athlon

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:21:25, on 30/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: E:\WINDOWS\System32\smss.exe E:\WINDOWS\system32\winlogon.exe E:\WINDOWS\system32\services.exe E:\WINDOWS\system32\lsass.exe E:\WINDOWS\system32\svchost.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\system32\spoolsv.exe E:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe E:\Program Files\Java\jre6\bin\jusched.exe E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe E:\WINDOWS\system32\ctfmon.exe E:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe E:\Program Files\Java\jre6\bin\jqs.exe E:\WINDOWS\system32\nvsvc32.exe E:\WINDOWS\system32\PnkBstrA.exe E:\WINDOWS\system32\notepad.exe E:\WINDOWS\explorer.exe E:\Program Files\Internet Explorer\IEXPLORE.EXE E:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [sunJavaUpdateSched] "E:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - E:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - E:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe -- End of file - 4367 bytes

2 x hetzelfde sorry

ComboFix 08-12-29.02 - Marijn 2008-12-30 15:10:29.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1043.18.511.294 [GMT 1:00] Gestart vanuit: e:\documents and settings\Marijn\Bureaublad\ComboFix.exe gebruikte Opdracht switches :: e:\documents and settings\Marijn\Bureaublad\CFScript.txt * Nieuw herstelpunt werd aangemaakt WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !! . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . e:\documents and settings\All Users\Application Data\McAfee e:\documents and settings\All Users\Application Data\McAfee\MSADP\Cache\SaSubDB.Bak e:\documents and settings\All Users\Application Data\McAfee\MSADP\SaSubDB.Dat e:\documents and settings\All Users\Application Data\McAfee\MSC\Cache\McSubDB.Bak e:\documents and settings\All Users\Application Data\McAfee\MSC\mcini.ini e:\documents and settings\All Users\Application Data\McAfee\MSC\McSubDB.Dat e:\documents and settings\All Users\Application Data\Symantec e:\documents and settings\All Users\Application Data\Symantec\{1B05DC73-DA93-48fa-856C-FA59EF6019EB}\SDKCfg00.xml e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{0A7CB824-3201-41B7-AEA1-6DEC1910B32C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{0A7CB824-3201-41B7-AEA1-6DEC1910B32C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{22C33377-D5E9-42E0-914D-B6B22C384748}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{22C33377-D5E9-42E0-914D-B6B22C384748}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}\{963819F8-E66C-4FF1-9596-6301FFCF0D6C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}\{963819F8-E66C-4FF1-9596-6301FFCF0D6C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}\{D98DDED2-B5B3-4555-825E-76E90C061FAA}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}\{D98DDED2-B5B3-4555-825E-76E90C061FAA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{05C36635-F098-4D77-AB57-1AD62CE5BF60}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{05C36635-F098-4D77-AB57-1AD62CE5BF60}\{D343554E-31A2-4571-B6BA-877AC1A6E350}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{05C36635-F098-4D77-AB57-1AD62CE5BF60}\{D343554E-31A2-4571-B6BA-877AC1A6E350}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}\{775AED1C-AADE-4ECF-A7F8-443440967552}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}\{775AED1C-AADE-4ECF-A7F8-443440967552}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}\{9397C2D4-AC2D-4C12-A7B0-8ADAAA2F125C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}\{9397C2D4-AC2D-4C12-A7B0-8ADAAA2F125C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0D24799A-B8ED-4575-B015-2578DD98EAF9}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0D24799A-B8ED-4575-B015-2578DD98EAF9}\{EDB4BB86-9AD6-48A2-B305-5A3229E23FC5}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0D24799A-B8ED-4575-B015-2578DD98EAF9}\{EDB4BB86-9AD6-48A2-B305-5A3229E23FC5}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}\{615E933C-9006-4CDB-B331-CAC8492C1373}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}\{615E933C-9006-4CDB-B331-CAC8492C1373}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}\{AEC8E665-A730-4D6A-A255-ABC51C7C17EA}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}\{AEC8E665-A730-4D6A-A255-ABC51C7C17EA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}\{5609ABE6-60D9-428B-B018-30B68BB41D37}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}\{5609ABE6-60D9-428B-B018-30B68BB41D37}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}\{9DE00ABD-0E7C-45A3-9F40-C377AE0B46FB}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}\{9DE00ABD-0E7C-45A3-9F40-C377AE0B46FB}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}\{750BF334-ED3E-4A58-98AF-8BEB0B9049BA}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}\{750BF334-ED3E-4A58-98AF-8BEB0B9049BA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}\{9A7AB75D-C51F-4990-9AC7-EA3FBC10CABD}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}\{9A7AB75D-C51F-4990-9AC7-EA3FBC10CABD}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{152F4450-704C-4946-BE0D-0F99ED29FCAA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{152F4450-704C-4946-BE0D-0F99ED29FCAA}\{CA0E6C95-022F-42FB-A5EA-00C6922BD95F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{152F4450-704C-4946-BE0D-0F99ED29FCAA}\{CA0E6C95-022F-42FB-A5EA-00C6922BD95F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{15BA58C8-FC08-4079-A043-73F8159F5F25}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{15BA58C8-FC08-4079-A043-73F8159F5F25}\{B0E7CDD9-208F-4CCF-873C-1869CDED1464}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{15BA58C8-FC08-4079-A043-73F8159F5F25}\{B0E7CDD9-208F-4CCF-873C-1869CDED1464}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1D3B74D7-1ACD-498A-841C-03D2B31D9C6D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1D3B74D7-1ACD-498A-841C-03D2B31D9C6D}\{20D705F3-B112-4AB0-9F1B-06BD484409F5}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1D3B74D7-1ACD-498A-841C-03D2B31D9C6D}\{20D705F3-B112-4AB0-9F1B-06BD484409F5}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}\{15BDC0EA-449D-4034-9E60-BA2E26ABF1AA}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}\{15BDC0EA-449D-4034-9E60-BA2E26ABF1AA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}\{BD213155-AD88-4C82-8E73-3AA3F1DD4C7F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}\{BD213155-AD88-4C82-8E73-3AA3F1DD4C7F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}\{1214BD1F-D81F-4C30-A2D9-526C994E2829}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}\{1214BD1F-D81F-4C30-A2D9-526C994E2829}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}\{A69A597C-3DB8-4ED2-8EDA-6C9340E6694E}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}\{A69A597C-3DB8-4ED2-8EDA-6C9340E6694E}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2469483F-7827-4CE6-AED5-8E3117184F9E}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2469483F-7827-4CE6-AED5-8E3117184F9E}\{6B9CD953-7A89-468A-B811-DAF665DFE709}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2469483F-7827-4CE6-AED5-8E3117184F9E}\{6B9CD953-7A89-468A-B811-DAF665DFE709}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2B86301A-D0E5-4C75-BE34-0419A6CBD0FF}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2B86301A-D0E5-4C75-BE34-0419A6CBD0FF}\{D35AF29B-CA2F-4875-A849-FD748959BFBE}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2B86301A-D0E5-4C75-BE34-0419A6CBD0FF}\{D35AF29B-CA2F-4875-A849-FD748959BFBE}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2D5E5DF6-CC21-485D-8EDB-DC7553C2F724}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2D5E5DF6-CC21-485D-8EDB-DC7553C2F724}\{C0CE0680-FCE5-4301-B22B-79C91996E029}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2D5E5DF6-CC21-485D-8EDB-DC7553C2F724}\{C0CE0680-FCE5-4301-B22B-79C91996E029}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{3EEB2040-35DB-4777-A66B-5CFE93B356AF}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{3EEB2040-35DB-4777-A66B-5CFE93B356AF}\{918309DA-B695-4864-8A0D-7A3C90AA2054}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{3EEB2040-35DB-4777-A66B-5CFE93B356AF}\{918309DA-B695-4864-8A0D-7A3C90AA2054}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