Missy_M563

ik heb inmiddels die bestanden verwijderd en vipre twee keer laten scannen en die kan gelukkig niks meer vinden.... avg heb ik omdat er maar een scanner tegelijkertijd kon draaien uiteindelijk van mijn pc afgegooid... ik dacht er aan om een andere te nemen en ik dacht aan eset? in ieder geval hoop ik dat die trojans zich ergens anders gaan vervelen dan op mijn pc.. en dat ze dus wegblijven ontzettend bedankt voor je tijd en je moeite!!

oke Vipre heeft inmiddels gescand en die zei weer dit: Trojan.win32.Generic!SB.0 C:\\Windows\Temp\Mrrp.tmp\setup.exe Trojan.win32.Genreic!BT 2 stuks en de bestanden staan op mijn losse harde schijf... deze bestanden zijn trouwens spelletjes, als ik deze zou verwijderen zou dan ook de trojan wegzijn, of denk ik nu iets te makkelijk??

ja dat is eigenlijk precies wat ik bedoel..

dat wil ik wel doen, maar hoe doe je dat? dit staat namelijk niet verder in de bestandsmap, en kopieren plakken werkt niet bij jotti??

ik heb gedaan wat jij zei.... en er is niets gevonden...

hoi, nou ik heb net gescand met avg en die heeft dit nog gevonden: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe (5596):\memory_00010000";"Trojaans paard Agent_r.XJ";"Object is niet toegankelijk." "C:\Program Files (x86)\Mozilla Firefox\firefox.exe (5596)";"Trojaans paard Agent_r.XJ";"" en m'n computer is nog niet blijven hangen dus het gaat volgens mij wel de goede kant op!

kijk, dit werkt al beter... bij deze de log: ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6211 # api_version=3.0.2 # EOSSerial=6688111a75c4c54f81a1202a5a64427a # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2010-12-01 06:20:33 # local_time=2010-12-01 07:20:33 (+0100, West-Europa (standaardtijd)) # country="Netherlands" # lang=1033 # osver=6.1.7600 NT # compatibility_mode=1031 16777213 100 92 3947 18032320 0 0 # compatibility_mode=5893 16776574 66 85 27577700 42843904 0 0 # compatibility_mode=8192 67108863 100 0 3696 3696 0 0 # scanned=195124 # found=8 # cleaned=8 # scan_time=13578 C:\Users\Merel\DoctorWeb\Quarantine\jsdfaot1.exe probably a variant of Win32/Spy.Swisyn.EJ trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Users\Merel\DoctorWeb\Quarantine\vmdxsdyfa[11.htm probably a variant of Win32/Spy.Swisyn.EJ trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SDU7V50V\lpgbiq[1].php a variant of Win32/Kryptik.ILM trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Windows\Temp\wkhn.exe a variant of Win32/Kryptik.ILM trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C C:\Windows\Temp\vxyw.tmp\setup.exe Win32/MBRlock.A trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C F:\hiddenobject\Reincarnations 2 Uncover the Past CE 10\Reincarnations 2 Uncover the Past CE.rar a variant of Win32/Olmarik.ADJ trojan (deleted - quarantined) 00000000000000000000000000000000 C F:\hiddenobject\Mystery Case Files - Madame Fate 8\patch\Madame Fate.exe probably a variant of Win32/Agent.LUJTPJL trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C F:\nero_nzbmasters[1]\Nero 7.11.10.0 All Languages (NL) Premium\Nero-7.11.10.0_all_update.exe Win32/Toolbar.AskSBar application (deleted - quarantined) 00000000000000000000000000000000 C

hej nou ik heb het vandaag weer geprobeerd, en weer zonder resultaat... is er geen andere manier om dit op te lossen?? ik moet zeggen dat ik er errug gefrustreerd van raak!!

zie je zoiets dacht ik al... ik probeer het morgen wel nog een keer, maar ik heb er een hard hoofd in...

hej, ik denk dat ik gek word!! lijkt wel of er iets mis is met mijn internetverbinding....elke keer als ik probeer te uploaden (zowel via deze site als via hotmail) doet tie of niks behalve laden en wanneer het dan is een keer lukt en ik wil hem verzenden zegt hij dat hij mijn internetverbinding niet constant is.... ik heb dat log zelfs verdeeld in 8 stukken om te kijken of dat ging, maar dan heb ik nog steeds hetzelfde probleem... snap er nu echt de ballen van.... ik heb dit nog nooit eerder gehad ---------- Post toegevoegd om 17:07 ---------- Vorige post was om 17:06 ---------- volgens mijn inbox van deze site heb ik wel wat naar jou toegezonden maar ik weet niet of dat het hele bestand is....heb jij iets ontvangen?

