Ga naar inhoud

hoe XP Internet Security 2012 virus verwijderen?

Robertt
 Delen

Aanbevolen berichten

Robertt Bijdrager

Robertt

Geplaatst:
Geplaatst:

Sinds vandaag is mijn pc besmet met deze vreselijk irritante fake firewall/virusprotector. Er is online wel wat info te vinden maar om het weg te krijgen moet ik blijkbaar enkele programma's aankopen.

Kunnen jullie dit virus van mijn pc krijgen?

Hier alvast een hjackthis

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:49:54, on 3/01/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\LEXPPS.EXE

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

C:\WINDOWS\system32\ANIWConnService.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe

C:\WINDOWS\system32\imapi.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\PC Tools Security\pctsAuxs.exe

C:\Program Files\PC Tools Security\pctsSvc.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\PC Tools Security\pctsGui.exe

C:\Documents and Settings\HP_Eigenaar\Application Data\0F153\E075D.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe

C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\uha.exe

C:\Program Files\CyberLink\PowerCinema\PCMService.exe

C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

C:\Program Files\LP\CD70\FF7.exe

C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe

C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Belgium Identity Card\beid35gui.exe

C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe

C:\Program Files\53D4F\lvvm.exe

C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\msiexec.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\System32\ping.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\HP\KBD\KBD.EXE

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! UK

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = HP | MSN

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52727

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll

O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect

O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run

O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup

O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController

O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"

O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"

O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [FF7.exe] C:\Program Files\LP\CD70\FF7.exe

O4 - HKLM\..\Run: [27l4ozqjbh] C:\Documents and Settings\All Users\27l4ozqjbh.exe

O4 - HKLM\..\Run: [iSTray] "C:\Program Files\PC Tools Security\pctsGui.exe" /hideGUI

O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe

O4 - HKCU\..\Run: [27l4ozqjbh] C:\Documents and Settings\HP_Eigenaar\27l4ozqjbh.exe

O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')

O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ?

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000

O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe

O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\PC Tools Security\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\PC Tools Security\pctsSvc.exe

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--

End of file - 14538 bytes

Link naar reactie
Delen op andere sites
  • Reacties 96
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Populaire dagen

Beste reacties in dit topic

Populaire dagen

Geplaatste afbeeldingen

Robertt Bijdrager

Robertt

Geplaatst:
  • Auteur
Geplaatst: (aangepast)

Belangrijke toevoeging: Ik kan bepaalde programma's zelfs niet eens meer openen, onder meer malwarebytes!! (ook niet in veilige modus heb ik de indruk maar misschien doe ik iets verkeerd)

En via internet explorer worden sites doorgestuurd naar spamsites: grrrr

aangepast door Robertt
Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52727

R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)

O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O4 - HKLM\..\Run: [FF7.exe] C:\Program Files\LP\CD70\FF7.exe

O4 - HKLM\..\Run: [27l4ozqjbh] C:\Documents and Settings\All Users\27l4ozqjbh.exe

O4 - HKCU\..\Run: [27l4ozqjbh] C:\Documents and Settings\HP_Eigenaar\27l4ozqjbh.exe

O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ?

Klik op 'Fix checked' om de items te verwijderen.

Probeer dan eens of je Malwarebytes nu kan laten scannen. Indien dit lukt mag je het logje van MBAM én een nieuw log van HijackThis in je volgende bericht hangen.

Link naar reactie
Delen op andere sites
Robertt Bijdrager

Robertt

Geplaatst:
  • Auteur
Geplaatst:

Gisterenavond heb ik door Microsoft Security essentials te downloaden ervoor kunnen zorgen dat malwarebytes terug kon starten en heb ik, zo lijkt het, 'xp internet security 2012' kunnen verwijderen. Via msconfig zie ik bij Opstarten wel 2x het volgende bestand staan: 27|4ozqjbh, kan het niet echt thuisbrengen en vind het raar dat het er 2x tussenstaat.

Hoedanook: grootste probleem is nu dat mijn PC wel zegt dat er internet is maar ik geen verbinding kan maken met geen enkele browser (chrome, IE & Firefox) en ook niet met bvb messenger.

Bijgevoegd dus een nieuw HJAckfile gemaakt (en via usb overgezet op de computer (macbook) waarvan ik nu werk)

Hopelijk krijgen jullie internet terug aan de praat :(

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:09:12, on 4/01/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\LEXPPS.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

C:\WINDOWS\system32\ANIWConnService.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe

C:\WINDOWS\system32\imapi.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\CyberLink\PowerCinema\PCMService.exe

C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe

C:\Program Files\Belgium Identity Card\beid35gui.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac

C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\HP\KBD\KBD.EXE

c:\windows\system\hpsysdrv.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! UK

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=63&bd=PAVILION&pf=desktop

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52727

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll

O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect

O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run

O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup

O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController

O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"

O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"

O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [27l4ozqjbh] C:\Documents and Settings\All Users\27l4ozqjbh.exe

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [27l4ozqjbh] C:\Documents and Settings\HP_Eigenaar\27l4ozqjbh.exe

O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')

O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ?

O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000

O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe

O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--

End of file - 13512 bytes

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

In je nieuwe logje zitten nog steeds de items die je besmetting veroorzaken. De aangeduide items zijn dus niet verwijderd ... wat ook de oorzaak kan zijn dat je geen verbinding hebt. Wil je HJT nog eens opnieuw uitvoeren - doe het voor alle zekerheid eens in "veilige modus" - en dan een actueel logje plaatsen ?

Link naar reactie
Delen op andere sites
Robertt Bijdrager

Robertt

Geplaatst:
  • Auteur
Geplaatst:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:48:08, on 4/01/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Safe mode

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! UK

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = HP | MSN

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52727

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll

O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect

O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run

O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup

O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController

O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"

O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"

O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [27l4ozqjbh] C:\Documents and Settings\All Users\27l4ozqjbh.exe

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [27l4ozqjbh] C:\Documents and Settings\HP_Eigenaar\27l4ozqjbh.exe

O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')

O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ?

O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000

O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe

O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--

End of file - 11230 bytes

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Jammer, maar ook nu is er nog niets verwijderd van wat aangegeven was. We gaan eerst een andere stap zetten dan :

Download ComboFix van één van deze locaties:

Link 1

Link 2

* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op

1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix. Hier is een handleiding over hoe je ze kan uitschakelen:

Klik hier

Als het je niet lukt om ze uit te schakelen, ga dan gewoon door naar de volgende stap.

2. Dubbelklik op ComboFix.exe en volg de meldingen op het scherm.

3. ComboFix zal controleren of dat de Microsoft Windows Recovery Console reeds is geïnstalleerd.

**Let op: Als de Microsoft Windows Recovery Console al is geïnstalleerd, dan krijg je de volgende schermen niet te zien en zal ComboFix automatisch verder gaan met het scannen naar malware.

4. Volg de meldingen op het scherm om ComboFix de Microsoft Windows Recovery Console te laten downloaden en installeren.

cf-rc-auto.jpg

Je krijgt de volgende melding te zien wanneer ComboFix de Microsoft Windows Recovery Console succesvol heeft geïnstalleerd:

rc-auto-done.jpg

Klik op Ja om verder te gaan met het scannen naar malware.

