vista 7 SP1

pandora6040 · 24 juni 2011

Dat begrijp ik niet ,omdat bovenaan toch de datum staat van 24-06-2011.

Toch heb ik de snelkoppeling van bureaublad verwijderd. Dan in doc downloads de toepassing geknipt en geplakt op bureaublad. Cobofix terug uitgevoed en bestand opgeslegen als combofix, maar weet niet of extensie txt daar aan toegevoegd heb of niet,maar op het bureaublad stond combofix. dit heb ik in icoon van de topassing gesleept ik krijg het blauw venster maar direct venster erbij "probeerdeje CFScipt te gebruiken? De naam script schijnt verkeerd geschreven te zijn. heb dan de naam van het bestand op bureaublad en de extensie "exe" aan toegevoegd en opnieuw uitgevoerd maar met zelfde resultaat. .bij de 1ste maat was een update beschikbaar die ik heb toegestaan maar denk toch niet dart dit de reden kan zijn.

---------- Post toegevoegd om 18:58 ---------- Vorige post was om 18:53 ----------

Mag ik eventueel dit dus een 3è maal overdoen?

---------- Post toegevoegd om 19:07 ---------- Vorige post was om 18:58 ----------

ComboFix 11-06-23.03 - Eigenaar 24/06/2011 17:43:37.4.4 - x64

Microsoft Windows 7 Home Premium 6.1.7600.0.1252.32.1043.18.4023.2102 [GMT 2:00]

Gestart vanuit: c:\users\Eigenaar\Desktop\ComboFix.exe

AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}

SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-05-24 to 2011-06-24 ))))))))))))))))))))))))))))))

.

2011-06-24 15:51 . 2011-06-24 15:51 -------- d-----w- c:\users\Gast\AppData\Local\temp

2011-06-24 15:51 . 2011-06-24 15:51 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-06-24 15:26 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5F395568-F627-4B81-AA25-32C6039AFE79}\mpengine.dll

2011-06-24 07:01 . 2011-06-24 07:02 -------- d-----w- c:\users\Eigenaar\AppData\Local\{E0A66694-EF23-4FD7-908B-B9E785B4D890}

2011-06-23 10:01 . 2011-06-23 10:01 -------- d-----w- c:\program files (x86)\Common Files\Java

2011-06-23 09:43 . 2011-06-23 09:44 -------- d-----w- c:\users\Eigenaar\AppData\Local\{5B0A638F-741C-47BD-

Of is het toch al dit?

En nog een vraag :In computer is de recovery schijf bijna vol. Kan dit geen kwaad?

8852-4668B8C07FA4}

2011-06-22 21:43 . 2011-06-22 21:43 -------- d-----w- c:\users\Eigenaar\AppData\Local\{BCB00099-C6AE-4C2A-A4AA-05BEEDD1D3F2}

2011-06-22 21:37 . 2011-06-22 21:37 -------- d-----w- c:\users\Eigenaar\AppData\Local\{BC485C62-5B90-4AF4-8022-A869F5BBA0D9}

2011-06-22 07:45 . 2011-06-22 07:45 -------- d-----w- c:\users\Eigenaar\AppData\Local\{90A83CF9-6867-44D9-ADDD-ED69092EFF25}

2011-06-21 19:44 . 2011-06-21 19:44 -------- d-----w- c:\users\Eigenaar\AppData\Local\{295024DE-282A-4397-A49E-8511D2CC3E84}

2011-06-21 10:48 . 2011-06-21 10:48 -------- d-----w- c:\users\Eigenaar\AppData\Local\{242CC70E-AE49-43AA-9533-69C1A8B0CDD3}

2011-06-20 22:52 . 2011-06-20 22:52 -------- d-----w- c:\users\Eigenaar\AppData\Local\{96525F85-8084-46D7-AFDD-63218454AFBD}

2011-06-20 22:48 . 2011-06-20 22:48 -------- d-----w- c:\users\Eigenaar\AppData\Local\{C21C4CF0-A5AC-4F5C-B0D1-D3720D1816EA}

