[OPGELOST] online computer scan

[honk]

ComboFix 09-02-02.04 - hendrik 2009-02-03 17:09:37.4 - NTFSx86

Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1043.18.3070.2120 [GMT 1:00]

Gestart vanuit: d:\documenten hendrik\Programma's\ComboFix.exe

gebruikte Opdracht switches :: c:\users\hendrik\Desktop\CFScript.txt..txt

AV: BullGuard Antivirus *On-access scanning disabled* (Outdated)

FW: BullGuard Firewall *enabled*

* Nieuw herstelpunt werd aangemaakt

FILE ::

c:\windows\f5667t5.dat

c:\windows\pp1.exe

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86\DIFxAPI.dll

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86\DifXInstall32.exe

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86\GEARAspiWDM.inf

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86\gearaspiwdmx86.cat

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86\x86\GEARAspi.dll

c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86\x86\GEARAspiWDM.sys

c:\windows\f5667t5.dat

c:\windows\pp1.exe

.

(((((((((((((((((((( Bestanden Gemaakt van 2009-01-03 to 2009-02-03 ))))))))))))))))))))))))))))))

.

2009-02-02 17:59 . 2009-02-02 19:10 47 --a------ c:\windows\System32\bad_packet

2009-02-02 17:58 . 2009-02-02 19:02 3,474 --a------ c:\windows\System32\nodes.txt.tmp

2009-01-31 21:15 . 2009-01-31 21:15 <DIR> d-------- c:\program files\Windows Live SkyDrive

2009-01-31 21:15 . 2009-01-31 21:17 <DIR> d-------- c:\program files\Microsoft

2009-01-31 21:04 . 2009-02-03 16:58 <DIR> d-------- c:\users\hendrik\Tracing

2009-01-31 20:42 . 2009-01-31 20:42 <DIR> d-------- c:\program files\Microsoft SQL Server Compact Edition

2009-01-31 20:42 . 2006-11-29 13:06 3,426,072 --a------ c:\windows\System32\d3dx9_32.dll

2009-01-31 20:42 . 2009-01-31 20:42 712,704 --a------ c:\windows\System32\WindowsCodecs.dll

2009-01-31 20:42 . 2009-01-31 20:42 347,648 --a------ c:\windows\System32\WindowsCodecsExt.dll

2009-01-31 20:34 . 2009-01-31 20:34 <DIR> d-------- c:\program files\Common Files\Windows Live

2009-01-31 19:23 . 2009-01-31 19:23 <DIR> d-------- c:\users\hendrik\AppData\Roaming\Malwarebytes

2009-01-31 19:23 . 2009-01-31 19:23 <DIR> d-------- c:\users\All Users\Malwarebytes

2009-01-31 19:23 . 2009-01-31 19:23 <DIR> d-------- c:\programdata\Malwarebytes

2009-01-31 19:23 . 2009-01-31 19:23 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-01-31 19:23 . 2009-01-14 16:11 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys

2009-01-31 19:23 . 2009-01-14 16:11 15,504 --a------ c:\windows\System32\drivers\mbam.sys

2009-01-30 17:58 . 2009-01-30 17:58 <DIR> d-------- c:\program files\Mixxx

2009-01-23 16:28 . 2009-01-23 16:28 55,504 --a------ c:\windows\System32\drivers\BdFileSpy.sys

2009-01-20 20:06 . 2009-02-02 19:21 <DIR> d-------- c:\users\hendrik\AppData\Roaming\FrostWire

2009-01-20 20:04 . 2009-01-20 20:06 <DIR> d-------- c:\program files\FrostWire

2009-01-18 15:38 . 2009-01-18 15:38 <DIR> d-------- C:\Westwood

2009-01-17 14:27 . 2009-01-17 14:27 <DIR> d-------- C:\.jagex_cache_32

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-02-03 16:01 --------- d-----w c:\programdata\BullGuard