5. Wanneer ComboFix klaar is, zal het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.

Link naar reactie
Delen op andere sites
Robertt Bijdrager

Robertt

Geplaatst:
  • Auteur
Geplaatst:

ComboFix 09-11-07.02 - HP_Eigenaar 04/01/2012 16:21.7.2 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1023.581 [GMT 1:00]

Gestart vanuit: c:\documents and settings\HP_Eigenaar\Bureaublad\BUREAUBLAD\ComboFix.exe

AV: Norton Internet Security 2006 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}

FW: Norton Internet Security 2006 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

.

- VERMINDERDE FUNCTIONALITEIT MODUS -

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-12-04 to 2012-01-04 ))))))))))))))))))))))))))))))

.

2012-01-04 05:04 . 2012-01-04 05:04 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\PCHealth

2012-01-03 23:44 . 2011-11-15 13:29 222080 ------w- c:\windows\system32\MpSigStub.exe

2012-01-03 19:56 . 2012-01-03 19:56 169984 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\0F153\E9BC6.exe

2012-01-03 19:24 . 2012-01-03 19:25 73191824 ----a-w- c:\documents and settings\All Users\Application Data\PC Tools\DownloadManager\Spyware Doctor8.0\sdsetup_revwire207_aff_dl.exe

2012-01-03 17:48 . 2012-01-03 19:24 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools

2012-01-03 17:42 . 2012-01-03 17:48 -------- d-----w- c:\windows\system32\sdtmp

2012-01-03 13:57 . 2012-01-04 00:10 -------- d-----w- c:\program files\53D4F

2012-01-03 13:56 . 2012-01-04 00:28 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\0F153

2012-01-03 13:56 . 2012-01-03 20:29 -------- d-----w- c:\program files\LP

2011-12-28 10:45 . 2011-12-28 10:45 5575392 ----a-w- c:\documents and settings\All Users\Application Data\YouTube Downloader\ytd_installer.exe

2011-12-14 01:32 . 2011-12-09 09:45 65536 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\cs3i32f2.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components\XPATLCOM.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-01-04 13:52 . 2009-11-04 20:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2012-01-04 01:54 . 2009-07-08 23:21 -------- d-----w- c:\program files\Common Files\Nokia

2012-01-04 01:52 . 2008-12-19 03:34 -------- d-----w- c:\program files\Nokia

2012-01-04 01:49 . 2010-06-28 17:21 -------- d-----w- c:\program files\Google

2012-01-03 23:38 . 2012-01-03 17:45 740156 ----a-w- c:\windows\system32\drivers\Cat.DB

2012-01-03 23:35 . 2006-06-15 11:00 -------- d--h--w- c:\program files\InstallShield Installation Information

2012-01-03 23:31 . 2010-03-25 23:11 -------- d-----w- c:\program files\Maxis

2012-01-02 01:49 . 2006-10-07 22:55 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\CoreFTP

2011-12-30 21:27 . 2006-10-09 13:37 -------- d-----w- c:\program files\Steam

2011-12-28 10:46 . 2011-08-08 17:50 -------- d-----w- c:\documents and settings\All Users\Application Data\YouTube Downloader

2011-12-11 00:15 . 2006-10-08 14:14 -------- d-----w- c:\program files\Sound Forge

2011-12-07 00:36 . 2009-11-05 23:10 -------- d-----w- c:\program files\SeaMonkey

2011-11-17 10:20 . 2004-12-03 03:15 569938 ----a-w- c:\windows\system32\perfh013.dat

2011-11-17 10:20 . 2004-12-03 03:15 118342 ----a-w- c:\windows\system32\perfc013.dat

2011-11-09 23:12 . 2011-11-09 23:12 -------- d-----w- c:\program files\QuickTime

2011-11-09 23:09 . 2011-11-09 23:07 -------- d-----w- c:\program files\iTunes

2011-11-09 23:07 . 2011-11-09 23:07 -------- d-----w- c:\program files\iPod

2011-11-09 23:07 . 2008-04-17 10:01 -------- d-----w- c:\program files\Common Files\Apple

2011-11-09 23:02 . 2011-11-09 23:02 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer

2011-11-09 23:00 . 2011-11-09 23:00 -------- d-----w- c:\program files\Bonjour

2011-11-09 22:59 . 2011-11-09 22:59 73584 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.5.0.142\SetupAdmin.exe

2011-11-09 22:51 . 2011-11-09 22:51 -------- d-----w- c:\program files\Apple Software Update

2011-11-12 18:52 . 2011-05-06 12:39 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

((((((((((((((((((((((((((((( SnapShot_2010-05-21_19.41.13 )))))))))))))))))))))))))))))))))))))))))

.

+ 2012-01-04 15:06 . 2012-01-04 15:06 16384 c:\windows\Temp\Perflib_Perfdata_71c.dat

+ 2012-01-04 15:06 . 2012-01-04 15:06 16384 c:\windows\Temp\Perflib_Perfdata_6c8.dat

- 2007-01-29 08:58 . 2010-01-23 08:11 46080 c:\windows\system32\tzchange.exe

+ 2007-01-29 08:58 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe

+ 2011-04-25 20:49 . 2003-01-26 11:41 40960 c:\windows\system32\ssubtmr6.dll

+ 2004-08-03 21:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe

+ 2011-05-23 11:35 . 2011-05-23 11:35 11776 c:\windows\system32\siscardplugins\siscardplugin1_BE_EID_35__ACS ACR38U__.dll

+ 2010-04-16 21:12 . 2010-04-16 21:12 48464 c:\windows\system32\sirenacm.dll

+ 2011-07-24 16:33 . 2009-04-15 12:31 13931 c:\windows\system32\RaCoInst.dat

+ 2010-03-30 22:16 . 2010-03-30 22:16 99176 c:\windows\system32\PresentationHostProxy.dll

+ 2004-12-03 03:15 . 2011-11-17 10:20 94014 c:\windows\system32\perfc009.dat

+ 2009-11-06 23:07 . 2009-11-06 23:07 49488 c:\windows\system32\netfxperf.dll

+ 2009-11-05 20:17 . 2009-11-05 20:17 11600 c:\windows\system32\mui\0409\mscorees.dll

+ 2006-11-07 20:03 . 2010-06-24 12:27 55296 c:\windows\system32\msfeedsbs.dll

- 2006-11-07 20:03 . 2010-02-25 06:20 55296 c:\windows\system32\msfeedsbs.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 25600 c:\windows\system32\jsproxy.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 25600 c:\windows\system32\jsproxy.dll

+ 2011-07-24 16:34 . 2005-10-27 06:55 49152 c:\windows\system32\JJAKEn.dll

- 2004-08-03 21:00 . 2008-04-14 17:02 80384 c:\windows\system32\iccvid.dll

+ 2004-08-03 21:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll

+ 2010-07-18 22:40 . 2010-07-18 22:40 61952 c:\windows\system32\execryptorvb.dll

+ 2010-09-08 08:20 . 2010-09-08 08:20 40960 c:\windows\system32\eidlibj.dll

+ 2011-11-09 23:01 . 2011-08-02 16:38 42496 c:\windows\system32\DRVSTORE\usbaapl_091115F4EDEB41DBA0EC91574CE905B4E0482482\usbaapl.sys

