-18 18:48 . 2009-03-18 18:48 <DIR> d-------- c:\windows\Downloaded Installations 2009-03-18 18:47 . 2009-03-18 18:47 <DIR> d--h----- c:\documents and settings\emily\Sjablonen 2009-03-18 18:47 . 2009-03-18 18:47 <DIR> dr-h----- c:\documents and settings\emily\Onlangs geopend 2009-03-18 18:47 . 2009-03-18 18:47 <DIR> d--h----- c:\documents and settings\emily\Netwerkprinteromgeving 2009-03-18 18:47 . 2009-03-18 18:47 <DIR> dr------- c:\documents and settings\emily\Menu Start 2009-03-18 18:47 . 2009-03-18 18:47 <DIR> d-------- c:\documents and settings\emily\Bureaublad 2009-03-18 18:47 . 2009-03-18 18:47 <DIR> d-------- c:\documents and settings\emily\Application Data\Logitech 2009-03-18 18:47 . 2009-03-18 18:47 <DIR> d-------- c:\documents and settings\emily\Application Data\ATI 2009-03-18 09:48 . 2009-02-06 18:08 55,152 --------- c:\windows\system32\drivers\fssfltr_tdi.sys 2009-03-18 09:47 . 2009-03-18 18:49 <DIR> d-------- c:\program files\Microsoft SQL Server Compact Edition 2009-03-17 11:19 . 2009-03-18 18:42 <DIR> d-------- c:\program files\ScreenshotCaptor 2009-03-17 11:19 . 2009-03-17 11:19 <DIR> d-------- c:\documents and settings\karine\Application Data\DonationCoder 2009-03-17 11:19 . 2009-03-17 11:19 <DIR> d-------- c:\documents and settings\All Users\Application Data\DonationCoder 2009-03-17 11:19 . 2009-03-17 11:19 58 --------- c:\windows\system32\DonationCoder_ScreenshotCaptor_InstallInfo.dat 2009-03-11 20:58 . 2004-08-04 02:03 221,184 --------- c:\windows\system32\wmpns.dll 2009-02-23 20:57 . 2009-03-18 18:47 <DIR> d-------- c:\documents and settings\emily 2009-02-23 17:26 . 2009-02-23 17:26 <DIR> d-------- c:\documents and settings\All Users\Application Data\Office Genuine Advantage 2009-02-23 12:36 . 2009-02-23 12:36 <DIR> d-------- c:\documents and settings\All Users\Application Data\252CE 2009-02-23 09:57 . 2009-02-23 09:57 <DIR> d-------- c:\documents and settings\All Users\Application Data\2D399 2009-02-22 11:52 . 2009-02-22 11:52 <DIR> d-------- c:\documents and settings\All Users\Application Data\392FD 2009-02-22 11:02 . 2009-02-22 11:02 <DIR> d-------- c:\documents and settings\All Users\Application Data\2EA 2009-02-22 11:01 . 2009-02-22 17:57 <DIR> d-------- C:\My Downloads 2009-02-21 15:39 . 2009-02-21 15:39 <DIR> d-------- c:\documents and settings\emilyke\Application Data\Logitech 2009-02-21 15:38 . 2009-03-18 18:46 <DIR> d-------- c:\documents and settings\emilyke\Sjablonen 2009-02-21 15:38 . 2009-02-23 20:57 <DIR> d-------- c:\documents and settings\emilyke\Mijn documenten 2009-02-21 15:38 . 2009-02-23 20:57 <DIR> d-------- c:\documents and settings\emilyke\Favorieten 2009-02-21 15:38 . 2009-03-18 18:47 <DIR> d---s---- c:\documents and settings\emilyke 2009-02-21 12:35 . 2009-02-21 12:35 <DIR> d-------- c:\documents and settings\All Users\Application Data\5222 . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-03-20 22:14 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2009-03-20 12:35 --------- d-----w c:\documents and settings\All Users\Application Data\NOS 2009-03-20 12:34 --------- d-----w c:\program files\Common Files\Adobe 2009-03-20 12:31 --------- d-----w c:\program files\NOS 2009-03-18 17:49 --------- d-----w c:\program files\Windows Live 2009-03-18 17:48 --------- d-----w c:\program files\LimeWire 2009-03-18 17:48 --------- d-----w c:\documents and settings\All Users\Application Data\PlayFirst 2009-03-18 17:47 --------- d-----w c:\program files\Google 2009-03-18 17:47 --------- d-----w c:\documents and settings\karine\Application Data\U3 2009-03-18 17:46 --------- d-----w c:\documents and settings\daan\Application Data\Winamp 2009-03-18 17:28 --------- d-----w c:\documents and settings\karine\Application Data\LimeWire 2009-02-20 07:33 --------- d-----w c:\documents and settings\All Users\Application Data\2F157 2009-02-18 11:40 --------- d-----w c:\documents and settings\All Users\Application Data\223C8 2009-02-17 07:39 --------- d-----w c:\documents and settings\All Users\Application Data\171A5 2009-02-16 19:17 --------- d-----w c:\documents and settings\All Users\Application Data\42EE 2009-02-14 18:20 --------- d-----w c:\documents and settings\All Users\Application