nineke

Internet E-Mail Message C:\Documents and Settings\jeannine\Mijn documenten openen met outloock express Dat zal niet goed zijn zeker ????? Nineke

Het staat ergens tussen mijn documenten. Ja, kleine hapjes zijn soms de beste hoor. Ik ben wel aan het koken, en straks naar de kiné, maar ik kom wel af en toe eens piepen.... Nineke

Kapeke, ik begrijp je nu eindelijk hoe het zit met dat bericht. Mijn probleem was, dat ik reageer op "snel reageren", en dan kreeg ik uiteraard niet zo'n uitgebreide mogelijkheden. Ik heb gedaan wat je me zei, maar het uploaden is mislukt, 2 X geprobeerd. Maar het zal wel weer aan mij liggen denk ik. Jij spreekt hier voortdurend over dat ASF programma, maar er zijn nog zoveel andere programma's ook AS....... Ik weet niet waar ik dit allemaal moet inbrengen. Ik heb dus mijn mail, met een bijlage, met een filmpje. Wat doe ik, of wat heb ik gedaan, ik heb die bijlage geopend, zag dat het niet openging, heb dan die bijlage op mijn pc gezet, gewoon, en heb de naam veranderd, waarom ? snap ik niet, maar goed. De rest heb ik dan uitgevoerd zoals je mij hier heb doorgegeven, maar dat ASF bestand heb ik volgens nergens voor gebruikt ? Inderdaad we zijn hier om geholpen te worden, en ik ben heel tevreden dat je jouw geduld niet verliest met mij, maar ik voel mij zo een dom blondje al heb ik niets tegen blondjes hoor, maar je weet wat ik bedoel. Nog eens uitleggen zeker, stap voor stap is precies nog niet goed genoeg voor mij. Nineke met de rode kaken

Ik heb dt gedaan met cleaner. Alles lijkt nu verdwenen. nineke ga eerst wat eten, want ik verlies hier wel de moed, en vind mij wel heel erg dom dat ik dit niet kan oplossen met zo'n degelijke uitleg. Een groentje of een bleutje ??? ik denk dat ik een combinatie van de twee heb. Bedankt voor de hulp, Nineke

Ik probeer nog eens maar snap het nog altijd niet goed: Re: maman m'a dit je peu Bijvoegen: Ouitupeu.mpg [3.1MB] Ik weet het niet meer hoor.

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:46, on 2008-01-28 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 SP2 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\PROGRA~1\INCRED~1\bin\ImApp.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\PROGRA~1\INCRED~1\bin\IncMail.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Het Nieuwsblad Online R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [incrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User '?') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\S-1-5-21-343818398-616249376-725345543-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/adobe/MTSInstallers/MetaStream3.cab?url=http://users.telenet.be/salonsrembrandt/img/show/ThumbnailFrame.html O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe -- End of file - 6168 bytes En om die bijlage hier neer te zetten zul je mij een beetje moeten helpen vrees ik, ik probeer het, maar waarschijnlijk is dit niet de juiste manier. Re: maman m'a dit je peu Bijvoegen: Ouitupeu.mpg [3.1MB] Laat iets weten, Nineke

Het bestand genoemd bij: C:\DOCUME~1\jeannine\LOCALS~1\Temp\~nsu.tmp\Au_.exe kon niet worden gevonden. Deze referenties blijven vaak achter nadat software is verwijderd. Oplossing: Verwijder de registerwaarden. Deze morgen liet mijn pc, hoe kun je het raden ? weer vast, ik heb hem eens opgeschoond, en zoals je mij zo goed al geleerd hebt, ook de problemen gaan opsporen, en het hierboven gemelde kwam te voorschijn, wat moet ik hiermee doen ? Ik heb de indruk dat ik hier maar ga blijven plakken aan jou Kape, sorry hoor, maar zelfs bij het typen van dit bericht blijft hij ook weer hangen, zou je er de moed niet van verliezen ? ikke wel ze. Straks probeer ik de bijlage hier te plaatsen, Nineke

Neen sorry dat gaat niet open via quictime. Pffffff een miserie hé. Nineke

Dit staat er als ik media player wil openen : foutmelding: en bij help : Windows Media Player Error Message Help You've encountered error message C00D11B1 while using Windows Media Player. The following information might help you troubleshoot the issue. Cannot play the file Windows Media Player cannot play the file. You might encounter this error message for one of the following reasons: Your sound device, such as a sound card or sound controller, requires an updated driver. To determine if an updated driver is available, see Windows Update at the Microsoft Web site, or see the sound device manufacturer's Web site. Your sound device is not functioning properly. Try using Device Manager to check the status of your sound device. To check the status of your sound device Do one of the following: If you are running Windows XP, click Start, right-click My Computer, and then click Manage. If you are running Windows Vista, click Start, right-click Computer, and then click Manage. [*] In the pane on the left, click Device Manager. [*] In the pane on the right, expand Sound, video and game controllers, and then look for the name of your sound device. [*] Do one of the following: If your sound device is listed but the icon includes a red "X," the device has been disabled. To enable the device, right-click the icon, and then click Enable. If your sound device is not listed, in the pane on the right, expand Other devices. If Multimedia Audio Controller appears in the list, right-click the icon, and then click Update Driver or Update Driver Software. Follow the on-screen instructions to find and install the driver software. If you are not able to find and install the correct driver software, see your computer manufacturer's or sound device manufacturer's Web site for further assistance. [*] You do not have a sound device installed on your computer. Install a sound device, and then try to play the file again. For details, see your computer manufacturer's or sound device manufacturer's Web site. [*] You are trying to play a file on the Internet and the server might be temporarily unavailable or there might be a network issue. Try again later. [*] You are trying to play an MP3 file that contains compressed ID3 headers. The ID3 header is a portion of the file that stores the song's album information (for example, the song name, artist name, album name, and genre). This information is sometimes called a "tag." To fix the problem, make a copy of the file and then use a non-Microsoft ID3 tag editing program to remove or reset the file's ID3 headers. After you remove the ID3 headers, Windows Media Player should be able to play the MP3 file. Attempting to remove ID3 headers might damage the file and make it unplayable. Therefore, always make a copy of the file before you edit it. If this solution does not resolve the problem, the file might be corrupted. This error might have been triggered by an error in another program or component of Windows. The following information describes the original error. Original Error Code Original Error Message 80040154 Class not registered.

