Archief - een logje

ik heb een maand geleden ene format gedaan maar nu sinds een paar dagen krijg ik heel de tijd meldingen van virussen trojans enzo
ik krijg ze maar niet weg
als u zo vriendelijkz ou willen zijn om eens te kijken



Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 22:34:59, on 21-5-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\Wouter\Mijn downloads\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {22E36F7D-E938-4700-9C51-4FEB92ADDB3E} - C:\WINDOWS\system32\ddaya.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {C004A8DA-623A-4409-B6ED-F3E3DA367792} - C:\WINDOWS\system32\yayxwtq.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1178649243218
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://sbs.orbolabels.be/Remote/msrdp.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: ddaya - C:\WINDOWS\system32\ddaya.dll
O20 - Winlogon Notify: winbjt32 - winbjt32.dll (file missing)
O20 - Winlogon Notify: yayxwtq - C:\WINDOWS\SYSTEM32\yayxwtq.dll
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe

--
End of file - 5211 bytes


merci

Download VundoFix.exe naar je bureaublad.

• Dubbelklik VundoFix.exe om het te starten.
• Klik de Scan for Vundo knop.
• Eenmaal gedaan met scannen, klik de Remove Vundo knop.
• Je zal een melding krijgen of je de bestanden wilt laten verwijderen, klik YES
• Nadat je Yes hebt geklikt, zullen de icoontjes op je bureaublad verdwijnen tijdens het verwijderen van Vundo.
• Wanneer voltooid zal je de melding krijgen dat het je PC zal afsluiten, klik OK.
• Start je pc terug opnieuw op.
• Post de inhoud van C:\vundofix.txt en een nieuwe hijackthislog in je volgende post.

Note: Het is mogelijk dat vundofix een bestand gevonden heeft dat niet kon verwijderd worden.
In dit geval zal VundoFix na het heropstarten van je pc nog eens opstarten. Dan moet je de instructies van hierboven nog eens uitvoeren vanaf: "Click the Scan for Vundo."

VundoFix V6.4.1

Checking Java version...

Scan started at 13:37:10 23-5-2007

Listing files found while scanning....

C:\WINDOWS\system32\ayadd.bak1
C:\WINDOWS\system32\ayadd.bak2
C:\WINDOWS\system32\ayadd.ini
C:\WINDOWS\system32\blddoyxo.dll
C:\WINDOWS\system32\ddaya.dll
C:\WINDOWS\system32\oxyoddlb.ini
C:\WINDOWS\system32\qkakjkyt.ini
C:\WINDOWS\system32\tykjkakq.dll
C:\WINDOWS\system32\yayxwtq.dll

Beginning removal...

Attempting to delete C:\WINDOWS\system32\ayadd.bak1
C:\WINDOWS\system32\ayadd.bak1 Has been deleted!

Attempting to delete C:\WINDOWS\system32\ayadd.bak2
C:\WINDOWS\system32\ayadd.bak2 Has been deleted!

Attempting to delete C:\WINDOWS\system32\ayadd.ini
C:\WINDOWS\system32\ayadd.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\blddoyxo.dll
C:\WINDOWS\system32\blddoyxo.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ddaya.dll
C:\WINDOWS\system32\ddaya.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\oxyoddlb.ini
C:\WINDOWS\system32\oxyoddlb.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\qkakjkyt.ini
C:\WINDOWS\system32\qkakjkyt.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\tykjkakq.dll
C:\WINDOWS\system32\tykjkakq.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\yayxwtq.dll
C:\WINDOWS\system32\yayxwtq.dll Could not be deleted.

Performing Repairs to the registry.
Done!

Beginning removal...

Attempting to delete C:\WINDOWS\system32\yayxwtq.dll
C:\WINDOWS\system32\yayxwtq.dll Has been deleted!

Performing Repairs to the registry.
Done!

En het nieuw hijackthis logje?

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:50:53, on 24-5-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
F:\Wouter\Mijn downloads\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {EBBF364B-ABBC-42F6-89EF-B0C685362665} - C:\WINDOWS\system32\ddaya.dll (file missing)
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1178649243218
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://sbs.orbolabels.be/Remote/msrdp.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: winbjt32 - winbjt32.dll (file missing)
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 5101 bytes

* Open hijackthis en vink volgende regels aan:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {EBBF364B-ABBC-42F6-89EF-B0C685362665} - C:\WINDOWS\system32\ddaya.dll (file missing)
O20 - Winlogon Notify: winbjt32 - winbjt32.dll (file missing)

* Sluit dana lle vensters behalve hijackthis en klik op 'fix checked'


* Download ATF cleaner (by Atribune)

Dubbelklik op ATF cleaner om het programma te starten.
Op het tabblad "Main", plaats je een vinkje bij Select All.
Klik op de knop Empty Selected.

Gebruik je ook Firefox als browser:
Klik op tabblad "Firefox", plaats een vinkje bij Select All.
Wil je de door Firefox opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
(dit verwijdert het vinkje bij "Firefox saved passwords")
Klik op de knop Empty Selected.

Gebruik je ook Opera als browser:
Klik op tabblad "Opera", plaats een vinkje bij Select All.
Wil je de door Opera opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
Klik op de knop Empty Selected.
Ga naar het tabblad "Main" en klik op de knop Exit om het programma af te sluiten.

* Herstart dan je pc en post een nieuw hijackthis logje hier en vertel hoe alles verder werkt.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 22:13:55, on 24-5-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
F:\Wouter\Mijn downloads\HiJackThis_v2.exe
C:\WINDOWS\System32\svchost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1178649243218
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://sbs.orbolabels.be/Remote/msrdp.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 4663 bytes

alles werkt goed buiten daarjuist scande ik met spybot en gaf hij 32 probs aan ik heb ze allemaal gefixed zal straks nog eens scannen hopelijk is het weg virussen vind AVG wel niet meer

thx e

Ok, laat me het weten of er nog iets gevonden wordt.

ja spybot vind nog altijd dingen

Kan je eens de locatie posten van die bestanden?

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 9:39:35, on 27-5-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\Wouter\Mijn downloads\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\wouter\Menu Start\Programma's\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1178649243218
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://sbs.orbolabels.be/Remote/msrdp.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 5017 bytes


hij blijft weer virussen vinden IMVU ofzoiets

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

"wouter" - 2007-05-28 10:00:47 Service Pack 2
ComboFix 07-05.27.V - Running from: "C:\Program Files\Mozilla Firefox\"


(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


"C:\DOCUME~1\wouter\BUREAU~1.\internet explorer.lnk"


((((((((((((((((((((((((((((((( Files Created from 2007-04-28 to 2007-05-28 ))))))))))))))))))))))))))))))))))