+ 2011-11-09 23:02 . 2011-08-02 16:38 18432 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\netaapl.sys

+ 2010-12-08 14:25 . 2008-04-13 19:45 15104 c:\windows\system32\drivers\usbscan.sys

+ 2008-04-17 10:01 . 2010-04-16 06:33 41472 c:\windows\system32\drivers\usbaapl.sys

+ 2004-04-30 12:35 . 2004-04-30 12:35 24832 c:\windows\system32\drivers\a38usbxp.sys

+ 2011-08-30 22:05 . 2011-08-30 22:05 73064 c:\windows\system32\dnssd.dll

+ 2011-08-30 22:05 . 2011-08-30 22:05 83816 c:\windows\system32\dns-sd.exe

- 2010-01-25 20:38 . 2010-02-25 06:20 12800 c:\windows\system32\dllcache\xpshims.dll

+ 2010-01-25 20:38 . 2010-06-24 12:27 12800 c:\windows\system32\dllcache\xpshims.dll

+ 2010-12-08 14:25 . 2008-04-13 19:45 15104 c:\windows\system32\dllcache\usbscan.sys

+ 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe

+ 2007-05-09 16:49 . 2010-06-24 12:27 55296 c:\windows\system32\dllcache\msfeedsbs.dll

- 2007-05-09 16:49 . 2010-02-25 06:20 55296 c:\windows\system32\dllcache\msfeedsbs.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 25600 c:\windows\system32\dllcache\jsproxy.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 25600 c:\windows\system32\dllcache\jsproxy.dll

+ 2009-12-22 18:39 . 2009-12-22 18:39 62592 c:\windows\system32\dllcache\cdrom.sys

+ 2010-03-05 14:42 . 2010-03-05 14:42 65536 c:\windows\system32\dllcache\asycfilt.dll

+ 2010-09-08 08:24 . 2010-09-08 08:24 73728 c:\windows\system32\belpicppgui.dll

+ 2011-05-23 11:34 . 2011-05-23 11:34 90112 c:\windows\system32\Belgium Identity Card PKCS11.dll

+ 2010-09-08 08:24 . 2010-09-08 08:24 61440 c:\windows\system32\beidpp\xireid.dll

+ 2011-05-23 11:34 . 2011-05-23 11:34 90112 c:\windows\system32\beidpkcs11.dll

+ 2010-09-08 08:20 . 2010-09-08 08:20 40960 c:\windows\system32\beidlibjni.dll

+ 2011-05-23 11:34 . 2011-05-23 11:34 69632 c:\windows\system32\beidCSPlib.dll

+ 2010-09-08 08:20 . 2010-09-08 08:20 48128 c:\windows\system32\beidCSP.dll

+ 2004-08-03 21:00 . 2010-03-05 14:42 65536 c:\windows\system32\asycfilt.dll

+ 2011-07-24 16:34 . 2008-11-27 16:20 49152 c:\windows\system32\AQCKGen.dll

+ 2011-07-24 16:34 . 2009-02-09 16:36 48640 c:\windows\system32\ANIO64.sys

+ 2011-07-24 16:34 . 2007-05-12 14:39 11904 c:\windows\system32\anio4.sys

+ 2011-07-24 16:34 . 2009-02-09 16:10 29411 c:\windows\system32\ANIO.sys

+ 2011-07-24 16:34 . 2008-11-27 16:22 45115 c:\windows\system32\ANICtl.dll

+ 2010-04-07 21:48 . 2010-04-07 21:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll

- 2008-07-29 18:16 . 2008-07-29 18:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll

+ 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe

+ 2010-04-01 09:42 . 2010-04-01 09:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll

- 2008-05-27 22:49 . 2008-05-27 22:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll

+ 2010-03-31 12:51 . 2010-03-31 12:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll

- 2008-05-27 22:49 . 2008-05-27 22:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll

+ 2010-03-31 12:51 . 2010-03-31 12:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll

+ 2010-03-31 12:51 . 2010-03-31 12:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll

- 2008-05-27 22:49 . 2008-05-27 22:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll

+ 2010-03-31 13:32 . 2010-03-31 13:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe

- 2008-05-27 23:30 . 2008-05-27 23:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe

- 2003-02-20 17:19 . 2003-02-20 17:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

+ 2010-03-31 13:32 . 2010-03-31 13:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe

+ 2010-10-01 22:29 . 2010-10-01 22:29 38400 c:\windows\Installer\e8656e.msi

+ 2011-11-08 12:12 . 2011-11-08 12:12 22016 c:\windows\Installer\c6d2d.msi

+ 2011-02-20 19:08 . 2011-02-20 19:08 22016 c:\windows\Installer\15ad83a.msi

+ 2011-02-20 19:06 . 2011-02-20 19:06 27136 c:\windows\Installer\15ad80d.msi

+ 2011-02-20 19:06 . 2011-02-20 19:06 58880 c:\windows\Installer\15ad7eb.msi

+ 2010-06-28 17:23 . 2010-06-28 17:23 47104 c:\windows\Installer\120554.msi

+ 2011-02-20 19:07 . 2011-02-20 19:07 80395 c:\windows\Installer\{CC38A00D-7EED-46CE-9281-D1D97B81F22A}\MsblIco.Exe

+ 2011-02-20 19:06 . 2011-02-20 19:06 61272 c:\windows\Installer\{C20C2630-B3A7-44BA-BDD0-31E256AE490E}\IconWlc.exe

+ 2010-09-30 10:39 . 2010-09-30 10:39 89440 c:\windows\Installer\{95140000-007A-0413-0000-0000000FF1CE}\OLCIcon.exe

- 2010-04-15 22:00 . 2010-04-15 22:00 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe

+ 2010-09-19 17:49 . 2010-09-19 17:49 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe

- 2010-04-15 21:59 . 2010-04-15 21:59 38240 c:\windows\Installer\{90120000-0020-0413-0000-0000000FF1CE}\O12ConvIcon.exe

+ 2010-09-19 18:08 . 2010-09-19 18:08 38240 c:\windows\Installer\{90120000-0020-0413-0000-0000000FF1CE}\O12ConvIcon.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 23040 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\unbndico.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 23040 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\unbndico.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 61440 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pubs.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 61440 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pubs.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 27136 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\oisicon.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 27136 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\oisicon.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 11264 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\mspicons.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 11264 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\mspicons.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 86016 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\inficon.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 86016 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\inficon.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 12288 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\cagicon.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 12288 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\cagicon.exe

+ 2010-10-01 22:30 . 2011-05-12 13:55 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll

+ 2011-11-09 22:52 . 2011-11-09 22:52 27136 c:\windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe

+ 2011-02-20 19:08 . 2011-02-20 19:08 58945 c:\windows\Installer\{2869F5EA-93C3-48E5-80DF-DB696BC84A91}\wlmail.exe

- 2009-10-02 21:21 . 2009-10-02 21:21 58945 c:\windows\Installer\{2869F5EA-93C3-48E5-80DF-DB696BC84A91}\wlmail.exe