}\{6A78182E-A5D1-4F43-9449-C11EF77BA26F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}\{6A78182E-A5D1-4F43-9449-C11EF77BA26F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}\{E626B202-4705-44A5-BFEF-A5A8E73C55E7}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}\{E626B202-4705-44A5-BFEF-A5A8E73C55E7}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}\{12A1FF14-DB38-4B37-85EE-C323E45152EE}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}\{12A1FF14-DB38-4B37-85EE-C323E45152EE}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}\{235B65FF-F414-48A0-ACA1-DC24D8BF6423}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}\{235B65FF-F414-48A0-ACA1-DC24D8BF6423}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}\{6698617E-CFFD-4CEE-8D93-FA0D13E75A79}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}\{6698617E-CFFD-4CEE-8D93-FA0D13E75A79}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}\{B28B6864-5C1B-4964-B685-526C269B5896}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}\{B28B6864-5C1B-4964-B685-526C269B5896}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5A040DF0-590E-4E9D-90D1-CC3E5FA834A0}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5A040DF0-590E-4E9D-90D1-CC3E5FA834A0}\{DA69E29B-C05B-4913-A75E-58789ACCD9E9}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5A040DF0-590E-4E9D-90D1-CC3E5FA834A0}\{DA69E29B-C05B-4913-A75E-58789ACCD9E9}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}\{8C0117A4-A702-472F-809C-17A03D3B41B9}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}\{8C0117A4-A702-472F-809C-17A03D3B41B9}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}\{AEC12DB9-3E64-41C7-AB29-5B1AFACACC09}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}\{AEC12DB9-3E64-41C7-AB29-5B1AFACACC09}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{6A4946F9-2A38-48A0-A6C9-ADD89BD44A94}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{6A4946F9-2A38-48A0-A6C9-ADD89BD44A94}\{0D680309-ED3A-4B1D-96AA-4BD1CBFC9427}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{6A4946F9-2A38-48A0-A6C9-ADD89BD44A94}\{0D680309-ED3A-4B1D-96AA-4BD1CBFC9427}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{70FF9564-4346-4E1D-BCC3-00E75214B868}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{70FF9564-4346-4E1D-BCC3-00E75214B868}\{14199D04-099B-48F6-BB44-DFB37FE6D758}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{70FF9564-4346-4E1D-BCC3-00E75214B868}\{14199D04-099B-48F6-BB44-DFB37FE6D758}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}\{26B1B9BD-B2E8-4657-ACDB-59D0824F072A}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}\{26B1B9BD-B2E8-4657-ACDB-59D0824F072A}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}\{B22C73F7-8D76-45BC-960E-9641D76B4182}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}\{B22C73F7-8D76-45BC-960E-9641D76B4182}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{81A34777-2EDA-4E85-A88E-117984694CAC}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{81A34777-2EDA-4E85-A88E-117984694CAC}\{1EB89A81-71CC-4719-9DEC-2100A3A1BF4E}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{81A34777-2EDA-4E85-A88E-117984694CAC}\{1EB89A81-71CC-4719-9DEC-2100A3A1BF4E}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{854428D5-CA0D-4B66-8051-FFADDA281683}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{854428D5-CA0D-4B66-8051-FFADDA281683}\{BEBB27A3-E328-4AF6-82D0-497D33AF0791}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{854428D5-CA0D-4B66-8051-FFADDA281683}\{BEBB27A3-E328-4AF6-82D0-497D33AF0791}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}\{6C9BC775-B9FF-4637-A1C3-18CF8EB1C74C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}\{6C9BC775-B9FF-4637-A1C3-18CF8EB1C74C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}\{C2E5EFD2-8C4C-45E8-AD12-722C47FD9425}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}\{C2E5EFD2-8C4C-45E8-AD12-722C47FD9425}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{85E41B4F-EE94-4493-A13F-608360AC2B17}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{85E41B4F-EE94-4493-A13F-608360AC2B17}\{04641B6B-731A-4918-B7D8-C29E35C888B2}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{85E41B4F-EE94-4493-A13F-608360AC2B17}\{04641B6B-731A-4918-B7D8-C29E35C888B2}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{959A95B1-EEC6-4B0C-8889-8A70028A3DD7}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{959A95B1-EEC6-4B0C-8889-8A70028A3DD7}\{540D48DD-8527-43D0-A1CE-C489D2C3B9F3}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{959A95B1-EEC6-4B0C-8889-8A70028A3DD7}\{540D48DD-8527-43D0-A1CE-C489D2C3B9F3}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}\{21185491-DAEF-4443-ADEA-4D10ECCF3661}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}\{21185491-DAEF-4443-ADEA-4D10ECCF3661}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}\{9C627513-8450-408F-9A54-0F17FD05D6DC}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}\{9C627513-8450-408F-9A54-0F17FD05D6DC}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}\{9A9E32C3-3BAB-4720-82C2-64BAFCDAE461}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}\{9A9E32C3-3BAB-4720-82C2-64BAFCDAE461}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}\{A6C040E2-7511-46D1-A41B-5D74D02BD22D}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}\{A6C040E2-7511-46D1-A41B-5D74D02BD22D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A4245F7A-F9B7-43E9-A3D6-7997E6A2BF36}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A4245F7A-F9B7-43E9-A3D6-7997E6A2BF36}\{09700B9C-42C1-4E8D-B5F4-310613922871}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A4245F7A-F9B7-43E9-A3D6-7997E6A2BF36}\{09700B9C-42C1-4E8D-B5F4-310613922871}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A5FA1D0B-5F93-4560-88FB-0A4B9D2353B8}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A5FA1D0B-5F93-4560-88FB-0A4B9D2353B8}\{16AB32A1-9AFD-43BE-A447-FF2FC1C621F0}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A5FA1D0B-5F93-4560-88FB-0A4B9D2353B8}\{16AB32A1-9AFD-43BE-A447-FF2FC1C621F0}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A8C2FBF2-2555-4B5A-ADFE-1E21A3ACB51C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A8C2FBF2-2555-4B5A-ADFE-1E21A3ACB51C}\{7D0F9E6E-8798-4D8C-ACC1-6F9F42ED669B}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A8C2FBF2-2555-4B5A-ADFE-1E21A3ACB51C}\{7D0F9E6E-8798-4D8C-ACC1-6F9F42ED669B}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}\{2381B075-4C89-4132-8DF4-F8F22940E0C6}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}\{2381B075-4C89-4132-8DF4-F8F22940E0C6}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}\{C908CE8D-806A-427A-8E22-7F7EE4D96095}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}\{C908CE8D-806A-427A-8E22-7F7EE4D96095}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}\{7CB4B4ED-DC96-44A2-A638-28204C20A97C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}\{7CB4B4ED-DC96-44A2-A638-28204C20A97C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}\{D899C333-918C-4161-9670-C4EBB1966538}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}\{D899C333-918C-4161-9670-C4EBB1966538}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CA34D959-B64F-411F-9CBB-FC7A4C7BDA15}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CA34D959-B64F-411F-9CBB-FC7A4C7BDA15}\{0ED2643C-0713-4AB7-A074-2B652A25E8EF}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CA34D959-B64F-411F-9CBB-FC7A4C7BDA15}\{0ED2643C-0713-4AB7-A074-2B652A25E8EF}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CD07CF07-0FD3-431A-940E-BFD8A19AD6F3}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CD07CF07-0FD3-431A-940E-BFD8A19AD6F3}\{D9AF549E-8ADA-46B3-9A28-727C1C93CC53}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CD07CF07-0FD3-431A-940E-BFD8A19AD6F3}\{D9AF549E-8ADA-46B3-9A28-727C1C93CC53}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}\{17998D26-0ED9-44F5-88C6-2ED559F82CF2}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}\{17998D26-0ED9-44F5-88C6-2ED559F82CF2}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}\{D34107EA-1B7D-4FB3-89FB-A259B9E90C90}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}\{D34107EA-1B7D-4FB3-89FB-A259B9E90C90}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}\{5016FD93-2EF5-4674-861