2007-05-25 18:55 <DIR> d-------- C:\Program Files\GEE
2007-05-25 17:53 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\IMVU
2007-05-23 13:37 <DIR> d-------- C:\VundoFix Backups
2007-05-21 20:24 <DIR> dr-h----- C:\Documents and Settings\wouter\Onlangs geopend
2007-05-21 20:24 <DIR> dr-h----- C:\DOCUME~1\wouter\Onlangs geopend
2007-05-16 13:41 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\InstallShield
2007-05-15 19:00 <DIR> d-------- C:\WINDOWS\.jagex_cache_32
2007-05-14 18:29 <DIR> d-------- C:\Documents and Settings\wouter\Phone Browser
2007-05-14 18:29 <DIR> d-------- C:\DOCUME~1\wouter\Phone Browser
2007-05-14 17:36 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
2007-05-14 17:35 9,216 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys
2007-05-14 17:35 50,688 --a------ C:\WINDOWS\system32\nmwcdcls.dll
2007-05-14 17:35 4,608 --a------ C:\WINDOWS\system32\nmwcdlog.dll
2007-05-14 17:35 30,720 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
2007-05-14 17:35 138,240 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys
2007-05-14 17:35 12,800 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys
2007-05-14 17:35 12,800 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys
2007-05-14 17:35 <DIR> d-------- C:\Program Files\PC Connectivity Solution
2007-05-14 17:35 <DIR> d-------- C:\Program Files\Nokia
2007-05-14 17:35 <DIR> d-------- C:\Program Files\DIFX
2007-05-14 17:35 <DIR> d-------- C:\Program Files\Common Files\PCSuite
2007-05-14 17:35 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\PC Suite
2007-05-13 19:52 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
2007-05-13 19:52 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll
2007-05-13 19:52 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2007-05-13 19:52 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll
2007-05-13 19:52 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2007-05-13 19:52 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll
2007-05-13 19:52 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2007-05-13 19:52 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-05-13 19:52 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2007-05-13 19:51 <DIR> d-------- C:\Program Files\Ubisoft
2007-05-11 14:56 178,408 --a------ C:\WINDOWS\system32\muweb.dll
2007-05-11 14:56 128,232 --a------ C:\WINDOWS\system32\mucltui.dll
2007-05-10 22:38 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\Leadertech
2007-05-10 22:34 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2007-05-10 18:34 <DIR> d-------- C:\Documents and Settings\wouter\Shared
2007-05-10 18:34 <DIR> d-------- C:\Documents and Settings\wouter\Incomplete
2007-05-10 18:34 <DIR> d-------- C:\DOCUME~1\wouter\Shared
2007-05-10 18:34 <DIR> d-------- C:\DOCUME~1\wouter\Incomplete
2007-05-10 18:33 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\LimeWire
2007-05-10 18:12 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
2007-05-10 18:10 <DIR> d-------- C:\Program Files\MSBuild
2007-05-10 18:10 <DIR> d-------- C:\Program Files\Microsoft Works
2007-05-10 18:06 <DIR> d-------- C:\WINDOWS\SHELLNEW
2007-05-10 18:05 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
2007-05-10 18:04 <DIR> dr-h----- C:\MSOCache
2007-05-09 21:05 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\MSN6
2007-05-09 21:05 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
2007-05-09 11:05 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\Lavasoft
2007-05-09 11:00 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-05-09 11:00 164 --a------ C:\install.dat
2007-05-09 10:59 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-05-08 22:37 <DIR> d-------- C:\Program Files\ahead
2007-05-08 22:36 90,112 -ra------ C:\WINDOWS\system32\hpocon09.exe
2007-05-08 22:36 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\Verzendmap van Share-to-Web
2007-05-08 22:34 294,912 -ra------ C:\WINDOWS\system32\hptcpmui.dll
2007-05-08 22:34 192,512 -ra------ C:\WINDOWS\system32\hptcpmon.dll
2007-05-08 22:34 118,784 -ra------ C:\WINDOWS\system32\hptcpmib.dll
2007-05-08 22:34 <DIR> d-------- C:\Program Files\Hewlett-Packard
2007-05-08 22:20 90,112 --a------ C:\WINDOWS\system32\opnetext.dll
2007-05-08 22:20 57,344 -ra------ C:\WINDOWS\system32\OPSTDMON.DLL
2007-05-08 22:20 49,152 --a------ C:\WINDOWS\system32\uiokilpr.dll
2007-05-08 22:20 36,864 --a------ C:\WINDOWS\system32\oklprrsc.dll
2007-05-08 22:20 23,552 --a------ C:\WINDOWS\system32\oklprmon.dll
2007-05-08 22:20 <DIR> d-------- C:\Program Files\Okidata
2007-05-08 22:11 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\uTorrent
2007-05-08 22:01 <DIR> d-------- C:\Program Files\Azureus
2007-05-08 22:01 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\Azureus
2007-05-08 21:52 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-05-08 21:47 <DIR> d-------- C:\WINDOWS\system32\appmgmt
2007-05-08 21:43 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys
2007-05-08 21:43 54,272 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-05-08 21:43 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2007-05-08 21:43 19,328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2007-05-08 21:43 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys
2007-05-08 21:43 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2007-05-08 21:43 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2007-05-08 21:43 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2007-05-08 21:35 <DIR> d-------- C:\Program Files\LimeWire
2007-05-08 21:33 <DIR> d-------- C:\Documents and Settings\wouter\Contacts
2007-05-08 21:33 <DIR> d-------- C:\DOCUME~1\wouter\Contacts
2007-05-08 21:32 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-05-08 21:32 <DIR> d-------- C:\Program Files\MSN Messenger
2007-05-08 21:31 90,527 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys
2007-05-08 21:31 7,552 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys
2007-05-08 21:31 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll
2007-05-08 21:31 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-05-08 21:31 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-05-08 21:31 53,248 --a------ C:\WINDOWS\StillCap.exe
2007-05-08 21:31 52,864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
2007-05-08 21:31 5,376 --a------ C:\WINDOWS\system32\drivers\mspclock.sys
2007-05-08 21:31 49,152 --a------ C:\WINDOWS\amcap.exe
2007-05-08 21:31 40,960 --a------ C:\WINDOWS\VM_STI.EXE
2007-05-08 21:31 307,200 --------- C:\WINDOWS\vidcap32.Exe
2007-05-08 21:31 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-05-08 21:31 147,456 --a------ C:\WINDOWS\VMCap.exe
2007-05-08 21:31 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-05-08 21:31 <DIR> d--h----- C:\Program Files\InstallShield Installation Information
2007-05-08 21:31 <DIR> d-------- C:\WINDOWS\CatRoot
2007-05-08 21:31 <DIR> d-------- C:\Program Files\Vimicro
2007-05-08 21:30 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-05-08 21:30 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-05-08 21:30 57,856 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-05-08 21:30 53,760 --a------ C:\WINDOWS\system32\drivers\i8042prt.sys
2007-05-08 21:30 4,992 --a------ C:\WINDOWS\system32\drivers\mspqm.sys
2007-05-08 21:30 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-05-08 21:30 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
2007-05-08 21:30 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-05-08 21:29 27,165 --a------ C:\WINDOWS\system32\drivers\fetnd5.sys
2007-05-08 21:29 2,944 --a------ C:\WINDOWS\system32\drivers\msmpu401.sys
2007-05-08 21:29 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2007-05-08 21:28 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-05-08 21:28 9,040 --a------ C:\WINDOWS\system\VER.DLL
