Archief - msn virus gekregen maar nog niet helemaal weg

zoals de titel zegt

Logfile of HijackThis v1.99.1
Scan saved at 20:01:43, on 28/11/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\devldr32.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Geertje.GEERT\Bureaublad\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164563472716
O20 - AppInit_DLLs: C:\WINDOWS\System32\wmfhotfix.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

Deze gelezen?
https://www.beyondgaming.be/archive...gende-uit-in-deze-sticky-update-131108.461007

jep ben ze al aant overlopen

ok k heb de hele procedure overlopen

Logfile of HijackThis v1.99.1
Scan saved at 22:13:49, on 28/11/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\devldr32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Geertje.GEERT\Bureaublad\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164563472716
O20 - AppInit_DLLs: C:\WINDOWS\System32\wmfhotfix.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

ComboFix 06.11.27W - Running from: "C:\Documents and Settings\Geertje.GEERT\Bureaublad"

((((((((((((((((((((((((((((((( Files Created from 2006-10-28 to 2006-11-28 ))))))))))))))))))))))))))))))))))


2006-11-28 20:38 <DIR> d-------- C:\WINDOWS\pss
2006-11-28 20:36 <DIR> d-------- C:\Program Files\Lavasoft
2006-11-28 20:04 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-11-27 22:04 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\InstallShield
2006-11-27 22:02 <DIR> d-------- C:\Program Files\DAEMON Tools
2006-11-27 21:54 639,224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2006-11-27 20:06 21,760 --a------ C:\WINDOWS\system32\drivers\USBSTOR.SYS
2006-11-27 19:08 422,168 --a------ C:\WINDOWS\system32\wuapi.dll
2006-11-27 19:08 39,704 --a------ C:\WINDOWS\system32\wups.dll
2006-11-27 19:08 187,160 --a------ C:\WINDOWS\system32\wuaueng1.dll
2006-11-27 19:08 169,240 --a------ C:\WINDOWS\system32\wuauclt1.exe
2006-11-27 19:08 119,576 --a------ C:\WINDOWS\system32\wucltui.dll
2006-11-27 19:01 310,272 --a------ C:\WINDOWS\system32\winhttp.dll
2006-11-27 19:00 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Windows Genuine Advantage
2006-11-27 18:32 <DIR> d-------- C:\Program Files\Kaspersky Lab
2006-11-27 18:32 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Lab
2006-11-27 18:18 78,336 --a------ C:\WINDOWS\system32\drivers\ssi.sys
2006-11-27 18:18 102,912 --a------ C:\WINDOWS\system32\islzma.dll
2006-11-27 18:18 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\Webroot
2006-11-26 21:57 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2006-11-26 21:56 <DIR> d-------- C:\WINDOWS\SHELLNEW
2006-11-26 20:19 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\Lavasoft
2006-11-26 20:18 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\Apple Computer
2006-11-26 20:16 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\PC Tools
2006-11-26 20:15 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2006-11-26 20:15 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer
2006-11-26 20:13 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy
2006-11-26 20:12 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2006-11-26 19:11 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2006-11-26 19:11 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2006-11-26 19:11 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\AVG7
2006-11-26 19:10 816,672 --a------ C:\WINDOWS\system32\drivers\avg7core.sys
2006-11-26 19:10 4,960 --a------ C:\WINDOWS\system32\drivers\avgtdi.sys
2006-11-26 19:10 4,224 --a------ C:\WINDOWS\system32\drivers\avg7rsw.sys
2006-11-26 19:10 3,968 --a------ C:\WINDOWS\system32\drivers\avgclean.sys
2006-11-26 19:10 28,416 --a------ C:\WINDOWS\system32\drivers\avg7rsxp.sys
2006-11-26 19:10 18,240 --a------ C:\WINDOWS\system32\drivers\avgmfx86.sys
2006-11-26 19:10 <DIR> d-------- C:\Program Files\Grisoft
2006-11-26 19:10 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft
2006-11-26 19:10 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\avg7
2006-11-26 18:59 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\Macromedia
2006-11-26 18:55 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla
2006-11-26 18:52 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\Newsbin
2006-11-26 18:51 <DIR> d-------- C:\WINDOWS\SoftwareDistribution
2006-11-26 18:47 86,016 -ra------ C:\WINDOWS\system32\nvrszht.dll
2006-11-26 18:47 294,912 -ra------ C:\WINDOWS\system32\nvwrses.dll
2006-11-26 18:47 286,720 -ra------ C:\WINDOWS\system32\nvwrsesm.dll
2006-11-26 18:47 282,624 -ra------ C:\WINDOWS\system32\nvwrspt.dll
2006-11-26 18:47 282,624 -ra------ C:\WINDOWS\system32\nvwrsit.dll
2006-11-26 18:47 282,624 -ra------ C:\WINDOWS\system32\nvwrsfr.dll
2006-11-26 18:47 278,528 -ra------ C:\WINDOWS\system32\nvwrsptb.dll
2006-11-26 18:47 278,528 -ra------ C:\WINDOWS\system32\nvwrsnl.dll
2006-11-26 18:47 274,432 -ra------ C:\WINDOWS\system32\nvwrsru.dll
2006-11-26 18:47 274,432 -ra------ C:\WINDOWS\system32\nvwrshu.dll
2006-11-26 18:47 266,240 -ra------ C:\WINDOWS\system32\nvwrstr.dll
2006-11-26 18:47 262,144 -ra------ C:\WINDOWS\system32\nvwrssl.dll
2006-11-26 18:47 262,144 -ra------ C:\WINDOWS\system32\nvwrsno.dll
2006-11-26 18:47 262,144 -ra------ C:\WINDOWS\system32\nvwrsfi.dll
2006-11-26 18:47 258,048 -ra------ C:\WINDOWS\system32\nvwrssv.dll
2006-11-26 18:47 258,048 -ra------ C:\WINDOWS\system32\nvwrssk.dll
2006-11-26 18:47 258,048 -ra------ C:\WINDOWS\system32\nvwrspl.dll
2006-11-26 18:47 241,664 -ra------ C:\WINDOWS\system32\nvwrshe.dll
2006-11-26 18:47 212,992 -ra------ C:\WINDOWS\system32\nvrshe.dll