+ 2007-03-22 17:13 . 2007-03-22 17:13 23904 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\IPDMCTRL.DLL

+ 2010-09-19 18:12 . 2010-02-25 06:20 12800 c:\windows\ie8updates\KB2183461-IE8\xpshims.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 55296 c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 25600 c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_a7297e5b\System.Drawing.Design.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_b79538ae\CustomMarshalers.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\4b76ee7cffa5a925f16967eb6d44d79e\WindowsLiveWriter.ni.exe

+ 2011-02-20 19:20 . 2011-02-20 19:20 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0f3ef21a166df82d34e0147cfa308256\WindowsLive.Writer.Api.ni.dll

+ 2010-09-19 18:13 . 2010-09-19 18:13 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\aada360296a42e0413579a19c771ec2d\System.Web.DynamicData.Design.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll

+ 2010-09-19 18:10 . 2010-09-19 18:10 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe

+ 2010-09-19 18:09 . 2010-09-19 18:09 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\272d51526813ea113970b8e890c92ee2\Microsoft.VisualC.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe

+ 2010-09-19 18:21 . 2010-09-19 18:21 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

- 2009-03-22 10:51 . 2009-03-22 10:51 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll

+ 2010-09-19 17:54 . 2010-09-19 17:54 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

+ 2010-09-19 17:56 . 2010-09-19 17:56 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll

+ 2010-09-19 18:05 . 2008-04-14 17:02 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll

+ 2010-09-19 17:45 . 2010-01-23 08:11 46080 c:\windows\$NtUninstallKB981793$\tzchange.exe

+ 2010-09-19 17:45 . 2010-04-22 22:24 16896 c:\windows\$NtUninstallKB981793$\spuninst\tzchange.dll

+ 2010-09-19 17:50 . 2008-04-14 17:02 65024 c:\windows\$NtUninstallKB979482$\asycfilt.dll

+ 2010-09-19 18:14 . 2008-04-14 17:03 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe

+ 2010-09-19 18:13 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll

+ 2010-09-19 18:13 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982802\spmsg.dll

+ 2010-09-19 18:06 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll

+ 2010-09-19 18:06 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982665\spmsg.dll

+ 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll

+ 2010-09-19 18:11 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll

+ 2010-09-19 18:11 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982214\spmsg.dll

+ 2010-09-19 18:11 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll

+ 2010-09-19 18:11 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB981997\spmsg.dll

+ 2010-09-19 18:12 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll

+ 2010-09-19 17:43 . 2010-06-17 13:47 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll

+ 2010-09-19 18:12 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB981852\spmsg.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB981322\spmsg.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB980436\spmsg.dll

+ 2010-09-19 17:46 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll

+ 2010-09-19 17:46 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB980218\spmsg.dll

+ 2010-09-19 17:50 . 2008-07-08 13:07 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll

+ 2010-09-19 17:50 . 2008-07-08 13:07 18808 c:\windows\$hf_mig$\KB980195\spmsg.dll

+ 2010-09-19 17:50 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll

+ 2010-09-19 17:50 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB979482\spmsg.dll

+ 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll

+ 2010-09-19 17:55 . 2008-07-08 13:07 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll

+ 2010-09-19 17:55 . 2008-07-08 13:07 18808 c:\windows\$hf_mig$\KB975562\spmsg.dll

+ 2010-09-19 18:14 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll

+ 2010-09-19 18:14 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2347290\spmsg.dll

+ 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe

+ 2010-09-19 18:05 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll

+ 2010-09-19 18:05 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2286198\spmsg.dll

+ 2010-09-19 18:13 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll

+ 2010-09-19 18:13 . 2009-05-26 09:01 18808 c:\windows\$hf_mig$\KB2259922\spmsg.dll

+ 2010-09-19 17:56 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll

+ 2010-09-19 17:56 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2229593\spmsg.dll

+ 2010-09-19 18:12 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2183461-IE8\update\spcustom.dll

+ 2010-09-19 18:12 . 2009-05-26 09:01 18808 c:\windows\$hf_mig$\KB2183461-IE8\spmsg.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 12800 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\xpshims.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 55296 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeedsbs.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 25600 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\jsproxy.dll

+ 2010-09-19 18:11 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2160329\update\spcustom.dll

+ 2010-09-19 18:11 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2160329\spmsg.dll

+ 2010-09-19 18:13 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll

+ 2010-09-19 18:13 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2141007\spmsg.dll

+ 2010-09-19 18:14 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll

+ 2010-09-19 18:14 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2121546\spmsg.dll

+ 2010-09-19 18:05 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll

+ 2010-09-19 18:05 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2115168\spmsg.dll

+ 2010-09-19 18:11 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2079403\update\spcustom.dll

+ 2010-09-19 18:11 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2079403\spmsg.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll

+ 2008-05-05 05:25 . 2010-07-22 06:19 5632 c:\windows\system32\xpsp4res.dll

+ 2010-12-08 14:25 . 2001-09-06 20:27 5632 c:\windows\system32\ptpusb.dll

+ 2007-08-30 00:28 . 2010-09-19 18:16 4096 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\opwicon.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 4096 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\opwicon.exe

+ 2010-09-19 18:08 . 2010-09-19 18:08 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

- 2009-10-14 01:10 . 2009-10-14 01:10 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll

+ 2010-09-19 18:13 . 2008-05-05 05:25 3072 c:\windows\$NtUninstallKB982802$\xpsp4res.dll

+ 2010-07-22 06:19 . 2010-07-22 06:19 5632 c:\windows\$hf_mig$\KB982802\SP3QFE\sprv0413.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

+ 2008-10-24 11:15 . 2008-10-24 11:15 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll

- 2006-12-01 20:54 . 2006-12-01 20:54 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll

- 2006-12-01 20:54 . 2006-12-01 20:54 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll

+ 2008-10-24 11:15 . 2008-10-24 11:15 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll

- 2006-12-01 20:54 . 2006-12-01 20:54 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll

+ 2008-10-24 11:15 . 2008-10-24 11:15 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll

+ 2011-05-14 00:17 . 2011-05-14 00:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll

+ 2011-05-14 00:12 . 2011-05-14 00:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll

+ 2011-05-14 00:11 . 2011-05-14 00:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll

+ 2011-07-24 16:34 . 2009-04-22 08:23 270336 c:\windows\system32\wnicapi.dll

+ 2011-07-24 16:34 . 2009-03-05 09:12 258048 c:\windows\system32\wlanapp.dll

- 2004-08-03 21:00 . 2008-04-14 17:02 293888 c:\windows\system32\winsrv.dll

+ 2004-08-03 21:00 . 2010-06-18 17:47 293888 c:\windows\system32\winsrv.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 916480 c:\windows\system32\wininet.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 916480 c:\windows\system32\wininet.dll

+ 2004-08-03 21:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll

- 2004-08-03 21:00 . 2008-04-14 17:02 406016 c:\windows\system32\usp10.dll

+ 2004-04-30 11:00 . 2004-04-30 11:00 110592 c:\windows\system32\usbr38.dll

+ 2007-12-17 17:30 . 2007-12-17 17:30 200704 c:\windows\system32\ssleay32_0_9_8g.dll