2009-02-03 15:58 27,525 ----a-w c:\users\hendrik\AppData\Roaming\nvModes.dat

2009-01-31 20:16 --------- d-----w c:\program files\Windows Live

2009-01-20 19:05 --------- d-----w c:\program files\LimeWire

2009-01-20 18:28 --------- d-----w c:\users\hendrik\AppData\Roaming\LimeWire

2009-01-17 13:28 34 ----a-w c:\users\hendrik\jagex_runescape_preferences.dat

2008-12-15 14:39 --------- d-----w c:\users\hendrik\AppData\Roaming\BullGuard

2008-12-12 17:13 --------- d-----w c:\programdata\Avanquest Bluetooth SDK

2008-12-12 17:00 --------- d-----w c:\program files\Avanquest update

2008-12-12 16:57 --------- d--h--w c:\program files\InstallShield Installation Information

2008-12-12 16:57 --------- d-----w c:\programdata\BVRP Software

2008-12-12 15:56 --------- d-----w c:\programdata\Sony Ericsson

2008-12-12 15:56 --------- d-----w c:\program files\Sony Ericsson

2008-12-10 17:37 --------- d-----w c:\program files\iTunes

2008-12-10 17:36 --------- d-----w c:\program files\iPod

2008-12-10 17:36 --------- d-----w c:\program files\Common Files\Apple

2008-12-10 17:35 --------- d-----w c:\program files\Bonjour

2008-12-10 17:34 --------- d-----w c:\program files\QuickTime

2008-12-07 12:41 --------- d-----w c:\users\hendrik\AppData\Roaming\Sony

2008-12-07 12:41 --------- d-----w c:\programdata\Sony

2008-12-07 12:34 --------- d-----w c:\program files\Sony

2008-12-04 23:31 308,584 ----a-w c:\windows\WLXPGSS.SCR

2008-12-03 20:16 --------- d-----w c:\program files\Vstep

2008-12-03 20:13 --------- d-----w c:\program files\Kellogg's

2008-12-03 13:49 --------- d-----w c:\program files\Java

2008-07-30 21:51 0 ----a-w c:\users\hendrik\AppData\Roaming\wklnhst.dat

2008-07-16 13:26 174 --sha-w c:\program files\desktop.ini

2008-07-15 18:13 0 ---h--w c:\users\All Users\PKP_DLdu.DAT

2008-07-15 18:13 0 ---h--w c:\programdata\PKP_DLdu.DAT

2008-07-25 17:24 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

2008-07-25 17:24 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

2008-07-25 17:24 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

.

((((((((((((((((((((((((((((( snapshot_2009-02-02_22.29.09,40 )))))))))))))))))))))))))))))))))))))))))

.

- 2005-10-20 12:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE

+ 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE

- 2009-02-02 18:22:55 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2009-02-03 15:58:26 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

- 2009-02-02 18:22:55 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2009-02-03 15:58:26 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2009-02-02 18:25:20 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT

+ 2009-02-03 15:59:45 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT

+ 2009-02-03 15:59:45 262,144 ---ha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat.LOG1

- 2009-02-02 18:25:14 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT

+ 2009-02-03 15:59:51 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT

+ 2009-02-03 15:59:51 262,144 ---ha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1

- 2009-02-02 18:24:42 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2009-02-03 16:00:05 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

- 2009-02-02 18:24:42 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2009-02-03 16:00:05 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-02-02 18:24:42 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2009-02-03 16:00:05 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2009-02-02 21:27:20 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat

+ 2009-02-03 16:09:16 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat

- 2009-02-02 18:26:07 7,642 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3214536521-4072128669-3750770202-1000_UserData.bin

+ 2009-02-03 16:00:12 7,642 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3214536521-4072128669-3750770202-1000_UserData.bin

- 2009-02-02 18:26:06 77,988 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin

+ 2009-02-03 16:00:12 78,020 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin

- 2009-02-02 18:26:05 44,374 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2009-02-03 16:00:11 44,382 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin

- 2009-02-02 15:53:01 269,856 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin

+ 2009-02-03 16:11:53 270,364 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-04-14 1232896]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]

"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2009-01-23 304464]

"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2008-12-02 3882312]

"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 360448]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-11-08 86016]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-08 8462336]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-08 81920]

"MGSysCtrl"="c:\program files\System Control Manager\MGSysCtrl.exe" [2008-03-14 561152]

"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2009-01-23 304464]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-03 136600]

"BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-11-24 622592]

"ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2006-07-19 65536]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]