Quictime sta er inderdaad op. Het ece-bestand uitvoeren ?????? hoe bedoel je ? Nineke

ASF: audio-video bestand van windows media codecs, hoe doe ik dit nu weer ? Nineke

Ik kom dat inderdaad tegen, maar het lukt nog altijd niet om die bijlagen te openen. Sorry hoor, Nineke

C00D11B1 dat is de foutmelding die windows mediaplayer weergeeft. Extensie ASF kan dat ????? Ken er niet zoveel van hoor. Nineke

Kape het is weer hetzelfde probleem als donderdag. Als ik de inhoud van het kladblad wil slepen naar combofix, vermeld hij terug dat het niet goed geschreven is. Cleaner is uitgevoerd enfouten hersteld. Hier het resultaat toch wel van combofix: ComboFix 08-01-23.2 - jeannine 2008-01-26 15:27:46.5 - NTFSx86 Gestart vanuit: C:\Documents and Settings\jeannine\Bureaublad\ComboFix.exe WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !! . (((((((((((((((((((( Bestanden Gemaakt van 2007-12-26 to 2008-01-26 )))))))))))))))))))))))))))))) . 2008-01-23 13:52 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\Nircmd.exe 2008-01-21 10:34 . 2008-01-21 10:34 <DIR> d-------- C:\Program Files\CodeStuff 2008-01-20 17:32 . 2008-01-20 17:32 <DIR> d-------- C:\Program Files\Trend Micro 2008-01-19 13:36 . 2008-01-19 13:38 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-19 13:36 . 2008-01-19 13:36 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-01-19 13:36 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-01-19 13:35 . 2008-01-19 13:35 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-01-17 12:40 . 2008-01-17 12:40 <DIR> d-------- C:\cee79b7510e7a94126ec70bbfad2ce 2008-01-07 16:45 . 2008-01-07 16:45 0 --a------ C:\WINDOWS\nsreg.dat 2008-01-07 16:43 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2007-12-31 16:28 . 2007-12-31 16:28 <DIR> d-------- C:\Program Files\CyberLink 2007-12-30 19:40 . 2007-12-30 19:40 <DIR> d-------- C:\Program Files\Windows Live Favorites 2007-12-28 19:34 . 2007-12-28 19:34 <DIR> d-------- C:\Program Files\Ulead Systems 2007-12-27 17:44 . 2007-12-31 17:09 <DIR> d-------- C:\WINDOWSR 2007-12-26 15:34 . 2007-12-26 15:52 <DIR> d-------- C:\Program Files\Spyware Doctor 2007-12-26 15:34 . 2005-09-23 08:29 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-12-26 15:34 . 2007-12-26 15:39 74,240 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2007-12-26 15:34 . 2007-12-26 15:39 56,832 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2007-12-26 15:34 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2007-12-26 15:34 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2007-12-26 15:33 . 2007-12-26 15:33 <DIR> d-------- C:\Program Files\Webroot 2007-12-26 15:33 . 2007-03-01 19:54 144,960 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys 2007-12-26 15:33 . 2007-03-01 19:54 22,080 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys 2007-12-26 15:33 . 2007-03-01 19:54 21,056 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys 2007-12-26 15:33 . 2007-03-01 19:54 20,544 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys 2007-12-26 15:32 . 2007-12-26 15:32 164 --a------ C:\install.dat 2007-12-26 15:31 . 2007-12-26 15:31 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-12-26 15:31 . 2007-12-26 15:31 <DIR> d-------- C:\Program Files\Lavasoft 2007-12-26 15:31 . 2005-08-25 18:19 115,920 --a------ C:\WINDOWS\system32\MSINET.OCX 2007-12-26 12:14 . 2007-12-26 12:20 <DIR> d-------- C:\Temp 2007-12-26 12:01 . 2007-12-26 12:01 <DIR> d-------- C:\Program Files\SurfRight 2007-12-26 11:55 . 2007-12-26 11:55 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy 2007-12-26 11:55 . 2008-01-07 16:28 <DIR> d-------- C:\Program Files\Hitman Pro . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-24 11:44 --------- d-----w C:\Program Files\Zylom Games 2007-12-31 15:28 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-30 18:40 --------- d-----w C:\Program Files\Windows Live Toolbar 2007-12-28 18:33 --------- d-----w C:\Program Files\Common Files\Adobe 2007-12-28 13:32 --------- d-----w C:\Program Files\IncrediMail 2007-12-28 13:19 --------- d-----w C:\Program Files\MSN Messenger 2007-11-29 22:44 --------- d-----w C:\Program Files\Yahoo! 2007-11-29 22:44 --------- d-----w C:\Program Files\CCleaner 2007-11-29 18:57 --------- d-----w C:\Program Files\RegClean 2007-11-29 15:43 --------- d-----w C:\Program Files\RegistryClear 2007-11-07 09:30 727,040 ----a-w C:\WINDOWS\system32\lsasrv.dll 2007-11-05 14:31 114,688 ----a-w C:\WINDOWS\system32\netlogun.exe 2007-11-01 09:24 155,995 ----a-w C:\WINDOWS\java\Packages\D75NHBJ7.ZIP 2007-10-29 22:45 1,291,776 ----a-w C:\WINDOWS\system32\quartz.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00 15360] "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-12-04 18:01 214456] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-06-15 10:20 6803456] "nwiz"="nwiz.exe" [2005-06-15 10:20 1519616 C:\WINDOWS\system32\nwiz.exe] "HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 16:46 172032] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 07:38 241664] "HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2004-02-18 18:55 49152] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-21 16:06 579072] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00 15360] "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-01-21 16:03 219136] [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Kodak EasyShare software.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Kodak EasyShare software.lnk backup=C:\WINDOWS\pss\Kodak EasyShare software.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^KODAK Software Updater.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\KODAK Software Updater.lnk backup=C:\WINDOWS\pss\KODAK Software Updater.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^jeannine^Menu Start^Programma's^Opstarten^OpenOffice.org 2.3 .lnk] path=C:\Documents and Settings\jeannine\Menu Start\Programma's\Opstarten\OpenOffice.org 2.3 .lnk backup=C:\WINDOWS\pss\OpenOffice.org 2.3 .lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2007-10-10 19:51 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hitman Pro Expiration Helper] --a------ 2007-01-30 14:41 596760 C:\Program Files\Hitman Pro\xphelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --------- 2004-10-13 17:24 1694208 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] --a------ 2005-06-15 10:20 86016 C:\WINDOWS\system32\NvMcTray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray] --a------ 2007-11-02 17:24 1065800 C:\Program Files\Spyware Doctor\SDTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2007-09-25 01:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-10-08 11:08 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WebrootSpySweeperService"=2 (0x2) "usnjsvc"=3 (0x3) "sdCoreService"=3 (0x3) "sdAuxService"=3 (0x3) "ScsiAccess"=2 (0x2) "ose"=3 (0x3) "NOD32krn"=2 (0x2) "KodakCCS"=2 (0x2) "gusvc"=3 (0x3) "CaretakerUpdate"=2 (0x2) "CaretakerSvc"=2 (0x2) "CaretakerProxy"=2 (0x2) "CaretakerAntispam"=2 (0x2) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map "2008-01-25 18:03:51 C:\WINDOWS\Tasks\1-Click Maintenance.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe "2008-01-26 14:04:01 C:\WINDOWS\Tasks\Controleren op updates voor Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-26 15:29:42 Windows 5.1.2600 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . Moet ik nu nog iets veranderen of doen ? Bedankt, Nineke

