NOD32 -> probably a variant of Genetik trojan

[Anoniem2]

Ik heb NOD32 geïnstalleerd nadat AVG Free me ook op deze trojan wees.\r\nIk krijg nu dus telkens pop-ups van NOD32 dat hij deze threat heeft. Het zit telkens in objecten in de TEMP dir van Windows.\r\nIs er een manier om van die trojan af te komen? :cry: ik wil mijn laptop graag virus/trojan vrij hebben!\r\nZou dit ook de reden kunnen zijn dat explorer.exe regelmatig vastloopt? (is sinds ik sp1 voor vista heb geinstalleerd)\r\n\r\nik zie onder andere rk.bin als bestand en ossproxy.exe voorbijkomen

[Anoniem2]

Temp???\nPlaats eens een HiJackThis...\nWeet je hoe dat moet?

[Anoniem2]

Nee, ik heb die term hijack wel voorbij zien komen maar geen idee hoe of wat...\nkan het wel zo zijn dat een scan van NOD32 geen virus tegenkomt?\n\nhmmm gedownload en dit kwam eruit.. zoiets?\n\nLogfile of Trend Micro HijackThis v2.0.2\nScan saved at 22:41:27, on 27-5-2008\nPlatform: Windows Vista SP1 (WinNT 6.00.1905)\nMSIE: Internet Explorer v7.00 (7.00.6001.18000)\nBoot mode: Normal\n\nRunning processes:\nC:\\Windows\\system32\\Dwm.exe\nC:\\Windows\\system32\\taskeng.exe\nC:\\Windows\\Explorer.EXE\nC:\\Windows\\RtHDVCpl.exe\nC:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe\nC:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe\nC:\\Program Files\\Launch Manager\\LaunchAp.exe\nC:\\Program Files\\Launch Manager\\HotkeyApp.exe\nC:\\Program Files\\Launch Manager\\OSDCtrl.exe\nC:\\Program Files\\Launch Manager\\WButton.exe\nC:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe\nC:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe\nC:\\Program Files\\Sony Ericsson\\Mobile2\\Application Launcher\\Application Launcher.exe\nC:\\Windows\\PixArt\\Pac207\\Monitor.exe\nC:\\Program Files\\QuickTime\\qttask.exe\nC:\\Program Files\\Creative\\Creative ZEN\\ZEN Media Explorer\\CTCheck.exe\nC:\\Windows\\System32\\rundll32.exe\nC:\\Windows\\WindowsMobile\\wmdc.exe\nC:\\Program Files\\ESET\\ESET Smart Security\\egui.exe\nC:\\Windows\\ehome\\ehtray.exe\nC:\\Windows\\ehome\\ehmsas.exe\nC:\\Program Files\\Common Files\\Teleca Shared\\Generic.exe\nC:\\Program Files\\Sony Ericsson\\Mobile2\\Mobile Phone Monitor\\epmworker.exe\nC:\\Program Files\\Windows Sidebar\\sidebar.exe\nC:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\nC:\\Program Files\\Windows Sidebar\\sidebar.exe\nC:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\nC:\\Program Files\\Creative\\Sync Manager Unicode\\CTSyncU.exe\nC:\\Program Files\\Logitech\\SetPoint\\SetPoint.exe\nC:\\Program Files\\MagicDisc\\MagicDisc.exe\nC:\\Program Files\\Microsoft Office\\Office12\\ONENOTEM.EXE\nC:\\Acer\\Empowering Technology\\ENET\\ENMTRAY.EXE\nC:\\Acer\\Empowering Technology\\EPOWER\\EPOWER_DMC.EXE\nC:\\Acer\\Empowering Technology\\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE\nC:\\Program Files\\Common Files\\Ahead\\Lib\\NMIndexStoreSvr.exe\nC:\\Acer\\Empowering Technology\\eRecovery\\ERAGENT.EXE\nC:\\Program Files\\Common Files\\Logitech\\khalshared\\KHALMNPR.EXE\nC:\\Program Files\\Mozilla Firefox\\firefox.exe\nC:\\Program Files\\Trend Micro\\HijackThis\\HijackThis.exe\nC:\\Windows\\system32\\SearchFilterHost.exe

[Anoniem2]

Ga naar:\n\n[url]http://www.downloadstad.nl/download/HijackThis.html[/url]\nDownload en start.\nKlik op do a systen scan en zorg dat ie de log opslaat.\nPlaats die even hier.\nHet kan zijn dat het niet in 1 bericht past.\n\nHiJackThis:\nHJT is een programma dat laat zien wat er allemaal draait op de computer.\nPlaatst hem anders ff in het HiJackThis log theard die door modje aangemaakt is.\n\n[url]http://forum.computeridee.nl/showthread.php?t=38821[/url]\n\nVeel Suc6 (Y)

