ComboFix 13-10-23.01 - Silverwing 23/10/2013 11:52:31.1.4 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.32.1033.18.4095.2963 [GMT 2:00] Gestart vanuit: h:\downloads\ComboFix.exe AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} FW: ESET Persoonlijke firewall *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Nieuw herstelpunt werd aangemaakt . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\Printkey2000 (5.10).exe . . (((((((((((((((((((( Bestanden Gemaakt van 2013-09-23 to 2013-10-23 )))))))))))))))))))))))))))))) . . 2013-10-23 09:33 . 2013-10-23 09:33 -------- d-----w- C:\rsit 2013-10-21 18:23 . 2013-10-21 18:23 -------- d-----w- c:\programdata\Oracle 2013-10-21 18:23 . 2013-10-08 05:50 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-10-10 08:00 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys 2013-10-10 08:00 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys 2013-10-10 08:00 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2013-10-10 08:00 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys 2013-10-10 08:00 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2013-10-10 08:00 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys 2013-10-10 08:00 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys 2013-10-10 07:33 . 2013-07-04 12:57 259584 ----a-w- c:\windows\system32\WebClnt.dll 2013-10-10 07:32 . 2013-08-01 12:09 983488 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2013-10-06 11:41 . 2013-10-06 11:46 -------- d-----w- c:\program files (x86)\Gabest 2013-10-05 12:58 . 2013-10-05 12:58 -------- d-----w- c:\users\Silverwing\AppData\Roaming\WinAVI 2013-10-01 14:01 . 2013-10-21 17:55 -------- d-----w- c:\users\Silverwing\AppData\Roaming\vlc 2013-10-01 13:30 . 2013-10-01 13:30 -------- d-----w- c:\users\Silverwing\AppData\Roaming\DVDVideoSoft 2013-10-01 13:30 . 2013-10-01 13:30 -------- d-----w- c:\program files (x86)\DVDVideoSoft 2013-10-01 11:40 . 2013-10-01 11:40 40208 ----a-w- c:\windows\SysWow64\Partizan.exe 2013-10-01 11:23 . 2013-10-01 11:24 -------- d-----w- c:\programdata\SuperMP3Download 2013-10-01 11:23 . 2013-10-01 11:23 -------- d-----w- c:\users\Silverwing\AppData\Roaming\SuperMP3Download 2013-10-01 11:20 . 2013-10-01 11:22 -------- d-----w- c:\program files (x86)\SuperMp3Download 2013-10-01 11:16 . 2013-10-01 11:16 40208 ----a-w- c:\windows\system32\Partizan.exe 2013-10-01 11:09 . 2013-10-01 11:09 35816 ----a-w- c:\windows\SysWow64\drivers\Partizan.sys 2013-10-01 11:06 . 2013-10-01 11:06 2 --shatr- c:\windows\winstart.bat 2013-10-01 11:06 . 2013-09-05 08:19 12800 ----a-w- c:\windows\SysWow64\drivers\UnHackMeDrv.sys . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-10-10 08:50 . 2012-09-13 13:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-10-10 08:50 . 2012-09-13 13:34 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-10-10 07:34 . 2012-09-13 11:44 80541720 ----a-w- c:\windows\system32\MRT.exe 2013-09-21 17:58 . 2013-09-21 18:06 24064 ----a-w- c:\windows\zoek-delete.exe 2013-09-17 20:22 . 2012-12-19 11:41 13628208 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2013-09-17 20:22 . 2012-10-15 10:32 15901448 ----a-w- c:\windows\system32\nvwgf2umx.dll 2013-09-17 20:22 . 