2006-11-26 18:47 184,320 -ra------ C:\WINDOWS\system32\nvwrsja.dll
2006-11-26 18:47 184,320 -ra------ C:\WINDOWS\system32\nvrsko.dll
2006-11-26 18:47 184,320 -ra------ C:\WINDOWS\system32\nvrsja.dll
2006-11-26 18:47 184,320 -ra------ C:\WINDOWS\system32\nvrsit.dll
2006-11-26 18:47 184,320 -ra------ C:\WINDOWS\system32\nvrsfr.dll
2006-11-26 18:47 184,320 -ra------ C:\WINDOWS\system32\nvrses.dll
2006-11-26 18:47 180,224 -ra------ C:\WINDOWS\system32\nvrsnl.dll
2006-11-26 18:47 180,224 -ra------ C:\WINDOWS\system32\nvrsesm.dll
2006-11-26 18:47 176,128 -ra------ C:\WINDOWS\system32\nvrsru.dll
2006-11-26 18:47 176,128 -ra------ C:\WINDOWS\system32\nvrsptb.dll
2006-11-26 18:47 176,128 -ra------ C:\WINDOWS\system32\nvrspt.dll
2006-11-26 18:47 172,032 -ra------ C:\WINDOWS\system32\nvwrsko.dll
2006-11-26 18:47 167,936 -ra------ C:\WINDOWS\system32\nvrstr.dll
2006-11-26 18:47 167,936 -ra------ C:\WINDOWS\system32\nvrspl.dll
2006-11-26 18:47 167,936 -ra------ C:\WINDOWS\system32\nvrsno.dll
2006-11-26 18:47 167,936 -ra------ C:\WINDOWS\system32\nvrshu.dll
2006-11-26 18:47 163,840 -ra------ C:\WINDOWS\system32\nvrssv.dll
2006-11-26 18:47 163,840 -ra------ C:\WINDOWS\system32\nvrssl.dll
2006-11-26 18:47 163,840 -ra------ C:\WINDOWS\system32\nvrssk.dll
2006-11-26 18:47 159,744 -ra------ C:\WINDOWS\system32\nvrszhc.dll
2006-11-26 18:47 159,744 -ra------ C:\WINDOWS\system32\nvrsfi.dll
2006-11-26 18:47 147,456 -ra------ C:\WINDOWS\system32\nvwrszht.dll
2006-11-26 18:47 143,360 -ra------ C:\WINDOWS\system32\nvwrszhc.dll
2006-11-26 18:46 831,488 -ra------ C:\WINDOWS\system32\nwiz.exe
2006-11-26 18:46 81,920 -ra------ C:\WINDOWS\system32\nvmctray.dll
2006-11-26 18:46 5,128,192 -ra------ C:\WINDOWS\system32\nvoglnt.dll
2006-11-26 18:46 454,656 -ra------ C:\WINDOWS\system32\nvshell.dll
2006-11-26 18:46 413,696 -ra------ C:\WINDOWS\system32\nvappbar.exe
2006-11-26 18:46 38,912 -ra------ C:\WINDOWS\system32\nvwddi.dll
2006-11-26 18:46 327,680 -ra------ C:\WINDOWS\system32\keystone.exe
2006-11-26 18:46 32,256 -ra------ C:\WINDOWS\system32\nvcodins.dll
2006-11-26 18:46 32,256 -ra------ C:\WINDOWS\system32\nvcod.dll
2006-11-26 18:46 3,784,704 -ra------ C:\WINDOWS\system32\nvcpl.dll
2006-11-26 18:46 3,745,536 -ra------ C:\WINDOWS\system32\nv4_disp.dll
2006-11-26 18:46 294,912 -ra------ C:\WINDOWS\system32\nvwrsel.dll
2006-11-26 18:46 266,240 -ra------ C:\WINDOWS\system32\nvwrsde.dll
2006-11-26 18:46 258,048 -ra------ C:\WINDOWS\system32\nvwrsda.dll
2006-11-26 18:46 249,856 -ra------ C:\WINDOWS\system32\nvwrseng.dll
2006-11-26 18:46 249,856 -ra------ C:\WINDOWS\system32\nvwrscs.dll
2006-11-26 18:46 245,760 -ra------ C:\WINDOWS\system32\nvwrsar.dll
2006-11-26 18:46 241,664 -ra------ C:\WINDOWS\system32\nvnt4cpl.dll
2006-11-26 18:46 221,184 -ra------ C:\WINDOWS\system32\nvrsar.dll
2006-11-26 18:46 2,205,760 -ra------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2006-11-26 18:46 184,320 -ra------ C:\WINDOWS\system32\nvrsel.dll
2006-11-26 18:46 180,224 -ra------ C:\WINDOWS\system32\nvrsde.dll
2006-11-26 18:46 172,032 --a------ C:\WINDOWS\system32\nvudisp.exe
2006-11-26 18:46 167,936 -ra------ C:\WINDOWS\system32\nvrsda.dll
2006-11-26 18:46 163,840 -ra------ C:\WINDOWS\system32\nvrseng.dll
2006-11-26 18:46 159,744 -ra------ C:\WINDOWS\system32\nvrscs.dll
2006-11-26 18:46 114,755 -ra------ C:\WINDOWS\system32\nvsvc32.exe
2006-11-26 18:46 1,605,632 -ra------ C:\WINDOWS\system32\nvwdmcpl.dll
2006-11-26 18:46 1,339,392 -ra------ C:\WINDOWS\system32\nview.dll
2006-11-26 18:46 1,110,016 -ra------ C:\WINDOWS\system32\nvdspsch.exe
2006-11-26 18:46 1,019,904 -ra------ C:\WINDOWS\system32\nvwimg.dll
2006-11-26 18:46 <DIR> d-------- C:\WINDOWS\nview
2006-11-26 18:45 8,037 -r------- C:\WINDOWS\system32\drivers\EIO.sys
2006-11-26 18:44 69,376 -ra------ C:\WINDOWS\system32\drivers\usbhub20.sys
2006-11-26 18:44 28,172 -ra------ C:\WINDOWS\system32\drivers\usbehci.sys
2006-11-26 18:44 185,624 --a------ C:\WINDOWS\system32\iuengine.dll
2006-11-26 18:43 136,576 -ra------ C:\WINDOWS\system32\drivers\Fasttx2k.sys
2006-11-26 18:41 659,356 -ra------ C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2006-11-26 18:41 57,344 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2006-11-26 18:41 46,592 -ra------ C:\WINDOWS\SOUNDMAN.EXE
2006-11-26 18:41 42,752 --a------ C:\WINDOWS\system32\drivers\stream.sys
2006-11-26 18:41 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2006-11-26 18:41 135,040 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2006-11-26 18:41 134,144 --a------ C:\WINDOWS\system32\drivers\ks.sys
2006-11-26 18:40 41,600 -ra------ C:\WINDOWS\system32\drivers\bcm4sbxp.sys
2006-11-26 18:35 36,352 --a------ C:\WINDOWS\system32\drivers\isapnp.sys
2006-11-26 18:35 306,688 --a------ C:\WINDOWS\IsUninst.exe
2006-11-26 18:35 3,279 --a------ C:\WINDOWS\system32\drivers\VIAPFD.SYS
2006-11-26 18:35 <DIR> d-------- C:\WINDOWS\system32\ReinstallBackups
2006-11-26 18:34 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2006-11-26 18:05 87,040 --a------ C:\WINDOWS\system32\evntwin.exe
2006-11-26 18:05 8,192 --a------ C:\WINDOWS\system32\snmptrap.exe
2006-11-26 18:05 5,120 --a------ C:\WINDOWS\system32\snmpmib.dll
2006-11-26 18:05 35,328 --a------ C:\WINDOWS\system32\hostmib.dll
2006-11-26 18:05 33,792 --a------ C:\WINDOWS\system32\iprip.dll
2006-11-26 18:05 29,696 --a------ C:\WINDOWS\system32\snmp.exe
2006-11-26 18:05 29,184 --a------ C:\WINDOWS\system32\lmmib2.dll
2006-11-26 18:05 24,064 --a------ C:\WINDOWS\system32\evntcmd.exe
2006-11-26 18:05 21,504 --a------ C:\WINDOWS\system32\lpdsvc.dll
2006-11-26 18:05 18,944 --a------ C:\WINDOWS\system32\simptcp.dll