[Anoniem2]

R1 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = [url]http://uk.rd.yahoo.com/customize/ycomp/defaults/sp/*http://uk.yahoo.com[/url]\nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = [url]http://nl.intl.acer.yahoo.com/[/url]\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = [url]http://nl.intl.acer.yahoo.com[/url]\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = [url]http://go.microsoft.com/fwlink/?LinkId=54896[/url]\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = [url]http://go.microsoft.com/fwlink/?LinkId=54896[/url]\nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = [url]http://nl.intl.acer.yahoo.com[/url]\nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,SearchAssistant = \nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,CustomizeSearch = \nR1 - HKCU\\Software\\Microsoft\\Internet Explorer\\SearchURL,(Default) = [url]http://uk.rd.yahoo.com/customize/ycomp/defaults/su/*http://uk.yahoo.com[/url]\nR1 - HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings,ProxyOverride = *.local\nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = \nR3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)\nO1 - Hosts: ::1 localhost\nO2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll\nO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\\Program Files\\AVG\\AVG8\\avgssie.dll (file missing)\nO2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\\Program Files\\Microsoft Office\\Office12\\GrooveShellExtensions.dll\nO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll\nO2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)\nO2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\\Windows\\system32\\ActiveToolBand.dll\nO2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\\Program Files\\Common Files\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll\nO3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\\Windows\\system32\\eDStoolbar.dll\nO4 - HKLM\\..\\Run: [RtHDVCpl] RtHDVCpl.exe\nO4 - HKLM\\..\\Run: [SynTPEnh] C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe\nO4 - HKLM\\..\\Run: [eDataSecurity Loader] C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe\nO4 - HKLM\\..\\Run: [LaunchAp] \"C:\\Program Files\\Launch Manager\\LaunchAp.exe\"\nO4 - HKLM\\..\\Run: [PowerKey] \"C:\\Program Files\\Launch Manager\\PowerKey.exe\"\nO4 - HKLM\\..\\Run: [LManager] \"C:\\Program Files\\Launch Manager\\HotkeyApp.exe\"\nO4 - HKLM\\..\\Run: [LMgrOSD] \"C:\\Program Files\\Launch Manager\\OSDCtrl.exe\"\nO4 - HKLM\\..\\Run: [Wbutton] \"C:\\Program Files\\Launch Manager\\Wbutton.exe\"\nO4 - HKLM\\..\\Run: [WarReg_PopUp] C:\\Acer\\WR_PopUp\\WarReg_PopUp.exe\nO4 - HKLM\\..\\Run: [GrooveMonitor] \"C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe\"\nO4 - HKLM\\..\\Run: [SunJavaUpdateSched] \"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe\"\nO4 - HKLM\\..\\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE\nO4 - HKLM\\..\\Run: [Sony Ericsson PC Suite] \"C:\\Program Files\\Sony Ericsson\\Mobile2\\Application Launcher\\Application Launcher.exe\" /startoptions\nO4 - HKLM\\..\\Run: [Monitor] C:\\Windows\\PixArt\\PAC207\\Monitor.exe\nO4 - HKLM\\..\\Run: [Windows Defender] %ProgramFiles%\\Windows Defender\\MSASCui.exe -hide\nO4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime\nO4 - HKLM\\..\\Run: [NeroFilterCheck] C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe\nO4 - HKLM\\..\\Run: [Acer Tour Reminder] C:\\Acer\\AcerTour\\Reminder.exe\nO4 - HKLM\\..\\Run: [Adobe Reader Speed Launcher] \"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\"\nO4 - HKLM\\..\\Run: [NvSvc] RUNDLL32.EXE C:\\Windows\\system32\\nvsvc.dll,nvsvcStart\nO4 - HKLM\\..\\Run: [NvCplDaemon] RUNDLL32.EXE C:\\Windows\\system32\\NvCpl.dll,NvStartup\nO4 - HKLM\\..\\Run: [NvMediaCenter] RUNDLL32.EXE C:\\Windows\\system32\\NvMcTray.dll,NvTaskbarInit\nO4 - HKLM\\..\\Run: [CTCheck] C:\\Program Files\\Creative\\Creative ZEN\\ZEN Media Explorer\\CTCheck.exe\nO4 - HKLM\\..\\Run: [Windows Mobile Device Center] %windir%\\WindowsMobile\\wmdc.exe\nO4 - HKLM\\..