2007-05-08 21:28 86,556 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-05-08 21:28 82,944 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-05-08 21:28 8,704 --a------ C:\WINDOWS\system32\batt.dll
2007-05-08 21:28 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-05-08 21:28 76,288 --a------ C:\WINDOWS\system32\storprop.dll
2007-05-08 21:28 70,192 --a------ C:\WINDOWS\system\mmsystem.dll
2007-05-08 21:28 70,144 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-05-08 21:28 70,144 --a------ C:\WINDOWS\notepad.exe
2007-05-08 21:28 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
2007-05-08 21:28 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
2007-05-08 21:28 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-05-08 21:28 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-05-08 21:28 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-05-08 21:28 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-05-08 21:28 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-05-08 21:28 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-05-08 21:28 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-05-08 21:28 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-05-08 21:28 5,120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-05-08 21:28 33,696 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-05-08 21:28 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-05-08 21:28 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-05-08 21:28 19,200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-05-08 21:28 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-05-08 21:28 15,872 --a------ C:\WINDOWS\TASKMAN.EXE
2007-05-08 21:28 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2007-05-08 21:28 126,976 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-05-08 21:28 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-05-08 21:28 109,552 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-05-08 21:28 103,936 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-05-08 21:28 <DIR> dr------- C:\Program Files
2007-05-08 21:28 <DIR> dr------- C:\DOCUME~1\DEFAUL~1\Menu Start
2007-05-08 21:28 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Menu Start
2007-05-08 21:28 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Documenten
2007-05-08 21:28 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Sjablonen
2007-05-08 21:28 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Onlangs geopend
2007-05-08 21:28 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Netwerkprinteromgeving
2007-05-08 21:28 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\Sjablonen
2007-05-08 21:28 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy
2007-05-08 21:28 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2007-05-08 21:28 <DIR> d-------- C:\WINDOWS\system32\CatRoot
2007-05-08 21:28 <DIR> d-------- C:\Program Files\Common Files\SpeechEngines
2007-05-08 21:28 <DIR> d-------- C:\Program Files\Common Files\ODBC
2007-05-08 21:28 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Mijn documenten
2007-05-08 21:28 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Favorieten
2007-05-08 21:28 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Bureaublad
2007-05-08 21:28 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Favorieten
2007-05-08 21:28 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Bureaublad
2007-05-08 21:27 <DIR> d-------- C:\Documents and Settings
2007-05-08 21:27 <DIR> d-------- C:\DOCUME~1\LOCALS~1\Menu Start
2007-05-08 21:26 <DIR> d-------- C:\WINDOWS\Prefetch
2007-05-08 21:23 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache
2007-05-08 21:23 <DIR> dr--s---- C:\WINDOWS\Fonts
2007-05-08 21:23 <DIR> dr------- C:\WINDOWS\Web
2007-05-08 21:23 <DIR> d--h----- C:\WINDOWS\inf
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\WinSxS
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\twain_32
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\wins
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\wbem
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\usmt
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\spool
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\Setup
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\ras
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\oobe
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\npp
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\mui
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\IME
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\icsxml
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\ias
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\export
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\drivers
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\dhcp
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\config
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\3com_dmi
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\3076
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\2052
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1054
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1043
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1042
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1041
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1037
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1033
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1031
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1028
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32\1025
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system32
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\system
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\security
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\Resources
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\repair
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\mui
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\msapps
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\msagent
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\Media
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\ime
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\Help
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\Driver Cache
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\Debug
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\Cursors
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\Connection Wizard
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\Config
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\AppPatch
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS\addins
2007-05-08 21:23 <DIR> d-------- C:\WINDOWS
2007-05-08 21:21 <DIR> d-------- C:\Program Files\Hitman Pro
2007-05-08 21:20 1,156 --a------ C:\WINDOWS\mozver.dat
2007-05-08 21:16 95,424 --------- C:\WINDOWS\system32\drivers\slnthal.sys
2007-05-08 21:16 9,728 --------- C:\WINDOWS\system32\comsdupd.exe
2007-05-08 21:16 896,512 --------- C:\WINDOWS\system32\wmspdmoe.dll
2007-05-08 21:16 88,064 --------- C:\WINDOWS\system32\p2pnetsh.dll
2007-05-08 21:16 870,784 --------- C:\WINDOWS\system32\ati3d1ag.dll
2007-05-08 21:16 86,016 --------- C:\WINDOWS\system32\p2pgasvc.dll
2007-05-08 21:16 86,016 --------- C:\WINDOWS\system32\mdmxsdk.dll
2007-05-08 21:16 81,920 --------- C:\WINDOWS\system32\ieencode.dll
2007-05-08 21:16 81,408 --------- C:\WINDOWS\system32\wscsvc.dll
2007-05-08 21:16 8,192 --------- C:\WINDOWS\system32\smbinst.exe
2007-05-08 21:16 78,464 --------- C:\WINDOWS\system32\drivers\usbvideo.sys
2007-05-08 21:16 755,200 --------- C:\WINDOWS\system32\ir50_32.dll