2013-09-17 20:22 1222824 ----a-w- c:\windows\SysWow64\nvumdshim.dll 2013-09-17 20:22 . 2012-10-15 10:32 1412832 ----a-w- c:\windows\system32\nvumdshimx.dll 2013-09-17 20:22 . 2013-09-17 20:22 7648000 ----a-w- c:\windows\system32\nvopencl.dll 2013-09-17 20:22 . 2013-09-17 20:22 6329552 ----a-w- c:\windows\SysWow64\nvopencl.dll 2013-09-17 20:22 . 2013-09-17 20:22 29337376 ----a-w- c:\windows\system32\nvoglv64.dll 2013-09-17 20:22 . 2013-09-17 20:22 317472 ----a-w- c:\windows\system32\nvoglshim64.dll 2013-09-17 20:22 . 2013-09-17 20:22 266984 ----a-w- c:\windows\SysWow64\nvoglshim32.dll 2013-09-17 20:22 . 2013-09-17 20:22 22102304 ----a-w- c:\windows\SysWow64\nvoglv32.dll 2013-09-17 20:22 . 2013-09-17 20:22 11274528 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2013-09-17 20:22 . 2013-09-17 20:22 603424 ----a-w- c:\windows\system32\NvIFR64.dll 2013-09-17 20:22 . 2013-09-17 20:22 515360 ----a-w- c:\windows\SysWow64\NvIFR.dll 2013-09-17 20:22 . 2013-09-17 20:22 168616 ----a-w- c:\windows\system32\nvinitx.dll 2013-09-17 20:22 . 2013-09-17 20:22 141336 ----a-w- c:\windows\SysWow64\nvinit.dll 2013-09-17 20:22 . 2013-09-17 20:22 681760 ----a-w- c:\windows\system32\NvFBC64.dll 2013-09-17 20:22 . 2013-09-17 20:22 586016 ----a-w- c:\windows\SysWow64\NvFBC.dll 2013-09-17 20:22 . 2013-09-17 20:22 31520 ----a-w- c:\windows\system32\nvhdap64.dll 2013-09-17 20:22 . 2013-09-17 20:22 196384 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2013-09-17 20:22 . 2013-09-17 20:22 1884448 ----a-w- c:\windows\system32\nvdispco6432723.dll 2013-09-17 20:22 . 2013-09-17 20:22 15703688 ----a-w- c:\windows\system32\nvd3dumx.dll 2013-09-17 20:22 . 2013-09-17 20:22 1511712 ----a-w- c:\windows\system32\nvdispgenco6432723.dll 2013-09-17 20:22 . 2013-09-17 20:22 1510176 ----a-w- c:\windows\system32\nvhdagenco6420103.dll 2013-09-17 20:22 . 2013-09-17 20:22 2970400 ----a-w- c:\windows\system32\nvcuvid.dll 2013-09-17 20:22 . 2013-09-17 20:22 2789152 ----a-w- c:\windows\SysWow64\nvcuvid.dll 2013-09-17 20:22 . 2013-02-25 23:32 12947360 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2013-09-17 20:22 . 2013-09-17 20:22 9281032 ----a-w- c:\windows\system32\nvcuda.dll 2013-09-17 20:22 . 2013-09-17 20:22 7720576 ----a-w- c:\windows\SysWow64\nvcuda.dll 2013-09-17 20:22 . 2013-09-17 20:22 2367264 ----a-w- c:\windows\system32\nvcuvenc.dll 2013-09-17 20:22 . 2013-09-17 20:22 2007328 ----a-w- c:\windows\SysWow64\nvcuvenc.dll 2013-09-17 20:22 . 2013-09-17 20:22 17560352 ----a-w- c:\windows\SysWow64\nvcompiler.dll 2013-09-17 20:22 . 2013-09-17 20:22 25256224 ----a-w- c:\windows\system32\nvcompiler.dll 2013-09-17 20:22 . 2013-02-25 23:32 2630304 ----a-w- c:\windows\SysWow64\nvapi.dll 2013-09-17 20:22 . 2012-10-15 10:32 2986672 ----a-w- c:\windows\system32\nvapi64.dll 2013-09-14 17:28 . 2013-09-14 17:28 162639 ----a-w- c:\windows\Animated Wallpaper Maker Uninstaller.exe 2013-09-12 07:25 . 2012-10-15 10:33 6599968 ----a-w- c:\windows\system32\nvcpl.dll 2013-09-12 07:25 . 2012-10-15 10:33 3452192 ----a-w- c:\windows\system32\nvsvc64.dll 2013-09-12 07:25 . 2012-10-15 10:33 920864 ----a-w- c:\windows\system32\nvvsvc.exe 2013-09-12 07:25 . 2012-10-15 10:33 63776 ----a-w- c:\windows\system32\nvshext.dll 2013-09-12 07:25 . 2012-10-15 10:33 2559776 ----a-w- c:\windows\system32\nvsvcr.dll 2013-09-12 07:25 . 