+ 2011-07-24 16:34 . 2008-09-25 11:16 204800 c:\windows\system32\ssleay32.dll

+ 2004-08-03 21:00 . 2010-06-30 12:33 149504 c:\windows\system32\schannel.dll

+ 2004-08-03 21:00 . 2010-07-22 15:46 590848 c:\windows\system32\rpcrt4.dll

+ 2009-10-26 18:09 . 2012-01-03 20:05 201636 c:\windows\system32\Restore\rstrlog.dat

+ 2011-07-24 16:33 . 2009-04-15 12:31 221184 c:\windows\system32\RaCoInst.dll

+ 2010-12-08 14:25 . 2008-04-14 18:02 159232 c:\windows\system32\ptpusd.dll

+ 2010-03-30 22:10 . 2010-03-30 22:10 295264 c:\windows\system32\PresentationHost.exe

+ 2004-12-03 03:15 . 2011-11-17 10:20 495662 c:\windows\system32\perfh009.dat

+ 2004-08-03 21:00 . 2010-06-24 12:27 206848 c:\windows\system32\occache.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 206848 c:\windows\system32\occache.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 611840 c:\windows\system32\mstime.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 611840 c:\windows\system32\mstime.dll

+ 2006-11-07 20:03 . 2010-06-24 12:27 599040 c:\windows\system32\msfeeds.dll

+ 2009-11-06 23:07 . 2009-11-06 23:07 297808 c:\windows\system32\mscoree.dll

- 2006-10-18 20:47 . 2006-10-18 20:47 317440 c:\windows\system32\MP4SDECD.dll

+ 2006-10-18 20:47 . 2010-03-30 10:24 317440 c:\windows\system32\mp4sdecd.dll

+ 2010-07-15 11:14 . 2010-07-15 11:14 231888 c:\windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe

+ 2010-06-18 09:49 . 2010-06-18 09:49 231888 c:\windows\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe

+ 2010-06-18 09:49 . 2010-06-18 09:49 311760 c:\windows\system32\Macromed\Flash\FlashUtil10h_ActiveX.dll

+ 2004-08-03 21:00 . 2010-06-09 07:45 692736 c:\windows\system32\inetcomm.dll

+ 2009-12-22 18:39 . 2009-12-22 18:39 922112 c:\windows\system32\imapi2fs.dll

+ 2009-12-22 18:39 . 2009-12-22 18:39 426496 c:\windows\system32\imapi2.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 184320 c:\windows\system32\iepeers.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 184320 c:\windows\system32\iepeers.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 387584 c:\windows\system32\iedkcs32.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 387584 c:\windows\system32\iedkcs32.dll

- 2004-08-03 21:00 . 2010-02-24 09:56 173056 c:\windows\system32\ie4uinit.exe

+ 2004-08-03 21:00 . 2010-06-23 12:08 173056 c:\windows\system32\ie4uinit.exe

+ 2004-12-03 03:12 . 2011-04-24 18:46 461232 c:\windows\system32\FNTCACHE.DAT

+ 2010-09-08 08:20 . 2010-09-08 08:20 114688 c:\windows\system32\EIDLibCtrl.dll

+ 2011-05-23 11:33 . 2011-05-23 11:33 200704 c:\windows\system32\eidlib.dll

+ 2004-08-03 21:00 . 2010-06-21 15:27 354304 c:\windows\system32\drivers\srv.sys

+ 2011-07-24 16:33 . 2009-04-15 12:32 715520 c:\windows\system32\drivers\rt2870.sys

+ 2010-06-18 17:47 . 2010-06-18 17:47 293888 c:\windows\system32\dllcache\winsrv.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 916480 c:\windows\system32\dllcache\wininet.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 916480 c:\windows\system32\dllcache\wininet.dll

+ 2010-04-16 15:38 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll

+ 2008-10-16 10:45 . 2010-06-21 15:27 354304 c:\windows\system32\dllcache\srv.sys

+ 2008-12-05 06:58 . 2010-06-30 12:33 149504 c:\windows\system32\dllcache\schannel.dll

+ 2009-04-15 14:55 . 2010-07-22 15:46 590848 c:\windows\system32\dllcache\rpcrt4.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 206848 c:\windows\system32\dllcache\occache.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 206848 c:\windows\system32\dllcache\occache.dll

+ 2008-04-13 19:21 . 2008-04-13 19:21 162816 c:\windows\system32\dllcache\netbt.sys

- 2004-08-03 21:00 . 2010-02-25 06:20 611840 c:\windows\system32\dllcache\mstime.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 611840 c:\windows\system32\dllcache\mstime.dll

+ 2007-05-09 16:49 . 2010-06-24 12:27 599040 c:\windows\system32\dllcache\msfeeds.dll

+ 2010-03-30 10:24 . 2010-03-30 10:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll

+ 2008-08-13 16:29 . 2010-06-09 07:45 692736 c:\windows\system32\dllcache\inetcomm.dll

+ 2009-12-22 18:39 . 2009-12-22 18:39 922112 c:\windows\system32\dllcache\imapi2fs.dll

+ 2009-12-22 18:39 . 2009-12-22 18:39 426496 c:\windows\system32\dllcache\imapi2.dll

+ 2010-01-25 20:38 . 2010-06-24 12:27 247808 c:\windows\system32\dllcache\ieproxy.dll

- 2010-01-25 20:38 . 2010-02-25 06:20 247808 c:\windows\system32\dllcache\ieproxy.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 184320 c:\windows\system32\dllcache\iepeers.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 184320 c:\windows\system32\dllcache\iepeers.dll

+ 2010-09-19 17:43 . 2010-06-24 12:27 743424 c:\windows\system32\dllcache\iedvtool.dll

- 2004-08-03 21:00 . 2010-02-25 06:20 387584 c:\windows\system32\dllcache\iedkcs32.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 387584 c:\windows\system32\dllcache\iedkcs32.dll

+ 2004-08-03 21:00 . 2010-06-23 12:08 173056 c:\windows\system32\dllcache\ie4uinit.exe

- 2004-08-03 21:00 . 2010-02-24 09:56 173056 c:\windows\system32\dllcache\ie4uinit.exe

+ 2010-09-19 17:41 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe

+ 2010-04-20 05:35 . 2010-04-20 05:35 285696 c:\windows\system32\dllcache\atmfd.dll

+ 2010-09-08 08:24 . 2010-09-08 08:24 282624 c:\windows\system32\beidwinscard.dll

+ 2010-09-08 08:24 . 2010-09-08 08:24 163840 c:\windows\system32\beidssleay32.dll

+ 2010-09-08 08:24 . 2010-09-08 08:24 200791 c:\windows\system32\beidlibopensc.dll

+ 2010-09-08 08:24 . 2010-09-08 08:24 868352 c:\windows\system32\beidlibeay32.dll

+ 2010-09-08 08:20 . 2010-09-08 08:20 114688 c:\windows\system32\beidlibaxctrl.dll