Hier komt de combofix: ComboFix 08-01-23.2 - jeannine 2008-01-25 15:55:20.4 - NTFSx86 Gestart vanuit: C:\Documents and Settings\jeannine\Bureaublad\ComboFix.exe WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !! . (((((((((((((((((((( Bestanden Gemaakt van 2007-12-25 to 2008-01-25 )))))))))))))))))))))))))))))) . 2008-01-23 13:52 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\Nircmd.exe 2008-01-21 10:34 . 2008-01-21 10:34 <DIR> d-------- C:\Program Files\CodeStuff 2008-01-20 17:32 . 2008-01-20 17:32 <DIR> d-------- C:\Program Files\Trend Micro 2008-01-19 13:36 . 2008-01-19 13:38 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-19 13:36 . 2008-01-19 13:36 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-01-19 13:36 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-01-19 13:35 . 2008-01-19 13:35 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-01-17 12:47 . 2008-01-21 10:24 1,917 --a------ C:\WINDOWS\imsins.BAK 2008-01-17 12:40 . 2008-01-17 12:40 <DIR> d-------- C:\cee79b7510e7a94126ec70bbfad2ce 2008-01-07 16:45 . 2008-01-07 16:45 0 --a------ C:\WINDOWS\nsreg.dat 2008-01-07 16:43 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2007-12-31 16:28 . 2007-12-31 16:28 <DIR> d-------- C:\Program Files\CyberLink 2007-12-30 19:40 . 2007-12-30 19:40 <DIR> d-------- C:\Program Files\Windows Live Favorites 2007-12-28 19:34 . 2007-12-28 19:34 <DIR> d-------- C:\Program Files\Ulead Systems 2007-12-27 17:44 . 2007-12-31 17:09 <DIR> d-------- C:\WINDOWSR 2007-12-26 15:34 . 2007-12-26 15:52 <DIR> d-------- C:\Program Files\Spyware Doctor 2007-12-26 15:34 . 2005-09-23 08:29 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-12-26 15:34 . 2007-12-26 15:39 74,240 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2007-12-26 15:34 . 2007-12-26 15:39 56,832 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2007-12-26 15:34 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2007-12-26 15:34 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2007-12-26 15:33 . 2007-12-26 15:33 <DIR> d-------- C:\Program Files\Webroot 2007-12-26 15:33 . 2007-03-01 19:54 144,960 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys 2007-12-26 15:33 . 2007-03-01 19:54 22,080 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys 2007-12-26 15:33 . 2007-03-01 19:54 21,056 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys 2007-12-26 15:33 . 2007-03-01 19:54 20,544 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys 2007-12-26 15:32 . 2007-12-26 15:32 164 --a------ C:\install.dat 2007-12-26 15:31 . 2007-12-26 15:31 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-12-26 15:31 . 2007-12-26 15:31 <DIR> d-------- C:\Program Files\Lavasoft 2007-12-26 15:31 . 2005-08-25 18:19 115,920 --a------ C:\WINDOWS\system32\MSINET.OCX 2007-12-26 12:14 . 2007-12-26 12:20 <DIR> d-------- C:\Temp 2007-12-26 12:01 . 2007-12-26 12:01 <DIR> d-------- C:\Program Files\SurfRight 2007-12-26 11:55 . 2007-12-26 11:55 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy 2007-12-26 11:55 . 2008-01-07 16:28 <DIR> d-------- C:\Program Files\Hitman Pro . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-24 11:44 --------- d-----w C:\Program Files\Zylom Games 2007-12-31 15:28 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-30 18:40 --------- d-----w C:\Program Files\Windows Live Toolbar 2007-12-28 18:33 --------- d-----w C:\Program Files\Common Files\Adobe 2007-12-28 13:32 --------- d-----w C:\Program Files\IncrediMail 2007-12-28 13:19 --------- d-----w C:\Program Files\MSN Messenger 2007-11-29 22:44 --------- d-----w C:\Program Files\Yahoo! 2007-11-29 22:44 --------- d-----w C:\Program Files\CCleaner 2007-11-29 18:57 --------- d-----w C:\Program Files\RegClean 2007-11-29 15:43 --------- d-----w C:\Program Files\RegistryClear 2007-11-07 09:30 727,040 ----a-w C:\WINDOWS\system32\lsasrv.dll 2007-11-05 14:31 114,688 ----a-w C:\WINDOWS\system32\netlogun.exe 2007-11-01 09:24 155,995 ----a-w C:\WINDOWS\java\Packages\D75NHBJ7.ZIP 2007-10-29 22:45 1,291,776 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00 15360] "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-12-04 18:01 214456] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-06-15 10:20 6803456] "nwiz"="nwiz.exe" [2005-06-15 10:20 1519616 C:\WINDOWS\system32\nwiz.exe] "HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 16:46 172032] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 07:38 241664] "HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2004-02-18 18:55 49152] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-21 16:06 579072] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00 15360] "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-01-21 16:03 219136] [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Kodak EasyShare software.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Kodak EasyShare software.lnk backup=C:\WINDOWS\pss\Kodak EasyShare software.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^KODAK Software Updater.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\KODAK Software Updater.lnk backup=C:\WINDOWS\pss\KODAK Software Updater.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^jeannine^Menu Start^Programma's^Opstarten^OpenOffice.org 2.3 .lnk] path=C:\Documents and Settings\jeannine\Menu Start\Programma's\Opstarten\OpenOffice.org 2.3 .lnk backup=C:\WINDOWS\pss\OpenOffice.org 2.3 .lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2007-10-10 19:51 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hitman Pro Expiration Helper] --a------ 2007-01-30 14:41 596760 C:\Program Files\Hitman Pro\xphelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --------- 2004-10-13 17:24 1694208 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] --a------ 2005-06-15 10:20 86016 C:\WINDOWS\system32\NvMcTray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray] --a------ 2007-11-02 17:24 1065800 C:\Program Files\Spyware Doctor\SDTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2007-09-25 01:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-10-08 11:08 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WebrootSpySweeperService"=2 (0x2) "usnjsvc"=3 (0x3) "sdCoreService"=3 (0x3) "sdAuxService"=3 (0x3) "ScsiAccess"=2 (0x2) "ose"=3 (0x3) "NOD32krn"=2 (0x2) "KodakCCS"=2 (0x2) "gusvc"=3 (0x3) "CaretakerUpdate"=2 (0x2) "CaretakerSvc"=2 (0x2) "CaretakerProxy"=2 (0x2) "CaretakerAntispam"=2 (0x2) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map "2008-01-19 12:37:21 C:\WINDOWS\Tasks\1-Click Maintenance.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe "2008-01-25 14:04:01 C:\WINDOWS\Tasks\Controleren op updates voor Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-25 15:57:32 Windows 5.1.2600 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . Ik werk met incredimail, omdat dit heel vlug gaat om een bijlage te openen. Nineke