E-E86804EE1754}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}\{5016FD93-2EF5-4674-861E-E86804EE1754}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}\{F067859E-4A24-4EE2-91AD-F2F547C63D8A}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}\{F067859E-4A24-4EE2-91AD-F2F547C63D8A}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D4D4179E-202F-460A-90C8-345F18A356D8}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D4D4179E-202F-460A-90C8-345F18A356D8}\{0685ACCC-43B0-4455-A38A-829E68A95160}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D4D4179E-202F-460A-90C8-345F18A356D8}\{0685ACCC-43B0-4455-A38A-829E68A95160}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D8D80EC0-D2E8-477E-BECD-FD698A9897FF}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D8D80EC0-D2E8-477E-BECD-FD698A9897FF}\{A475E4CA-5095-4CC6-80EA-07445471B42C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D8D80EC0-D2E8-477E-BECD-FD698A9897FF}\{A475E4CA-5095-4CC6-80EA-07445471B42C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}\{4D1D7056-9A84-4F9A-9AC5-37FF2495294E}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}\{4D1D7056-9A84-4F9A-9AC5-37FF2495294E}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}\{BF0F7210-256F-4EE4-A435-D9353934E090}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}\{BF0F7210-256F-4EE4-A435-D9353934E090}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}\{F904C593-48D1-45F8-B26C-CE3E130EDE3F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}\{F904C593-48D1-45F8-B26C-CE3E130EDE3F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}\{FC5F0308-B018-4463-9C0F-59B17CC30E6D}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}\{FC5F0308-B018-4463-9C0F-59B17CC30E6D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}\{5E11ED11-6EEB-441D-B740-69BCB1CA302D}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}\{5E11ED11-6EEB-441D-B740-69BCB1CA302D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}\{D75AB8EC-8FA9-4DEB-94AB-A30D01BC46C3}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}\{D75AB8EC-8FA9-4DEB-94AB-A30D01BC46C3}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}\{2FDBB54F-C65B-44EF-9CCD-F8F2E283C903}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}\{2FDBB54F-C65B-44EF-9CCD-F8F2E283C903}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}\{FD382AD9-1120-4D9F-8DF8-C3DC3BDD9C24}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}\{FD382AD9-1120-4D9F-8DF8-C3DC3BDD9C24}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F2DD647D-1665-4987-AAE0-96A644E34C86}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F2DD647D-1665-4987-AAE0-96A644E34C86}\{4B498665-56B6-47DC-9531-F170E151B80F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F2DD647D-1665-4987-AAE0-96A644E34C86}\{4B498665-56B6-47DC-9531-F170E151B80F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}\{7AA03938-148C-45A2-BA9C-D8038ACD24FC}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}\{7AA03938-148C-45A2-BA9C-D8038ACD24FC}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}\{AFB067A5-5793-4F08-8DC5-7965201973F2}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}\{AFB067A5-5793-4F08-8DC5-7965201973F2}.qbi e:\documents and settings\All Users\Application Data\Symantec\SubEng\platformid.dat e:\program files\Common Files\BitDefender e:\program files\Common Files\BitDefender\BitDefender Firewall\bdfirewall.txt e:\program files\Common Files\Symantec Shared e:\program files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll e:\program files\Common Files\Symantec Shared\IDS\GearInstall.log . (((((((((((((((((((( Bestanden Gemaakt van 2008-11-28 to 2008-12-30 )))))))))))))))))))))))))))))) . 2008-12-28 22:54 . 2008-12-28 22:54 <DIR> d-------- e:\program files\Trend Micro 2008-12-27 16:05 . 2008-12-30 10:08 <DIR> d-------- e:\program files\Call of Duty 2008-12-27 15:58 . 2008-12-28 22:48 766 --a------ e:\windows\CoD.INI 2008-12-23 18:08 . 2008-12-23 18:08 <DIR> d-------- e:\program files\MSXML 4.0 2008-12-22 19:26 . 2008-12-22 19:26 <DIR> d-------- e:\windows\system32\Adobe 2008-12-22 17:06 . 1996-11-06 13:02 302,592 --a------ e:\windows\unin0413.exe 2008-12-18 13:47 . 2008-12-18 13:47 <DIR> d-------- e:\program files\Avira 2008-12-18 13:47 . 2008-12-18 13:47 <DIR> d-------- e:\documents and settings\All Users\Application Data\Avira 2008-12-16 21:00 . 2008-12-30 15:07 <DIR> dr-h----- e:\documents and settings\Marijn\Onlangs geopend 2008-12-15 19:37 . 2008-12-15 19:37 850 --a------ e:\windows\system32\ProductTweaks.xml 2008-12-15 19:37 . 2008-12-15 19:37 385 --a------ e:\windows\system32\user_gensett.xml 2008-12-14 16:42 . 2008-12-14 16:40 410,984 --a------ e:\windows\system32\deploytk.dll 2008-12-13 19:19 . 2008-12-13 19:19 <DIR> d-------- e:\documents and settings\Marijn\Application Data\Uniblue 2008-12-13 19:18 . 2008-12-16 20:43 <DIR> d----c--- e:\documents and settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} 2008-11-12 16:34 . 2008-10-24 12:21 455,296 -----c--- e:\windows\system32\dllcache\mrxsmb.sys 2008-11-12 16:33 . 2008-09-04 18:17 1,106,944 -----c--- e:\windows\system32\dllcache\msxml3.dll 2008-11-10 19:04 . 2008-11-10 19:04 <DIR> d-------- e:\program files\Common Files\Cisco Systems 2008-11-10 19:04 . 2006-12-19 15:06 1,495,552 --a------ e:\windows\system32\epoPGPsdk.dll 2008-11-08 14:41 . 1998-10-29 16:45 306,688 --a------ e:\windows\IsUninst.exe 2008-11-01 16:13 . 2002-01-10 17:15 4,292,608 -ra------ e:\windows\unasetup.exe 2008-11-01 16:13 . 2008-11-01 16:13 53,248 --a------ e:\windows\system32\unrar.dll . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-29 18:33 138,376 ----a-w e:\windows\system32\drivers\PnkBstrK.sys 2008-12-29 18:32 202,448 ----a-w e:\windows\system32\PnkBstrB.exe 2008-12-27 12:30 --------- d--h--w e:\program files\InstallShield Installation Information 2008-12-22 13:30 --------- d-----w e:\program files\Common Files\InstallShield 2008-12-14 15:40 --------- d-----w e:\program files\Java 2008-10-23 12:43 286,720 ----a-w e:\windows\system32\gdi32.dll 2008-10-16 20:33 826,368 ----a-w e:\windows\system32\wininet.dll 2008-10-16 13:13 202,776 ----a-w e:\windows\system32\wuweb.dll 2008-10-16 13:13 1,809,944 ----a-w e:\windows\system32\wuaueng.dll 2008-10-16 13:12 561,688 ----a-w e:\windows\system32\wuapi.dll 2008-10-16 13:12 323,608 ----a-w e:\windows\system32\wucltui.dll 2008-10-16 13:09 92,696 ----a-w e:\windows\system32\cdm.dll 2008-10-16 13:09 51,224 ----a-w e:\windows\system32\wuauclt.exe 2008-10-16 13:09 43,544 ----a-w e:\windows\system32\wups2.dll 2008-10-16 13:08 34,328 ----a-w e:\windows\system32\wups.dll 2008-10-16 13:06 268,648 ----a-w e:\windows\system32\mucltui.dll 2008-10-16 13:06 208,744 ----a-w e:\windows\system32\muweb.dll 2008-10-03 10:05 247,326 ----a-w e:\windows\system32\strmdll.dll 2008-09-30 15:43 1,286,152 ----a-w e:\windows\system32\msxml4.dll 2008-09-15 15:28 1,846,528 ----a-w e:\windows\system32\win32k.sys 2008-09-10 01:16 1,307,648 ------w e:\windows\system32\msxml6.dll 2008-09-04 17:17 1,106,944 ----a-w e:\windows\system32\msxml3.dll . ((((((((((((((((((((((((((((( snapshot@2008-12-29_20.33.55,44 ))))))))))))))))))))))))))))))))))))))))) . + 2008-12-30 13:39:07 16,384 ----atw e:\windows\Temp\Perflib_Perfdata_7b4.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="e:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="e:\windows\system32\NvCpl.dll" [2006-10-22 7700480] "NvMediaCenter"="e:\windows\system32\NvMcTray.dll" [2006-10-22 86016] "SunJavaUpdateSched"="e:\program files\Java\jre6\bin\jusched.exe" [2008-12-14 136600] "avgnt"="e:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 e:\windows\soundman.exe] "nwiz"="nwiz.exe" [2006-10-22 e:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="e:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "e:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "e:\\Program Files\\Call of Duty\\CoDMP.exe"= . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-30 15:12:34 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . Voltooingstijd: 2008-12-30 15:14:28 ComboFix-quarantined-files.txt 2008-12-30 14:13:35 ComboFix2.txt 2008-12-30 13:59:55 ComboFix3.txt 2008-12-29 19:35:37 Pre-Run: 2.354.982.912 bytes beschikbaar Post-Run: 2,344,067,072 bytes beschikbaar 321 --- E O F --- 2008-12-24 16:01:34 HJTlog komt eraan