2012-10-15 10:33 219424 ----a-w- c:\windows\system32\nvmctray.dll 2013-09-11 23:17 . 2013-09-11 23:17 571168 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2013-09-11 22:06 . 2012-10-15 10:33 3361114 ----a-w- c:\windows\system32\nvcoproc.bin 2013-09-05 17:22 . 2013-09-05 17:22 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-09-05 17:22 . 2013-09-05 17:22 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-09-05 17:22 . 2013-09-05 17:22 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-09-05 17:22 . 2013-09-05 17:22 61952 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-09-05 17:22 . 2013-09-05 17:22 523264 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-09-05 17:22 . 2013-09-05 17:22 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-09-05 17:22 . 2013-09-05 17:22 38400 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-09-05 17:22 . 2013-09-05 17:22 361984 ----a-w- c:\windows\SysWow64\html.iec 2013-09-05 17:22 . 2013-09-05 17:22 226304 ----a-w- c:\windows\system32\elshyph.dll 2013-09-05 17:22 . 2013-09-05 17:22 185344 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-09-05 17:22 . 2013-09-05 17:22 158720 ----a-w- c:\windows\SysWow64\msls31.dll 2013-09-05 17:22 . 2013-09-05 17:22 150528 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-09-05 17:22 . 2013-09-05 17:22 138752 ----a-w- c:\windows\SysWow64\wextract.exe 2013-09-05 17:22 . 2013-09-05 17:22 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-09-05 17:22 . 2013-09-05 17:22 12800 ----a-w- c:\windows\SysWow64\mshta.exe 2013-09-05 17:22 . 2013-09-05 17:22 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-09-05 17:22 . 2013-09-05 17:22 97280 ----a-w- c:\windows\system32\mshtmled.dll 2013-09-05 17:22 . 2013-09-05 17:22 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-09-05 17:22 . 2013-09-05 17:22 81408 ----a-w- c:\windows\system32\icardie.dll 2013-09-05 17:22 . 2013-09-05 17:22 762368 ----a-w- c:\windows\system32\ieapfltr.dll 2013-09-05 17:22 . 2013-09-05 17:22 599552 ----a-w- c:\windows\system32\vbscript.dll 2013-09-05 17:22 . 2013-09-05 17:22 452096 ----a-w- c:\windows\system32\dxtmsft.dll 2013-09-05 17:22 . 2013-09-05 17:22 441856 ----a-w- c:\windows\system32\html.iec 2013-09-05 17:22 . 2013-09-05 17:22 281600 ----a-w- c:\windows\system32\dxtrans.dll 2013-09-05 17:22 . 2013-09-05 17:22 27648 ----a-w- c:\windows\system32\licmgr10.dll 2013-09-05 17:22 . 2013-09-05 17:22 270848 ----a-w- c:\windows\system32\iedkcs32.dll 2013-09-05 17:22 . 2013-09-05 17:22 247296 ----a-w- c:\windows\system32\webcheck.dll 2013-09-05 17:22 . 2013-09-05 17:22 235008 ----a-w- c:\windows\system32\url.dll 2013-09-05 17:22 . 2013-09-05 17:22 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-09-05 17:22 . 2013-09-05 17:22 216064 ----a-w- c:\windows\system32\msls31.dll 2013-09-05 17:22 . 2013-09-05 17:22 197120 ----a-w- c:\windows\system32\msrating.dll 2013-09-05 17:22 . 2013-09-05 17:22 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-09-05 17:22 . 2013-09-05 17:22 1509376 ----a-w- c:\windows\system32\inetcpl.cpl 2013-09-05 17:22 . 2013-09-05 17:22 144896 ----a-w- c:\windows\system32\wextract.exe 2013-09-05 17:22 . 2013-09-05 17:22 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2013-09-05 17:22 . 