Kape, ik moet heel erg bedanken voor al dat geduld die jij hebt met mij. Het probleem van de firewall is van zichzelf opgelost, geloof het nu of niet, maar bij het opstarten vandaag, verscheen er de vraag, of ik de blokkering van de firewall wou opheffen, dus dat is ook weeral opgelost. Zoals je vraagt, maak ik een nieuwe log aan. De andere problemen die ik nu nog heb, is bij het openen van een bijlage van een mail, een filmpje dus, ik heb media player, en bij het ene filmpje gaat het open, en bij het andere niet. Wat zou hiervan de reden zijn ? Ik weet dat jij dat wel weer weet hé. Hier komt alvast de nieuwe log : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:17, on 2008-01-25 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 SP2 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\INCRED~1\bin\ImApp.exe C:\PROGRA~1\Grisoft\AVG7\avgw.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Het Nieuwsblad Online R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [incrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User '?') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\S-1-5-21-343818398-616249376-725345543-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/adobe/MTSInstallers/MetaStream3.cab?url=http://users.telenet.be/salonsrembrandt/img/show/ThumbnailFrame.html O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe -- End of file - 6165 bytes En nu maar hopen dat alles in orde is zeker ? Grtjes, Nineke

De windows-firewall instellingen kunnen niet worden weegegeven omdat de bijbehorende service niet wordt uitgevoerd.Wilt U de service windows firewall /internet-verbinding delen, start en ? en dan ja of neen antwoorden Als ik ja druk: dan komt er dat windows deze service niet kan starten. En JA Kape ik heb de bestanden kunnen verwijderen. Goed é Ik zou zeggen, kom gerust langs om een frietje, maar ze zijn hélaas allemaal op, had ik dat geweten, dat mocht je gerust langskomen, want je hebt het wel al verdiend ze, t'is hier niet het minste met mij. Nineke

Kape, het is mij gelukt hoor, ik heb het gevonden, maar er duikt al een nieuw probleem die ik niet kan oplossen, mijn firewall, wil niet meer openen, ttz. hij staat uitgeschakeld, als ik hem wil aanschakelen, lukt dit niet. Iets met windowns die niet kan vinden of openen. Ben ik betoverd of wat is dat ??? Ik ga terug naar mijn frietjes, Nineke