ComboFix 08-12-29.02 - Marijn 2008-12-30 15:10:29.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1043.18.511.294 [GMT 1:00] Gestart vanuit: e:\documents and settings\Marijn\Bureaublad\ComboFix.exe gebruikte Opdracht switches :: e:\documents and settings\Marijn\Bureaublad\CFScript.txt * Nieuw herstelpunt werd aangemaakt WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !! . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . e:\documents and settings\All Users\Application Data\McAfee e:\documents and settings\All Users\Application Data\McAfee\MSADP\Cache\SaSubDB.Bak e:\documents and settings\All Users\Application Data\McAfee\MSADP\SaSubDB.Dat e:\documents and settings\All Users\Application Data\McAfee\MSC\Cache\McSubDB.Bak e:\documents and settings\All Users\Application Data\McAfee\MSC\mcini.ini e:\documents and settings\All Users\Application Data\McAfee\MSC\McSubDB.Dat e:\documents and settings\All Users\Application Data\Symantec e:\documents and settings\All Users\Application Data\Symantec\{1B05DC73-DA93-48fa-856C-FA59EF6019EB}\SDKCfg00.xml e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{0A7CB824-3201-41B7-AEA1-6DEC1910B32C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{0A7CB824-3201-41B7-AEA1-6DEC1910B32C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{22C33377-D5E9-42E0-914D-B6B22C384748}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{22C33377-D5E9-42E0-914D-B6B22C384748}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}\{963819F8-E66C-4FF1-9596-6301FFCF0D6C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}\{963819F8-E66C-4FF1-9596-6301FFCF0D6C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}\{D98DDED2-B5B3-4555-825E-76E90C061FAA}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{03A6D3C5-CD33-4A41-A40B-64341566EBBB}\{D98DDED2-B5B3-4555-825E-76E90C061FAA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{05C36635-F098-4D77-AB57-1AD62CE5BF60}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{05C36635-F098-4D77-AB57-1AD62CE5BF60}\{D343554E-31A2-4571-B6BA-877AC1A6E350}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{05C36635-F098-4D77-AB57-1AD62CE5BF60}\{D343554E-31A2-4571-B6BA-877AC1A6E350}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}\{775AED1C-AADE-4ECF-A7F8-443440967552}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}\{775AED1C-AADE-4ECF-A7F8-443440967552}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}\{9397C2D4-AC2D-4C12-A7B0-8ADAAA2F125C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0B1258D4-64F2-45C0-AEB1-2B7F9D42DEAD}\{9397C2D4-AC2D-4C12-A7B0-8ADAAA2F125C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0D24799A-B8ED-4575-B015-2578DD98EAF9}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0D24799A-B8ED-4575-B015-2578DD98EAF9}\{EDB4BB86-9AD6-48A2-B305-5A3229E23FC5}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0D24799A-B8ED-4575-B015-2578DD98EAF9}\{EDB4BB86-9AD6-48A2-B305-5A3229E23FC5}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}\{615E933C-9006-4CDB-B331-CAC8492C1373}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}\{615E933C-9006-4CDB-B331-CAC8492C1373}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}\{AEC8E665-A730-4D6A-A255-ABC51C7C17EA}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{0F2A9A46-13C2-44A1-9DC6-A0BD712CEFF6}\{AEC8E665-A730-4D6A-A255-ABC51C7C17EA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}\{5609ABE6-60D9-428B-B018-30B68BB41D37}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}\{5609ABE6-60D9-428B-B018-30B68BB41D37}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}\{9DE00ABD-0E7C-45A3-9F40-C377AE0B46FB}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1150BC89-FFEE-451F-A8D6-D9C7410320CC}\{9DE00ABD-0E7C-45A3-9F40-C377AE0B46FB}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}\{750BF334-ED3E-4A58-98AF-8BEB0B9049BA}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}\{750BF334-ED3E-4A58-98AF-8BEB0B9049BA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}\{9A7AB75D-C51F-4990-9AC7-EA3FBC10CABD}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{136BB7A6-3610-4C35-824D-6C72B4D83124}\{9A7AB75D-C51F-4990-9AC7-EA3FBC10CABD}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{152F4450-704C-4946-BE0D-0F99ED29FCAA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{152F4450-704C-4946-BE0D-0F99ED29FCAA}\{CA0E6C95-022F-42FB-A5EA-00C6922BD95F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{152F4450-704C-4946-BE0D-0F99ED29FCAA}\{CA0E6C95-022F-42FB-A5EA-00C6922BD95F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{15BA58C8-FC08-4079-A043-73F8159F5F25}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{15BA58C8-FC08-4079-A043-73F8159F5F25}\{B0E7CDD9-208F-4CCF-873C-1869CDED1464}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{15BA58C8-FC08-4079-A043-73F8159F5F25}\{B0E7CDD9-208F-4CCF-873C-1869CDED1464}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1D3B74D7-1ACD-498A-841C-03D2B31D9C6D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1D3B74D7-1ACD-498A-841C-03D2B31D9C6D}\{20D705F3-B112-4AB0-9F1B-06BD484409F5}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1D3B74D7-1ACD-498A-841C-03D2B31D9C6D}\{20D705F3-B112-4AB0-9F1B-06BD484409F5}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}\{15BDC0EA-449D-4034-9E60-BA2E26ABF1AA}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}\{15BDC0EA-449D-4034-9E60-BA2E26ABF1AA}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}\{BD213155-AD88-4C82-8E73-3AA3F1DD4C7F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{1EFDAEE2-4DD4-4FDA-BA1B-34BEA314E2FE}\{BD213155-AD88-4C82-8E73-3AA3F1DD4C7F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}\{1214BD1F-D81F-4C30-A2D9-526C994E2829}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}\{1214BD1F-D81F-4C30-A2D9-526C994E2829}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}\{A69A597C-3DB8-4ED2-8EDA-6C9340E6694E}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{200F8571-D846-4EA0-8E83-05AE4F4B6805}\{A69A597C-3DB8-4ED2-8EDA-6C9340E6694E}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2469483F-7827-4CE6-AED5-8E3117184F9E}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2469483F-7827-4CE6-AED5-8E3117184F9E}\{6B9CD953-7A89-468A-B811-DAF665DFE709}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2469483F-7827-4CE6-AED5-8E3117184F9E}\{6B9CD953-7A89-468A-B811-DAF665DFE709}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2B86301A-D0E5-4C75-BE34-0419A6CBD0FF}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2B86301A-D0E5-4C75-BE34-0419A6CBD0FF}\{D35AF29B-CA2F-4875-A849-FD748959BFBE}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2B86301A-D0E5-4C75-BE34-0419A6CBD0FF}\{D35AF29B-CA2F-4875-A849-FD748959BFBE}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2D5E5DF6-CC21-485D-8EDB-DC7553C2F724}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2D5E5DF6-CC21-485D-8EDB-DC7553C2F724}\{C0CE0680-FCE5-4301-B22B-79C91996E029}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{2D5E5DF6-CC21-485D-8EDB-DC7553C2F724}\{C0CE0680-FCE5-4301-B22B-79C91996E029}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{3EEB2040-35DB-4777-A66B-5CFE93B356AF}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{3EEB2040-35DB-4777-A66B-5CFE93B356AF}\{918309DA-B695-4864-8A0D-7A3C90AA2054}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{3EEB2040-35DB-4777-A66B-5CFE93B356AF}\{918309DA-B695-4864-8A0D-7A3C90AA2054}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}\{6A78182E-A5D1-4F43-9449-C11EF77BA26F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}\{6A78182E-A5D1-4F43-9449-C11EF77BA26F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}\{E626B202-4705-44A5-BFEF-A5A8E73C55E7}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{414D275C-6DBC-4AA8-906F-F3AAF146BA17}\{E626B202-4705-44A5-BFEF-A5A8E73C55E7}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}\{12A1FF14-DB38-4B37-85EE-C323E45152EE}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}\{12A1FF14-DB38-4B37-85EE-C323E45152EE}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}\{235B65FF-F414-48A0-ACA1-DC24D8BF6423}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{4FD6BA67-7B68-4033-8562-D9C65C753F73}\{235B65FF-F414-48A0-ACA1-DC24D8BF6423}