+ 2011-05-23 11:33 . 2011-05-23 11:33 200704 c:\windows\system32\beidlib.dll

+ 2010-09-08 08:24 . 2010-09-08 08:24 270336 c:\windows\system32\beidgui.dll

+ 2011-05-23 11:33 . 2011-05-23 11:33 266240 c:\windows\system32\beid35DlgsWin32.dll

+ 2011-05-23 11:32 . 2011-05-23 11:32 126976 c:\windows\system32\beid35common.dll

+ 2011-05-23 11:33 . 2011-05-23 11:33 200704 c:\windows\system32\beid35cardlayer.dll

+ 2011-05-23 11:34 . 2011-05-23 11:34 360448 c:\windows\system32\beid35applayer.dll

- 2004-08-03 21:00 . 2008-04-14 17:00 285696 c:\windows\system32\atmfd.dll

+ 2004-08-03 21:00 . 2010-04-20 05:35 285696 c:\windows\system32\atmfd.dll

+ 2011-07-24 16:34 . 2009-04-17 17:24 700416 c:\windows\system32\ANIWZCS2.dll

+ 2011-07-24 16:34 . 2009-02-26 09:22 237568 c:\windows\system32\ANIWPS.exe

+ 2011-07-24 16:35 . 2009-02-26 11:46 147456 c:\windows\system32\ANIWConnService.exe

+ 2011-07-24 16:34 . 2009-02-26 11:38 692224 c:\windows\system32\ANIOWPS.dll

+ 2011-07-24 16:34 . 2009-02-09 16:26 315392 c:\windows\system32\ANIOApi.dll

+ 2011-07-24 16:34 . 2008-11-27 16:25 204800 c:\windows\system32\aIPH.dll

+ 2004-08-03 21:00 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe

- 2004-08-03 21:00 . 2008-04-14 17:03 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe

+ 2010-03-30 22:16 . 2010-03-30 22:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll

+ 2010-04-07 21:48 . 2010-04-07 21:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll

- 2008-07-29 18:16 . 2008-07-29 18:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll

+ 2010-04-07 21:48 . 2010-04-07 21:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll

+ 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll

+ 2010-02-09 10:22 . 2010-02-09 10:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll

- 2008-07-25 10:17 . 2008-07-25 10:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll

+ 2010-05-11 04:40 . 2010-05-11 04:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll

- 2009-08-07 21:51 . 2009-08-07 21:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

+ 2010-05-11 04:40 . 2010-05-11 04:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

+ 2010-03-31 12:51 . 2010-03-31 12:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll

- 2008-05-27 22:49 . 2008-05-27 22:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll

+ 2010-03-31 12:49 . 2010-03-31 12:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll

- 2008-05-27 22:48 . 2008-05-27 22:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll

- 2008-05-27 23:30 . 2008-05-27 23:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

+ 2010-03-31 13:32 . 2010-03-31 13:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

+ 2006-06-15 10:46 . 1998-10-29 14:45 306688 c:\windows\IsUninst.exe

- 2006-06-15 10:46 . 1998-10-29 13:45 306688 c:\windows\IsUninst.exe

+ 2012-01-03 23:37 . 2012-01-03 23:37 301056 c:\windows\Installer\a7dace.msi

+ 2010-09-30 10:39 . 2010-09-30 10:39 926208 c:\windows\Installer\97ebf9.msi

+ 2010-02-24 22:14 . 2010-02-24 22:14 543232 c:\windows\Installer\1860e13.msp

+ 2011-02-20 19:08 . 2011-02-20 19:08 570368 c:\windows\Installer\15ad88d.msi

+ 2011-02-20 19:08 . 2011-02-20 19:08 861184 c:\windows\Installer\15ad86b.msi

+ 2011-02-20 19:07 . 2011-02-20 19:07 429056 c:\windows\Installer\15ad82f.msi

+ 2011-02-20 19:06 . 2011-02-20 19:06 149504 c:\windows\Installer\15ad7fe.msi

+ 2007-08-30 00:28 . 2010-09-19 18:16 409600 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\xlicons.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 409600 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\xlicons.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 286720 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 286720 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 249856 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pptico.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 249856 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pptico.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 794624 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\outicon.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 794624 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\outicon.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 135168 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\misc.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 135168 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\misc.exe

- 2007-08-30 00:28 . 2010-04-15 21:57 593920 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe

+ 2007-08-30 00:28 . 2010-09-19 18:16 593920 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe

+ 2011-11-09 23:09 . 2011-11-09 23:09 380928 c:\windows\Installer\{29ED20C9-5E15-4969-9279-25BF3727A3DA}\iTunesIco.exe

+ 2007-04-19 12:01 . 2007-04-19 12:01 238424 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\MSCDM.DLL

+ 2007-01-16 18:32 . 2007-01-16 18:32 136032 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\MSAEXP30.DLL

+ 2008-06-13 01:06 . 2008-06-13 01:06 103776 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\IPATHPIA.DLL

+ 2007-04-19 11:54 . 2007-04-19 11:54 169312 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\ACCWIZ.DLL

+ 2010-09-19 18:12 . 2010-02-25 06:20 916480 c:\windows\ie8updates\KB2183461-IE8\wininet.dll

+ 2010-09-19 18:12 . 2010-02-22 14:29 401272 c:\windows\ie8updates\KB2183461-IE8\spuninst\updspapi.dll

+ 2010-09-19 18:12 . 2009-05-26 09:01 234872 c:\windows\ie8updates\KB2183461-IE8\spuninst\spuninst.exe

+ 2010-09-19 18:12 . 2010-02-25 06:20 206848 c:\windows\ie8updates\KB2183461-IE8\occache.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 611840 c:\windows\ie8updates\KB2183461-IE8\mstime.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 594432 c:\windows\ie8updates\KB2183461-IE8\msfeeds.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 247808 c:\windows\ie8updates\KB2183461-IE8\ieproxy.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 184320 c:\windows\ie8updates\KB2183461-IE8\iepeers.dll

+ 2010-09-19 18:12 . 2009-03-08 03:35 742912 c:\windows\ie8updates\KB2183461-IE8\iedvtool.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 387584 c:\windows\ie8updates\KB2183461-IE8\iedkcs32.dll

+ 2010-09-19 18:12 . 2010-02-24 09:56 173056 c:\windows\ie8updates\KB2183461-IE8\ie4uinit.exe

+ 2010-09-19 17:57 . 2010-09-19 17:57 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_25df7d5e\System.Drawing.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_dad3231f\System.Drawing.Design.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_423c8e42\CustomMarshalers.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe

+ 2011-02-20 19:21 . 2011-02-20 19:21 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\c30f8128b641bb1fac88cc983958a507\WindowsLiveLocal.WriterPlugin.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f7eecdbf8f73f127df632e81bc835484\WindowsLive.Writer.Interop.Mshtml.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cf5151086dd038a82602c9167c9acad5\WindowsLive.Writer.Passport.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cb1b830e0cf0889fda4e4a9d619d816d\WindowsLive.Writer.HtmlParser.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c46d84073499887c745801bda334c97f\WindowsLive.Writer.Interop.SHDocVw.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\879fd6f22250247f79ee663b80199b73\WindowsLive.Writer.Localization.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\80ce7f3c877dff36e07711517ed49b19\WindowsLive.Writer.BrowserControl.ni.dll