2011-06-20 20:02 . 2011-06-22 13:49 -------- d-----w- C:\backups

2011-06-20 18:34 . 2011-06-20 16:08 388608 ----a-w- C:\HijackThis.exe

2011-06-20 15:18 . 2011-06-20 15:18 -------- d-----w- c:\program files\CCleaner

2011-06-20 10:48 . 2011-06-20 10:48 -------- d-----w- c:\users\Eigenaar\AppData\Local\{DB6D856F-74CF-4C13-BCAF-A2E11EA51340}

2011-06-19 22:47 . 2011-06-19 22:47 -------- d-----w- c:\users\Eigenaar\AppData\Local\{514555E4-EF1A-4825-A7BA-1C04F3F369E7}

2011-06-19 14:49 . 2009-10-10 03:17 14336 ----a-w- c:\windows\system32\drivers\sffp_sd.sys

2011-06-19 14:49 . 2009-10-10 02:41 109056 ----a-w- c:\windows\system32\drivers\sdbus.sys

2011-06-19 10:46 . 2011-06-19 10:47 -------- d-----w- c:\users\Eigenaar\AppData\Local\{AA448307-6D7E-4537-8AAF-669985540453}

2011-06-18 17:50 . 2011-06-18 17:50 -------- d-----w- c:\users\Eigenaar\AppData\Local\{4512965C-6F16-43E3-962F-E2EFE4613904}

2011-06-18 11:53 . 2011-06-18 11:53 -------- d-----w- c:\windows\system32\SPReview

2011-06-18 11:04 . 2011-06-18 11:04 -------- d-----w- c:\users\Eigenaar\AppData\Roaming\Malwarebytes

2011-06-18 11:03 . 2011-06-18 11:03 -------- d-----w- c:\programdata\Malwarebytes

2011-06-18 11:03 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys

2011-06-18 11:03 . 2011-06-18 11:03 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2011-06-18 11:03 . 2010-12-20 16:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-06-18 05:48 . 2011-06-18 05:49 -------- d-----w- c:\users\Eigenaar\AppData\Local\{CFCB4094-B2A3-4930-B7FB-DE1AFAE4286C}

2011-06-17 02:10 . 2011-06-17 14:10 -------- d-----w- c:\users\Eigenaar\AppData\Local\{3D5EE115-D78C-4B8F-B388-16DFC6BC213D}

2011-06-16 14:29 . 2011-06-16 14:29 -------- d-----w- c:\windows\CheckSur

2011-06-16 14:10 . 2011-06-16 14:10 -------- d-----w- c:\users\Eigenaar\AppData\Local\{878106AD-0210-4036-B1D3-F1F99B927DEB}

2011-06-16 09:52 . 2011-06-16 09:52 -------- d-----w- c:\windows\system32\EventProviders

2011-06-16 00:58 . 2011-04-23 01:19 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2011-06-16 00:58 . 2011-04-22 23:25 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb

2011-06-16 00:58 . 2011-04-25 16:41 174384 ----a-w- c:\program files\Internet Explorer\sqmapi.dll

2011-06-16 00:58 . 2011-04-25 15:29 141104 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll

2011-06-16 00:57 . 2011-04-23 01:29 2303488 ----a-w- c:\windows\system32\jscript9.dll

2011-06-16 00:57 . 2011-04-22 23:35 1797632 ----a-w- c:\windows\SysWow64\jscript9.dll

2011-06-16 00:11 . 2011-06-16 00:13 -------- d-----w- c:\users\Eigenaar\AppData\Local\{F20B115B-6EAE-4252-88B8-953A78EB94CB}

2011-06-15 23:08 . 2010-11-30 09:43 601424 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C169E9FE-987B-432C-8451-F4192D6AC6AD}\gapaengine.dll

2011-06-15 22:52 . 2011-06-24 15:53 -------- d-----w- c:\windows\system32\wbem\repository

2011-06-14 16:04 . 2011-06-14 16:04 -------- d-----w- c:\users\Eigenaar\AppData\Local\{83E662ED-690E-45B5-87A8-A22ADD58DCFD}