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}\{6698617E-CFFD-4CEE-8D93-FA0D13E75A79}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}\{6698617E-CFFD-4CEE-8D93-FA0D13E75A79}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}\{B28B6864-5C1B-4964-B685-526C269B5896}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{542C25BA-2233-4926-BE32-59678E9C4304}\{B28B6864-5C1B-4964-B685-526C269B5896}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5A040DF0-590E-4E9D-90D1-CC3E5FA834A0}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5A040DF0-590E-4E9D-90D1-CC3E5FA834A0}\{DA69E29B-C05B-4913-A75E-58789ACCD9E9}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5A040DF0-590E-4E9D-90D1-CC3E5FA834A0}\{DA69E29B-C05B-4913-A75E-58789ACCD9E9}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}\{8C0117A4-A702-472F-809C-17A03D3B41B9}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}\{8C0117A4-A702-472F-809C-17A03D3B41B9}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}\{AEC12DB9-3E64-41C7-AB29-5B1AFACACC09}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{5C9D708F-5F89-4D71-BE9E-CB8C97978402}\{AEC12DB9-3E64-41C7-AB29-5B1AFACACC09}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{6A4946F9-2A38-48A0-A6C9-ADD89BD44A94}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{6A4946F9-2A38-48A0-A6C9-ADD89BD44A94}\{0D680309-ED3A-4B1D-96AA-4BD1CBFC9427}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{6A4946F9-2A38-48A0-A6C9-ADD89BD44A94}\{0D680309-ED3A-4B1D-96AA-4BD1CBFC9427}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{70FF9564-4346-4E1D-BCC3-00E75214B868}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{70FF9564-4346-4E1D-BCC3-00E75214B868}\{14199D04-099B-48F6-BB44-DFB37FE6D758}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{70FF9564-4346-4E1D-BCC3-00E75214B868}\{14199D04-099B-48F6-BB44-DFB37FE6D758}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}\{26B1B9BD-B2E8-4657-ACDB-59D0824F072A}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}\{26B1B9BD-B2E8-4657-ACDB-59D0824F072A}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}\{B22C73F7-8D76-45BC-960E-9641D76B4182}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{79438512-F31B-44C6-AB59-A5D3DBDF7431}\{B22C73F7-8D76-45BC-960E-9641D76B4182}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{81A34777-2EDA-4E85-A88E-117984694CAC}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{81A34777-2EDA-4E85-A88E-117984694CAC}\{1EB89A81-71CC-4719-9DEC-2100A3A1BF4E}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{81A34777-2EDA-4E85-A88E-117984694CAC}\{1EB89A81-71CC-4719-9DEC-2100A3A1BF4E}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{854428D5-CA0D-4B66-8051-FFADDA281683}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{854428D5-CA0D-4B66-8051-FFADDA281683}\{BEBB27A3-E328-4AF6-82D0-497D33AF0791}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{854428D5-CA0D-4B66-8051-FFADDA281683}\{BEBB27A3-E328-4AF6-82D0-497D33AF0791}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}\{6C9BC775-B9FF-4637-A1C3-18CF8EB1C74C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}\{6C9BC775-B9FF-4637-A1C3-18CF8EB1C74C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}\{C2E5EFD2-8C4C-45E8-AD12-722C47FD9425}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{8580B852-F039-46F2-AC6F-45A588A2E3B9}\{C2E5EFD2-8C4C-45E8-AD12-722C47FD9425}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{85E41B4F-EE94-4493-A13F-608360AC2B17}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{85E41B4F-EE94-4493-A13F-608360AC2B17}\{04641B6B-731A-4918-B7D8-C29E35C888B2}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{85E41B4F-EE94-4493-A13F-608360AC2B17}\{04641B6B-731A-4918-B7D8-C29E35C888B2}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{959A95B1-EEC6-4B0C-8889-8A70028A3DD7}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{959A95B1-EEC6-4B0C-8889-8A70028A3DD7}\{540D48DD-8527-43D0-A1CE-C489D2C3B9F3}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{959A95B1-EEC6-4B0C-8889-8A70028A3DD7}\{540D48DD-8527-43D0-A1CE-C489D2C3B9F3}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}\{21185491-DAEF-4443-ADEA-4D10ECCF3661}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}\{21185491-DAEF-4443-ADEA-4D10ECCF3661}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}\{9C627513-8450-408F-9A54-0F17FD05D6DC}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{9A00C48D-D59B-4FF8-8359-640E0F2A8622}\{9C627513-8450-408F-9A54-0F17FD05D6DC}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}\{9A9E32C3-3BAB-4720-82C2-64BAFCDAE461}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}\{9A9E32C3-3BAB-4720-82C2-64BAFCDAE461}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}\{A6C040E2-7511-46D1-A41B-5D74D02BD22D}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A33D8038-F370-46E5-88AB-F751BBBE0A00}\{A6C040E2-7511-46D1-A41B-5D74D02BD22D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A4245F7A-F9B7-43E9-A3D6-7997E6A2BF36}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A4245F7A-F9B7-43E9-A3D6-7997E6A2BF36}\{09700B9C-42C1-4E8D-B5F4-310613922871}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A4245F7A-F9B7-43E9-A3D6-7997E6A2BF36}\{09700B9C-42C1-4E8D-B5F4-310613922871}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A5FA1D0B-5F93-4560-88FB-0A4B9D2353B8}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A5FA1D0B-5F93-4560-88FB-0A4B9D2353B8}\{16AB32A1-9AFD-43BE-A447-FF2FC1C621F0}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A5FA1D0B-5F93-4560-88FB-0A4B9D2353B8}\{16AB32A1-9AFD-43BE-A447-FF2FC1C621F0}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A8C2FBF2-2555-4B5A-ADFE-1E21A3ACB51C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A8C2FBF2-2555-4B5A-ADFE-1E21A3ACB51C}\{7D0F9E6E-8798-4D8C-ACC1-6F9F42ED669B}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A8C2FBF2-2555-4B5A-ADFE-1E21A3ACB51C}\{7D0F9E6E-8798-4D8C-ACC1-6F9F42ED669B}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}\{2381B075-4C89-4132-8DF4-F8F22940E0C6}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}\{2381B075-4C89-4132-8DF4-F8F22940E0C6}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}\{C908CE8D-806A-427A-8E22-7F7EE4D96095}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A91437CC-681F-4CA4-B946-50A6E36F1AE4}\{C908CE8D-806A-427A-8E22-7F7EE4D96095}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}\{7CB4B4ED-DC96-44A2-A638-28204C20A97C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}\{7CB4B4ED-DC96-44A2-A638-28204C20A97C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}\{D899C333-918C-4161-9670-C4EBB1966538}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{A9E2115B-2191-4463-A418-B271DFB56E9D}\{D899C333-918C-4161-9670-C4EBB1966538}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CA34D959-B64F-411F-9CBB-FC7A4C7BDA15}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CA34D959-B64F-411F-9CBB-FC7A4C7BDA15}\{0ED2643C-0713-4AB7-A074-2B652A25E8EF}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CA34D959-B64F-411F-9CBB-FC7A4C7BDA15}\{0ED2643C-0713-4AB7-A074-2B652A25E8EF}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CD07CF07-0FD3-431A-940E-BFD8A19AD6F3}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CD07CF07-0FD3-431A-940E-BFD8A19AD6F3}\{D9AF549E-8ADA-46B3-9A28-727C1C93CC53}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CD07CF07-0FD3-431A-940E-BFD8A19AD6F3}\{D9AF549E-8ADA-46B3-9A28-727C1C93CC53}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}\{17998D26-0ED9-44F5-88C6-2ED559F82CF2}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}\{17998D26-0ED9-44F5-88C6-2ED559F82CF2}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}\{D34107EA-1B7D-4FB3-89FB-A259B9E90C90}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CEC78544-607B-4A1B-9A57-D57811EF3361}\{D34107EA-1B7D-4FB3-89FB-A259B9E90C90}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}\{5016FD93-2EF5-4674-861E-E86804EE1754}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}\{5016FD93-2EF5-4674-861E-E86804EE1754}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}\{F067859E-4A24-4EE2-91AD-F2F547C63D8A}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{CECE3616-4C28-4E58-800B-2F8F60754B01}\{F067859E-4A24-4EE2-91AD-F2F