\\Run: [egui] \"C:\\Program Files\\ESET\\ESET Smart Security\\egui.exe\" /hide /waitservice\nO4 - HKCU\\..\\Run: [ehTray.exe] C:\\Windows\\ehome\\ehTray.exe\nO4 - HKCU\\..\\Run: [Sidebar] C:\\Program Files\\Windows Sidebar\\sidebar.exe /autoRun\nO4 - HKCU\\..\\Run: [msnmsgr] \"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\" /background\nO4 - HKCU\\..\\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] \"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\"\nO4 - HKCU\\..\\Run: [IMC] C:\\Program Files\\FriendFinder\\FriendFinder Messenger 4\\imc.exe\nO4 - HKCU\\..\\Run: [CTSyncU.exe] \"C:\\Program Files\\Creative\\Sync Manager Unicode\\CTSyncU.exe\"\nO4 - HKUS\\S-1-5-19\\..\\Run: [Sidebar] %ProgramFiles%\\Windows Sidebar\\Sidebar.exe /detectMem (User \'LOCAL SERVICE\')\nO4 - HKUS\\S-1-5-19\\..\\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User \'LOCAL SERVICE\')\nO4 - HKUS\\S-1-5-20\\..\\Run: [Sidebar] %ProgramFiles%\\Windows Sidebar\\Sidebar.exe /detectMem (User \'NETWORK SERVICE\')\nO4 - Startup: MagicDisc.lnk = C:\\Program Files\\MagicDisc\\MagicDisc.exe\nO4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\\Program Files\\Microsoft Office\\Office12\\ONENOTEM.EXE\nO4 - Global Startup: Adobe Acrobat Snelle start.lnk = ?\nO4 - Global Startup: Empowering Technology Launcher.lnk = C:\\Acer\\Empowering Technology\\eAPLauncher.exe\nO4 - Global Startup: Logitech SetPoint.lnk = ?\nO8 - Extra context menu item: Converteren naar bestaand PDF-bestand - res://C:\\Program Files\\Adobe\\Acrobat 7.0\\Acrobat\\AcroIEFavClient.dll/AcroIEAppend.html\nO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\\PROGRA~1\\MICROS~2\\Office12\\EXCEL.EXE/3000\nO8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\\PROGRA~1\\MICROS~2\\Office12\\EXCEL.EXE/3000\nO8 - Extra context menu item: Geselecteerde koppelingen converteren naar bestaand PDF-bestand - res://C:\\Program Files\\Adobe\\Acrobat 7.0\\Acrobat\\AcroIEFavClient.dll/AcroIEAppendSelLinks.html\nO8 - Extra context menu item: Koppelingdoel converteren naar Adobe PDF - res://C:\\Program Files\\Adobe\\Acrobat 7.0\\Acrobat\\AcroIEFavClient.dll/AcroIECapture.html\nO8 - Extra context menu item: Koppelingdoel converteren naar bestaand PDF-bestand - res://C:\\Program Files\\Adobe\\Acrobat 7.0\\Acrobat\\AcroIEFavClient.dll/AcroIEAppend.html\nO8 - Extra context menu item: Selectie converteren naar bestaand PDF-bestand - res://C:\\Program Files\\Adobe\\Acrobat 7.0\\Acrobat\\AcroIEFavClient.dll/AcroIEAppend.html\nO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll\nO9 - Extra \'Tools\' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll\nO9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\\PROGRA~1\\MICROS~2\\Office12\\ONBttnIE.dll\nO9 - Extra \'Tools\' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\\PROGRA~1\\MICROS~2\\Office12\\ONBttnIE.dll\nO9 - Extra button: @C:\\Windows\\WindowsMobile\\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\\Windows\\WindowsMobile\\INetRepl.dll\nO9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\\Windows\\WindowsMobile\\INetRepl.dll\nO9 - Extra \'Tools\' menuitem: @C:\\Windows\\WindowsMobile\\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\\Windows\\WindowsMobile\\INetRepl.dll\nO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\\PROGRA~1\\MICROS~2\\Office12\\REFIEBAR.DLL\nO9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\\Programs\\PartyGaming\\PartyPoker\\RunApp.exe\nO9 - Extra \'Tools\' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\\Programs\\PartyGaming\\PartyPoker\\RunApp.exe\nO9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\\Program Files\\PokerStars.NET\\PokerStarsUpdate.exe\nO13 - Gopher Prefix: \nO16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - [url]http://www.kaspersky.nl/scanforvirus-en/kavwebscan_unicode.cab[/url]\nO18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\\Program Files\\Microsoft Office\\Office12\\GrooveSystemServices.dll\nO20 - AppInit_DLLs: eNetHook.dll\nO23 - Service: Adobe LM Service - Adobe Systems - C:\\Program Files\\Common Files\\Adobe Systems Shared\\Service\\Adobelmsvc.exe