2011-06-13 07:57 . 2011-06-13 08:11 -------- d-----w- c:\users\Eigenaar\AppData\Local\{535700F7-39E4-4A7A-A47D-A56255190172}

2011-06-12 12:11 . 2011-06-12 12:21 -------- d-----w- c:\users\Eigenaar\AppData\Local\{3B14A23A-45FC-4D8C-9385-CBE5CE07C661}

2011-06-12 09:01 . 2011-06-12 09:01 -------- d-----w- c:\users\Eigenaar\AppData\Local\{D393EE50-2B6A-45A3-8AD8-177382FE84D7}

2011-06-11 11:32 . 2011-06-11 11:32 -------- d-----w- c:\users\Eigenaar\AppData\Local\{FC34AD28-525E-4E39-AFFD-63285F49CBAD}

2011-06-10 19:04 . 2011-06-10 19:09 -------- d-----w- c:\users\Eigenaar\AppData\Local\{2177E62F-C202-44C4-88F7-FCCCA3F381F6}

2011-06-10 07:00 . 2011-06-10 07:01 -------- d-----w- c:\users\Eigenaar\AppData\Local\{466ECE7F-7AC7-419F-AD31-9C4B1222CC4E}

2011-06-09 15:40 . 2011-06-09 15:40 -------- d-----w- c:\users\Eigenaar\AppData\Local\{EB8E160A-D526-4EE7-9274-79C78C61BBB2}

2011-06-08 10:51 . 2011-06-08 10:52 -------- d-----w- c:\users\Eigenaar\AppData\Local\{E837E523-918D-4A7D-A080-FEF289FC1F33}

2011-06-07 15:17 . 2011-06-07 15:17 -------- d-----w- c:\users\Eigenaar\AppData\Local\{42F4808E-245E-43A5-BADB-D0054A4977B5}

2011-06-06 14:31 . 2011-06-06 14:32 -------- d-----w- c:\users\Eigenaar\AppData\Local\{2EC24D65-12B9-4FA2-BA40-58E7D1121530}

2011-06-05 10:19 . 2011-06-05 10:20 -------- d-----w- c:\users\Eigenaar\AppData\Local\{D3A4B2CF-4EFD-47E4-BE0F-3B03DBFDB686}

2011-06-04 18:48 . 2011-06-04 18:50 -------- d-----w- c:\users\Eigenaar\AppData\Local\{839BED9D-1302-49FA-A26C-857A3D2485EC}

2011-06-01 05:36 . 2011-06-01 05:36 -------- d-----w- c:\users\Eigenaar\AppData\Local\{2A88517A-4744-4687-93C7-90C759C34213}

2011-05-31 15:14 . 2011-05-31 15:16 -------- d-----w- c:\users\Eigenaar\AppData\Local\{5DFB41B8-41FF-4DB6-BF46-D8682B065C74}

2011-05-29 20:35 . 2011-05-30 15:13 -------- d-----w- c:\users\Eigenaar\AppData\Local\{221651DD-9948-474A-9364-CF312D23F0C0}

2011-05-29 08:34 . 2011-05-29 08:34 -------- d-----w- c:\users\Eigenaar\AppData\Local\{274324B1-E1D5-471A-B7E3-D1F83EBCDC84}

2011-05-28 22:06 . 2011-06-11 14:09 -------- d-----w- c:\users\Eigenaar\AppData\Roaming\go

2011-05-28 22:05 . 2011-06-15 22:47 -------- d-----w- c:\programdata\Easybits GO

2011-05-28 20:33 . 2011-05-28 20:34 -------- d-----w- c:\users\Eigenaar\AppData\Local\{6D9A1DC0-E3D4-43CA-B9EB-4C9426A1EBAF}

2011-05-28 06:47 . 2011-05-28 06:47 -------- d-----w- c:\users\Eigenaar\AppData\Local\{DFA7C981-DCD3-474E-AF93-CBB2556702F8}

2011-05-27 13:53 . 2011-05-27 13:53 -------- d-----w- c:\users\Eigenaar\AppData\Local\{15A2CF87-E114-4DE3-B05D-60DCE09AA635}