Data\28CB 2009-02-11 12:14 --------- d-----w c:\documents and settings\All Users\Application Data\30186 2009-02-11 08:43 --------- d-----w c:\documents and settings\All Users\Application Data\183C8 2009-02-10 14:50 --------- d-----w c:\documents and settings\All Users\Application Data\2F351 2009-02-09 14:08 1,846,912 ----a-w c:\windows\system32\win32k.sys 2009-02-06 18:55 308,616 ------w c:\windows\WLXPGSS.SCR 2009-02-06 17:52 49,504 ------w c:\windows\system32\sirenacm.dll 2009-02-03 15:59 --------- d-----w c:\documents and settings\Gast\Application Data\Zylom Games 2009-02-03 15:28 --------- d-----w c:\documents and settings\Gast\Application Data\PlayFirst 2008-09-12 15:49 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\MSHist012008091220080913\index.dat . ((((((((((((((((((((((((((((( SnapShot@2009-03-21_ 6.06.04,12 ))))))))))))))))))))))))))))))))))))))))) . + 2009-03-21 05:24:14 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_7b8.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2008-08-27 20480] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-02-06 3885408] "RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2008-11-14 160592] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-26 39408] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MM_MODULE"="c:\program files\MIC\HAWAII\Hawaii.exe" [2005-11-16 121856] "ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 45056] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-28 136600] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2007-01-22 c:\windows\system32\HDAShCut.exe] "NECHotkey"="mHotkey.exe" [2006-01-11 c:\windows\mHotkey.exe] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-10-21 c:\windows\KHALMNPR.Exe] "RTHDCPL"="RTHDCPL.EXE" [2006-01-11 c:\windows\RTHDCPL.EXE] "SoundMan"="SOUNDMAN.EXE" [2005-05-17 c:\windows\SOUNDMAN.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "ShowDeskFix"="shell32" [X] "nltide_3"="advpack.dll" [2008-12-21 c:\windows\system32\advpack.dll] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-03-11 210520] Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2008-08-27 450560] Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\KEM.exe [2008-08-27 581632] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-03-19 108289] R2 EFUploadSrv;ExtraFilm upload service;c:\program files\ExtraFilm Designer BE NL\EFUploadSrv.exe [2008-10-01 1712128] R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-03-18 55152] R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656] S2 SrvCDEject;SrvCDEject;c:\program files\Packard Bell\SrvCDEject.exe [2008-08-06 613376] S3 Camdrv30;Philips ToUcam XS;c:\windows\system32\drivers\camdrv30.sys [2009-01-19 171264] S3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360] S3 getPlus® Helper;getPlus® Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2009-03-20 33176] S3 MosIrUsb;MosIrUsb.sys;c:\windows\system32\drivers\MosIrUsb.sys [2008-08-06 20736] S3 s3chipid;s3chipid;\??\c:\docume~1\karine\LOCALS~1\Temp\s3chipid.sys --> c:\docume~1\karine\LOCALS~1\Temp\s3chipid.sys [?] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhoud van de 'Gedeelde Taken' map 2009-02-24 c:\windows\Tasks\OGADaily.job - c:\windows\system32\OGAVerify.exe [] 2009-03-21 c:\windows\Tasks\OGALogon.job - c:\windows\system32\OGAVerify.exe [] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uInternet Settings,ProxyOverride = localhost IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Formulieren opslaan - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html IE: Invul Formulieren - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html IE: Menu aanpassen - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html IE: RoboForm Werkbalk - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-03-21 09:05:54 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'winlogon.exe'(584) c:\windows\system32\Ati2evxx.dll . Voltooingstijd: 2009-03-21 9:07:02 ComboFix-quarantined-files.txt 2009-03-21 08:07:00 ComboFix2.txt 2009-03-21 07:56:24 ComboFix3.txt 2009-03-21 05:06:51 Pre-Run: 244.686.802.944 bytes beschikbaar Post-Run: 244,681,437,184 bytes beschikbaar 183 --- E O F --- 2009-03-20 22:14:06