[Anoniem2]

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\\Windows\\system32\\agrsmsvc.exe\nO23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\\Program Files\\Bonjour\\mDNSResponder.exe\nO23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\\Program Files\\Common Files\\Symantec Shared\\ccSvcHst.exe (file missing)\nO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\\Windows\\system32\\CTsvcCDA.exe\nO23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSService.exe\nO23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\\Program Files\\ESET\\ESET Smart Security\\EHttpSrv.exe\nO23 - Service: Eset Service (ekrn) - ESET - C:\\Program Files\\ESET\\ESET Smart Security\\ekrn.exe\nO23 - Service: eLock Service (eLockService) - Acer Inc. - C:\\Acer\\Empowering Technology\\eLock\\Service\\eLockServ.exe\nO23 - Service: eNet Service - Acer Inc. - C:\\Acer\\Empowering Technology\\eNet\\eNet Service.exe\nO23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\\Acer\\Empowering Technology\\eRecovery\\eRecoveryService.exe\nO23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\\Acer\\Empowering Technology\\eSettings\\Service\\capuserv.exe\nO23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\\Program Files\\Common Files\\Macrovision Shared\\FLEXnet Publisher\\FNPLicensingService.exe\nO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\\Program Files\\Common Files\\LightScribe\\LSSrvc.exe\nO23 - Service: MobilityService - Unknown owner - C:\\Acer\\Mobility Center\\MobilityService.exe\nO23 - Service: NBService - Nero AG - C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\NBService.exe\nO23 - Service: NMIndexingService - Nero AG - C:\\Program Files\\Common Files\\Ahead\\Lib\\NMIndexingService.exe\nO23 - Service: RelevantKnowledge - RelevantKnowledge - C:\\Windows\\system32\\rlservice.exe\nO23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\\Program Files\\CyberLink\\Shared Files\\RichVideo.exe\nO23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\\Program Files\\Alcohol Soft\\Alcohol 120\\StarWind\\StarWindService.exe\nO23 - Service: WisLMSvc - Wistron Corp. - C:\\Program Files\\Launch Manager\\WisLMSvc.exe\nO23 - Service: ePower Service (WMIService) - acer - C:\\Acer\\Empowering Technology\\ePower\\ePowerSvc.exe

[Anoniem2]

o, ik zal hem in dat andere topic posten...\n\nsorry voor de dubbelposts!!!

[Anoniem2]

Helaas vincent77 kan ik je hier nu niet mee verder helpen.\nZelf snap ik hier ook niet veel van!\nMaar er zijn genoeg mensen die het wel snappen!\nsuc6 (Y)

[Anoniem2]

Laat ook maar in dit topic staan hoor!

[Anoniem2]

O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\\Programs\\PartyGaming\\PartyPoker\\RunApp.exe\nO9 - Extra \'Tools\' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\\Programs\\PartyGaming\\PartyPoker\\RunApp.exe\nO9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\\Program Files\\PokerStars.NET\\PokerStarsUpdate.exe\n\nGebruik je pokersites???\n\nDie zijn ook niet zo zuiver meestal!

[Anoniem2]

jep, ben dol op pokeren ;)\nHet vreemde is dat deze medlingen kwamen na een update van avg...\ndie er eens afgegooid en NOD32 geïnstalleerd, zelfde medlingen over dat trojan ding.

[Anoniem2]

[COLOR=#000000]Download Malwarebytes\' [URL=\"http://malwarebytes.gt500.org/mbam-setup.exe\"]Anti-Malware[/URL][/COLOR]\n[COLOR=red][COLOR=#000000]Dubbelklik op mbam-setup.exe om het programma te installeren. [/COLOR][/COLOR][COLOR=red]\n[COLOR=#000000]Zorg ervoor dat er een vinkje geplaatst is voor Update Malwarebytes\' Anti-Malware en Start Malwarebytes\' Anti-Malware, Klik daarna op \"Voltooien\". [/COLOR]\n[COLOR=#000000]Indien een update gevonden werd, zal die gedownload en geïnstalleerd worden. [/COLOR]\n[COLOR=#000000]Wanneer het programma volledig up to date is, selecteer dan in het tabblad Scanner : \"Snelle Scan\", daarna klik op Scan.[/COLOR]\n[COLOR=#000000]Het scannen kan een tijdje duren, dus wees geduldig. [/COLOR]\n[COLOR=#000000]Wanneer de scan voltooid is, klik op OK, daarna \"Bekijk Resultaten\" om de resultaten te zien. [/COLOR]\n[COLOR=#000000]Zorg ervoor dat daar alles aangevinkt is, daarna klik op: Verwijder geselecteerde[B].[/B] [/COLOR][/COLOR]

[Anoniem2]

Dat heeft blijkbar veel geholpen, hij heeft er een stiuk of 8 gevonden, en nu nog geen melding gehad :)