2006-11-26 18:05 17,920 --a------ C:\WINDOWS\system32\lprmon.dll
2006-11-26 18:05 100,864 --a------ C:\WINDOWS\system32\evntagnt.dll
2006-11-26 17:57 <DIR> d---s---- C:\WINDOWS\system32\Microsoft
2006-11-26 17:57 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\Symantec
2006-11-26 17:57 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec
2006-11-26 17:50 <DIR> dr-h----- C:\Documents and Settings\Geertje.GEERT\SendTo
2006-11-26 17:50 <DIR> dr-h----- C:\Documents and Settings\Geertje.GEERT\Onlangs geopend
2006-11-26 17:50 <DIR> dr-h----- C:\Documents and Settings\Geertje.GEERT\Application Data\.
2006-11-26 17:50 <DIR> dr-h----- C:\Documents and Settings\Geertje.GEERT\Application Data
2006-11-26 17:50 <DIR> dr------- C:\Documents and Settings\Geertje.GEERT\Mijn documenten
2006-11-26 17:50 <DIR> dr------- C:\Documents and Settings\Geertje.GEERT\Menu Start
2006-11-26 17:50 <DIR> dr------- C:\Documents and Settings\Geertje.GEERT\Favorieten
2006-11-26 17:50 <DIR> d--hs---- C:\WINDOWS\Installer
2006-11-26 17:50 <DIR> d--h----- C:\Documents and Settings\Geertje.GEERT\Sjablonen
2006-11-26 17:50 <DIR> d--h----- C:\Documents and Settings\Geertje.GEERT\Netwerkprinteromgeving
2006-11-26 17:50 <DIR> d--h----- C:\Documents and Settings\Geertje.GEERT\NetHood
2006-11-26 17:50 <DIR> d--h----- C:\Documents and Settings\Geertje.GEERT\Local Settings
2006-11-26 17:50 <DIR> d---s---- C:\Documents and Settings\Geertje.GEERT\Cookies
2006-11-26 17:50 <DIR> d---s---- C:\Documents and Settings\Geertje.GEERT\Application Data\Microsoft
2006-11-26 17:50 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Bureaublad
2006-11-26 17:50 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\Identities
2006-11-26 17:50 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\Application Data\..
2006-11-26 17:50 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\..
2006-11-26 17:50 <DIR> d-------- C:\Documents and Settings\Geertje.GEERT\.
2006-11-26 17:48 <DIR> d-------- C:\WINDOWS\Prefetch
2006-11-26 17:44 <DIR> d-------- C:\WINDOWS\system32\xircom
2006-11-26 17:43 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2006-11-26 17:43 0 -rahs---- C:\MSDOS.SYS
2006-11-26 17:43 0 -rahs---- C:\IO.SYS
2006-11-26 17:43 0 --a------ C:\CONFIG.SYS
2006-11-26 17:43 0 --a------ C:\AUTOEXEC.BAT
2006-11-26 17:42 <DIR> dr------- C:\WINDOWS\Offline Web Pages
2006-11-26 17:42 <DIR> d--hs---- C:\Documents and Settings\All Users.WINDOWS\DRM
2006-11-26 17:42 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files
2006-11-26 17:41 90,624 --a------ C:\WINDOWS\system32\msoert2.dll
2006-11-26 17:41 9,728 --a------ C:\WINDOWS\system32\mstinit.exe
2006-11-26 17:41 81,920 --a------ C:\WINDOWS\system32\isign32.dll
2006-11-26 17:41 73,728 --a------ C:\WINDOWS\system32\ils.dll
2006-11-26 17:41 70,400 --a------ C:\WINDOWS\system32\drivers\sr.sys
2006-11-26 17:41 69,632 --a------ C:\WINDOWS\system32\icwdial.dll
2006-11-26 17:41 67,584 --a------ C:\WINDOWS\system32\acctres.dll
2006-11-26 17:41 65,536 --a------ C:\WINDOWS\system32\msconf.dll
2006-11-26 17:41 61,952 --a------ C:\WINDOWS\system32\srclient.dll
2006-11-26 17:41 61,440 --a------ C:\WINDOWS\system32\icwphbk.dll
2006-11-26 17:41 593,920 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-11-26 17:41 49,664 --a------ C:\WINDOWS\system32\inetres.dll
2006-11-26 17:41 40,960 --a------ C:\WINDOWS\system32\safrslv.dll
2006-11-26 17:41 39,424 --a------ C:\WINDOWS\system32\safrcdlg.dll
2006-11-26 17:41 33,792 --a------ C:\WINDOWS\system32\racpldlg.dll
2006-11-26 17:41 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2006-11-26 17:41 32,384 --a------ C:\WINDOWS\system32\mnmdd.dll
2006-11-26 17:41 28,672 --a------ C:\WINDOWS\system32\isrdbg32.dll
2006-11-26 17:41 270,336 --a------ C:\WINDOWS\system32\inetcfg.dll
2006-11-26 17:41 26,624 --a------ C:\WINDOWS\system32\safrdm.dll
2006-11-26 17:41 252,928 --a------ C:\WINDOWS\system32\mstask.dll
2006-11-26 17:41 24,576 --a------ C:\WINDOWS\system32\nmmkcert.dll
2006-11-26 17:41 228,864 --a------ C:\WINDOWS\system32\msoeacct.dll
2006-11-26 17:41 220,160 --a------ C:\WINDOWS\system32\srrstr.dll
2006-11-26 17:41 180,736 --a------ C:\WINDOWS\system32\qmgr.dll
2006-11-26 17:41 17,408 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2006-11-26 17:41 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2006-11-26 17:41 159,744 --a------ C:\WINDOWS\system32\schedsvc.dll
2006-11-26 17:41 155,136 --a------ C:\WINDOWS\system32\srsvc.dll
2006-11-26 17:41 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2006-11-26 17:41 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2006-11-26 17:41 <DIR> d---s---- C:\WINDOWS\Tasks
2006-11-26 17:41 <DIR> d-------- C:\WINDOWS\system32\Restore
2006-11-26 17:41 <DIR> d-------- C:\WINDOWS\system32\Macromed
2006-11-26 17:41 <DIR> d-------- C:\WINDOWS\system32\DirectX
2006-11-26 17:41 <DIR> d-------- C:\WINDOWS\srchasst
2006-11-26 17:41 <DIR> d-------- C:\WINDOWS\PCHEALTH
2006-11-26 17:40 <DIR> d-------- C:\WINDOWS\Registration
2006-11-26 17:39 99,840 --a------ C:\WINDOWS\system32\clipbrd.exe
2006-11-26 17:39 9,728 --a------ C:\WINDOWS\system32\xolehlp.dll
2006-11-26 17:39 9,728 --a------ C:\WINDOWS\system32\reset.exe
2006-11-26 17:39 89,088 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2006-11-26 17:39 869,376 --a------ C:\WINDOWS\system32\msdtctm.dll
2006-11-26 17:39 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2006-11-26 17:39 83,968 --a------ C:\WINDOWS\system32\mtxoci.dll
2006-11-26 17:39 82,432 --a------ C:\WINDOWS\system32\comrepl.dll
2006-11-26 17:39 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2006-11-26 17:39 8,704 --a------ C:\WINDOWS\system32\icaapi.dll