2013-09-05 17:22 1400416 ----a-w- c:\windows\system32\ieapfltr.dat 2013-09-05 17:22 . 2013-09-05 17:22 102912 ----a-w- c:\windows\system32\inseng.dll 2013-09-05 17:22 . 2013-09-05 17:22 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-09-05 17:22 . 2013-09-05 17:22 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-09-05 17:22 . 2013-09-05 17:22 62976 ----a-w- c:\windows\system32\pngfilt.dll 2013-09-05 17:22 . 2013-09-05 17:22 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-09-05 17:22 . 2013-09-05 17:22 51200 ----a-w- c:\windows\system32\imgutil.dll 2013-09-05 17:22 . 2013-09-05 17:22 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-09-05 17:22 . 2013-09-05 17:22 173568 ----a-w- c:\windows\system32\ieUnatt.exe 2013-09-05 17:22 . 2013-09-05 17:22 149504 ----a-w- c:\windows\system32\occache.dll 2013-09-05 17:22 . 2013-09-05 17:22 13824 ----a-w- c:\windows\system32\mshta.exe 2013-09-05 17:22 . 2013-09-05 17:22 136192 ----a-w- c:\windows\system32\iepeers.dll 2013-09-05 17:22 . 2013-09-05 17:22 135680 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-09-05 17:22 . 2013-09-05 17:22 12800 ----a-w- c:\windows\system32\msfeedssync.exe 2013-08-29 01:48 . 2013-10-10 07:33 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-08-05 02:25 . 2013-09-11 06:57 155584 ----a-w- c:\windows\system32\drivers\ataport.sys 2013-08-02 02:14 . 2013-09-11 06:57 215040 ----a-w- c:\windows\system32\winsrv.dll 2013-08-02 02:13 . 2013-09-11 06:57 424448 ----a-w- c:\windows\system32\KernelBase.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] 2013-09-26 13:59 277560 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-06-05 17:17 130736 ----a-w- c:\users\Silverwing\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-06-05 17:17 130736 ----a-w- c:\users\Silverwing\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-06-05 17:17 130736 ----a-w- c:\users\Silverwing\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-06-05 17:17 130736 ----a-w- c:\users\Silverwing\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0Partizan . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x] R3 2310_00;2310_00;c:\windows\system32\drivers\2310_00.sys;c:\windows\SYSNATIVE\drivers\2310_00.sys [x] R3 272x_1x;272x_1x;c:\windows\system32\drivers\272x_1x.sys;c:\windows\SYSNATIVE\drivers\272x_1x.sys [x] R3 274x_3x;274x_3x;c:\windows\system32\drivers\274x_3x.sys;c:\windows\SYSNATIVE\drivers\274x_3x.sys [x] R3 ahcix64s;ahcix64s;c:\windows\system32\drivers\ahcix64s.sys;c:\windows\SYSNATIVE\drivers\ahcix64s.sys [x] R3 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x] R3 arcm_a64;arcm_a64;c:\windows\system32\drivers\arcm_a64.sys;c:\windows\SYSNATIVE\drivers\arcm_a64.sys [x] R3 asahci64;asahci64;c:\windows\system32\drivers\asahci64.sys;c:\windows\SYSNATIVE\drivers\asahci64.sys [x] R3 cpuz135;cpuz135;c:\users\SILVER~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys;c:\users\SILVER~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [x] R3 DC133;DC133;c:\windows\system32\drivers\DC133.sys;c:\windows\SYSNATIVE\drivers\DC133.sys [x] R3 DC150;DC150;c:\windows\system32\drivers\DC150.sys;c:\windows\SYSNATIVE\drivers\DC150.sys [x] R3 DC154;DC154;c:\windows\system32\drivers\DC154.sys;c:\windows\SYSNATIVE\drivers\DC154.sys [x] R3 DC300e;DC300e;c:\windows\system32\drivers\DC300e.sys;c:\windows\SYSNATIVE\drivers\DC300e.sys [x] R3 DC324e;DC324e;c:\windows\system32\drivers\DC324e.sys;c:\windows\SYSNATIVE\drivers\DC324e.sys [x] R3 DC4300;DC4300;c:\windows\system32\drivers\DC4300.sys;c:\windows\SYSNATIVE\drivers\DC4300.sys [x] R3 DC600e;DC600e;c:\windows\system32\drivers\DC600e.sys;c:\windows\SYSNATIVE\drivers\DC600e.