Ik doe dit straks als je het goed vind. Ben ook nog huismoeder, en er staat nog een kookpot te wachten op mij. Maar zodra ik weer een gaatje heb, probeer ik het. Bedankt, Nineke

Voilà zie de combofix is weer gefixt.... ComboFix 08-01-23.2 - jeannine 2008-01-24 14:33:55.3 - NTFSx86 Gestart vanuit: C:\Documents and Settings\jeannine\Bureaublad\ComboFix.exe WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !! . (((((((((((((((((((( Bestanden Gemaakt van 2007-12-24 to 2008-01-24 )))))))))))))))))))))))))))))) . 2008-01-23 13:52 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\Nircmd.exe 2008-01-21 10:34 . 2008-01-21 10:34 <DIR> d-------- C:\Program Files\CodeStuff 2008-01-20 17:32 . 2008-01-20 17:32 <DIR> d-------- C:\Program Files\Trend Micro 2008-01-19 13:36 . 2008-01-19 13:38 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-19 13:36 . 2008-01-19 13:36 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-01-19 13:36 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-01-19 13:35 . 2008-01-19 13:35 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-01-17 12:47 . 2008-01-17 12:54 1,374 --a------ C:\WINDOWS\imsins.BAK 2008-01-17 12:40 . 2008-01-17 12:40 <DIR> d-------- C:\cee79b7510e7a94126ec70bbfad2ce 2008-01-07 16:45 . 2008-01-07 16:45 0 --a------ C:\WINDOWS\nsreg.dat 2008-01-07 16:43 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2007-12-31 16:28 . 2007-12-31 16:28 <DIR> d-------- C:\Program Files\CyberLink 2007-12-30 19:40 . 2007-12-30 19:40 <DIR> d-------- C:\Program Files\Windows Live Favorites 2007-12-28 19:34 . 2007-12-28 19:34 <DIR> d-------- C:\Program Files\Ulead Systems 2007-12-27 17:44 . 2007-12-31 17:09 <DIR> d-------- C:\WINDOWSR 2007-12-27 15:52 . 2007-12-27 15:55 90,112 --a------ C:\WINDOWS\DUMPab1f.tmp 2007-12-27 15:52 . 2007-12-27 15:59 90,112 --a------ C:\WINDOWS\DUMPab00.tmp 2007-12-27 15:52 . 2007-12-27 16:02 90,112 --a------ C:\WINDOWS\DUMPa582.tmp 2007-12-27 15:52 . 2007-12-27 16:05 90,112 --a------ C:\WINDOWS\DUMPa488.tmp 2007-12-26 17:49 . 2007-12-27 11:28 90,112 --a------ C:\WINDOWS\DUMPc1d4.tmp 2007-12-26 17:49 . 2007-12-27 11:31 90,112 --a------ C:\WINDOWS\DUMPbcc3.tmp 2007-12-26 17:49 . 2007-12-27 11:38 90,112 --a------ C:\WINDOWS\DUMPb9d5.tmp 2007-12-26 17:49 . 2007-12-27 11:34 90,112 --a------ C:\WINDOWS\DUMPb580.tmp 2007-12-26 17:49 . 2007-12-27 11:44 90,112 --a------ C:\WINDOWS\DUMPa505.tmp 2007-12-26 17:49 . 2007-12-27 11:41 90,112 --a------ C:\WINDOWS\DUMPa4f5.tmp 2007-12-26 17:49 . 2007-12-27 15:30 90,112 --a------ C:\WINDOWS\DUMP8193.tmp 2007-12-26 15:34 . 2007-12-26 15:52 <DIR> d-------- C:\Program Files\Spyware Doctor 2007-12-26 15:34 . 2005-09-23 08:29 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-12-26 15:34 . 2007-12-26 15:39 74,240 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2007-12-26 15:34 . 2007-12-26 15:39 56,832 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2007-12-26 15:34 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2007-12-26 15:34 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2007-12-26 15:33 . 2007-12-26 15:33 <DIR> d-------- C:\Program Files\Webroot 2007-12-26 15:33 . 2007-03-01 19:54 144,960 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys 2007-12-26 15:33 . 2007-03-01 19:54 22,080 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys 2007-12-26 15:33 . 2007-03-01 19:54 21,056 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys 2007-12-26 15:33 . 2007-03-01 19:54 20,544 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys 2007-12-26 15:32 . 2007-12-26 15:32 164 --a------ C:\install.dat 2007-12-26 15:31 . 2007-12-26 15:31 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-12-26 15:31 . 2007-12-26 15:31 <DIR> d-------- C:\Program Files\Lavasoft 2007-12-26 15:31 . 2005-08-25 18:19 115,920 --a------ C:\WINDOWS\system32\MSINET.OCX 2007-12-26 12:14 . 2007-12-26 12:20 <DIR> d-------- C:\Temp 2007-12-26 12:01 . 2007-12-26 12:01 <DIR> d-------- C:\Program Files\SurfRight 2007-12-26 11:55 . 2007-12-26 11:55 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy 2007-12-26 11:55 . 2008-01-07 16:28 <DIR> d-------- C:\Program Files\Hitman Pro . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-24 11:44 --------- d-----w C:\Program Files\Zylom Games 2007-12-31 15:28 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-30 18:40 --------- d-----w C:\Program Files\Windows Live Toolbar 2007-12-28 18:33 --------- d-----w C:\Program Files\Common Files\Adobe 2007-12-28 13:32 --------- d-----w C:\Program Files\IncrediMail 2007-12-28 13:19 --------- d-----w C:\Program Files\MSN Messenger 2007-12-26 15:56 90,112 ----a-w C:\WINDOWS\DUMP36ee.tmp 2007-12-26 15:51 90,112 ----a-w C:\WINDOWS\DUMPb215.tmp 2007-12-26 15:47 90,112 ----a-w C:\WINDOWS\DUMP3c6c.tmp 2007-12-26 15:44 90,112 ----a-w C:\WINDOWS\DUMPb2c0.tmp 2007-12-26 15:41 90,112 ----a-w C:\WINDOWS\DUMPb030.tmp 2007-12-26 15:38 90,112 ----a-w C:\WINDOWS\DUMPb04f.tmp 2007-12-26 15:35 90,112 ----a-w C:\WINDOWS\DUMPb987.tmp 2007-12-26 15:31 90,112 ----a-w C:\WINDOWS\DUMPb34d.tmp 2007-12-26 15:28 90,112 ----a-w C:\WINDOWS\DUMPaf65.tmp 2007-12-26 15:25 90,112 ----a-w C:\WINDOWS\DUMPb021.tmp 2007-12-26 15:21 90,112 ----a-w C:\WINDOWS\DUMPaff2.tmp 2007-12-26 15:18 90,112 ----a-w C:\WINDOWS\DUMPb011.tmp 2007-12-26 15:15 90,112 ----a-w C:\WINDOWS\DUMPb10b.tmp 2007-12-26 15:07 90,112 ----a-w C:\WINDOWS\DUMP32c8.tmp 2007-12-26 15:06 90,112 ----a-w C:\WINDOWS\DUMP3f2b.tmp 2007-12-26 15:04 90,112 ----a-w C:\WINDOWS\DUMP3373.tmp 2007-12-26 15:02 90,112 ----a-w C:\WINDOWS\DUMPa812.tmp 2007-12-26 14:59 90,112 ----a-w C:\WINDOWS\DUMPaf07.tmp 2007-12-26 14:56 90,112 ----a-w C:\WINDOWS\DUMPbe3a.tmp 2007-11-29 22:44 --------- d-----w C:\Program Files\Yahoo! 2007-11-29 22:44 --------- d-----w C:\Program Files\CCleaner 2007-11-29 18:57 --------- d-----w C:\Program Files\RegClean 2007-11-29 15:43 --------- d-----w C:\Program Files\RegistryClear 2007-11-07 09:30 727,040 ----a-w C:\WINDOWS\system32\lsasrv.dll 2007-11-05 14:31 114,688 ----a-w C:\WINDOWS\system32\netlogun.exe 2007-11-01 09:24 155,995 ----a-w C:\WINDOWS\java\Packages\D75NHBJ7.ZIP 2007-10-29 22:45 1,291,776 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00 15360] "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-12-04 18:01 214456] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-06-15 10:20 6803456] "nwiz"="nwiz.exe" [2005-06-15 10:20 1519616 C:\WINDOWS\system32\nwiz.exe] "HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 16:46 172032] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 07:38 241664] "HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2004-02-18 18:55 49152] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-21 16:06 579072] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00 15360] "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-01-21 16:03 219136] [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Kodak EasyShare software.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Kodak EasyShare software.lnk backup=C:\WINDOWS\pss\Kodak EasyShare software.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^KODAK Software Updater.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\KODAK Software Updater.lnk backup=C:\WINDOWS\pss\KODAK Software Updater.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^jeannine^Menu Start^Programma's^Opstarten^OpenOffice.org 2.3 .lnk] path=C:\Documents and Settings\jeannine\Menu Start\Programma's\Opstarten\OpenOffice.org 2.3 .lnk backup=C:\WINDOWS\pss\OpenOffice.org 2.3 .lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2007-10-10 19:51 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hitman Pro Expiration Helper] --a------ 2007-01-30 14:41 596760 C:\Program Files\Hitman Pro\xphelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --------- 2004-10-13 17:24 1694208 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] --a------ 2005-06-15 10:20 86016 C:\WINDOWS\system32\NvMcTray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray] --a------ 2007-11-02 17:24 1065800 C:\Program Files\Spyware Doctor\SDTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2007-09-25 01:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-10-08 11:08 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WebrootSpySweeperService"=2 (0x2) "usnjsvc"=3 (0x3) "sdCoreService"=3 (0x3) "sdAuxService"=3 (0x3) "ScsiAccess"=2 (0x2) "ose"=3 (0x3) "NOD32krn"=2 (0x2) "KodakCCS"=2 (0x2) "gusvc"=3 (0x3) "CaretakerUpdate"=2 (0x2) "CaretakerSvc"=2 (0x2) "CaretakerProxy"=2 (0x2) "CaretakerAntispam"=2 (0x2) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map "2008-01-19 12:37:21 C:\WINDOWS\Tasks\1-Click Maintenance.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe "2008-01-24 13:04:04 C:\WINDOWS\Tasks\Controleren op updates voor Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-24 14:36:07 Windows 5.1.2600 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** .