2006-11-26 17:39 73,864 --a------ C:\WINDOWS\system32\rdpwsx.dll
2006-11-26 17:39 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2006-11-26 17:39 662,528 --a------ C:\WINDOWS\system32\getuname.dll
2006-11-26 17:39 61,952 --a------ C:\WINDOWS\system32\rdshost.exe
2006-11-26 17:39 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2006-11-26 17:39 583,168 --a------ C:\WINDOWS\system32\catsrvut.dll
2006-11-26 17:39 57,344 --a------ C:\WINDOWS\system32\sol.exe
2006-11-26 17:39 57,344 --a------ C:\WINDOWS\system32\remotepg.dll
2006-11-26 17:39 57,344 --a------ C:\WINDOWS\system32\licwmi.dll
2006-11-26 17:39 56,832 --a------ C:\WINDOWS\system32\colbact.dll
2006-11-26 17:39 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2006-11-26 17:39 54,784 --a------ C:\WINDOWS\system32\msdtclog.dll
2006-11-26 17:39 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2006-11-26 17:39 534,528 --a------ C:\WINDOWS\system32\spider.exe
2006-11-26 17:39 53,248 --a------ C:\WINDOWS\system32\servdeps.dll
2006-11-26 17:39 503,296 --a------ C:\WINDOWS\system32\mstscax.dll
2006-11-26 17:39 5,632 --a------ C:\WINDOWS\system32\write.exe
2006-11-26 17:39 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2006-11-26 17:39 495,616 --a------ C:\WINDOWS\system32\hypertrm.dll
2006-11-26 17:39 495,616 --a------ C:\WINDOWS\system32\comuid.dll
2006-11-26 17:39 468,480 --a------ C:\WINDOWS\system32\clbcatq.dll
2006-11-26 17:39 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2006-11-26 17:39 41,984 --a------ C:\WINDOWS\system32\rdpclip.exe
2006-11-26 17:39 40,448 --a------ C:\WINDOWS\system32\tscupgrd.exe
2006-11-26 17:39 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2006-11-26 17:39 4,096 --a------ C:\WINDOWS\system32\wuauserv.dll
2006-11-26 17:39 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2006-11-26 17:39 390,656 --a------ C:\WINDOWS\system32\mstsc.exe
2006-11-26 17:39 37,896 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2006-11-26 17:39 360,960 --a------ C:\WINDOWS\system32\msdtcprx.dll
2006-11-26 17:39 35,840 --a------ C:\WINDOWS\system32\winchat.exe
2006-11-26 17:39 342,528 --a------ C:\WINDOWS\system32\mspaint.exe
2006-11-26 17:39 33,792 --a------ C:\WINDOWS\system32\regini.exe
2006-11-26 17:39 33,280 --a------ C:\WINDOWS\system32\cfgbkend.dll
2006-11-26 17:39 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2006-11-26 17:39 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2006-11-26 17:39 233,472 --a------ C:\WINDOWS\system32\avtapi.dll
2006-11-26 17:39 23,040 --a------ C:\WINDOWS\system32\qwinsta.exe
2006-11-26 17:39 22,016 --a------ C:\WINDOWS\system32\msg.exe
2006-11-26 17:39 215,040 --a------ C:\WINDOWS\system32\catsrv.dll
2006-11-26 17:39 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2006-11-26 17:39 20,232 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2006-11-26 17:39 199,680 --a------ C:\WINDOWS\system32\termsrv.dll
2006-11-26 17:39 182,784 --a------ C:\WINDOWS\system32\accwiz.exe
2006-11-26 17:39 181,632 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2006-11-26 17:39 18,944 --a------ C:\WINDOWS\system32\qprocess.exe
2006-11-26 17:39 178,176 --a------ C:\WINDOWS\system32\cmprops.dll
2006-11-26 17:39 17,920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2006-11-26 17:39 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe
2006-11-26 17:39 16,896 --a------ C:\WINDOWS\system32\mmfutil.dll
2006-11-26 17:39 16,384 --a------ C:\WINDOWS\system32\tskill.exe
2006-11-26 17:39 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe
2006-11-26 17:39 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2006-11-26 17:39 151,040 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2006-11-26 17:39 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2006-11-26 17:39 15,360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2006-11-26 17:39 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2006-11-26 17:39 15,360 --a------ C:\WINDOWS\system32\shadow.exe
2006-11-26 17:39 15,360 --a------ C:\WINDOWS\system32\logoff.exe
2006-11-26 17:39 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2006-11-26 17:39 14,848 --a------ C:\WINDOWS\system32\rdpsnd.dll
2006-11-26 17:39 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2006-11-26 17:39 134,656 --a------ C:\WINDOWS\system32\rdchost.dll
2006-11-26 17:39 131,072 --a------ C:\WINDOWS\system32\sessmgr.exe
2006-11-26 17:39 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2006-11-26 17:39 125,440 --a------ C:\WINDOWS\system32\sndrec32.exe
2006-11-26 17:39 12,288 --a------ C:\WINDOWS\system32\rdsaddin.exe
2006-11-26 17:39 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2006-11-26 17:39 117,760 --a------ C:\WINDOWS\system32\mplay32.exe
2006-11-26 17:39 114,968 --a------ C:\WINDOWS\system32\wuauclt.exe
2006-11-26 17:39 114,688 --a------ C:\WINDOWS\system32\calc.exe
2006-11-26 17:39 11,144 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2006-11-26 17:39 107,912 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2006-11-26 17:39 100,864 --a------ C:\WINDOWS\system32\clbcatex.dll
2006-11-26 17:39 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd
2006-11-26 17:39 1,139,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2006-11-26 17:39 1,081,112 --a------ C:\WINDOWS\system32\wuaueng.dll
2006-11-26 17:39 <DIR> d-------- C:\WINDOWS\system32\MsDtc
2006-11-26 17:39 <DIR> d-------- C:\WINDOWS\system32\Com