2011-05-26 18:02 . 2011-05-26 18:02 -------- d-----w- c:\users\Eigenaar\AppData\Local\{50401AC8-3970-4A61-8F33-2B57CB3B0A21}

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-06-18 13:06 . 2009-07-14 02:36 152064 ----a-w- c:\windows\SysWow64\msclmd.dll

2011-06-18 13:06 . 2009-07-14 02:36 175104 ----a-w- c:\windows\system32\msclmd.dll

2011-06-07 17:10 . 2010-10-12 06:55 8873296 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2011-05-13 16:58 . 2011-05-13 16:58 17720 ----a-w- c:\windows\system32\HPMDPCoInst12.dll

2011-05-13 16:58 . 2009-07-08 12:49 30008 ----a-w- c:\windows\system32\drivers\hpdskflt.sys

2011-05-13 16:58 . 2011-05-13 16:58 30520 ----a-w- c:\windows\system32\hpservice.exe

2011-05-13 16:58 . 2011-05-13 16:58 20792 ----a-w- c:\windows\system32\accelerometerdll.DLL

2011-05-13 16:57 . 2011-05-13 16:57 43320 ----a-w- c:\windows\system32\drivers\Accelerometer.sys

2011-05-13 05:16 . 2011-05-13 05:16 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2011-05-12 20:00 . 2010-10-03 10:39 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll

2011-05-12 18:57 . 2010-10-03 10:39 704320 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

2011-05-04 02:52 . 2010-04-25 07:22 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll

2011-04-22 20:18 . 2011-05-25 11:27 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys

2011-04-13 22:40 . 2011-04-13 22:40 4284416 ----a-w- c:\windows\SysWow64\GPhotos.scr

2011-04-09 06:58 . 2011-05-13 15:49 142336 ----a-w- c:\windows\system32\poqexec.exe

2011-04-09 06:45 . 2011-05-12 18:58 5509504 ----a-w- c:\windows\system32\ntoskrnl.exe

2011-04-09 06:13 . 2011-05-12 18:58 3957632 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe

2011-04-09 06:13 . 2011-05-12 18:58 3901824 ----a-w- c:\windows\SysWow64\ntoskrnl.exe

2011-04-09 05:56 . 2011-05-13 15:49 123904 ----a-w- c:\windows\SysWow64\poqexec.exe

.

((((((((((((((((((((((((((((( SnapShot_2011-06-24_07.24.49 )))))))))))))))))))))))))))))))))))))))))

.

- 2009-07-14 05:10 . 2011-06-24 07:25 64612 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

+ 2009-07-14 05:10 . 2011-06-24 15:58 64612 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

+ 2010-02-27 09:00 . 2011-06-24 15:58 28404 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2696175809-2240157295-830168338-1000_UserData.bin

+ 2009-07-13 23:25 . 2009-07-14 01:41 12288 c:\windows\servicing\wrpintapi.dll

+ 2010-03-06 09:45 . 2010-02-02 08:39 49664 c:\windows\servicing\GC64\tzupd.exe

+ 2009-07-13 23:35 . 2009-07-14 01:40 28672 c:\windows\servicing\CbsMsg.dll

+ 2009-07-13 23:35 . 2009-07-14 01:40 19456 c:\windows\servicing\CbsApi.dll

+ 2010-03-06 09:37 . 2011-06-11 11:33 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2009-07-14 04:46 . 2011-06-19 15:35 82184 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat

+ 2010-10-03 10:38 . 2011-03-20 10:13 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat

+ 2010-10-03 10:38 . 2011-03-20 10:13 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\History\History.IE5\index.dat

+ 2010-10-03 10:38 . 2011-03-20 10:13 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Cookies\index.dat

+ 2010-03-06 09:37 . 2011-06-11 11:33 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2010-03-06 09:37 . 2011-06-11 11:33 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2010-02-27 09:03 . 2011-06-23 17:41 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2010-03-06 09:37 . 2009-07-14 01:41 53248 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll

+ 2010-02-27 09:03 . 2011-03-25 21:01 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2010-03-18 12:16 . 2010-03-18 12:16 87408 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsFormsIntegration.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 93024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationTypes.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 35688 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationProvider.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 17784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Presentation.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 58240 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 83272 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PenIMC.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 10624 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\WindowsFormsIntegration.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 83304 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\WindowsBase.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 13688 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\UIAutomationTypes.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 10104 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\UIAutomationProvider.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 16272 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\UIAutomationClientsideProviders.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 15224 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\UIAutomationClient.resources.dll

+ 2010-05-14 11:06 . 2010-05-14 11:06 11160 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\System.Windows.Input.Manipulations.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 57200 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\System.Speech.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 23408 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\System.Printing.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 34160 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\ReachFramework.resources.dll

+ 2010-05-14 04:13 . 2010-05-14 04:13 96088 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\SetupUtility.exe

+ 2010-03-18 20:16 . 2010-03-18 20:16 78152 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\Setup.exe

+ 2010-05-14 19:06 . 2010-05-14 19:06 19288 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\1043\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\1033\SetupResources.dll

+ 2010-03-18 19:58 . 2010-03-18 19:58 96088 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\SetupUtility.exe

+ 2010-03-18 20:16 . 2010-03-18 20:16 78152 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe

+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\3082\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\3076\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\2070\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\2052\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1055\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1053\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1049\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1046\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1045\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1044\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1043\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 15192 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1042\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 15704 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1041\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1040\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1038\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 16728 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1037\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1036\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1035\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1033\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1032\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1031\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1030\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1029\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1028\SetupResources.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\1025\SetupResources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 14192 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Xml.Linq.resources.dll

+ 2010-05-14 11:06 . 2010-05-14 11:06 61288 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Xaml.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 79736 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Web.Services.resources.dll

+ 2010-05-14 11:06 . 2010-05-14 11:06 12176 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Web.ApplicationServices.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 22392 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Transactions.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 36736 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.ServiceProcess.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 17288 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.ServiceModel.Routing.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 46992 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.ServiceModel.Discovery.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 12168 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.ServiceModel.Channels.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 41360 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.ServiceModel.Activities.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 24944 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Security.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 17328 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Runtime.Serialization.Formatters.Soap.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 26496 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Runtime.Remoting.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 51088 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Runtime.DurableInstancing.resources.dll

+ 2010-05-14 11:06 . 2010-05-14 11:06 12144 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Numerics.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 23912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Net.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 74608 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Messaging.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 19832 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Management.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 16792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Management.Instrumentation.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 17264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.IO.Log.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 48528 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.IdentityModel.Selectors.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 50040 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.IdentityModel.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 28552 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.EnterpriseServices.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 12144 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Dynamic.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 20848 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Drawing.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 36736 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.DirectoryServices.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 23448 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.DirectoryServices.Protocols.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 31144 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.DirectoryServices.AccountManagement.resources.dll

+ 2010-05-14 11:06 . 2010-05-14 11:06 10608 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Device.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 34168 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\system.data.sqlxml.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 45448 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Data.Services.Client.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 50032 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Data.Linq.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 11152 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Data.DataSetExtensions.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 82792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Core.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 43384 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Configuration.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 24456 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Configuration.Install.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 17824 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.ComponentModel.DataAnnotations.resources.dll

+ 2010-05-14 11:06 . 2010-05-14 11:06 30616 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.ComponentModel.Composition.resources.dll

+ 2010-05-14 11:06 . 2010-05-14 11:06 24424 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.AddIn.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 16792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Activities.DurableInstancing.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 16736 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\sysglobl.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 16744 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\SMSvcHost.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 10608 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\SMDiagnostics.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 16224 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\Regasm.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 54144 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\Microsoft.VisualBasic.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 24464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\Microsoft.Transactions.Bridge.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 11160 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\Microsoft.Transactions.Bridge.Dtc.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 39800 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\Microsoft.JScript.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 30064 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\Microsoft.CSharp.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 13144 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\JSC.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 10088 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\InstallUtil.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 11632 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\CustomMarshalers.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 28512 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\caspol.resources.dll