ja ,ik heb combofix gedownload en laten scannen.toen kreeg ik zo een kladblad met gegeven maar kon dat niet kopieren.Hoe los ik dit op?

Malwarebytes' Anti-Malware 1.34 Database versie: 1878 Windows 5.1.2600 Service Pack 3 21/03/2009 6:28:59 mbam-log-2009-03-21 (06-28-59).txt Scan type: Snelle Scan Objecten gescand: 81356 Verstreken tijd: 2 minute(s), 40 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Doe ik het nog steeds juist?

Malwarebytes' Anti-Malware 1.34 Database versie: 1878 Windows 5.1.2600 Service Pack 3 20/03/2009 22:23:20 mbam-log-2009-03-20 (22-23-20).txt Scan type: Snelle Scan Objecten gescand: 98259 Verstreken tijd: 8 minute(s), 13 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 2 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: C:\WINDOWS\system32\TDSSoyklmptd.dll (Rootkit.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\TDSSygakbxfl.log (Trojan.TDSS) -> Quarantined and deleted successfully. is het juist gedaan?

ik heb heel de lijst gecopieerd en in ander topic gezet.In ieder geval al bedankt voor de hulp.merciekes

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:06:53, on 20/03/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.20978) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\ExtraFilm Designer BE NL\EFUploadSrv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\MIC\HAWAII\Hawaii.exe C:\WINDOWS\mHotkey.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Logitech\SetPoint\KEM.exe C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [MM_MODULE] C:\Program Files\MIC\HAWAII\Hawaii.exe O4 - HKLM\..\Run: [NECHotkey] mHotkey.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\RunOnce: [uninstall getPlus® for Adobe] "C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1noarp O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\RunOnce: [shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103471 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 1.1.4322; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" -"http://www.rzibit1.zikle.nl/dehotel" O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.be/SnapfishActivia.cab O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/44.10/uploader2.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://kiw.imgag.com/imgag/cp/install/crusher-kiwen.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ExtraFilm upload service (EFUploadSrv) - Textalk AB - C:\Program Files\ExtraFilm Designer BE NL\EFUploadSrv.exe O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: SrvCDEject - Unknown owner - C:\Program Files\Packard Bell\SrvCDEject.exe -- End of file - 13393 bytes dit heb ik gecopieerd,kan er iemand iets mee aanvangen nu?

hey, mercikes,ik ga het eens direct proberen.

hey, ja sorry,ben maar een leek.het besturingssysteem is xp.Ja mijn pc slaat om de paar minuten vast en dan na en paar minuten wachten lukt het terug.OOk msn valt steeds uit en dan moet ik me terug aanmelden.Ik krijg dan zo een foutenrapport dat ik eventueel kan verzenden.

ik heb een tweedehands pc gekocht en er zijn veel problemen mee.Ik denk dat er een illegale versie van office opstaat.Daarom wil ik me een legale versie aaanschaffen.Ik zou eerst een studentenlicensie(ik studeer nog aan een hogeschool momenteel) willen aanvragen op proef voor maand en deze dan aankopen. Maar hoe begin je daar nu aan.:stupid:Er staat al veel op pc van mezelf van foto's en bestanden die ik nog nodig heb. Als ik nu een backup maak waar kan ik deze bestanden dan ergens opslaan?kan dit op een usb stick of niet? Verder moet ik dan alle programma's verwijderen?ppfft Ik ken bijna niks van pc maar ik wil dit zelf proberen want als ik iemand moet laten komen kost dit weer veel geld. Kan iemand me op een makkelijke manier wat uitleg geven over werkwijze, bedankt alvast.