2007-05-08 21:16 75,776 --------- C:\WINDOWS\system32\strmfilt.dll
2007-05-08 21:16 73,832 --------- C:\WINDOWS\system32\slcoinst.dll
2007-05-08 21:16 73,796 --------- C:\WINDOWS\system32\slserv.exe
2007-05-08 21:16 73,216 --------- C:\WINDOWS\system32\drivers\atintuxx.sys
2007-05-08 21:16 71,680 --------- C:\WINDOWS\system32\blastcln.exe
2007-05-08 21:16 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-05-08 21:16 7,680 --------- C:\WINDOWS\system32\kbdsmsno.dll
2007-05-08 21:16 7,680 --------- C:\WINDOWS\system32\kbdsmsfi.dll
2007-05-08 21:16 7,168 --------- C:\WINDOWS\system32\kbdukx.dll
2007-05-08 21:16 7,168 --------- C:\WINDOWS\system32\kbdno1.dll
2007-05-08 21:16 7,168 --------- C:\WINDOWS\system32\kbdfi1.dll
2007-05-08 21:16 685,056 --------- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2007-05-08 21:16 67,584 --------- C:\WINDOWS\system32\drivers\sdbus.sys
2007-05-08 21:16 63,663 --------- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2007-05-08 21:16 63,488 --------- C:\WINDOWS\system32\drivers\atinxsxx.sys
2007-05-08 21:16 60,416 --------- C:\WINDOWS\system32\fwcfg.dll
2007-05-08 21:16 6,656 --------- C:\WINDOWS\system32\kbdinmal.dll
2007-05-08 21:16 6,656 --------- C:\WINDOWS\system32\kbdinben.dll
2007-05-08 21:16 6,144 --------- C:\WINDOWS\system32\kbdmlt48.dll
2007-05-08 21:16 6,144 --------- C:\WINDOWS\system32\kbdmlt47.dll
2007-05-08 21:16 6,144 --------- C:\WINDOWS\system32\kbdinbe1.dll
2007-05-08 21:16 6,016 --------- C:\WINDOWS\system32\drivers\smbali.sys
2007-05-08 21:16 59,648 --------- C:\WINDOWS\system32\drivers\rfcomm.sys
2007-05-08 21:16 57,856 --------- C:\WINDOWS\system32\drivers\atinbtxx.sys
2007-05-08 21:16 56,623 --------- C:\WINDOWS\system32\drivers\ati1btxx.sys
2007-05-08 21:16 526,848 --------- C:\WINDOWS\system32\p2psvc.dll
2007-05-08 21:16 52,736 --------- C:\WINDOWS\system32\mspmsnsv.dll
2007-05-08 21:16 52,224 --------- C:\WINDOWS\system32\drivers\atinraxx.sys
2007-05-08 21:16 516,768 --------- C:\WINDOWS\system32\ativvaxx.dll
2007-05-08 21:16 50,688 --------- C:\WINDOWS\system32\btpanui.dll
2007-05-08 21:16 50,176 --------- C:\WINDOWS\system32\xmlprovi.dll
2007-05-08 21:16 5,632 --------- C:\WINDOWS\system32\kbdmaori.dll
2007-05-08 21:16 49,152 --------- C:\WINDOWS\system32\powercfg.exe
2007-05-08 21:16 484,864 --------- C:\WINDOWS\system32\wmspdmod.dll
2007-05-08 21:16 48,640 --------- C:\WINDOWS\system32\pnrpnsp.dll
2007-05-08 21:16 46,464 --------- C:\WINDOWS\system32\drivers\gagp30kx.sys
2007-05-08 21:16 452,736 --------- C:\WINDOWS\system32\drivers\mtxparhm.sys
2007-05-08 21:16 44,928 --------- C:\WINDOWS\system32\drivers\agpcpq.sys
2007-05-08 21:16 44,672 --------- C:\WINDOWS\system32\drivers\uagp35.sys
2007-05-08 21:16 44,032 --------- C:\WINDOWS\system32\twext.dll
2007-05-08 21:16 43,008 --------- C:\WINDOWS\system32\drivers\amdagp.sys
2007-05-08 21:16 42,752 --------- C:\WINDOWS\system32\drivers\alim1541.sys
2007-05-08 21:16 42,368 --------- C:\WINDOWS\system32\drivers\agp440.sys
2007-05-08 21:16 42,240 --------- C:\WINDOWS\system32\drivers\viaagp.sys
2007-05-08 21:16 41,088 --------- C:\WINDOWS\system32\drivers\sisagp.sys
2007-05-08 21:16 404,990 --------- C:\WINDOWS\system32\drivers\slntamr.sys
2007-05-08 21:16 40,832 --------- C:\WINDOWS\system32\drivers\irbus.sys
2007-05-08 21:16 40,192 --------- C:\WINDOWS\system32\drivers\intelppm.sys
2007-05-08 21:16 4,255 --------- C:\WINDOWS\system32\drivers\adv01nt5.dll
2007-05-08 21:16 397,056 --------- C:\WINDOWS\system32\s3gnb.dll
2007-05-08 21:16 384,512 --------- C:\WINDOWS\system32\mp4sdmod.dll
2007-05-08 21:16 38,016 --------- C:\WINDOWS\system32\drivers\bthmodem.sys
2007-05-08 21:16 377,984 --------- C:\WINDOWS\system32\ati2dvaa.dll
2007-05-08 21:16 36,463 --------- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2007-05-08 21:16 35,456 --------- C:\WINDOWS\system32\drivers\bthprint.sys
2007-05-08 21:16 34,735 --------- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2007-05-08 21:16 338,432 --------- C:\WINDOWS\system32\ir41_qcx.dll
2007-05-08 21:16 327,168 --------- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2007-05-08 21:16 32,866 --------- C:\WINDOWS\system32\slrundll.exe
2007-05-08 21:16 32,866 --------- C:\WINDOWS\slrundll.exe
2007-05-08 21:16 32,768 --------- C:\WINDOWS\system32\ativtmxx.dll
2007-05-08 21:16 32,285 --------- C:\WINDOWS\system32\hsfcisp2.dll
2007-05-08 21:16 312,320 --------- C:\WINDOWS\system32\p2pgraph.dll
2007-05-08 21:16 310,272 --------- C:\WINDOWS\system32\mp43dmod.dll
2007-05-08 21:16 31,744 --------- C:\WINDOWS\system32\drivers\atinxbxx.sys
2007-05-08 21:16 30,671 --------- C:\WINDOWS\system32\drivers\ati1raxx.sys
2007-05-08 21:16 30,208 --------- C:\WINDOWS\system32\bthserv.dll
2007-05-08 21:16 30,080 --------- C:\WINDOWS\system32\drivers\rndismpx.sys
2007-05-08 21:16 3,967 --------- C:\WINDOWS\system32\drivers\adv02nt5.dll
2007-05-08 21:16 3,901 --------- C:\WINDOWS\system32\drivers\siint5.dll
2007-05-08 21:16 3,775 --------- C:\WINDOWS\system32\drivers\adv11nt5.dll
2007-05-08 21:16 3,711 --------- C:\WINDOWS\system32\drivers\adv09nt5.dll
2007-05-08 21:16 3,647 --------- C:\WINDOWS\system32\drivers\adv07nt5.dll
2007-05-08 21:16 3,615 --------- C:\WINDOWS\system32\drivers\adv05nt5.dll
2007-05-08 21:16 3,135 --------- C:\WINDOWS\system32\drivers\adv08nt5.dll
2007-05-08 21:16 29,455 --------- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2007-05-08 21:16 29,184 --------- C:\WINDOWS\system32\sdhcinst.dll
2007-05-08 21:16 29,056 --------- C:\WINDOWS\system32\drivers\ip6fw.sys
2007-05-08 21:16 286,792 --------- C:\WINDOWS\system32\slextspk.dll
2007-05-08 21:16 28,672 --------- C:\WINDOWS\system32\drivers\atinsnxx.sys
2007-05-08 21:16 274,816 --------- C:\WINDOWS\system32\drivers\bthport.sys
2007-05-08 21:16 262,784 --------- C:\WINDOWS\system32\drivers\http.sys
2007-05-08 21:16 26,367 --------- C:\WINDOWS\system32\drivers\ati1snxx.sys
2007-05-08 21:16 25,728 --------- C:\WINDOWS\system32\drivers\hidbth.sys
2007-05-08 21:16 25,471 --------- C:\WINDOWS\system32\drivers\watv10nt.sys
2007-05-08 21:16 25,471 --------- C:\WINDOWS\system32\drivers\atv04nt5.dll
2007-05-08 21:16 24,576 --------- C:\WINDOWS\system32\httpapi.dll
2007-05-08 21:16 233,472 --------- C:\WINDOWS\system32\wmpdxm.dll
2007-05-08 21:16 23,040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-05-08 21:16 229,376 --------- C:\WINDOWS\system32\ati2cqag.dll
2007-05-08 21:16 220,032 --------- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2007-05-08 21:16 22,271 --------- C:\WINDOWS\system32\drivers\watv06nt.sys
2007-05-08 21:16 21,343 --------- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2007-05-08 21:16 21,183 --------- C:\WINDOWS\system32\drivers\atv01nt5.dll
2007-05-08 21:16 201,728 --------- C:\WINDOWS\system32\ati2dvag.dll
2007-05-08 21:16 200,192 --------- C:\WINDOWS\system32\ir50_qc.dll
2007-05-08 21:16 20,992 --------- C:\WINDOWS\system32\bthci.dll
2007-05-08 21:16 2,962,432 --------- C:\WINDOWS\system32\xpsp2res.dll
2007-05-08 21:16 2,113,536 --------- C:\WINDOWS\system32\dxdiagn.dll
2007-05-08 21:16 193,024 --------- C:\WINDOWS\system32\fsquirt.exe
2007-05-08 21:16 189,952 --------- C:\WINDOWS\system32\wmerror.dll
2007-05-08 21:16 188,508 --------- C:\WINDOWS\system32\slgen.dll
2007-05-08 21:16 183,808 --------- C:\WINDOWS\system32\ir50_qcx.dll
2007-05-08 21:16 180,360 --------- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2007-05-08 21:16 18,944 --------- C:\WINDOWS\system32\drivers\bthusb.sys
2007-05-08 21:16 17,408 --------- C:\WINDOWS\system32\winshfhc.dll
2007-05-08 21:16 17,279 --------- C:\WINDOWS\system32\drivers\atv10nt5.dll
2007-05-08 21:16 17,024 --------- C:\WINDOWS\system32\drivers\bthenum.sys