2006-11-26 14:15 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2006-11-26 14:15 50,048 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2006-11-26 14:15 5,632 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2006-11-26 14:15 4,608 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2006-11-26 14:15 2,816 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2006-11-26 14:15 122,472 --a------ C:\WINDOWS\system32\drivers\aec.sys
2006-11-26 14:14 79,616 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2006-11-26 14:14 6,400 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2006-11-26 14:14 57,472 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2006-11-26 14:14 56,320 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2006-11-26 14:14 5,120 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2006-11-26 14:14 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2006-11-26 14:14 159,232 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2006-11-26 14:13 9,728 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2006-11-26 14:13 69,120 --a------ C:\WINDOWS\system32\usbui.dll
2006-11-26 14:13 6,912 --a------ C:\WINDOWS\system32\drivers\ctlfacem.sys
2006-11-26 14:13 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
2006-11-26 14:13 51,200 --a------ C:\WINDOWS\system32\sfman32.dll
2006-11-26 14:13 495,616 --a------ C:\WINDOWS\system32\sblfx.dll
2006-11-26 14:13 4,096 --a------ C:\WINDOWS\system32\ctwdm32.dll
2006-11-26 14:13 36,480 --a------ C:\WINDOWS\system32\drivers\sfmanm.sys
2006-11-26 14:13 3,712 --a------ C:\WINDOWS\system32\drivers\ctljystk.sys
2006-11-26 14:13 283,904 --a------ C:\WINDOWS\system32\drivers\emu10k1m.sys
2006-11-26 14:13 256,512 --a------ C:\WINDOWS\system32\devcon32.dll
2006-11-26 14:13 24,064 --a------ C:\WINDOWS\system32\devldr32.exe
2006-11-26 14:09 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2006-11-26 14:09 9,040 --a------ C:\WINDOWS\system\VER.DLL
2006-11-26 14:09 86,556 --a------ C:\WINDOWS\system32\dgsetup.dll
2006-11-26 14:09 82,944 --a------ C:\WINDOWS\system\OLECLI.DLL
2006-11-26 14:09 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2006-11-26 14:09 72,192 --a------ C:\WINDOWS\system32\storprop.dll
2006-11-26 14:09 70,352 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2006-11-26 14:09 70,144 --a------ C:\WINDOWS\system\AVICAP.DLL
2006-11-26 14:09 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
2006-11-26 14:09 67,072 --a------ C:\WINDOWS\NOTEPAD.EXE
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
2006-11-26 14:09 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
2006-11-26 14:09 6,656 --a------ C:\WINDOWS\system32\batt.dll
2006-11-26 14:09 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2006-11-26 14:09 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2006-11-26 14:09 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2006-11-26 14:09 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2006-11-26 14:09 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2006-11-26 14:09 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2006-11-26 14:09 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdycc.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbduzb.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdur.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdtat.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdru1.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdru.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdkaz.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdbu.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdblr.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2006-11-26 14:09 5,632 -ra------ C:\WINDOWS\system32\kbdaze.dll
2006-11-26 14:09 5,120 --a------ C:\WINDOWS\system\SHELL.DLL
2006-11-26 14:09 33,696 --a------ C:\WINDOWS\system\COMMDLG.DLL
2006-11-26 14:09 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
2006-11-26 14:09 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL
2006-11-26 14:09 19,200 --a------ C:\WINDOWS\system\TAPI.DLL
2006-11-26 14:09 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2006-11-26 14:09 15,872 --a------ C:\WINDOWS\TASKMAN.EXE
2006-11-26 14:09 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2006-11-26 14:09 126,976 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2006-11-26 14:09 109,552 --a------ C:\WINDOWS\system\AVIFILE.DLL
2006-11-26 14:09 103,936 --a------ C:\WINDOWS\system32\EqnClass.Dll
2006-11-26 14:09 10,496 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2006-11-26 14:09 <DIR> dr-h----- C:\Documents and Settings\All Users.WINDOWS\Application Data\.
2006-11-26 14:09 <DIR> dr-h----- C:\Documents and Settings\All Users.WINDOWS\Application Data
2006-11-26 14:09 <DIR> dr------- C:\Documents and Settings\All Users.WINDOWS\Menu Start
2006-11-26 14:09 <DIR> dr------- C:\Documents and Settings\All Users.WINDOWS\Documenten
2006-11-26 14:09 <DIR> d--h----- C:\Documents and Settings\All Users.WINDOWS\Sjablonen
2006-11-26 14:09 <DIR> d---s---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft
2006-11-26 14:09 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2006-11-26 14:09 <DIR> d-------- C:\WINDOWS\system32\CatRoot
2006-11-26 14:09 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Favorieten
2006-11-26 14:09 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Bureaublad
2006-11-26 14:09 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\..
2006-11-26 14:08 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\..
2006-11-26 14:08 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\.
2006-11-26 14:04 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache
2006-11-26 14:04 <DIR> dr--s---- C:\WINDOWS\Fonts
2006-11-26 14:04 <DIR> dr------- C:\WINDOWS\Web
2006-11-26 14:04 <DIR> d-ahs---- C:\WINDOWS\..