"RtHDVCpl"="RtHDVCpl.exe" [2007-11-08 c:\windows\RtHDVCpl.exe]

c:\users\hendrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

aveosti.exe.lnk - c:\program files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe [2008-04-14 28672]

Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2007-02-27 2756608]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"msacm.clmp3enc"= c:\progra~1\CYBERL~1\Power2Go\CLMP3Enc.ACM

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BgMainSvc]

@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{239FA296-4E8B-476F-863E-79A4978EC950}"= c:\program files\CyberLink\PowerDirector Express\PDX.EXE:CyberLink PowerDirector Express

"{40E9D768-04BB-4A17-B090-9921DAC59E4F}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote

"{875C8622-8B9E-4A5E-A484-E4E0554AC6D1}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote

"TCP Query User{F4CA5235-B03C-4B04-81FC-19D32B817214}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire

"UDP Query User{5B71AA69-59F8-4F5E-AA14-2E93BFB20BD9}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire

"TCP Query User{282AE276-98E3-4A7D-BB93-F12701AC1A77}d:\\documenten hendrik\\et.exe"= UDP:d:\documenten hendrik\et.exe:ET

"UDP Query User{1AD21FE0-E37C-4077-B299-63E752B06299}d:\\documenten hendrik\\et.exe"= TCP:d:\documenten hendrik\et.exe:ET

"TCP Query User{356DB3F7-7E10-442D-B775-F31A2F76A43E}d:\\documenten hendrik\\programma's\\wet\\et.exe"= UDP:d:\documenten hendrik\programma's\wet\et.exe:ET

"UDP Query User{1647553D-4DD4-4811-AC24-9FCFEBD19A8C}d:\\documenten hendrik\\programma's\\wet\\et.exe"= TCP:d:\documenten hendrik\programma's\wet\et.exe:ET

"{760A0F79-3C8D-486A-8233-867820454F3E}"= UDP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:Sony Ericsson Media Manager 1.1

"{638546E7-2F5F-49B7-9C52-0F56222A868F}"= TCP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:Sony Ericsson Media Manager 1.1

"{E8959A03-5D35-486C-BC26-850D922E3E2E}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{49A45A45-6EB8-40BF-A963-B214B8BE3A8D}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{8C19DEF8-E580-4D45-847D-09FCAB020D73}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes

"{905AA0AB-8928-43A6-9CBA-84A1555838A1}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes

"TCP Query User{8D2976B0-F416-461F-9039-612B8F493768}c:\\program files\\frostwire\\frostwire.exe"= UDP:c:\program files\frostwire\frostwire.exe:FrostWire

"UDP Query User{850EF4FC-3BC5-441B-BFDC-3B333DED20F6}c:\\program files\\frostwire\\frostwire.exe"= TCP:c:\program files\frostwire\frostwire.exe:FrostWire

"{960D7CDF-D5D6-49EB-94A7-5CAC4A2EE957}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]

"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

R0 Si3531;SiI-3531 SATA Controller;c:\windows\System32\drivers\Si3531.sys [2008-04-14 210224]

R1 afw;Agnitum Firewall Driver;c:\windows\System32\drivers\Afw.sys [2007-11-28 28696]

R2 BdFileSpy;BullGuard File Monitor Driver;c:\windows\System32\drivers\BdFileSpy.sys [2009-01-23 55504]

R2 BsFileScan;BullGuard File Scan Service;c:\windows\System32\svchost.exe -k BullGuard [2006-11-02 22016]

R2 BsFire;BullGuard Firewall Service;c:\windows\System32\svchost.exe -k BullGuard [2006-11-02 22016]

R2 BsMailProxy;BullGuard Email Monitoring Service;c:\windows\System32\svchost.exe -k BullGuard [2006-11-02 22016]

R2 eID CRL Service;eID CRL Service;c:\windows\System32\beidservicecrl.exe [2007-02-19 225280]

R2 NishService;SCM Driver Daemon;c:\program files\System Control Manager\edd.exe [2008-04-14 61440]

R3 AfwCore;Agnitum Firewall Core Driver;c:\windows\System32\drivers\AfwCore.sys [2008-11-08 263192]

R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [2008-04-14 32256]