volgend deel

2007-05-08 21:16 166,912 --------- C:\WINDOWS\system32\drivers\s3gnbm.sys
2007-05-08 21:16 16,896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-05-08 21:16 151,552 --------- C:\WINDOWS\system32\wmidx.dll
2007-05-08 21:16 15,872 --------- C:\WINDOWS\system32\w3ssl.dll
2007-05-08 21:16 15,488 --------- C:\WINDOWS\system32\drivers\mssmbios.sys
2007-05-08 21:16 15,423 --------- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2007-05-08 21:16 15,104 --------- C:\WINDOWS\system32\drivers\hidir.sys
2007-05-08 21:16 14,336 --------- C:\WINDOWS\system32\drivers\atinpdxx.sys
2007-05-08 21:16 14,336 --------- C:\WINDOWS\system32\auditusr.exe
2007-05-08 21:16 14,143 --------- C:\WINDOWS\system32\drivers\atv06nt5.dll
2007-05-08 21:16 13,824 --------- C:\WINDOWS\system32\wscntfy.exe
2007-05-08 21:16 13,824 --------- C:\WINDOWS\system32\drivers\atinttxx.sys
2007-05-08 21:16 13,824 --------- C:\WINDOWS\system32\drivers\atinmdxx.sys
2007-05-08 21:16 13,824 --------- C:\WINDOWS\system32\cmsetacl.dll
2007-05-08 21:16 13,776 --------- C:\WINDOWS\system32\drivers\recagent.sys
2007-05-08 21:16 13,568 --------- C:\WINDOWS\system32\drivers\wacompen.sys
2007-05-08 21:16 13,240 --------- C:\WINDOWS\system32\drivers\slwdmsup.sys
2007-05-08 21:16 129,536 --------- C:\WINDOWS\system32\xmlprov.dll
2007-05-08 21:16 129,535 --------- C:\WINDOWS\system32\drivers\slnt7554.sys
2007-05-08 21:16 128,896 --------- C:\WINDOWS\system32\drivers\fltmgr.sys
2007-05-08 21:16 126,686 --------- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2007-05-08 21:16 120,320 --------- C:\WINDOWS\system32\ir41_qc.dll
2007-05-08 21:16 12,672 --------- C:\WINDOWS\system32\drivers\usb8023x.sys
2007-05-08 21:16 12,672 --------- C:\WINDOWS\system32\drivers\mutohpen.sys
2007-05-08 21:16 12,047 --------- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2007-05-08 21:16 118,784 --------- C:\WINDOWS\system32\msdadiag.dll
2007-05-08 21:16 116,224 --------- C:\WINDOWS\system32\p2p.dll
2007-05-08 21:16 114,688 --------- C:\WINDOWS\system32\wmpasf.dll
2007-05-08 21:16 11,935 --------- C:\WINDOWS\system32\drivers\wadv11nt.sys
2007-05-08 21:16 11,871 --------- C:\WINDOWS\system32\drivers\wadv09nt.sys
2007-05-08 21:16 11,868 --------- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2007-05-08 21:16 11,807 --------- C:\WINDOWS\system32\drivers\wadv07nt.sys
2007-05-08 21:16 11,615 --------- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2007-05-08 21:16 11,359 --------- C:\WINDOWS\system32\drivers\atv02nt5.dll
2007-05-08 21:16 11,325 --------- C:\WINDOWS\system32\drivers\vchnt5.dll
2007-05-08 21:16 11,295 --------- C:\WINDOWS\system32\drivers\wadv08nt.sys
2007-05-08 21:16 11,136 --------- C:\WINDOWS\system32\drivers\sffdisk.sys
2007-05-08 21:16 108,032 --------- C:\WINDOWS\system32\wshbth.dll
2007-05-08 21:16 104,960 --------- C:\WINDOWS\system32\drivers\atinrvxx.sys
2007-05-08 21:16 100,992 --------- C:\WINDOWS\system32\drivers\bthpan.sys
2007-05-08 21:16 10,240 --------- C:\WINDOWS\system32\drivers\sffp_sd.sys
2007-05-08 21:16 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll
2007-05-08 21:16 1,737,856 --------- C:\WINDOWS\system32\mtxparhd.dll
2007-05-08 21:16 1,689,088 --------- C:\WINDOWS\system32\d3d9.dll
2007-05-08 21:16 1,309,184 --------- C:\WINDOWS\system32\drivers\mtlstrm.sys
2007-05-08 21:16 1,119,744 --------- C:\WINDOWS\system32\wmsdmoe2.dll
2007-05-08 21:16 1,041,536 --------- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2007-05-08 21:16 1,001,472 --------- C:\WINDOWS\system32\wmvdmoe2.dll
2007-05-08 21:16 <DIR> d-------- C:\WINDOWS\provisioning
2007-05-08 21:16 <DIR> d-------- C:\WINDOWS\peernet
2007-05-08 21:15 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2007-05-08 21:11 <DIR> d-------- C:\WINDOWS\EHome
2007-05-08 21:09 26,112 --a------ C:\WINDOWS\system32\xpsp1hfm.exe
2007-05-08 20:58 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
2007-05-08 20:52 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2007-05-08 20:52 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2007-05-08 20:47 <DIR> d-------- C:\Program Files\QuickTime
2007-05-08 20:47 <DIR> d-------- C:\Program Files\iTunes
2007-05-08 20:47 <DIR> d-------- C:\Program Files\iPod
2007-05-08 20:47 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\Apple Computer
2007-05-08 20:47 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
2007-05-08 20:42 <DIR> d--hs---- C:\RECYCLER
2007-05-08 20:41 <DIR> d-------- C:\DOCUME~1\wouter\APPLIC~1\Talkback
2007-05-08 20:40 0 --a------ C:\WINDOWS\nsreg.dat
2007-05-08 20:37 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-05-08 20:37 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2007-05-08 20:37 <DIR> d-------- C:\WINDOWS\system32\PreInstall
2007-05-08 20:36 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll
2007-05-08 20:36 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll
2007-05-08 20:36 351,232 --a------ C:\WINDOWS\system32\winhttp.dll
2007-05-08 20:36 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-05-08 20:36 <DIR> d-------- C:\WINDOWS\system32\bits
2007-05-08 20:34 466,200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-05-08 20:34 41,240 --a------ C:\WINDOWS\system32\wups.dll
2007-05-08 20:34 194,840 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-05-08 20:34 18,200 --a------ C:\WINDOWS\system32\wups2.dll
2007-05-08 20:34 174,360 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-05-08 20:34 128,280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-05-08 20:34 <DIR> d-------- C:\WINDOWS\SoftwareDistribution
2007-05-08 20:33 <DIR> d---s---- C:\Documents and Settings\wouter\UserData
2007-05-08 20:33 <DIR> d---s---- C:\DOCUME~1\wouter\UserData
2007-05-08 20:30 <DIR> d-------- C:\Program Files\EIZO
2007-05-08 20:23 <DIR> d-------- C:\WINDOWS\system32\NtmsData
2007-05-08 20:22 <DIR> d-------- C:\WINDOWS\AiOTemp
2007-05-08 20:20 36,352 --a------ C:\WINDOWS\system32\drivers\isapnp.sys
2007-05-08 20:19 <DIR> d-------- C:\Documents and Settings\wouter\WINDOWS
2007-05-08 20:19 <DIR> d-------- C:\DOCUME~1\wouter\WINDOWS
2007-05-08 20:18 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
2007-05-08 20:16 76,288 --a------ C:\WINDOWS\system32\usbui.dll
2007-05-08 20:16 6,912 --a------ C:\WINDOWS\system32\drivers\vulfnth.sys
2007-05-08 20:16 57,600 --a------ C:\WINDOWS\system32\drivers\usbhub.sys
2007-05-08 20:16 45,056 --a------ C:\WINDOWS\system32\vusetup.dll
2007-05-08 20:16 306,947 --a------ C:\WINDOWS\IsUninst.exe
2007-05-08 20:16 26,624 --a------ C:\WINDOWS\system32\drivers\usbehci.sys
2007-05-08 20:16 142,976 --a------ C:\WINDOWS\system32\drivers\usbport.sys
2007-05-08 20:16 11,392 --a------ C:\WINDOWS\system32\drivers\vulfntr.sys
2007-05-08 20:15 917,504 --a------ C:\WINDOWS\system\cmids3d.dll
2007-05-08 20:15 754,624 --a------ C:\WINDOWS\system32\drivers\cmuda.sys
2007-05-08 20:15 712,704 --a------ C:\WINDOWS\system32\Audio3D.dll
2007-05-08 20:15 712,704 --a------ C:\WINDOWS\system32\a3d.dll
2007-05-08 20:15 7,040 -ra------ C:\WINDOWS\system32\ntsim.sys
2007-05-08 20:15 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-05-08 20:15 48,640 --a------ C:\WINDOWS\system32\drivers\stream.sys
2007-05-08 20:15 41,984 -ra------ C:\WINDOWS\system32\drivers\fetnd5b.sys
2007-05-08 20:15 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-05-08 20:15 32,768 --a------ C:\WINDOWS\system32\udaprop.dll
2007-05-08 20:15 28,672 --a------ C:\WINDOWS\system32\cmirmdrv.dll
2007-05-08 20:15 28,672 --a------ C:\WINDOWS\CMIRmDriver.dll
2007-05-08 20:15 266,240 --a------ C:\WINDOWS\CMIUninstall.exe
2007-05-08 20:15 233,472 --a------ C:\WINDOWS\system32\cmirmdrv.exe
2007-05-08 20:15 225,280 --a------ C:\WINDOWS\CmiRmRedundDir.exe
2007-05-08 20:15 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-05-08 20:15 140,928 --a------ C:\WINDOWS\system32\drivers\ks.sys
2007-05-08 20:15 110,592 --a------ C:\WINDOWS\system32\cmuda.dll
2007-05-08 20:15 1,454,080 --a------ C:\WINDOWS\system\SmWizard.exe
2007-05-08 20:15 <DIR> d-------- C:\WINDOWS\system32\ReinstallBackups