547C63D8A}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D4D4179E-202F-460A-90C8-345F18A356D8}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D4D4179E-202F-460A-90C8-345F18A356D8}\{0685ACCC-43B0-4455-A38A-829E68A95160}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D4D4179E-202F-460A-90C8-345F18A356D8}\{0685ACCC-43B0-4455-A38A-829E68A95160}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D8D80EC0-D2E8-477E-BECD-FD698A9897FF}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D8D80EC0-D2E8-477E-BECD-FD698A9897FF}\{A475E4CA-5095-4CC6-80EA-07445471B42C}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{D8D80EC0-D2E8-477E-BECD-FD698A9897FF}\{A475E4CA-5095-4CC6-80EA-07445471B42C}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}\{4D1D7056-9A84-4F9A-9AC5-37FF2495294E}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}\{4D1D7056-9A84-4F9A-9AC5-37FF2495294E}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}\{BF0F7210-256F-4EE4-A435-D9353934E090}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E3C0C982-DAE6-4E3A-B95E-9776606A7971}\{BF0F7210-256F-4EE4-A435-D9353934E090}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}\{F904C593-48D1-45F8-B26C-CE3E130EDE3F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}\{F904C593-48D1-45F8-B26C-CE3E130EDE3F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}\{FC5F0308-B018-4463-9C0F-59B17CC30E6D}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E5054828-03B7-43E7-AD6F-4ED92D969922}\{FC5F0308-B018-4463-9C0F-59B17CC30E6D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}\{5E11ED11-6EEB-441D-B740-69BCB1CA302D}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}\{5E11ED11-6EEB-441D-B740-69BCB1CA302D}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}\{D75AB8EC-8FA9-4DEB-94AB-A30D01BC46C3}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{E946F7D7-7FFC-4858-B066-04ED69249403}\{D75AB8EC-8FA9-4DEB-94AB-A30D01BC46C3}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}\{2FDBB54F-C65B-44EF-9CCD-F8F2E283C903}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}\{2FDBB54F-C65B-44EF-9CCD-F8F2E283C903}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}\{FD382AD9-1120-4D9F-8DF8-C3DC3BDD9C24}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{EE258BDE-D381-418B-9277-D3F85103D176}\{FD382AD9-1120-4D9F-8DF8-C3DC3BDD9C24}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F2DD647D-1665-4987-AAE0-96A644E34C86}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F2DD647D-1665-4987-AAE0-96A644E34C86}\{4B498665-56B6-47DC-9531-F170E151B80F}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F2DD647D-1665-4987-AAE0-96A644E34C86}\{4B498665-56B6-47DC-9531-F170E151B80F}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}\{7AA03938-148C-45A2-BA9C-D8038ACD24FC}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}\{7AA03938-148C-45A2-BA9C-D8038ACD24FC}.qbi e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}\{AFB067A5-5793-4F08-8DC5-7965201973F2}.qbd e:\documents and settings\All Users\Application Data\Symantec\Shared\QBackup\{F48E0769-0A83-44A1-901E-6A1B5AF7AC36}\{AFB067A5-5793-4F08-8DC5-7965201973F2}.qbi e:\documents and settings\All Users\Application Data\Symantec\SubEng\platformid.dat e:\program files\Common Files\BitDefender e:\program files\Common Files\BitDefender\BitDefender Firewall\bdfirewall.txt e:\program files\Common Files\Symantec Shared e:\program files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll e:\program files\Common Files\Symantec Shared\IDS\GearInstall.log . (((((((((((((((((((( Bestanden Gemaakt van 2008-11-28 to 2008-12-30 )))))))))))))))))))))))))))))) . 2008-12-28 22:54 . 2008-12-28 22:54 <DIR> d-------- e:\program files\Trend Micro 2008-12-27 16:05 . 2008-12-30 10:08 <DIR> d-------- e:\program files\Call of Duty 2008-12-27 15:58 . 2008-12-28 22:48 766 --a------ e:\windows\CoD.INI 2008-12-23 18:08 . 2008-12-23 18:08 <DIR> d-------- e:\program files\MSXML 4.0 2008-12-22 19:26 . 2008-12-22 19:26 <DIR> d-------- e:\windows\system32\Adobe 2008-12-22 17:06 . 1996-11-06 13:02 302,592 --a------ e:\windows\unin0413.exe 2008-12-18 13:47 . 2008-12-18 13:47 <DIR> d-------- e:\program files\Avira 2008-12-18 13:47 . 2008-12-18 13:47 <DIR> d-------- e:\documents and settings\All Users\Application Data\Avira 2008-12-16 21:00 . 2008-12-30 15:07 <DIR> dr-h----- e:\documents and settings\Marijn\Onlangs geopend 2008-12-15 19:37 . 2008-12-15 19:37 850 --a------ e:\windows\system32\ProductTweaks.xml 2008-12-15 19:37 . 2008-12-15 19:37 385 --a------ e:\windows\system32\user_gensett.xml 2008-12-14 16:42 . 2008-12-14 16:40 410,984 --a------ e:\windows\system32\deploytk.dll 2008-12-13 19:19 . 2008-12-13 19:19 <DIR> d-------- e:\documents and settings\Marijn\Application Data\Uniblue 2008-12-13 19:18 . 2008-12-16 20:43 <DIR> d----c--- e:\documents and settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} 2008-11-12 16:34 . 2008-10-24 12:21 455,296 -----c--- e:\windows\system32\dllcache\mrxsmb.sys 2008-11-12 16:33 . 2008-09-04 18:17 1,106,944 -----c--- e:\windows\system32\dllcache\msxml3.dll 2008-11-10 19:04 . 2008-11-10 19:04 <DIR> d-------- e:\program files\Common Files\Cisco Systems 2008-11-10 19:04 . 2006-12-19 15:06 1,495,552 --a------ e:\windows\system32\epoPGPsdk.dll 2008-11-08 14:41 . 1998-10-29 16:45 306,688 --a------ e:\windows\IsUninst.exe 2008-11-01 16:13 . 2002-01-10 17:15 4,292,608 -ra------ e:\windows\unasetup.exe 2008-11-01 16:13 . 2008-11-01 16:13 53,248 --a------ e:\windows\system32\unrar.dll . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-29 18:33 138,376 ----a-w e:\windows\system32\drivers\PnkBstrK.sys 2008-12-29 18:32 202,448 ----a-w e:\windows\system32\PnkBstrB.exe 2008-12-27 12:30 --------- d--h--w e:\program files\InstallShield Installation Information 2008-12-22 13:30 --------- d-----w e:\program files\Common Files\InstallShield 2008-12-14 15:40 --------- d-----w e:\program files\Java 2008-10-23 12:43 286,720 ----a-w e:\windows\system32\gdi32.dll 2008-10-16 20:33 826,368 ----a-w e:\windows\system32\wininet.dll 2008-10-16 13:13 202,776 ----a-w e:\windows\system32\wuweb.dll 2008-10-16 13:13 1,809,944 ----a-w e:\windows\system32\wuaueng.dll 2008-10-16 13:12 561,688 ----a-w e:\windows\system32\wuapi.dll 2008-10-16 13:12 323,608 ----a-w e:\windows\system32\wucltui.dll 2008-10-16 13:09 92,696 ----a-w e:\windows\system32\cdm.dll 2008-10-16 13:09 51,224 ----a-w e:\windows\system32\wuauclt.exe 2008-10-16 13:09 43,544 ----a-w e:\windows\system32\wups2.dll 2008-10-16 13:08 34,328 ----a-w e:\windows\system32\wups.dll 2008-10-16 13:06 268,648 ----a-w e:\windows\system32\mucltui.dll 2008-10-16 13:06 208,744 ----a-w e:\windows\system32\muweb.dll 2008-10-03 10:05 247,326 ----a-w e:\windows\system32\strmdll.dll 2008-09-30 15:43 1,286,152 ----a-w e:\windows\system32\msxml4.dll 2008-09-15 15:28 1,846,528 ----a-w e:\windows\system32\win32k.sys 2008-09-10 01:16 1,307,648 ------w e:\windows\system32\msxml6.dll 2008-09-04 17:17 1,106,944 ----a-w e:\windows\system32\msxml3.dll . ((((((((((((((((((((((((((((( snapshot@2008-12-29_20.33.55,44 ))))))))))))))))))))))))))))))))))))))))) . + 2008-12-30 13:39:07 16,384 ----atw e:\windows\Temp\Perflib_Perfdata_7b4.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="e:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="e:\windows\system32\NvCpl.dll" [2006-10-22 7700480] "NvMediaCenter"="e:\windows\system32\NvMcTray.dll" [2006-10-22 86016] "SunJavaUpdateSched"="e:\program files\Java\jre6\bin\jusched.exe" [2008-12-14 136600] "avgnt"="e:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 e:\windows\soundman.exe] "nwiz"="nwiz.exe" [2006-10-22 e:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="e:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "e:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "e:\\Program Files\\Call of Duty\\CoDMP.exe"= . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-30 15:12:34 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . Voltooingstijd: 2008-12-30 15:14:28 ComboFix-quarantined-files.txt 2008-12-30 14:13:35 ComboFix2.txt 2008-12-30 13:59:55 ComboFix3.txt 2008-12-29 19:35:37 Pre-Run: 2.354.982.912 bytes beschikbaar Post-Run: 2,344,067,072 bytes beschikbaar 321 --- E O F --- 2008-12-24 16:01:34 HJTlog komt eraan