+ 2010-05-14 11:06 . 2010-05-14 11:06 11112 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\AddInUtil.resources.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 27984 c:\windows\Microsoft.NET\Framework64\v4.0.30319\MUI\0409\mscorsecr.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 87408 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\WindowsFormsIntegration.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 93024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\UIAutomationTypes.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 35688 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\UIAutomationProvider.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 17784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Windows.Presentation.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 58240 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Windows.Input.Manipulations.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 44920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Web.ApplicationServices.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 37240 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.ServiceModel.Channels.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 64352 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Numerics.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 51032 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Device.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 50552 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Data.DataSetExtensions.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 81784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Configuration.Install.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 81800 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.ComponentModel.DataAnnotations.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 39784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.AddIn.Contract.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 68952 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\SMDiagnostics.dll

+ 2011-06-24 15:52 . 2011-06-24 15:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2011-06-24 15:52 . 2011-06-24 15:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2010-05-14 11:21 . 2010-05-14 11:21 9608 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\System.Windows.Presentation.resources.dll

+ 2009-07-13 23:35 . 2009-07-14 01:39 194048 c:\windows\servicing\TrustedInstaller.exe

+ 2010-03-06 09:37 . 2010-08-12 09:29 262144 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat

+ 2009-07-14 05:01 . 2011-06-24 15:51 324900 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2010-08-04 12:31 . 2011-06-21 19:38 973756 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2696175809-2240157295-830168338-501-8192.dat

+ 2010-01-15 01:09 . 2010-01-15 01:09 301584 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2696175809-2240157295-830168338-500-12288.dat

+ 2010-12-13 16:35 . 2010-12-29 11:35 336060 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2696175809-2240157295-830168338-1000-12288.dat

+ 2009-07-13 23:54 . 2009-07-14 01:24 350720 c:\windows\Resources\Themes\Aero\Shell\NormalColor\shellstyle.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 350592 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClientsideProviders.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 163168 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClient.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 675672 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Speech.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 335712 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Printing.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 581464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\ReachFramework.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 832856 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationUI.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 225640 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationHost_v0400.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 194424 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Royale.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 478576 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Luna.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 167288 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Classic.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 232304 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Aero.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 364912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\PresentationUI.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 256384 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\PresentationFramework.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 106864 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\nl\PresentationCore.resources.dll

+ 2010-03-25 09:25 . 2010-03-25 09:25 144416 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\sqmapi.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 295248 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\SetupUi.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 807256 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\SetupEngine.dll

+ 2010-05-14 19:29 . 2010-05-14 19:29 785920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\netfx_corelp_x64.msi

+ 2009-08-31 10:44 . 2009-08-31 10:44 144416 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\sqmapi.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 295248 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\SetupUi.dll

+ 2010-03-18 20:16 . 2010-03-18 20:16 807256 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\SetupEngine.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 157544 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.xml.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 454008 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Windows.Forms.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 213408 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Windows.Forms.DataVisualization.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 496504 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.ServiceModel.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 101768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.RunTime.Serialization.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 225632 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 283512 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Deployment.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 346472 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Data.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 481144 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Data.Entity.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 107896 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Activities.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 551312 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Activities.Presentation.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 239000 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\System.Activities.Core.Presentation.resources.dll

+ 2010-05-14 11:21 . 2010-05-14 11:21 437584 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\mscorrc.dll

+ 2011-04-12 15:47 . 2011-04-12 15:47 311648 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nl\mscorlib.resources.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 350592 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\UIAutomationClientsideProviders.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 163168 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\UIAutomationClient.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 138592 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Xml.Linq.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 699224 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Xaml.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 857960 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Web.Services.dll

+ 2011-04-13 23:32 . 2010-03-18 13:27 288616 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Transactions.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 675672 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Speech.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 113512 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.ServiceProcess.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 129912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.ServiceModel.Routing.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 390008 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.ServiceModel.Discovery.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 505208 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.ServiceModel.Activities.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 261472 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Security.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 122264 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Runtime.Serialization.Formatters.Soap.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 291184 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Runtime.Remoting.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 349568 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Runtime.DurableInstancing.dll