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 FsUsbExDisk;FsUsbExDisk;c:\windows\SysWOW64\FsUsbExDisk.SYS;c:\windows\SysWOW64\FsUsbExDisk.SYS [x] R3 hptiop;hptiop;c:\windows\system32\drivers\hptiop.sys;c:\windows\SYSNATIVE\drivers\hptiop.sys [x] R3 hptmv;hptmv;c:\windows\system32\drivers\hptmv.sys;c:\windows\SYSNATIVE\drivers\hptmv.sys [x] R3 hptmv6;hptmv6;c:\windows\system32\drivers\hptmv6.sys;c:\windows\SYSNATIVE\drivers\hptmv6.sys [x] R3 iaStorA;iaStorA;c:\windows\system32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x] R3 iaStorS;iaStorS;c:\windows\system32\drivers\iaStorS.sys;c:\windows\SYSNATIVE\drivers\iaStorS.sys [x] R3 megasas2;megasas2;c:\windows\system32\drivers\megasas2.sys;c:\windows\SYSNATIVE\drivers\megasas2.sys [x] R3 megasr1;megasr1;c:\windows\system32\drivers\MegaSR1.sys;c:\windows\SYSNATIVE\drivers\MegaSR1.sys [x] R3 mv91cons;mv91cons;c:\windows\system32\drivers\mv91cons.sys;c:\windows\SYSNATIVE\drivers\mv91cons.sys [x] R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x] R3 Pnp680;Pnp680;c:\windows\system32\drivers\pnp680.sys;c:\windows\SYSNATIVE\drivers\pnp680.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x] R3 rr172x;rr172x;c:\windows\system32\drivers\rr172x.sys;c:\windows\SYSNATIVE\drivers\rr172x.sys [x] R3 rr174x;rr174x;c:\windows\system32\drivers\rr174x.sys;c:\windows\SYSNATIVE\drivers\rr174x.sys [x] R3 rr2210;rr2210;c:\windows\system32\drivers\rr2210.sys;c:\windows\SYSNATIVE\drivers\rr2210.sys [x] R3 rr232x;rr232x;c:\windows\system32\drivers\rr232x.sys;c:\windows\SYSNATIVE\drivers\rr232x.sys [x] R3 rr2340;rr2340;c:\windows\system32\drivers\rr2340.sys;c:\windows\SYSNATIVE\drivers\rr2340.sys [x] R3 rr2522;rr2522;c:\windows\system32\drivers\rr2522.sys;c:\windows\SYSNATIVE\drivers\rr2522.sys [x] R3 rr276x;rr276x;c:\windows\system32\drivers\rr276x.sys;c:\windows\SYSNATIVE\drivers\rr276x.sys [x] R3 rr278x;rr278x;c:\windows\system32\drivers\rr278x.sys;c:\windows\SYSNATIVE\drivers\rr278x.sys [x] R3 rr62x;rr62x;c:\windows\system32\drivers\rr62x.sys;c:\windows\SYSNATIVE\drivers\rr62x.sys [x] R3 SI3112r;SI3112r;c:\windows\system32\drivers\SI3112r.sys;c:\windows\SYSNATIVE\drivers\SI3112r.sys [x] R3 SI3114;SI3114;c:\windows\system32\drivers\SI3114.sys;c:\windows\SYSNATIVE\drivers\SI3114.sys [x] R3 SI3124;SI3124;c:\windows\system32\drivers\SI3124.sys;c:\windows\SYSNATIVE\drivers\SI3124.sys [x] R3 Si3124r5;Si3124r5;c:\windows\system32\drivers\Si3124r5.sys;c:\windows\SYSNATIVE\drivers\Si3124r5.sys [x] R3 Si3531;Si3531;c:\windows\system32\drivers\Si3531.sys;c:\windows\SYSNATIVE\drivers\Si3531.sys [x] R3 speccy;speccy;c:\users\SILVER~1\AppData\Local\Temp\93512d70-cc07-43ad-a662-6f1a8ccb06c0;c:\users\SILVER~1\AppData\Local\Temp\93512d70-cc07-43ad-a662-6f1a8ccb06c0 [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x] R3 