2007-05-08 20:15 <DIR> d-------- C:\Program Files\C-Media 3D Audio
2007-05-08 20:14 308,224 --a------ C:\WINDOWS\IsUn0413.exe
2007-05-08 20:12 77,824 -ra------ C:\WINDOWS\system32\nvsvc32.exe
2007-05-08 20:12 753,664 -ra------ C:\WINDOWS\system32\nwiz.exe
2007-05-08 20:12 65,536 -ra------ C:\WINDOWS\system32\nvrszht.dll
2007-05-08 20:12 65,536 -ra------ C:\WINDOWS\system32\nvrszhc.dll
2007-05-08 20:12 49,152 -ra------ C:\WINDOWS\system32\nvmctray.dll
2007-05-08 20:12 450,560 -ra------ C:\WINDOWS\system32\nvshell.dll
2007-05-08 20:12 4,323,968 -ra------ C:\WINDOWS\system32\nv4_disp.dll
2007-05-08 20:12 397,312 -ra------ C:\WINDOWS\system32\nvappbar.exe
2007-05-08 20:12 35,840 -ra------ C:\WINDOWS\system32\nvwddi.dll
2007-05-08 20:12 30,720 -ra------ C:\WINDOWS\system32\nvcodins.dll
2007-05-08 20:12 30,720 -ra------ C:\WINDOWS\system32\nvcod.dll
2007-05-08 20:12 3,551,232 -ra------ C:\WINDOWS\system32\nvoglnt.dll
2007-05-08 20:12 3,022,848 -ra------ C:\WINDOWS\system32\nvcpl.dll
2007-05-08 20:12 290,816 -ra------ C:\WINDOWS\system32\keystone.exe
2007-05-08 20:12 262,144 -ra------ C:\WINDOWS\system32\nvwrses.dll
2007-05-08 20:12 262,144 -ra------ C:\WINDOWS\system32\nvwrsel.dll
2007-05-08 20:12 253,952 -ra------ C:\WINDOWS\system32\nvwrspt.dll
2007-05-08 20:12 253,952 -ra------ C:\WINDOWS\system32\nvwrsesm.dll
2007-05-08 20:12 249,856 -ra------ C:\WINDOWS\system32\nvwrsru.dll
2007-05-08 20:12 249,856 -ra------ C:\WINDOWS\system32\nvwrsptb.dll
2007-05-08 20:12 249,856 -ra------ C:\WINDOWS\system32\nvwrsit.dll
2007-05-08 20:12 249,856 -ra------ C:\WINDOWS\system32\nvwrsfr.dll
2007-05-08 20:12 245,760 -ra------ C:\WINDOWS\system32\nvwrsnl.dll
2007-05-08 20:12 241,664 -ra------ C:\WINDOWS\system32\nvwrshu.dll
2007-05-08 20:12 241,664 -ra------ C:\WINDOWS\system32\nvwrsde.dll
2007-05-08 20:12 237,568 -ra------ C:\WINDOWS\system32\nvwrstr.dll
2007-05-08 20:12 237,568 -ra------ C:\WINDOWS\system32\nvwrsfi.dll
2007-05-08 20:12 233,472 -ra------ C:\WINDOWS\system32\nvwrsno.dll
2007-05-08 20:12 233,472 -ra------ C:\WINDOWS\system32\nvnt4cpl.dll
2007-05-08 20:12 229,376 -ra------ C:\WINDOWS\system32\nvwrssv.dll
2007-05-08 20:12 229,376 -ra------ C:\WINDOWS\system32\nvwrssl.dll
2007-05-08 20:12 229,376 -ra------ C:\WINDOWS\system32\nvwrssk.dll
2007-05-08 20:12 229,376 -ra------ C:\WINDOWS\system32\nvwrspl.dll
2007-05-08 20:12 229,376 -ra------ C:\WINDOWS\system32\nvwrsda.dll
2007-05-08 20:12 221,184 -ra------ C:\WINDOWS\system32\nvwrseng.dll
2007-05-08 20:12 221,184 -ra------ C:\WINDOWS\system32\nvwrsar.dll
2007-05-08 20:12 217,088 -ra------ C:\WINDOWS\system32\nvwrshe.dll
2007-05-08 20:12 217,088 -ra------ C:\WINDOWS\system32\nvwrscs.dll
2007-05-08 20:12 198,424 --a------ C:\WINDOWS\system32\iuengine.dll
2007-05-08 20:12 172,032 -ra------ C:\WINDOWS\system32\nvrsar.dll
2007-05-08 20:12 163,840 -ra------ C:\WINDOWS\system32\nvwrsja.dll
2007-05-08 20:12 163,840 -ra------ C:\WINDOWS\system32\nvrshe.dll
2007-05-08 20:12 151,552 -ra------ C:\WINDOWS\system32\nvwrsko.dll
2007-05-08 20:12 143,360 -ra------ C:\WINDOWS\system32\nvrsko.dll
2007-05-08 20:12 143,360 -ra------ C:\WINDOWS\system32\nvrsja.dll
2007-05-08 20:12 139,264 -ra------ C:\WINDOWS\system32\nvrsesm.dll
2007-05-08 20:12 135,168 -ra------ C:\WINDOWS\system32\nvrsit.dll
2007-05-08 20:12 135,168 -ra------ C:\WINDOWS\system32\nvrsfr.dll
2007-05-08 20:12 131,072 -ra------ C:\WINDOWS\system32\nvwrszht.dll
2007-05-08 20:12 131,072 -ra------ C:\WINDOWS\system32\nvrsptb.dll
2007-05-08 20:12 131,072 -ra------ C:\WINDOWS\system32\nvrsnl.dll
2007-05-08 20:12 131,072 -ra------ C:\WINDOWS\system32\nvrses.dll
2007-05-08 20:12 131,072 -ra------ C:\WINDOWS\system32\nvrsel.dll
2007-05-08 20:12 131,072 -ra------ C:\WINDOWS\system32\nvrsde.dll
2007-05-08 20:12 131,072 -ra------ C:\WINDOWS\system32\nvinstnt.dll
2007-05-08 20:12 126,976 -ra------ C:\WINDOWS\system32\nvwrszhc.dll
2007-05-08 20:12 126,976 -ra------ C:\WINDOWS\system32\nvrssl.dll
2007-05-08 20:12 126,976 -ra------ C:\WINDOWS\system32\nvrsru.dll
2007-05-08 20:12 126,976 -ra------ C:\WINDOWS\system32\nvrspt.dll
2007-05-08 20:12 122,880 -ra------ C:\WINDOWS\system32\nvrstr.dll
2007-05-08 20:12 122,880 -ra------ C:\WINDOWS\system32\nvrshu.dll
2007-05-08 20:12 122,880 -ra------ C:\WINDOWS\system32\nvrsda.dll
2007-05-08 20:12 118,784 -ra------ C:\WINDOWS\system32\nvrssv.dll
2007-05-08 20:12 118,784 -ra------ C:\WINDOWS\system32\nvrssk.dll
2007-05-08 20:12 118,784 -ra------ C:\WINDOWS\system32\nvrspl.dll
2007-05-08 20:12 118,784 -ra------ C:\WINDOWS\system32\nvrsno.dll
2007-05-08 20:12 118,784 -ra------ C:\WINDOWS\system32\nvrseng.dll
2007-05-08 20:12 114,688 -ra------ C:\WINDOWS\system32\nvrsfi.dll
2007-05-08 20:12 114,688 -ra------ C:\WINDOWS\system32\nvrscs.dll
2007-05-08 20:12 110,592 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-05-08 20:12 1,618,939 -ra------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-05-08 20:12 1,474,633 -ra------ C:\WINDOWS\system32\nvwdmcpl.dll
2007-05-08 20:12 1,175,552 -ra------ C:\WINDOWS\system32\nview.dll
2007-05-08 20:12 1,007,616 -ra------ C:\WINDOWS\system32\nviewimg.dll
2007-05-08 20:12 <DIR> d-------- C:\WINDOWS\nview
2007-05-08 20:12 <DIR> d-------- C:\Program Files\Common Files\InstallShield
2007-05-08 19:59 <DIR> d-------- C:\WINDOWS\pss
2007-05-08 19:57 3,407,872 --a------ C:\Documents and Settings\wouter\NTUSER.DAT
2007-05-08 19:57 3,407,872 --a------ C:\DOCUME~1\wouter\NTUSER.DAT
2007-05-08 19:57 <DIR> dr------- C:\Documents and Settings\wouter\Menu Start
2007-05-08 19:57 <DIR> dr------- C:\Documents and Settings\wouter\Favorieten
2007-05-08 19:57 <DIR> dr------- C:\DOCUME~1\wouter\Menu Start
2007-05-08 19:57 <DIR> dr------- C:\DOCUME~1\wouter\Favorieten
2007-05-08 19:57 <DIR> d--hs---- C:\WINDOWS\Installer
2007-05-08 19:57 <DIR> d--h----- C:\Documents and Settings\wouter\Sjablonen
2007-05-08 19:57 <DIR> d--h----- C:\Documents and Settings\wouter\Netwerkprinteromgeving
2007-05-08 19:57 <DIR> d--h----- C:\DOCUME~1\wouter\Sjablonen
2007-05-08 19:57 <DIR> d--h----- C:\DOCUME~1\wouter\Netwerkprinteromgeving
2007-05-08 19:57 <DIR> d-------- C:\Documents and Settings\wouter\Mijn documenten
2007-05-08 19:57 <DIR> d-------- C:\Documents and Settings\wouter\Bureaublad
2007-05-08 19:57 <DIR> d-------- C:\DOCUME~1\wouter\Mijn documenten
2007-05-08 19:57 <DIR> d-------- C:\DOCUME~1\wouter\Bureaublad
2007-05-08 19:49 786,432 --a------ C:\DOCUME~1\NETWOR~1\NTUSER.DAT
2007-05-08 19:49 786,432 --a------ C:\DOCUME~1\LOCALS~1\NTUSER.DAT
2007-05-08 19:49 <DIR> d--hs---- C:\System Volume Information
2007-05-08 19:46 229,376 ---h----- C:\DOCUME~1\DEFAUL~1\NTUSER.DAT
2007-05-08 19:46 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-05-08 19:46 0 -rahs---- C:\MSDOS.SYS
2007-05-08 19:46 0 -rahs---- C:\IO.SYS
2007-05-08 19:46 0 --a------ C:\CONFIG.SYS
2007-05-08 19:46 0 --a------ C:\AUTOEXEC.BAT
2007-05-08 19:46 <DIR> d-------- C:\WINDOWS\system32\xircom
2007-05-08 19:46 <DIR> d-------- C:\Program Files\microsoft frontpage
2007-05-08 19:45 <DIR> dr------- C:\WINDOWS\Offline Web Pages
2007-05-08 19:45 <DIR> d--hs---- C:\DOCUME~1\ALLUSE~1\DRM
2007-05-08 19:45 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files
2007-05-08 19:45 <DIR> d-------- C:\WINDOWS\system32\DirectX
2007-05-08 19:44 86,016 --a------ C:\WINDOWS\system32\isign32.dll
2007-05-08 19:44 81,920 --a------ C:\WINDOWS\system32\ils.dll
2007-05-08 19:44 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-05-08 19:44 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-05-08 19:44 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2007-05-08 19:44 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-05-08 19:44 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2007-05-08 19:44 67,584 --a------ C:\WINDOWS\system32\acctres.dll
2007-05-08 19:44 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-05-08 19:44 50,176 --a------ C:\WINDOWS\system32\inetres.dll