+ 2011-04-13 23:32 . 2010-03-18 13:27 335712 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Printing.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 231760 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Net.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 253280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Messaging.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 134528 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Management.Instrumentation.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 378720 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Management.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 123736 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.IO.Log.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 125816 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.IdentityModel.Selectors.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 392552 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.IdentityModel.dll

+ 2011-04-13 23:32 . 2010-03-18 04:46 125440 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.EnterpriseServices.Wrapper.dll

+ 2011-04-13 23:32 . 2010-03-18 13:27 237424 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.EnterpriseServices.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 120152 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Dynamic.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 607064 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Drawing.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 182144 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.DirectoryServices.Protocols.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 395120 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.DirectoryServices.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 285072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.DirectoryServices.AccountManagement.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 829280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Deployment.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 747360 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Data.SqlXml.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 436600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Data.Services.Client.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 683872 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Data.Linq.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 409448 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.configuration.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 210816 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.ComponentModel.Composition.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 149848 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.AddIn.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 122248 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Activities.DurableInstancing.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 525704 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Activities.Core.Presentation.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 112976 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\sysglobl.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 581464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\ReachFramework.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 832856 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\PresentationUI.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 194424 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\PresentationFramework.Royale.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 478576 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\PresentationFramework.Luna.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 167288 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\PresentationFramework.Classic.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 232304 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\PresentationFramework.Aero.dll

+ 2009-07-14 04:45 . 2011-06-19 14:59 7103170 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat

+ 2010-02-27 16:07 . 2011-06-24 07:19 1040352 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat

+ 2011-04-04 20:10 . 2011-06-21 19:38 1741852 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2696175809-2240157295-830168338-501-4096.dat

+ 2011-03-25 21:40 . 2011-06-21 19:38 6622468 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2696175809-2240157295-830168338-1000-4096.dat

+ 2010-03-18 13:27 . 2010-03-18 13:27 2153816 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 1303896 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 1098096 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationNative_v0400.dll

+ 2010-03-18 12:16 . 2010-03-18 12:16 6346600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 3453792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationCore.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 2650464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\NlsLexicons0009.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 6353752 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\NlsData0009.dll

+ 2010-03-18 13:27 . 2010-03-18 13:27 1367904 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\NaturalLanguage6.dll

+ 2010-03-18 21:41 . 2010-03-18 21:41 1901056 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\netfx_core_x64.msi

+ 2011-04-13 23:32 . 2010-03-18 12:16 1303896 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\WindowsBase.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 2207568 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.XML.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 4982120 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Windows.Forms.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 1711496 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Windows.Forms.DataVisualization.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 6067048 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.ServiceModel.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 1026936 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Runtime.Serialization.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 3481928 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 4464480 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Data.Entity.dll

+ 2011-04-13 23:32 . 2010-03-18 13:27 3111768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Data.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 1339736 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Core.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 1462648 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Activities.Presentation.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 1199968 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\System.Activities.dll

+ 2011-04-13 23:32 . 2010-03-18 12:16 6346600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\GAC28357\PresentationFramework.dll

+ 2009-07-14 02:34 . 2011-06-24 15:36 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat

- 2009-07-14 02:34 . 2011-06-24 07:14 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat

+ 2010-02-27 16:07 . 2011-06-24 15:51 10090044 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2696175809-2240157295-830168338-1000-8192.dat

.

-- Snapshot teruggezet naar huidige datum --

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

2010-06-13 17:10 2734688 ----a-w- c:\program files (x86)\Messenger_Plus_Live_Belgium\tbMess.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{d1a1c8f1-e3d9-48df-802f-20201061ef61}"= "c:\program files (x86)\Messenger_Plus_Live_Belgium\tbMess.dll" [2010-06-13 2734688]

.

[HKEY_CLASSES_ROOT\clsid\{d1a1c8f1-e3d9-48df-802f-20201061ef61}]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HPADVISOR"="c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-09-29 1685048]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Corel File Shell Monitor"="c:\program files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe" [2009-08-25 15544]

"HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]

"QuickTime Task"="c:\program files (x86)\QuickTime\qttask.exe" [2006-09-01 282624]

"QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-08-20 322104]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464]

"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]

"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"HideFastUserSwitching"= 0 (0x0)

.