ik probeer combofix te verwijderen , maar het werkt niet via uitvoren -> combofix / u , dan start ie gewoon en maakt een log .... , hoe krijg ik het weg ?

al die virusscanners heb ik gehad , omdat ik niet zeker was van de voorgaande (gratis trial versions) nu heb ik free avira ; de rest is verwijderd normaal gezien , mijn probleem is dat ik niet weet of er een probleem is ; het laden is vaak traag , maar vanals het is opgestart , is alles normaal , dit geldt ook voor programma's ,bv. internet..

zou ik deze programma's moeten laten staan of wegdoen ? , bij het wegdoen van Combofix vroeg hij om Windows recovery console te installeren en dit wist ik niet dus heb ik de 2 programma's voorlopig nog laten staan...

gelukt ! , kan het zijn dat die programma's Call of duty Multiplayer tegenwerken , want dit blijft nu altijd vast zitten ,... ComboFix 08-12-28.04 - Marijn 2008-12-29 20:30:10.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1043.18.511.330 [GMT 1:00] Running from: e:\documents and settings\Marijn\Bureaublad\ComboFix.exe AV: BitDefender Antivirus *On-access scanning disabled* (Updated) AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated) FW: BitDefender Firewall *disabled* * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . e:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat e:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat ----- BITS: Possible infected sites ----- hxxp://gateway.digitalmusicnotebook.com . ((((((((((((((((((((((((( Files Created from 2008-11-28 to 2008-12-29 ))))))))))))))))))))))))))))))) . 2008-12-29 20:27 . 2008-12-29 20:27 <DIR> d-------- E:\32788R22FWJFW 2008-12-28 22:54 . 2008-12-28 22:54 <DIR> d-------- e:\program files\Trend Micro 2008-12-27 16:05 . 2008-12-29 19:22 <DIR> d-------- e:\program files\Call of Duty 2008-12-27 15:58 . 2008-12-28 22:48 766 --a------ e:\windows\CoD.INI 2008-12-23 18:08 . 2008-12-23 18:08 <DIR> d-------- e:\program files\MSXML 4.0 2008-12-22 19:26 . 2008-12-22 19:26 <DIR> d-------- e:\windows\system32\Adobe 2008-12-22 17:06 . 1996-11-06 13:02 302,592 --a------ e:\windows\unin0413.exe 2008-12-18 13:47 . 2008-12-18 13:47 <DIR> d-------- e:\program files\Avira 2008-12-18 13:47 . 2008-12-18 13:47 <DIR> d-------- e:\documents and settings\All Users\Application Data\Avira 2008-12-16 21:00 . 2008-12-28 23:38 <DIR> dr-h----- e:\documents and settings\Marijn\Onlangs geopend 2008-12-15 19:37 . 2008-12-15 19:37 850 --a------ e:\windows\system32\ProductTweaks.xml 2008-12-15 19:37 . 2008-12-15 19:37 385 --a------ e:\windows\system32\user_gensett.xml 2008-12-15 19:25 . 2008-12-16 20:58 <DIR> d-------- e:\program files\Common Files\BitDefender 2008-12-14 16:47 . 2008-12-14 16:47 244 --ah----- E:\sqmnoopt07.sqm 2008-12-14 16:47 . 2008-12-14 16:47 232 --ah----- E:\sqmdata07.sqm 2008-12-14 16:42 . 2008-12-14 16:40 410,984 --a------ e:\windows\system32\deploytk.dll 2008-12-13 19:19 . 2008-12-13 19:19 <DIR> d-------- e:\documents and settings\Marijn\Application Data\Uniblue 2008-12-13 19:18 . 2008-12-16 20:43 <DIR> d----c--- e:\documents and settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} 2008-12-12 19:14 . 2008-12-12 19:14 244 --ah----- E:\sqmnoopt06.sqm 2008-12-12 19:14 . 2008-12-12 19:14 232 --ah----- E:\sqmdata06.sqm 2008-12-04 19:12 . 2008-12-04 19:12 244 --ah----- E:\sqmnoopt05.sqm 2008-12-04 19:12 . 2008-12-04 19:12 232 --ah----- E:\sqmdata05.sqm 2008-12-03 16:14 . 2008-12-03 16:14 244 --ah----- E:\sqmnoopt04.sqm 2008-12-03 16:14 . 2008-12-03 16:14 232 --ah----- E:\sqmdata04.sqm . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-29 18:33 138,376 ----a-w e:\windows\system32\drivers\PnkBstrK.sys 2008-12-29 18:32 202,448 ----a-w e:\windows\system32\PnkBstrB.exe 2008-12-27 12:30 --------- d--h--w e:\program files\InstallShield Installation Information 2008-12-26 14:26 --------- d-----w e:\program files\Common Files\Symantec Shared 2008-12-24 12:26 --------- d-----w e:\documents and settings\All Users\Application Data\Symantec 2008-12-22 13:30 --------- d-----w e:\program files\Common Files\InstallShield 2008-12-14 15:40 --------- d-----w e:\program files\Java 2008-11-13 19:00 --------- d-----w e:\documents and settings\All Users\Application Data\McAfee 2008-11-10 18:04 --------- d-----w e:\program files\Common Files\Cisco Systems 2008-11-01 15:13 53,248 ----a-w e:\windows\system32\unrar.dll 2008-10-23 12:43 286,720 ----a-w e:\windows\system32\gdi32.dll 2008-10-16 20:33 826,368 ----a-w e:\windows\system32\wininet.dll 2008-10-16 13:13 202,776 ----a-w e:\windows\system32\wuweb.dll 2008-10-16 13:13 1,809,944 ----a-w e:\windows\system32\wuaueng.dll 2008-10-16 13:12 561,688 ----a-w e:\windows\system32\wuapi.dll 2008-10-16 13:12 323,608 ----a-w e:\windows\system32\wucltui.dll 2008-10-16 13:09 92,696 ----a-w e:\windows\system32\cdm.dll 2008-10-16 13:09 51,224 ----a-w e:\windows\system32\wuauclt.exe 2008-10-16 13:09 43,544 ----a-w e:\windows\system32\wups2.dll 2008-10-16 13:08 34,328 ----a-w e:\windows\system32\wups.dll 2008-10-16 13:06 268,648 ----a-w e:\windows\system32\mucltui.dll 2008-10-16 13:06 208,744 ----a-w e:\windows\system32\muweb.dll 2008-10-03 10:05 247,326 ----a-w e:\windows\system32\strmdll.dll 2008-09-30 15:43 1,286,152 ----a-w e:\windows\system32\msxml4.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="e:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="e:\windows\system32\NvCpl.dll" [2006-10-22 7700480] "NvMediaCenter"="e:\windows\system32\NvMcTray.dll" [2006-10-22 86016] "SunJavaUpdateSched"="e:\program files\Java\jre6\bin\jusched.exe" [2008-12-14 136600] "avgnt"="e:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 e:\windows\soundman.exe] "nwiz"="nwiz.exe" [2006-10-22 e:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="e:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "e:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "e:\\Program Files\\Call of Duty\\CoDMP.exe"= *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 . - - - - ORPHANS REMOVED - - - - HKLM-Run-AceGain LiveUpdate - e:\program files\AceGain\LiveUpdate\LiveUpdate.exe . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.be/ uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-29 20:33:25 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-12-29 20:35:35 ComboFix-quarantined-files.txt 2008-12-29 19:34:32 Pre-Run: 1.888.899.072 bytes beschikbaar Post-Run: 2,376,671,232 bytes beschikbaar 123 --- E O F --- 2008-12-24 16:01:34

wat bedoel je met opslaan op bureaublad , daarnaar kopiëren? (dat heb ik al gedaan en werkte ook niet ) het is gewoon een bestand , geen icoon of zo ...

combofix lukt me niet , eerst zegt hij combofix hernoemen als combofix[1] , gelieve een andere naam te gebruiken dan klik ik op ok , en dan verdwijnt alles , ik zoek het bestand , het zit in E Windows Prefetch , ik dubbelklik , en Windows kan het bestand niet openen ...