2006-11-26 14:04 <DIR> d--h----- C:\WINDOWS\inf
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\WinSxS
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\twain_32
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Temp
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\wins
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\wbem
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\usmt
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\spool
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\Setup
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\ras
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\oobe
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\npp
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\mui
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\IME
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\icsxml
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\ias
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\export
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\drivers\..
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\drivers\.
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\drivers
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\dhcp
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\config
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\3com_dmi
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\3076
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\2052
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1054
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1043
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1042
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1041
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1037
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1033
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1031
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1028
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\1025
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\..
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32\.
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system32
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system\..
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system\.
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\system
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\security
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Resources
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\repair
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\mui
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\msapps
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\msagent
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Media
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\java
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\ime
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Help
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Driver Cache
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Debug
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Cursors
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Connection Wizard
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\Config
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\AppPatch
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\addins
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS\.
2006-11-26 14:04 <DIR> d-------- C:\WINDOWS
2006-11-26 10:30 <DIR> dr-h----- C:\$VAULT$.AVG
2006-11-24 18:06 <DIR> d-------- C:\Program Files\uTorrent
2006-11-17 20:01 <DIR> d-------- C:\Program Files\Ubisoft
2006-11-17 09:02 3,584 --a------ C:\WINDOWS\system32\wmfhotfix.dll
2006-11-15 21:38 <DIR> d-------- C:\Program Files\CureROM
2006-11-09 22:19 <DIR> d-------- C:\Battlefield 1942
2006-11-08 19:14 <DIR> d-------- C:\Program Files\BitTorrent
2006-11-07 19:42 <DIR> d-------- C:\Program Files\Teamspeak2_RC2
2006-11-06 22:49 <DIR> d-------- C:\Program Files\Windows Live Toolbar
2006-11-06 20:13 <DIR> d-------- C:\Program Files\Google
2006-11-03 14:14 <DIR> d-------- C:\Program Files\Wolfenstein - Enemy Territory
2006-11-03 13:50 <DIR> d-------- C:\Program Files\C-Media 3D Audio
2006-11-03 12:14 <DIR> d-------- C:\Program Files\Alcohol Soft
2006-11-03 10:58 <DIR> d-------- C:\Program Files\EA GAMES
2006-11-02 18:51 <DIR> d-------- C:\Program Files\iPod
2006-11-02 18:49 <DIR> d-------- C:\Program Files\Apple Software Update
2006-10-30 13:36 <DIR> d---s---- C:\Documents and Settings\Geertje.GEERT\UserData
2006-10-29 23:58 <DIR> d-------- C:\Program Files\The All-Seeing Eye
2006-10-29 17:57 <DIR> d-------- C:\Program Files\directx
2006-10-29 17:51 <DIR> d-------- C:\UnrealTournament