2007-05-08 19:44 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-05-08 19:44 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-05-08 19:44 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-05-08 19:44 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-05-08 19:44 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-05-08 19:44 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-05-08 19:44 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-05-08 19:44 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-05-08 19:44 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-05-08 19:44 278,528 --a------ C:\WINDOWS\system32\mstask.dll
2007-05-08 19:44 278,528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-05-08 19:44 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-05-08 19:44 241,152 --a------ C:\WINDOWS\system32\srrstr.dll
2007-05-08 19:44 192,000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-05-08 19:44 170,496 --a------ C:\WINDOWS\system32\srsvc.dll
2007-05-08 19:44 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-05-08 19:44 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-05-08 19:44 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-05-08 19:44 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2007-05-08 19:44 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-05-08 19:44 <DIR> d---s---- C:\WINDOWS\Tasks
2007-05-08 19:44 <DIR> d-------- C:\WINDOWS\system32\Restore
2007-05-08 19:44 <DIR> d-------- C:\WINDOWS\system32\Macromed
2007-05-08 19:44 <DIR> d-------- C:\WINDOWS\srchasst
2007-05-08 19:44 <DIR> d-------- C:\WINDOWS\PCHealth
2007-05-08 19:44 <DIR> d-------- C:\Program Files\Movie Maker
2007-05-08 19:44 <DIR> d-------- C:\Program Files\Common Files\MSSoap
2007-05-08 19:43 97,792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-05-08 19:43 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-05-08 19:43 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-05-08 19:43 9,728 --a------ C:\WINDOWS\system32\reset.exe
2007-05-08 19:43 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-05-08 19:43 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2007-05-08 19:43 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2007-05-08 19:43 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-05-08 19:43 662,528 --a------ C:\WINDOWS\system32\getuname.dll
2007-05-08 19:43 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2007-05-08 19:43 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-05-08 19:43 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-05-08 19:43 57,344 --a------ C:\WINDOWS\system32\sol.exe
2007-05-08 19:43 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-05-08 19:43 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2007-05-08 19:43 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2007-05-08 19:43 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2007-05-08 19:43 539,136 --a------ C:\WINDOWS\system32\spider.exe
2007-05-08 19:43 5,632 --a------ C:\WINDOWS\system32\write.exe
2007-05-08 19:43 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-05-08 19:43 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-05-08 19:43 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2007-05-08 19:43 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-05-08 19:43 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-05-08 19:43 352,768 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-05-08 19:43 35,840 --a------ C:\WINDOWS\system32\winchat.exe
2007-05-08 19:43 345,600 --a------ C:\WINDOWS\system32\mspaint.exe
2007-05-08 19:43 33,792 --a------ C:\WINDOWS\system32\regini.exe
2007-05-08 19:43 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-05-08 19:43 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-05-08 19:43 233,472 --a------ C:\WINDOWS\system32\avtapi.dll
2007-05-08 19:43 23,040 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-05-08 19:43 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-05-08 19:43 22,016 --a------ C:\WINDOWS\system32\msg.exe
2007-05-08 19:43 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-05-08 19:43 21,748 --a------ C:\WINDOWS\system32\emptyregdb.dat
2007-05-08 19:43 20,480 --a------ C:\WINDOWS\system32\qprocess.exe
2007-05-08 19:43 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-05-08 19:43 188,928 --a------ C:\WINDOWS\system32\cmprops.dll
2007-05-08 19:43 187,392 --a------ C:\WINDOWS\system32\accwiz.exe
2007-05-08 19:43 17,920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-05-08 19:43 17,920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-05-08 19:43 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-05-08 19:43 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-05-08 19:43 16,384 --a------ C:\WINDOWS\system32\tskill.exe
2007-05-08 19:43 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-05-08 19:43 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-05-08 19:43 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-05-08 19:43 15,360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-05-08 19:43 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2007-05-08 19:43 15,360 --a------ C:\WINDOWS\system32\shadow.exe
2007-05-08 19:43 15,360 --a------ C:\WINDOWS\system32\logoff.exe
2007-05-08 19:43 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-05-08 19:43 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-05-08 19:43 132,608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-05-08 19:43 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-05-08 19:43 125,208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-05-08 19:43 124,416 --a------ C:\WINDOWS\system32\mplay32.exe
2007-05-08 19:43 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-05-08 19:43 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2007-05-08 19:43 114,688 --a------ C:\WINDOWS\system32\calc.exe
2007-05-08 19:43 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-05-08 19:43 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-05-08 19:43 104,448 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-05-08 19:43 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-05-08 19:43 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-05-08 19:43 <DIR> d--h----- C:\Program Files\WindowsUpdate
2007-05-08 19:43 <DIR> d-------- C:\WINDOWS\Registration
2007-05-08 19:43 <DIR> d-------- C:\Program Files\Windows NT
2007-05-08 19:43 <DIR> d-------- C:\Program Files\Online Services
2007-05-08 19:43 <DIR> d-------- C:\Program Files\MSN Gaming Zone
2007-05-08 19:43 <DIR> d-------- C:\Program Files\Messenger
2007-05-08 19:42 94,208 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-05-08 19:42 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-05-08 19:42 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-05-08 19:42 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-05-08 19:42 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-05-08 19:42 61,440 --a------ C:\WINDOWS\system32\remotepg.dll
2007-05-08 19:42 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-05-08 19:42 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-05-08 19:42 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-05-08 19:42 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-05-08 19:42 412,160 --a------ C:\WINDOWS\system32\mstsc.exe
2007-05-08 19:42 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-05-08 19:42 39,424 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-05-08 19:42 297,472 --a------ C:\WINDOWS\system32\termsrv.dll
2007-05-08 19:42 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2007-05-08 19:42 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-05-08 19:42 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-05-08 19:42 142,336 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-05-08 19:42 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-05-08 19:42 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-05-08 19:42 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-05-08 19:42 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-05-08 19:42 <DIR> d-------- C:\WINDOWS\system32\MsDtc
2007-05-08 19:42 <DIR> d-------- C:\WINDOWS\system32\Com