hoi ik heb geprobeerd om het als bijlage te versturen, maar hij lijkt te blijven hangen bij het uploaden... ik heb het de hele middag de tijd gegeven maar hij blijft maar uploaden zonder resultaat...

hej ik heb het nu drie keer geprobeerd om dat log hierop te zetten, maar als ik dat dus probeer (ik krijg hem na lang wachten wel in dit venster) gaat er iets fout met versturen waardoor het niet lukt.... het logbestand is ook zo'n 10 mb, best groot...doe ik iets fout? maar ik weet niet of je er wat aan hebt hij heeft 2 bestanden gevonden die die niet kan verwijderen, maar wel heeft verplaatst...

hoi, heb gedaan wat jij zei, ccleaner heeft er een hoop afgehaald.... avg laten scannen en hij heeft een infectie gevonden, nl: "C:\Windows\Fonts\61R5li.com";"Trojaans paard Dropper.Generic2.BYGW";"Geïnfecteerd"

hoi, is er nog iets wat ik kan doen??

oke, dit is wat ik heb : DDS (Ver_10-11-10.01) - NTFS_AMD64 Run by Merel at 18:34:05,56 on wo 24-11-2010 Internet Explorer: 8.0.7600.16385 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.4095.2394 [GMT 1:00] ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Program Files (x86)\AVG\AVG9\avgchsva.exe C:\Program Files (x86)\AVG\AVG9\avgrsa.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe C:\Windows\Explorer.EXE C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe C:\Program Files (x86)\AVG\AVG9\avgfws9.exe C:\Program Files (x86)\Common Files\Sony Ericsson\Emma Core\Services64\EmmaDeviceMgmt.exe C:\Program Files (x86)\Common Files\Sony Ericsson\Emma Core\Services64\EmmaUpdateMgmt.exe C:\Windows\SysWOW64\svchost.exe -k netsvcs c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files (x86)\AVG\AVG9\avgemc.exe C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe C:\Program Files (x86)\AVG\AVG9\avgam.exe C:\Program Files (x86)\AVG\AVG9\avgnsa.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\WUDFHost.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\svchost.exe -k SDRSVC C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\AVG\AVG9\avgui.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\Merel\Downloads\dds.scr C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll mWinlogon: Userinit=C:\Windows\system32\userinit.exe BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Windows Live Aanmelden - Help: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll uRun: [sony Ericsson PC Suite] "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon uRun: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" mRun: [HP Remote Solution] %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe mRun: [<NO NAME>] mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: PromptOnSecureDesktop = 0 (0x0) mPolicies-system: HideFastUserSwitching = 0 (0x0) IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} TB-X64: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File mRun-x64: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup mRun-x64: [PC-Doctor for Windows localizer] C:\Program Files\PC-Doctor for Windows\localizer.exe AppInit_DLLs-X64: avgrssta.dll ================= FIREFOX =================== FF - ProfilePath - C:\Users\Merel\AppData\Roaming\Mozilla\Firefox\Profiles\cef07gsv.default\ FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ---- FIREFOX POLICIES ---- C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true); C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true); C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true); C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true); C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified ============= SERVICES / DRIVERS =============== R0 AVGIDSErHrw7a;AVG9IDSErHr;C:\Windows\System32\drivers\AVGIDSwa.sys [2010-5-6 27216] R0 AvgRkx64;avgrkx64.sys;C:\Windows\System32\drivers\avgrkx64.sys [2010-5-6 56008] R1 Avgfwfd;AVG network filter service;C:\Windows\System32\drivers\avgfwd6a.sys [2010-5-6 29976] R1 AvgLdx64;AVG AVI Loader Driver