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-28 22:06 -------- d-------- C:\Program Files\Mozilla Firefox
2006-11-28 19:53 -------- d-------- C:\Program Files\Common Files
2006-11-27 23:07 -------- d-------- C:\Program Files\Hitman Pro
2006-11-27 23:06 -------- d-------- C:\Program Files\Eset
2006-11-27 22:05 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-11-27 19:08 -------- d--h----- C:\Program Files\WindowsUpdate
2006-11-27 18:10 -------- d-------- C:\Program Files\Common Files\Symantec Shared
2006-11-26 21:54 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-11-26 21:32 -------- d-------- C:\Program Files\Symantec
2006-11-26 21:03 -------- d-------- C:\Program Files\NewsBin
2006-11-26 20:17 -------- d-------- C:\Program Files\QuickTime
2006-11-26 17:50 -------- d-------- C:\Program Files\Windows Media Player
2006-11-26 17:50 -------- d-------- C:\Program Files\Messenger
2006-11-26 17:41 -------- d-------- C:\Program Files\Outlook Express
2006-11-26 17:41 -------- d-------- C:\Program Files\NetMeeting
2006-11-26 10:37 -------- d-------- C:\Program Files\Spyware Doctor
2006-11-26 10:08 -------- d-------- C:\Program Files\Steam
2006-11-25 21:10 -------- d-------- C:\Program Files\WinRAR
2006-11-25 21:10 -------- d-------- C:\Program Files\Winamp
2006-11-25 20:57 -------- d-------- C:\Program Files\Spybot - Search & Destroy
2006-11-25 20:47 -------- d-------- C:\Program Files\iTunes
2006-11-25 20:47 -------- d-------- C:\Program Files\Internet Explorer
2006-11-25 20:46 -------- d-------- C:\Program Files\FlashFXP
2006-11-18 20:29 -------- d-------- C:\Program Files\SEGA
2006-11-17 21:24 -------- d-------- C:\Program Files\Incomplete
2006-11-17 21:23 -------- d-------- C:\Program Files\LimeWire
2006-11-06 20:14 -------- d-------- C:\Program Files\DivX
2006-10-21 17:04 -------- d-------- C:\Program Files\Microsoft Office
2006-10-21 17:04 -------- d-------- C:\Program Files\Maxis
2006-10-11 15:39 -------- d-------- C:\Program Files\Van In
2006-10-07 10:52 -------- d-------- C:\Program Files\Windows NT
2006-10-07 10:52 -------- d-------- C:\Program Files\Common Files\System