R3 MGHwCtrl;MGHwCtrl;c:\windows\System32\drivers\MGHwCtrl.sys [2008-04-14 19456]

R3 Reconn;BullGuard Email Monitor;c:\program files\BullGuard Ltd\BullGuard\Reconn.sys [2007-10-29 16984]

S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\System32\drivers\a38usbxp.sys [2004-04-30 24832]

S3 eID Privacy Service;eID Privacy Service;c:\windows\System32\beidservicepcsc.exe [2007-02-19 331776]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

BullGuard REG_MULTI_SZ BgMainSvc BsFileScan BsMailProxy BsFire

.

- - - - ORPHANS VERWIJDERD - - - -

HKLM-Run-pp - c:\windows\pp1.exe

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.hln.be/

uInternet Settings,ProxyOverride = *.local

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

DPF: {5D80A6D1-B500-47DA-82B8-EB9875F85B4D} - hxxp://dl.google.com/dl/desktop/nv/GoogleGadgetPluginIEWin.cab

FF - ProfilePath - c:\users\hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\gkvdumvx.default\

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-02-03 17:12:27

Windows 6.0.6000 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

c:\users\hendrik\AppData\Local\Temp\catchme.dll 53248 bytes executable

Scan succesvol afgerond

verborgen bestanden: 1

**************************************************************************

.

Voltooingstijd: 2009-02-03 17:14:32

ComboFix-quarantined-files.txt 2009-02-03 16:14:30

ComboFix2.txt 2009-02-02 21:30:14

ComboFix3.txt 2009-02-01 12:37:45

ComboFix4.txt 2009-01-31 22:50:21

Pre-Run: 9.962.070.016 bytes beschikbaar

Post-Run: 9,825,370,112 bytes beschikbaar

222 --- E O F --- 2008-07-16 13:03:04

[kape]

En hoe staat het nu met de foutmeldingen ?

[honk]

tot nu toe nog helemaal niets gemerkt =) wanneer het er toch eens zou opkomen dan verwittig ik je direkt...

mvg, honk en ZEER bedankt

[honk]

tot nu toe nog helemaal niets gemerkt =) wanneer het er toch eens zou opkomen dan verwittig ik je direkt...

mvg, honk en ZEER bedankt

en indien alles OK is en niets meer merk van het virus, dan scan ik mijn computer nog eens volledig met mijn antivirus en daarna nog eens met Malwarebytes'

[kape]

Prima ... maar doe dit nog eerst eventjes om alle resten van de besmetting op te ruimen en Combofix te verwijderen.

Verwijder Combofix: Start -> Uitvoeren en typ: combofix /u

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Download CCleaner.

Installeer het en start CCleaner op. Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Opschonen'. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”. Sluit hierna CCleaner terug af.

Het is aangewezen om de bestaande herstelpunten te verwijderen (daar zitten besmette herstelpunten tussen die je eventueel zou kunnen terugzetten) door systeemherstel tijdelijk uit te schakelen. Doe dit via Start -> Configuratiescherm -> Systeem -> Systeemherstel -> "Systeemherstel op alle stations uitschakelen" aanvinken. Toepassen en OK. PC herstarten en het vinkje terug weg halen.

That's it !

[honk]

Systeemherstel -> "Systeemherstel op alle stations uitschakeleno

deze vind in niet vista...

[kape]

OH, ja ... was Vista.

In Vista : via Configuratiescherm -> Systeem en Onderhoud -> Systeem -> tabblad "Systeembeveiliging" -> vinkje weghalen bij de schijf waarvan je de herstelpunten wil verwijderen -> klikken op "toepassen".

Dan krijg je de schermmelding “Weet u zeker dat u systeemherstel wil uitschakelen”. Klik hier op “Systeemherstel uitschakelen”. Dan zijn alle herstelpunten verwijderd op de aangeduide schijf.

Zet daarna opnieuw een vinkje bij de harde schijf. Maak meteen ook een nieuw herstelpunt, zodat je niet hoeft te wachten op een automatisch herstelpunt van het systeem.

[honk]

Dank U ! Nu ga ik als afsluiter men computer nog 2x scannen met antivirus en Anti Malware.

Mvg, honk