viamrx64;viamrx64;c:\windows\system32\drivers\viamrx64.sys;c:\windows\SYSNATIVE\drivers\viamrx64.sys [x] R3 videX64;videX64;c:\windows\system32\drivers\videX64.sys;c:\windows\SYSNATIVE\drivers\videX64.sys [x] R3 vmci;vmci;c:\windows\system32\drivers\vmci.sys;c:\windows\SYSNATIVE\drivers\vmci.sys [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x] S0 DC3410;DC3410;c:\windows\system32\drivers\DC3410.sys;c:\windows\SYSNATIVE\drivers\DC3410.sys [x] S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x] S0 iaStorF;iaStorF;c:\windows\system32\drivers\iaStorF.sys;c:\windows\SYSNATIVE\drivers\iaStorF.sys [x] S0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys;c:\windows\SYSNATIVE\drivers\mv61xx.sys [x] S0 xfiltx64;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfiltx64.sys;c:\windows\SYSNATIVE\drivers\xfiltx64.sys [x] S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x] S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x] S2 cbVSCService11;Cobian Backup 11 Volume Shadow Copy Requester;c:\program files (x86)\Cobian Backup 11\cbVSCService11.exe;c:\program files (x86)\Cobian Backup 11\cbVSCService11.exe [x] S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x] S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x] S2 KMService;KMService;c:\windows\system32\srvany.exe;c:\windows\SYSNATIVE\srvany.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] S2 NitroDriverReadSpool8;NitroPDFDriverCreatorReadSpool8;c:\program files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe;c:\program files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x] . . Inhoud van de 'Gedeelde Taken' map . 2013-10-23 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-25 08:50] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] 2013-09-26 13:59 336952 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-06-05 17:17 164016 ----a-w- c:\users\Silverwing\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-06-05 17:17 164016 ----a-w- c:\users\Silverwing\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-06-05 17:17 164016 ----a-w- c:\users\Silverwing\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-06-05 17:17 164016 ----a-w- c:\users\Silverwing\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2012-12-21 6326448] . ------- Bijkomende Scan ------- . uStart Page = hxxp://us.mg1.mail.yahoo.com/dc/launch uLocal Page = c:\windows\system32\blank.htm IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000 IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll TCP: DhcpNameServer = 195.130.131.4 195.130.130.132 FF - ProfilePath - c:\users\Silverwing\AppData\Roaming\Mozilla\Firefox\Profiles\dgxhhpxj.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?btnG=Google+Search&q= FF - prefs.js: browser.search.selectedEngine - Google https://dub125.mail.live.com/default.aspx?id=64855&rru=inbox|http://www.hln.be/ FF - prefs.js: keyword.URL - hxxp://www.google.com/search?btnG=Google+Search&q= FF - ExtSQL: 2013-09-14 16:32; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Silverwing\AppData\Roaming\Mozilla\Firefox\Profiles\dgxhhpxj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF - ExtSQL: 2013-09-14 16:35; nosquint@urandom.ca; c:\users\Silverwing\AppData\Roaming\Mozilla\Firefox\Profiles\dgxhhpxj.default\extensions\nosquint@urandom.ca.xpi