+ 2011-02-20 19:21 . 2011-02-20 19:21 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\796b11733fd16a0128c89ae37abce0f4\WindowsLive.Writer.Instrumentation.ni.dll

+ 2011-02-20 19:21 . 2011-02-20 19:21 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\75f2d6dc2e4d4219276c1c02265f20a1\WindowsLive.Writer.HtmlEditor.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\70cc2bbf8d87c63f36d05bf7a4a01a69\WindowsLive.Writer.Mshtml.ni.dll

+ 2011-02-20 19:21 . 2011-02-20 19:21 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\69968aa6fb3a6fb47df1b2dd59f1e1a2\WindowsLive.Writer.FileDestinations.ni.dll

+ 2011-02-20 19:21 . 2011-02-20 19:21 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\42b360f37602c772fa51c82607fe477d\WindowsLive.Writer.BlogClient.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\36888cd642eab375b37c2d8ae121d2ad\WindowsLive.Writer.Controls.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\323d5898b41430c73305874d4b93bf25\WindowsLive.Writer.Extensibility.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0e5d49b051e355c696ed7a2b5b24a623\WindowsLive.Writer.Interop.ni.dll

+ 2011-02-20 19:21 . 2011-02-20 19:21 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0d82d08289c6b8f928d8804f69f959ec\WindowsLive.Writer.SpellChecker.ni.dll

+ 2011-02-20 19:21 . 2011-02-20 19:21 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\b34623aa698e02b699e5b4706b1cd248\WindowsLive.Client.ni.dll

+ 2010-09-19 18:13 . 2010-09-19 18:13 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll

+ 2010-09-19 18:13 . 2010-09-19 18:13 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll

+ 2010-09-19 18:13 . 2010-09-19 18:13 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll

+ 2010-09-19 18:25 . 2010-09-19 18:25 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\5e16c279496a553c988c6199f0cee8aa\System.Web.Routing.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\720b28d81e987b889180b291ea19b821\System.Web.Extensions.Design.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\da36fd678161cd3444ef547c894e3f35\System.Web.Entity.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\49ae7c73fac8827123d5db1714c22599\System.Web.Entity.Design.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ce3aa27d3c4c052845ac5abb1374defa\System.Web.DynamicData.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\95fab896ef2af14876e3e1524379773b\System.Web.Abstractions.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3de39eb60b9d32af46f32f6c7a88fc7f\System.Runtime.Remoting.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll

+ 2010-09-19 18:14 . 2010-09-19 18:14 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll

+ 2010-09-19 18:12 . 2010-09-19 18:12 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll

+ 2010-09-19 18:23 . 2010-09-19 18:23 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\488c4017d45e861644a34fae557aa80f\System.Data.Entity.Design.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe

+ 2010-09-19 18:21 . 2010-09-19 18:21 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\5aeb40ff7128df2881fb03c01d070b20\ServiceModelReg.ni.exe

+ 2010-09-19 18:11 . 2010-09-19 18:11 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll

+ 2010-09-19 18:11 . 2010-09-19 18:11 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll

+ 2010-09-19 18:11 . 2010-09-19 18:11 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll

+ 2010-09-19 18:11 . 2010-09-19 18:11 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe

+ 2010-09-19 18:21 . 2010-09-19 18:21 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe

+ 2010-09-19 18:21 . 2010-09-19 18:21 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\56aec0938ef1bbdeca65b07a5fe8cd39\AspNetMMCExt.ni.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

+ 2010-09-19 17:54 . 2010-09-19 17:54 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

+ 2010-09-19 17:54 . 2010-09-19 17:54 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

+ 2010-09-19 17:54 . 2010-09-19 17:54 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll

- 2009-03-22 10:51 . 2009-03-22 10:51 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

+ 2010-09-19 18:07 . 2010-09-19 18:07 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll

+ 2010-09-19 17:48 . 2010-09-19 17:48 111624 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll

+ 2010-09-19 18:13 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll

+ 2010-09-19 18:13 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2009-04-15 14:55 585216 c:\windows\$NtUninstallKB982802$\rpcrt4.dll

+ 2010-09-19 18:05 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982665$\spuninst\updspapi.dll

+ 2010-09-19 18:05 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982665$\spuninst\spuninst.exe

+ 2010-09-19 18:11 . 2009-12-31 16:50 353792 c:\windows\$NtUninstallKB982214$\srv.sys

+ 2010-09-19 18:11 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982214$\spuninst\updspapi.dll

+ 2010-09-19 18:11 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982214$\spuninst\spuninst.exe

+ 2010-09-19 18:11 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB981997$\spuninst\updspapi.dll

+ 2010-09-19 18:11 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB981997$\spuninst\spuninst.exe

+ 2010-09-19 18:12 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB981852$\spuninst\updspapi.dll

+ 2010-09-19 18:12 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB981852$\spuninst\spuninst.exe

+ 2010-09-19 17:45 . 2009-05-26 09:01 401272 c:\windows\$NtUninstallKB981793$\spuninst\updspapi.dll

+ 2010-09-19 17:45 . 2009-05-26 09:01 234872 c:\windows\$NtUninstallKB981793$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2008-04-14 17:02 406016 c:\windows\$NtUninstallKB981322$\usp10.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB980436$\spuninst\updspapi.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB980436$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2009-06-25 08:27 147456 c:\windows\$NtUninstallKB980436$\schannel.dll

+ 2010-09-19 17:46 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB980218$\spuninst\updspapi.dll

+ 2010-09-19 17:46 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB980218$\spuninst\spuninst.exe

+ 2010-09-19 17:46 . 2008-04-14 17:00 285696 c:\windows\$NtUninstallKB980218$\atmfd.dll

+ 2010-09-19 17:50 . 2008-07-08 13:07 401272 c:\windows\$NtUninstallKB980195$\spuninst\updspapi.dll

+ 2010-09-19 17:50 . 2008-07-08 13:07 234872 c:\windows\$NtUninstallKB980195$\spuninst\spuninst.exe

+ 2010-09-19 17:50 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB979482$\spuninst\updspapi.dll

+ 2010-09-19 17:50 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB979482$\spuninst\spuninst.exe

+ 2010-09-19 17:46 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB978695_WM9$\spuninst\updspapi.dll

+ 2010-09-19 17:46 . 2007-07-27 19:04 234872 c:\windows\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe

+ 2010-09-19 17:55 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB975562$\spuninst\updspapi.dll

+ 2010-09-19 17:55 . 2008-07-08 13:07 234872 c:\windows\$NtUninstallKB975562$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll

+ 2010-09-19 18:13 . 2007-07-27 19:04 234872 c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2006-10-18 20:47 317440 c:\windows\$NtUninstallKB975558_WM8$\mp4sdecd.dll

+ 2010-07-21 21:20 . 2009-12-22 18:39 379184 c:\windows\$NtUninstallKB952011$\spuninst\updspapi.dll

+ 2010-07-21 21:20 . 2009-12-22 18:39 221488 c:\windows\$NtUninstallKB952011$\spuninst\spuninst.exe