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-05-10 16:14:38 54,262 ----a-w C:\WINDOWS\system32\perfc013.dat
2007-05-10 16:14:38 367,234 ----a-w C:\WINDOWS\system32\perfh013.dat
2007-04-18 16:15:26 2,854,400 ----a-w

C:\WINDOWS\system32\msi.dll
2007-03-17 13:45:54 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll
2007-03-08 15:39:10 579,072 ----a-w C:\WINDOWS\system32\user32.dll
2007-03-08 15:39:10 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
2007-03-08 15:39:10 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll
2007-03-08 15:37:59 1,843,712 ----a-w C:\WINDOWS\system32\win32k.sys
2004-08-03 23:03:36 12,288 --sh--w C:\WINDOWS\system32\regsvr32.exe
2004-08-03 23:03:24 50,688 --sh--w C:\WINDOWS\twain_32.dll
2004-08-03 23:03:20 83,456 --sh--w C:\WINDOWS\system32\olepro32.dll
2004-08-03 23:03:20 553,472 --sh--w C:\WINDOWS\system32\oleaut32.dll
2004-08-03 23:03:18 54,784 --sh--w C:\WINDOWS\system32\msvcirt.dll
2004-08-03 23:03:18 413,696 --sh--w C:\WINDOWS\system32\msvcp60.dll
2004-08-03 23:03:18 343,040 --sh--w C:\WINDOWS\system32\msvcrt.dll
2004-08-03 23:03:14 1,028,096 --sh--w C:\WINDOWS\system32\mfc42.dll
2003-04-08 12:00:00 94,784 --sh--w C:\WINDOWS\twain.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 00:48]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-05-08 20:52]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:03]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [2006-10-27 00:48]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^OKI LPR Utility.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\OKI LPR Utility.lnk
backup=C:\WINDOWS\pss\OKI LPR Utility.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
"C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BigDogPath]
C:\WINDOWS\VM_STI.EXE ZSMC USB PC Camera

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CM-SmWizard]
C:\WINDOWS\System\SmWizard.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio]
RunDll32 cmicnfg.cpl,CMICtrlWnd

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
"C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ScreenManager Pro for LCD]
C:\Program Files\EIZO\ScreenManager Pro for LCD\Lcdctrl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Share-to-Web Namespace Daemon]
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"NVSvc"=2 (0x2)
"iPod Service"=3 (0x3)
"usnjsvc"=3 (0x3)
"sdCoreService"=3 (0x3)
"sdAuxService"=3 (0x3)
"ose"=3 (0x3)
"odserv"=3 (0x3)
"Microsoft Office Groove Audit Service"=3 (0x3)
"AVG Anti-Spyware Guard"=2 (0x2)
"ServiceLayer"=3 (0x3)

*Newly Created Service* -PROCEXP90
*Newly Created Service* -XTRAPD12


~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

backup-20070524-221000-222
O20 - Winlogon Notify: winbjt32 - winbjt32.dll (file missing)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winbjt32]
"Asynchronous"=dword:00000001
"DllName"="winbjt32.dll"
"Impersonate"=dword:00000000
"Startup"="EvtStartup"
"Shutdown"="EvtShutdown"



backup-20070524-221000-233
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

backup-20070524-221000-408
O2 - BHO: (no name) - {EBBF364B-ABBC-42F6-89EF-B0C685362665} - C:\WINDOWS\system32\ddaya.dll (file missing)

backup-20070524-220959-681
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
********************************************************************

catchme 0.3.681 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-28 10:02:04
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0


********************************************************************

Completion time: 2007-05-28 10:02:38
C:\ComboFix-quarantined-files.txt ... 2007-05-28 10:02

--- E O F ---

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:03:59, on 28-5-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\explorer.exe
F:\Wouter\Mijn downloads\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\wouter\Menu Start\Programma's\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1178649243218
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://sbs.orbolabels.be/Remote/msrdp.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 5039 bytes


moest wel al die post nemen want het kon niet al in een

En vindt hij nog steeds die bestanden? Zoja, kan je de locatie van die bestanden even posten?

Zijn gewoon cookies, laat ATF cleaner eens runnen in veilige modus.

ok en voor de rest is er niets meer ?