FF - ExtSQL: 2013-09-16 20:24; en-US@dictionaries.addons.mozilla.org; c:\users\Silverwing\AppData\Roaming\Mozilla\Firefox\Profiles\dgxhhpxj.default\extensions\en-US@dictionaries.addons.mozilla.org FF - ExtSQL: 2013-10-01 15:30; {ACAA314B-EEBA-48e4-AD47-84E31C44796C}; c:\program files (x86)\Common Files\DVDVideoSoft\plugins\ff . - - - - ORPHANS VERWIJDERD - - - - . SafeBoot-MsMpSvc HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start AddRemove-dBpoweramp DSP Effects - c:\windows\system32\SpoonUninstall.exe AddRemove-dBpoweramp m4a Codec - c:\windows\system32\SpoonUninstall.exe AddRemove-dBpoweramp Music Converter - c:\windows\system32\SpoonUninstall.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\speccy] "ImagePath"="\??\c:\users\SILVER~1\AppData\Local\Temp\93512d70-cc07-43ad-a662-6f1a8ccb06c0" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions] @Denied: (2) (LocalSystem) "{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}"=hex:51,66,7a,6c,4c,1d,38,12,8b,c7,39, ea,82,fe,a8,0b,f7,bf,ff,e1,a6,74,f5,13 "{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07, 72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57 "{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}"=hex:51,66,7a,6c,4c,1d,38,12,ac,35,59, 8e,07,4b,42,08,c2,2b,0a,2c,b2,b0,92,f7 "{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23, 94,30,02,d1,0f,f1,da,12,24,73,56,27,d2 "{B4F3A835-0E21-4959-BA22-42B3008E02FF}"=hex:51,66,7a,6c,4c,1d,38,12,5b,ab,e0, b0,13,40,37,0c,c5,34,01,f3,05,d0,46,eb "{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db, df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration] @Denied: (2) (LocalSystem) "Timestamp"=hex:a9,49,98,f2,91,bd,cd,01 . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,25,68,06,59,60,64,b5,42,ac,07,aa,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,25,68,06,59,60,64,b5,42,ac,07,aa,\ . [HKEY_USERS\S-1-5-21-1885161628-3878894116-3605217538-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (S-1-5-21-1885161628-3878894116-3605217538-1001) @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_USERS\S-1-5-21-1885161628-3878894116-3605217538-1001_Classes\Wow6432Node\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}] @Denied: (Full) (Everyone) "scansk"=hex(0):b5,f1,f6,6d,2d,5b,84,3e,4f,81,f2,1f,c5,3c,b6,c3,d6,02,3b,03,fd, 8f,8e,12,d4,21,72,0e,f7,7d,48,fb,60,78,08,36,9e,5b,69,f5,00,00,00,00,00,00,\ . [HKEY_USERS\S-1-5-21-1885161628-3878894116-3605217538-1001_Classes\Wow6432Node\CLSID\{e1d71a71-c561-4f47-b455-5e201bd6f25d}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "Model"=dword:0000004f "Therad"=dword:0000001e "MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a, 1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\ . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\windows\SysWOW64\srvany.exe c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe . ************************************************************************** . Voltooingstijd: 2013-10-23 12:18:37 - machine werd herstart ComboFix-quarantined-files.txt 2013-10-23 10:18 . Pre-Run: 30.636.564.480 bytes beschikbaar Post-Run: 30.326.992.896 bytes beschikbaar . - - End Of File - - 609F433F759C7DBC305DEB78889E135D A36C5E4F47E84449FF07ED3517B43A31