Sorry hoor, maar als ik nu windowns verkenner open, wat dan ? Ik vind die files niet ze. Wat doe ik nu weer niet juist ? Ik ben een lastig mens hé, Grtjes, Nineke

Lijkt verkeerd geschreven te zijn blijft er staan, sorry....... Nineke

Ik heb een probleemtje en weet niet wat ik fout doe. Als ik het bestand CFscript wil slepen naar Combofix, komt er steeds dat het fout geschreven is, en nochtans zie ik dit niet. Wat doe ik verkeerd ? Amai, ben ik blij met jullie hulp, en vooral 'kape' bedankt hoor. Nineke

Hier ben ik dan eindelijk, was niet evident precies, maar allé, is toch gelukt. ComboFix 08-01-23.2 - jeannine 2008-01-23 14:05:13.2 - NTFSx86 Gestart vanuit: C:\Documents and Settings\jeannine\Bureaublad\ComboFix.exe WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !! . (((((((((((((((((((( Bestanden Gemaakt van 2007-12-23 to 2008-01-23 )))))))))))))))))))))))))))))) . 2008-01-23 13:52 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\Nircmd.exe 2008-01-21 10:34 . 2008-01-21 10:34 <DIR> d-------- C:\Program Files\CodeStuff 2008-01-20 17:32 . 2008-01-20 17:32 <DIR> d-------- C:\Program Files\Trend Micro 2008-01-19 13:36 . 2008-01-19 13:38 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-19 13:36 . 2008-01-19 13:36 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-01-19 13:36 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-01-19 13:35 . 2008-01-19 13:35 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-01-17 12:47 . 2008-01-17 12:54 1,374 --a------ C:\WINDOWS\imsins.BAK 2008-01-17 12:40 . 2008-01-17 12:40 <DIR> d-------- C:\cee79b7510e7a94126ec70bbfad2ce 2008-01-07 16:45 . 2008-01-07 16:45 0 --a------ C:\WINDOWS\nsreg.dat 2008-01-07 16:43 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2007-12-31 16:28 . 2007-12-31 16:28 <DIR> d-------- C:\Program Files\CyberLink 2007-12-30 19:40 . 2007-12-30 19:40 <DIR> d-------- C:\Program Files\Windows Live Favorites 2007-12-28 19:34 . 2007-12-28 19:34 <DIR> d-------- C:\Program Files\Ulead Systems 2007-12-27 17:44 . 2007-12-31 17:09 <DIR> d-------- C:\WINDOWSR 2007-12-27 15:52 . 2007-12-27 15:55 90,112 --a------ C:\WINDOWS\DUMPab1f.tmp 2007-12-27 15:52 . 2007-12-27 15:59 90,112 --a------ C:\WINDOWS\DUMPab00.tmp 2007-12-27 15:52 . 2007-12-27 16:02 90,112 --a------ C:\WINDOWS\DUMPa582.tmp 2007-12-27 15:52 . 2007-12-27 16:05 90,112 --a------ C:\WINDOWS\DUMPa488.tmp 2007-12-26 17:49 . 2007-12-27 11:28 90,112 --a------ C:\WINDOWS\DUMPc1d4.tmp 2007-12-26 17:49 . 2007-12-27 11:31 90,112 --a------ C:\WINDOWS\DUMPbcc3.tmp 2007-12-26 17:49 . 2007-12-27 11:38 90,112 --a------ C:\WINDOWS\DUMPb9d5.tmp 2007-12-26 17:49 . 2007-12-27 11:34 90,112 --a------ C:\WINDOWS\DUMPb580.tmp 2007-12-26 17:49 . 2007-12-27 11:44 90,112 --a------ C:\WINDOWS\DUMPa505.tmp 2007-12-26 17:49 . 2007-12-27 11:41 90,112 --a------ C:\WINDOWS\DUMPa4f5.tmp 2007-12-26 17:49 . 2007-12-27 15:30 90,112 --a------ C:\WINDOWS\DUMP8193.tmp 2007-12-26 15:34 . 2007-12-26 15:52 <DIR> d-------- C:\Program Files\Spyware Doctor 2007-12-26 15:34 . 2005-09-23 08:29 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-12-26 15:34 . 2007-12-26 15:39 74,240 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2007-12-26 15:34 . 2007-12-26 15:39 56,832 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2007-12-26 15:34 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2007-12-26 15:34 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2007-12-26 15:33 . 2007-12-26 15:33 <DIR> d-------- C:\Program Files\Webroot 2007-12-26 15:33 . 2007-03-01 19:54 144,960 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys 2007-12-26 15:33 . 2007-03-01 19:54 22,080 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys 2007-12-26 15:33 . 2007-03-01 19:54 21,056 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys 2007-12-26 15:33 . 2007-03-01 19:54 20,544 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys 2007-12-26 15:32 . 2007-12-26 15:32 164 --a------ C:\install.dat 2007-12-26 15:31 . 2007-12-26 15:31 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-12-26 15:31 . 2007-12-26 15:31 <DIR> d-------- C:\Program Files\Lavasoft 2007-12-26 15:31 . 2005-08-25 18:19 115,920 --a------ C:\WINDOWS\system32\MSINET.OCX 2007-12-26 12:14 . 2007-12-26 12:20 <DIR> d-------- C:\Temp 2007-12-26 12:01 . 2007-12-26 12:01 <DIR> d-------- C:\Program Files\SurfRight 2007-12-26 11:55 . 2007-12-26 11:55 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy 2007-12-26 11:55 . 2008-01-07 16:28 <DIR> d-------- C:\Program Files\Hitman Pro . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-31 15:28 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-30 18:40 --------- d-----w C:\Program Files\Windows Live Toolbar 2007-12-28 18:33 --------- d-----w C:\Program Files\Common Files\Adobe 2007-12-28 13:32 --------- d-----w C:\Program Files\IncrediMail 2007-12-28 13:19 --------- d-----w C:\Program Files\MSN Messenger 2007-12-26 15:56 90,112 ----a-w C:\WINDOWS\DUMP36ee.tmp 2007-12-26 15:51 90,112 ----a-w C:\WINDOWS\DUMPb215.tmp 2007-12-26 15:47 90,112 ----a-w C:\WINDOWS\DUMP3c6c.tmp 2007-12-26 15:44 90,112 ----a-w C:\WINDOWS\DUMPb2c0.tmp 2007-12-26 15:41 90,112 ----a-w C:\WINDOWS\DUMPb030.tmp 2007-12-26 15:38 90,112 ----a-w C:\WINDOWS\DUMPb04f.tmp 2007-12-26 15:35 90,112 ----a-w C:\WINDOWS\DUMPb987.tmp 2007-12-26 15:31 90,112 ----a-w C:\WINDOWS\DUMPb34d.tmp 2007-12-26 15:28 90,112 ----a-w C:\WINDOWS\DUMPaf65.tmp 2007-12-26 15:25 90,112 ----a-w C:\WINDOWS\DUMPb021.tmp 2007-12-26 15:21 90,112 ----a-w C:\WINDOWS\DUMPaff2.tmp 2007-12-26 15:18 90,112 ----a-w C:\WINDOWS\DUMPb011.tmp 2007-12-26 15:15 90,112 ----a-w C:\WINDOWS\DUMPb10b.tmp 2007-12-26 15:07 90,112 ----a-w C:\WINDOWS\DUMP32c8.tmp 2007-12-26 15:06 90,112 ----a-w C:\WINDOWS\DUMP3f2b.tmp 2007-12-26 15:04 90,112 ----a-w C:\WINDOWS\DUMP3373.tmp 2007-12-26 15:02 90,112 ----a-w C:\WINDOWS\DUMPa812.tmp 2007-12-26 14:59 90,112 ----a-w C:\WINDOWS\DUMPaf07.tmp 2007-12-26 14:56 90,112 ----a-w C:\WINDOWS\DUMPbe3a.tmp 2007-11-29 22:44 --------- d-----w C:\Program Files\Yahoo! 2007-11-29 22:44 --------- d-----w C:\Program Files\CCleaner 2007-11-29 18:57 --------- d-----w C:\Program Files\RegClean 2007-11-29 15:43 --------- d-----w C:\Program Files\RegistryClear 2007-11-28 12:36 --------- d-----w C:\Program Files\Zylom Games 2007-11-07 09:30 727,040 ----a-w C:\WINDOWS\system32\lsasrv.dll 2007-11-05 14:31 114,688 ----a-w C:\WINDOWS\system32\netlogun.exe 2007-11-01 09:24 155,995 ----a-w C:\WINDOWS\java\Packages\D75NHBJ7.ZIP 2007-10-29 22:45 1,291,776 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00 15360] "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-12-04 18:01 214456] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-06-15 10:20 6803456] "nwiz"="nwiz.exe" [2005-06-15 10:20 1519616 C:\WINDOWS\system32\nwiz.exe] "HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 16:46 172032] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 07:38 241664] "HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2004-02-18 18:55 49152] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-21 16:06 579072] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00 15360] "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-01-21 16:03 219136] [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Kodak EasyShare software.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Kodak EasyShare software.lnk backup=C:\WINDOWS\pss\Kodak EasyShare software.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^KODAK Software Updater.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\KODAK Software Updater.lnk backup=C:\WINDOWS\pss\KODAK Software Updater.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^jeannine^Menu Start^Programma's^Opstarten^OpenOffice.org 2.3 .lnk] path=C:\Documents and Settings\jeannine\Menu Start\Programma's\Opstarten\OpenOffice.org 2.3 .lnk backup=C:\WINDOWS\pss\OpenOffice.org 2.3 .lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2007-10-10 19:51 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hitman Pro Expiration Helper] --a------ 2007-01-30 14:41 596760 C:\Program Files\Hitman Pro\xphelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --------- 2004-10-13 17:24 1694208 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] --a------ 2005-06-15 10:20 86016 C:\WINDOWS\system32\NvMcTray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray] --a------ 2007-11-02 17:24 1065800 C:\Program Files\Spyware Doctor\SDTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2007-09-25 01:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM] -ra------ 2007-10-14 18:09 103712 C:\Program Files\Macrogaming\SweetIM\SweetIM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-10-08 11:08 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WebrootSpySweeperService"=2 (0x2) "usnjsvc"=3 (0x3) "sdCoreService"=3 (0x3) "sdAuxService"=3 (0x3) "ScsiAccess"=2 (0x2) "ose"=3 (0x3) "NOD32krn"=2 (0x2) "KodakCCS"=2 (0x2) "gusvc"=3 (0x3) "CaretakerUpdate"=2 (0x2) "CaretakerSvc"=2 (0x2) "CaretakerProxy"=2 (0x2) "CaretakerAntispam"=2 (0x2) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - PROCEXP90 . Inhoud van de 'Gedeelde Taken' map "2008-01-19 12:37:21 C:\WINDOWS\Tasks\1-Click Maintenance.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe "2008-01-23 13:04:00 C:\WINDOWS\Tasks\Controleren op updates voor Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-23 14:07:24 Windows 5.1.2600 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . En als ik nog verder wat mag zagennnnnnnnnnnnnnn: mijn bureaublad sta bijna vol, en ik weet niet welke zaken ik echt niet nodig heb. De dochters hebben er in de tijd nog van alles opgezet denk ik, van spelletjes en zo, nu heeft de jongste een laptop, en de oudste is bij met haar vriend gaan samenwonen, dus is deze pc nu echt iets van mij alleen, en ik hoef al die dingen niet, wat mag ik en wat mag ik zeker niet verwijderen ? En mijn probleem bij het openen van bepaalde fimpjes, bij media player is er ook nog altijd, sommige kan ik openen en sommige niet, heeft dit niets te maken met het feit dat ik geen internet explorer meer heb ? Alvast bedankt, voor alle hulp, Nineke

De pc is stukken beter, maar blijft toch nog blokkeren als ik op start moet duwen om "mozilla" te openen of ja een andere site, en dat kan zo toch een poosje duren. Wat zou dat probleem zijn ? Ik blijf maar zagen hé ...... sorry ze Nineke