Ja , soms kan hij vrij snel zijn , en andere keren zeeeeeeer traag ( 5 tot 10 min om op te starten ) ik weet niet door wat dit komt ,maar hij is ook wel niet meer zo jong...

indeed , niet op gedacht , maar nu lijkt het weg te zijn , als het niet in iets anders veranderd is tenminste , mn HJT log staat er intussen op dus je kan eens kijken ...

ok thx

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:55:16, on 28/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: E:\WINDOWS\System32\smss.exe E:\WINDOWS\system32\winlogon.exe E:\WINDOWS\system32\services.exe E:\WINDOWS\system32\lsass.exe E:\WINDOWS\system32\svchost.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\Explorer.EXE E:\WINDOWS\system32\spoolsv.exe E:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe E:\WINDOWS\SOUNDMAN.EXE E:\WINDOWS\system32\RUNDLL32.EXE E:\Program Files\Java\jre6\bin\jusched.exe E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe E:\WINDOWS\system32\ctfmon.exe E:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe E:\Program Files\Java\jre6\bin\jqs.exe E:\WINDOWS\system32\nvsvc32.exe E:\WINDOWS\system32\PnkBstrA.exe E:\WINDOWS\system32\PnkBstrB.exe E:\WINDOWS\system32\taskmgr.exe E:\Program Files\Internet Explorer\iexplore.exe E:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [AceGain LiveUpdate] E:\Program Files\AceGain\LiveUpdate\LiveUpdate.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [sunJavaUpdateSched] "E:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - E:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - E:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe -- End of file - 4897 bytes ik weet niet direct wat PunkBstrA en B is ... , misschien iets met games te maken ? ( punkbuster )

ik gebruik als virusscanner avira antivirus , en daar kun je detections, suspicious files en warnings bij hebben , ik scande F en ik kreeg 56 warnings en no virus or unwanted program found , ik kijk naar het report en het blijkt allemaal " WARNING, COULD NOT OPEN FILE !" te zijn , is dit erg ? report : Avira AntiVir Personal Report file date: zaterdag 27 december 2008 13:50 Scanning for 1119750 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 3) [5.1.2600] Boot mode: Normally booted Username: Marijn Computer name: MESTDAGH-9E4CBD Version information: BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00 AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:26 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19 LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36 ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24/12/2008 12:17:43 ANTIVIR2.VDF : 7.1.1.34 2048 Bytes 24/12/2008 12:17:44 ANTIVIR3.VDF : 7.1.1.37 39424 Bytes 25/12/2008 12:52:03 Engineversion : 8.2.0.45 AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56 AESCRIPT.DLL : 8.1.1.19 336252 Bytes 19/12/2008 16:58:30 AESCN.DLL : 8.1.1.5 123251 Bytes 7/11/2008 15:06:41 AERDL.DLL : 8.1.1.3 438645 Bytes 4/11/2008 13:58:38 AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 09:41:39 AEOFFICE.DLL : 8.1.0.33 196987 Bytes 19/12/2008 16:58:29 AEHEUR.DLL : 8.1.0.75 1524087 Bytes 19/12/2008 16:58:28 AEHELP.DLL : 8.1.2.0 119159 Bytes 19/12/2008 16:58:26 AEGEN.DLL : 8.1.1.8 323956 Bytes 19/12/2008 16:58:25 AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56 AECORE.DLL : 8.1.5.2 172405 Bytes 19/12/2008 16:58:24 AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56 AVWINLL.DLL : 1.0.0.12 15105 Bytes 9/07/2008 08:40:05 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01 AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15 AVREG.DLL : 8.0.0.1 33537 Bytes 9/05/2008 11:26:40 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37 Configuration settings for the scan: Jobname..........................: ShlExt Configuration file...............: E:\DOCUME~1\Marijn\LOCALS~1\Temp\d8a812de.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: F:, Process scan.....................: off Scan registry....................: off Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: zaterdag 27 december 2008 13:50 Starting the file scan: Begin scan in 'F:\' F:\d40f8e90701992c37add3648c2\admparse.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\advpack.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\browseui.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\corpol.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\custsat.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\dxtmsft.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\dxtrans.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\extmgr.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\hmmapi.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\icardie.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ie4uinit.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieakeng.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieaksie.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieakui.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieapfltr.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\iedkcs32.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\iedw.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieencode.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieframe.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\iepeers.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieproxy.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\iernonce.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\iertutil.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\iesetup.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieudinit.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\ieui.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\iexplore.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\imgutil.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\inseng.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\jscript.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\jsproxy.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\licmgr10.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\msfeeds.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\msfeedsbs.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\msfeedssync.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\mshta.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\mshtml.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\mshtmled.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\mshtmler.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\msls31.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\msrating.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\mstime.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\occache.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\pngfilt.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\shdocvw.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\shlwapi.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\spmsg.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\spuninst.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\spupdsvc.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\url.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\urlmon.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\vbscript.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\vgx.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\webcheck.dll [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\winfxdocobj.exe [WARNING] The file could not be opened! F:\d40f8e90701992c37add3648c2\wininet.dll [WARNING] The file could not be opened! End of the scan: zaterdag 27 december 2008 13:51 Used time: 00:48 Minute(s) The scan has been done completely. 15 Scanning directories 545 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 56 Files cannot be scanned 489 Files not concerned 12 Archives were scanned 56 Warnings 0 Notes

mijn computer is weer eens sloom ; dit gebeurt wel vaker , maar meestal is er een oorzaak ,dus ik begin uitleg te zoeken via google over de processen die lopen. niet dat er te veel cpu gebruikt wordt , dit blijft op +-0CPU gebruik staan . ik vind dus het proces SMSS.EXE en het blijkt dat 2 zo'n dingen bestaan , proces van windows en trojan horse ; het verschil bleek dat het windows proces onder windows/system32 moet zitten en de trojan gewoon onder windows , dus ik zoek naar het bestand smss.exe , en ik vind het in C:\WINDOWS\system32 (=OK) D:\WINDOWS\system32 (=OK) E:\WINDOWS\system32 ( = OK) maar dan ook E:\WINDOWS\ServicePackFiles\i386 ( = ?) moet ik dat laatse dan verwijderen of niet ?

momenteel is het no niet terug gekomen , het lijkt plots weg te zijn ... als het nog terug zou komen zal ik log posten. (tijdelijke) oplossing : direct verwijderen vanals het erop komt (via configuratiescherm-> software) en dit blijven doen tot het wegblijft ...

eergisteren kreeg ik plots een icoon van norton security scan op m'n computer . ik dacht al direct dat er iets fout moest zijn dus , ik verwijderde het gewoon , missie succesvol dacht ik , totdat enkele uren later hetzelfde icoontje er terugstaat , ik kijk weer bij software en daar staat norton weer helemaal geïnstalleerd . ik kijk naar de versie en het is versie 2.0.0 , dit blijkt helemaal niet te bestaan volgens de site van norton , dus ik start een chat met een medewerker van norton ,en die zegt dat ze het probleem kennen , maar dat hij mij niet kan helpen , mijn ouders hebben hetzelfde probleem . ik heb avira en zij Mc affee , maar beide virus scanners schijnen het niet op te merken ... , wat zou ik moeten doen ? ad-aware heb ik al eens geprobeerd , maar dan ging men computer half en half in crash tot ik ad-aware verwijderde. please help .