x64;C:\Windows\System32\drivers\avgldx64.sys [2010-5-6 269904] R1 AvgMfx64;AVG On-access Scanner Minifilter Driver x64;C:\Windows\System32\drivers\avgmfx64.sys [2010-5-6 35536] R1 AvgTdiA;AVG Network Redirector x64;C:\Windows\System32\drivers\avgtdia.sys [2010-5-6 317520] R2 avg9emc;AVG E-mail Scanner;C:\Program Files (x86)\AVG\AVG9\avgemc.exe [2010-6-22 921952] R2 avg9wd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe [2010-6-22 308136] R2 avgfws9;AVG Firewall;C:\Program Files (x86)\AVG\AVG9\avgfws9.exe [2010-6-22 2331544] R2 AVGIDSAgent;AVG9IDSAgent;C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2010-6-22 5897808] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] R2 EmmaDevMgmtSvc;Emma Device Management;C:\Program Files (x86)\Common Files\Sony Ericsson\Emma Core\Services64\EmmaDeviceMgmt.exe [2010-6-3 403064] R2 EmmaUpdMgmtSvc;Emma Update Management;C:\Program Files (x86)\Common Files\Sony Ericsson\Emma Core\Services64\EmmaUpdateMgmt.exe [2010-6-3 193656] R2 ezSharedSvc;Easybits Shared Services for Windows;C:\Windows\system32\svchost.exe -k netsvcs [2009-7-14 27136] R2 OMSI download service;Sony Ericsson OMSI download service;C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2010-6-16 90112] R3 AVGIDSDriverw7a;AVG9IDSDriver;C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSDriver.sys [2010-5-6 132688] R3 AVGIDSFilterw7a;AVG9IDSFilter;C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys [2010-5-6 35920] R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\System32\drivers\nvhda64v.sys [2010-1-16 84000] S3 AVG Security Toolbar Service;AVG Security Toolbar Service;C:\Program Files (x86)\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-10-26 517448] S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2009-4-6 13352] S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-6-16 1255736] =============== Created Last 30 ================ 2010-11-24 13:03:22 -------- d-----w- C:\26b1466146b3fe8e0a63c08461b4cb 2010-11-23 17:59:16 -------- d-----w- C:\Users\Merel\DoctorWeb 2010-11-23 17:32:07 24664 ----a-w- C:\Windows\System32\drivers\mbam.sys 2010-11-23 17:32:07 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2010-11-23 12:15:56 -------- d-----w- C:\PROGRA~3\Hitman Pro 2010-11-22 15:40:42 -------- d-----w- C:\Users\Merel\AppData\Local\ElevatedDiagnostics 2010-11-22 15:39:54 -------- d-----w- C:\Users\Merel\AppData\Local\Diagnostics 2010-11-22 09:43:14 -------- d-----w- C:\Users\Merel\AppData\Roaming\Malwarebytes 2010-11-22 09:43:04 38224 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys 2010-11-22 09:43:03 -------- d-----w- C:\PROGRA~3\Malwarebytes 2010-11-21 21:06:33 -------- d-----w- C:\Program Files (x86)\Trend Micro 2010-11-21 20:09:02 -------- d-----w- C:\9de7c98dee5fbd5f01a32e4755b5 2010-11-21 19:26:40 -------- d-----w- C:\Users\Merel\AppData\Local\Mozilla 2010-11-21 19:07:55 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2010-11-21 19:07:55 -------- d-----w- C:\PROGRA~3\Spybot - Search & Destroy 2010-11-21 18:48:45 -------- d--h--w- C:\$AVG 2010-11-20 19:30:35 -------- d-----w- C:\Program Files (x86)\bfgclient 2010-11-20 19:27:33 -------- d-----w- C:\Program Files (x86)\Fear for Sale - The Mystery of McInroy Manor Collector's Edition 2010-11-20 19:27:01 -------- d-----w- C:\BigFishGamesCache 2010-11-18 22:28:31 -------- d-----w- C:\Users\Merel\AppData\Roaming\EleFun Games 2010-11-17 20:42:31 -------- d-----w- C:\Users\Merel\AppData\Roaming\HitPoint Studios 2010-11-17 20:42:31 -------- d-----w- C:\PROGRA~3\HitPoint Studios 2010-11-15 02:00:51 -------- d-----w- C:\4ba9f8f586c11db9c7b063dc 2010-11-13 20:14:58 -------- d-----w- C:\Program Files (x86)\Games 2010-11-13 13:23:12 -------- d-----w- C:\Program Files (x86)\Common Files\PX Storage Engine 2010-11-13 13:23:01 -------- d-----w- C:\Program Files\DivX 2010-11-13 13:22:45 -------- d-----w- C:\Program Files (x86)\Common Files\DivX Shared 2010-11-13 13:22:17 -------- d-----w- C:\Program Files (x86)\DivX 2010-11-13 13:22:00 -------- d-----w- C:\PROGRA~3\DivX 2010-11-13 13:20:16 -------- d-----w- C:\Users\Merel\AppData\Local\Graboid 2010-11-13 13:20:08 -------- d-----w- C:\Users\Merel\AppData\Roaming\MozillaControl 2010-11-13 13:20:02 -------- d-----w- C:\Program Files (x86)\Mozilla ActiveX Control v1.7.12 2010-11-13 13:19:43 -------- d-----w- C:\Program Files (x86)\VideoLAN 2010-11-13 13:19:21 -------- d-----w- C:\Program Files (x86)\Graboid 2010-11-12 20:45:03 -------- d-----w- C:\Users\Merel\AppData\Roaming\Frogwares 2010-11-10 20:59:52 -------- d-----w- C:\Users\Merel\AppData\Roaming\Sungift Games 2010-11-10 20:59:52 -------- d-----w- C:\PROGRA~3\Sungift Games 2010-11-10 20:34:38 -------- d-----w- C:\Users\Merel\AppData\Roaming\Mystery of Mortlake Mansion 2010-11-10 19:18:39 -------- d-----w- C:\Program Files (x86)\Mystery of Mortlake Mansion - NL 2010-11-10 12:07:40 -------- d-----w- C:\Users\Merel\AppData\Roaming\NCH Software 2010-11-10 12:06:54 -------- d-----w- C:\Program Files (x86)\NCH Swift Sound 2010-11-09 20:11:29 -------- d-----w- C:\Users\Merel\AppData\Roaming\MAI 2010-11-09 15:45:06 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\145e80901cb80251b\dsetup32.dll 2010-11-09 15:43:58 -------- d-----w- C:\Users\Merel\AppData\Local\Windows Live 2010-11-06 20:47:01 -------- d-----w- C:\PROGRA~3\Cateia Games 2010-11-04 20:11:08 -------- d-----w- C:\Users\Merel\AppData\Roaming\MysteryAgeTheDarkPriestsStrategyGuide 2010-11-04 19:49:53 -------- d-----w- C:\Users\Merel\AppData\Roaming\MA2 2010-11-01 21:11:41 -------- d-----w- C:\Program Files (x86)\Media Player Classic - Home Cinema 2010-10-31 20:21:38 -------- d-----w- C:\Users\Merel\AppData\Roaming\Namco 2010-10-31 20:12:39 -------- d-----w- C:\Program Files (x86)\Antiques Roadshow 2010-10-27 09:01:54 961024 ----a-w- C:\Windows\System32\CPFilters.dll 2010-10-27 09:01:54 641536 ----a-w- C:\Windows\SysWow64\CPFilters.dll 2010-10-27 09:01:54 552960 ----a-w- C:\Windows\System32\msdri.dll 2010-10-27 09:01:54 288256 ----a-w- C:\Windows\System32\MSNP.ax 2010-10-27 09:01:54 258560 ----a-w- C:\Windows\System32\mpg2splt.ax 2010-10-27 09:01:54 204288 ----a-w- C:\Windows\SysWow64\MSNP.ax 2010-10-27 09:01:54 199680 ----a-w- C:\Windows\SysWow64\mpg2splt.ax 2010-10-27 09:01:49 27008 ----a-w- C:\Windows\System32\drivers\Diskdump.sys ==================== Find3M ==================== 2010-09-15 03:50:37 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll 2010-09-10 05:35:44 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll 2010-09-10 05:35:43 347648 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll 2010-09-08 05:36:17 1192960 ----a-w- C:\Windows\System32\wininet.dll 2010-09-08 05:34:34 57856 ----a-w- C:\Windows\System32\licmgr10.dll 2010-09-08 04:30:04 978432 ----a-w- C:\Windows\SysWow64\wininet.dll 2010-09-08 04:28:15 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll 2010-09-08 04:16:38 482816 ----a-w- C:\Windows\System32\html.iec 2010-09-08 03:35:30 1638912 ----a-w- C:\Windows\System32\mshtml.tlb 2010-09-08 03:22:31 386048 ----a-w- C:\Windows\SysWow64\html.iec 2010-09-08 02:48:16 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb 2010-09-01 05:12:09 12625920 ----a-w- C:\Windows\System32\wmploc.DLL 2010-09-01 04:23:49 12625408 ----a-w- C:\Windows\SysWow64\wmploc.DLL 2010-09-01 02:58:34 3123712 ----a-w- C:\Windows\System32\win32k.sys 2010-08-31 04:32:30 954752 ----a-w- C:\Windows\SysWow64\mfc40.dll 2010-08-31 04:32:30 954288 ----a-w- C:\Windows\SysWow64\mfc40u.dll 2010-08-27 06:14:02 236032 ----a-w- C:\Windows\System32\srvsvc.dll 2010-08-27 05:46:48 9728 ----a-w- C:\Windows\SysWow64\sscore.dll 2010-08-27 03:38:04 463360 ----a-w- C:\Windows\System32\drivers\srv.sys 2010-08-27 03:37:48 402944 ----a-w- C:\Windows\System32\drivers\srv2.sys 2010-08-27 03:37:26 161792 ----a-w- C:\Windows\System32\drivers\srvnet.sys ============= FINISH: 18:34:44,01 ===============