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\ctfmon.exe"
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SoundMan"="SOUNDMAN.EXE"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvMcTray.dll,NvTaskbarInit"
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"SpySweeper"="\"C:\\Program Files\\Webroot\\Spy Sweeper\\SpySweeper.exe\" /startintray"
@=""
"kav"="\"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe\""
"DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"MSConfig"="C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\MSConfig.exe /auto"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,e6,00,00,00,00,00,00,00,9a,03,00,00,42,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgw.exe /RUNONCE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgw.exe /RUNONCE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
"UPnPMonitor"="{e57ce738-33e8-4c51-8354-bb4de9d215d1}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Symantec NetDetect.job

Completion time: 06-11-28 22:13:17.31
C:\ComboFix.txt ... 06-11-28 22:13
C:\ComboFix2.txt ... 06-11-28 19:55

En het rapport van AVG antispyware?

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 22:03:27 28/11/2006

+ Scan result:



C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP11\A0001868.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP9\A0000724.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP9\A0000725.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP9\A0000726.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP9\A0000727.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP9\A0000728.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP9\A0000729.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP15\A0002055.exe -> Downloader.Agent.bca : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP7\A0000556.exe -> Dropper.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{D059B790-4151-46B5-8017-BCF9B5085620}\RP7\A0000550.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Cleaned with backup (quarantined).
:mozilla.176:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.131:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.132:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.184:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.80:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.81:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.82:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.86:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.87:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.92:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.93:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.116:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.117:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.61:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.9:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.39:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.32:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.33:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.34:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.35:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.36:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.37:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.38:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.173:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.174:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.175:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.169:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.150:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.151:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.152:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.153:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.218:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.219:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.88:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.58:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.59:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.146:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.147:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.148:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.149:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.41:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.42:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.40:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.73:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.75:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.118:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.119:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.120:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.121:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.122:C:\Documents and Settings\Geertje.GEERT\Application Data\Mozilla\Firefox\Profiles\jwnckknf.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.


::Report end

Ziet er goed uit, hoe werkt alles verder?

alles werkt vlotjes dankzij uw guide

maar ik heb nog 2 probleempjes
1. ik ga naar deze computer en klik op mijn 2e harde schijf dan krijg ik de error:
"Kan blank.exe niet vinden. Deze is nodig om bestanden met Bestand-extensie te openen"
ik heb al vanalles geprobeerd, wat ik op bv google heb gevonden, maar niets werkt

2. Ook in deze computer, als ik op wat dan ook klik bv diskettestation of 1ste harde schijf dan start de zoekfunctie op en meer niet dus nu moet ik heel de tijd met windowsverkenner werken wat vrij vervelend is
waarschijnlijk is dit laatste probleem een gevolg van mijn gekluns met het 1ste

Ga naar http://windowsupdate.microsoft.com/ en installeer alle beschikbare updates, dus ook service pack 1 en twee! Post dan een nieuw hijackthis logje hier.

ok is gebeurd

Logfile of HijackThis v1.99.1
Scan saved at 17:10:16, on 29/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\spupdsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\System32\msiexec.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Save\Save.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Geertje.GEERT\Bureaublad\HijackThis.exe
C:\WINDOWS\System32\svchost.exe
\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\regsvr32.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164563472716
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1164808662077
O20 - AppInit_DLLs: C:\WINDOWS\System32\wmfhotfix.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Ok, maar is er iets bijgekomen zie ik, de-installeer eens WhenUSave en post een nieuw hijackthis logje hier.

Logfile of HijackThis v1.99.1
Scan saved at 18:14:26, on 29/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Save\Save.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Geertje.GEERT\Bureaublad\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164563472716
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1164808662077
O20 - AppInit_DLLs: C:\WINDOWS\System32\wmfhotfix.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

WhenUSave is nog steeds niet gede-installeerd. Kijk ook even of er niks onder de naam 'Save' staat.

eerst kreeg ik het niet verwijdert
het was door een ander programma in gebruik
dan heb ik het met spy sweeper kunnen verwijderen en zag ik het niet meer in mijn program files staan maar het bestandje werkt nog atlijd
en ik vind het nerges

Logfile of HijackThis v1.99.1
Scan saved at 19:13:01, on 29/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Geertje.GEERT\Bureaublad\HijackThis.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164563472716
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1164808662077
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\System32\wmfhotfix.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

* Fix deze eens in hijackthis en laat daarna spysweeper nog eens lopen:

O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"

en tis weg!

maar de 2 bovenstaande problemen blijven

Logfile of HijackThis v1.99.1
Scan saved at 22:56:38, on 29/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Geertje.GEERT\Bureaublad\HijackThis.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164563472716
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1164808662077
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\System32\wmfhotfix.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

Heb geen flauw idee hoe dat zou kunnen komen, mss eens vragen in het software forum?

Malware kan je alvast uitsluiten.