[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

R2 AGCoreService;AG Core Services;c:\program files (x86)\AGI\core\4.2.0.10753\AGCoreService.exe [2010-03-18 20480]

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-15 136176]

R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-15 136176]

R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]

R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]

R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]

R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600]

S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-10-14 92216]

S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]

S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]

S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]

.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

ezSharedSvc

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2009-08-20 12:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

.

Inhoud van de 'Gedeelde Taken' map

.

2011-06-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-26 20:06]

.

2011-06-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-26 20:06]

.

2011-06-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2696175809-2240157295-830168338-1000Core.job

- c:\users\Eigenaar\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-13 20:00]

.

2011-06-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2696175809-2240157295-830168338-1000UA.job

- c:\users\Eigenaar\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-13 20:00]

.

2011-06-22 c:\windows\Tasks\Norton Security Scan for Eigenaar.job

- c:\program files (x86)\Norton Security Scan\Engine\2.7.6.13\Nss.exe [2011-05-18 00:27]

.

--------- x86-64 -----------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-10-03 16395880]

"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU]

"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-08-25 610872]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-11 171520]

"fssui"="c:\program files (x86)\Windows Live\Family Safety\fsui.exe" [2010-09-22 884584]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-27 2184520]

"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312]

"Logitech Download Assistant"="c:\windows\system32\rundll32.exe" [2009-07-14 45568]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 1436224]

"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-03-23 487424]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

uLocal Page = c:\windows\system32\blank.htm

uDefault_Search_URL = hxxp://www.google.com/ie

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: Free YouTube Download - c:\users\Eigenaar\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm

IE: Free YouTube to MP3 Converter - c:\users\Eigenaar\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

TCP: DhcpNameServer = 195.130.131.5 195.130.130.133

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab

FF - ProfilePath - c:\users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\77pds0yv.default\

FF - prefs.js: browser.search.defaulturl - hxxp://plasmoo.com/index.htm?SearchMashine=true&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - Plasmoo

FF - prefs.js: browser.startup.homepage - hxxp://plasmoo.com

FF - prefs.js: keyword.URL - hxxp://plasmoo.com/index.htm?SearchMashine=true&q=

FF - prefs.js: network.proxy.type - 0

.

- - - - ORPHANS VERWIJDERD - - - -

.

WebBrowser-{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - (no file)

WebBrowser-{D1A1C8F1-E3D9-48DF-802F-20201061EF61} - (no file)

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)

WebBrowser-{872B5B88-9DB5-4310-BDD0-AC189557E5F5} - (no file)

WebBrowser-{46735DEE-F862-49D1-876D-6382794DC625} - (no file)

WebBrowser-{3AD798D0-4642-4C55-BC14-CFE7DD19E0D1} - (no file)

WebBrowser-{D1FCE654-5FD1-48AD-B13C-5064736120B7} - (no file)

WebBrowser-{7B13EC3E-999A-4B70-B9CB-2617B8323822} - (no file)

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files (x86)\Windows Live\Family Safety\fsssvc.exe

c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE

c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe

c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

c:\program files (x86)\CyberLink\Shared files\RichVideo.exe

c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

c:\program files (x86)\Hewlett-Packard\Media\Live TV\TVAgent.exe

c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

.

**************************************************************************

.

Voltooingstijd: 2011-06-24 18:07:15 - machine werd herstart

ComboFix-quarantined-files.txt 2011-06-24 16:07

ComboFix2.txt 2011-06-24 07:33

ComboFix3.txt 2011-06-23 16:54

ComboFix4.txt 2011-06-23 11:04

.

Pre-Run: 360.902.897.664 bytes beschikbaar

Post-Run: 360.951.111.680 bytes beschikbaar

.

- - End Of File - - 056AD4CA1CCDB697A73010EC0B463923

pandora6040 · 24 juni 2011