+ 2010-09-19 18:14 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll

+ 2010-09-19 18:14 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe

+ 2010-09-19 18:05 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2286198$\spuninst\updspapi.dll

+ 2010-09-19 18:05 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2286198$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2009-05-26 09:01 401272 c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll

+ 2010-09-19 18:13 . 2009-05-26 09:01 234872 c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe

+ 2010-09-19 17:56 . 2010-02-22 17:59 401272 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll

+ 2010-09-19 17:56 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe

+ 2010-09-19 17:56 . 2008-04-14 17:03 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe

+ 2010-09-19 18:11 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2160329$\spuninst\updspapi.dll

+ 2010-09-19 18:11 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2160329$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll

+ 2010-09-19 18:13 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2008-04-11 19:06 691712 c:\windows\$NtUninstallKB2141007$\inetcomm.dll

+ 2010-09-19 18:14 . 2008-04-14 17:02 293888 c:\windows\$NtUninstallKB2121546$\winsrv.dll

+ 2010-09-19 18:14 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll

+ 2010-09-19 18:14 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe

+ 2010-09-19 18:05 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2115168$\spuninst\updspapi.dll

+ 2010-09-19 18:05 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2115168$\spuninst\spuninst.exe

+ 2010-09-19 18:11 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2079403$\spuninst\updspapi.dll

+ 2010-09-19 18:11 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2079403$\spuninst\spuninst.exe

+ 2010-09-19 18:13 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982802\update\updspapi.dll

+ 2010-09-19 18:13 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982802\update\update.exe

+ 2010-09-19 18:13 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982802\spuninst.exe

+ 2010-07-23 06:17 . 2010-07-23 06:17 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll

+ 2010-09-19 18:06 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982665\update\updspapi.dll

+ 2010-09-19 18:06 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982665\update\update.exe

+ 2010-09-19 18:06 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982665\spuninst.exe

+ 2010-09-19 18:11 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982214\update\updspapi.dll

+ 2010-09-19 18:11 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982214\update\update.exe

+ 2010-09-19 18:11 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982214\spuninst.exe

+ 2010-09-19 17:42 . 2010-06-21 14:18 354304 c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys

+ 2010-09-19 18:11 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB981997\update\updspapi.dll

+ 2010-09-19 18:11 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB981997\update\update.exe

+ 2010-09-19 18:11 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB981997\spuninst.exe

+ 2010-09-19 18:12 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB981852\update\updspapi.dll

+ 2010-09-19 18:12 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB981852\update\update.exe

+ 2010-09-19 18:12 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB981852\spuninst.exe

+ 2010-09-19 18:13 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB981322\update\updspapi.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB981322\update\update.exe

+ 2010-09-19 18:13 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB981322\spuninst.exe

+ 2010-04-16 15:31 . 2010-04-16 15:31 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB980436\update\updspapi.dll

+ 2010-09-19 18:13 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB980436\update\update.exe

+ 2010-09-19 18:13 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB980436\spuninst.exe

+ 2010-06-30 12:25 . 2010-06-30 12:25 149504 c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll

+ 2010-09-19 17:46 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB980218\update\updspapi.dll

+ 2010-09-19 17:46 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB980218\update\update.exe

+ 2010-09-19 17:46 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB980218\spuninst.exe

+ 2010-04-20 05:41 . 2010-04-20 05:41 285824 c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll

+ 2010-09-19 17:50 . 2008-07-08 13:07 401272 c:\windows\$hf_mig$\KB980195\update\updspapi.dll

+ 2010-09-19 17:50 . 2008-07-08 13:07 765304 c:\windows\$hf_mig$\KB980195\update\update.exe

+ 2010-09-19 17:50 . 2008-07-08 13:07 234872 c:\windows\$hf_mig$\KB980195\spuninst.exe

+ 2010-09-19 17:50 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB979482\update\updspapi.dll

+ 2010-09-19 17:50 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB979482\update\update.exe

+ 2010-09-19 17:50 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB979482\spuninst.exe

+ 2010-09-19 17:55 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB975562\update\updspapi.dll

+ 2010-09-19 17:55 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB975562\update\update.exe

+ 2010-09-19 17:55 . 2008-07-08 13:07 234872 c:\windows\$hf_mig$\KB975562\spuninst.exe

+ 2010-09-19 18:14 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll

+ 2010-09-19 18:14 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2347290\update\update.exe

+ 2010-09-19 18:14 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2347290\spuninst.exe

+ 2010-09-19 18:05 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll

+ 2010-09-19 18:05 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2286198\update\update.exe

+ 2010-09-19 18:05 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2286198\spuninst.exe

+ 2010-09-19 18:13 . 2009-05-26 09:01 401272 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll

+ 2010-09-19 18:13 . 2009-05-26 09:01 765304 c:\windows\$hf_mig$\KB2259922\update\update.exe

+ 2010-09-19 18:13 . 2009-05-26 09:01 234872 c:\windows\$hf_mig$\KB2259922\spuninst.exe

+ 2010-09-19 17:56 . 2010-02-22 17:59 401272 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll

+ 2010-09-19 17:56 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2229593\update\update.exe

+ 2010-09-19 17:56 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2229593\spuninst.exe

+ 2010-09-19 17:41 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe

+ 2010-09-19 18:12 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2183461-IE8\update\updspapi.dll

+ 2010-09-19 18:12 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2183461-IE8\update\update.exe

+ 2010-09-19 18:12 . 2009-05-26 09:01 234872 c:\windows\$hf_mig$\KB2183461-IE8\spuninst.exe

+ 2010-09-19 17:43 . 2010-06-24 12:29 919040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 206848 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\occache.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 611840 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mstime.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 599040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeeds.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 247808 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieproxy.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 184320 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iepeers.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 743424 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedvtool.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 387584 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedkcs32.dll

+ 2010-09-19 17:43 . 2010-06-23 11:31 173056 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ie4uinit.exe

+ 2010-09-19 18:11 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2160329\update\updspapi.dll

+ 2010-09-19 18:11 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2160329\update\update.exe

+ 2010-09-19 18:11 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2160329\spuninst.exe

+ 2010-09-19 18:13 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll

+ 2010-09-19 18:13 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2141007\update\update.exe

+ 2010-09-19 18:13 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2141007\spuninst.exe

+ 2010-06-09 07:42 . 2010-06-09 07:42 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll

+ 2010-09-19 18:14 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll

+ 2010-09-19 18:14 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2121546\update\update.exe

+ 2010-09-19 18:14 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2121546\spuninst.exe

+ 2010-06-18 17:46 . 2010-06-18 17:46 293888 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll

+ 2010-09-19 18:05 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll

+ 2010-09-19 18:05 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2115168\update\update.exe

+ 2010-09-19 18:05 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2115168\spuninst.exe

+ 2010-09-19 18:11 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2079403\update\updspapi.dll

+ 2010-09-19 18:11 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2079403\update\update.exe

+ 2010-09-19 18:11 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2079403\spuninst.exe

+ 2010-02-09 09:54 . 2010-02-09 09:54 2293760 c:\windows\system32\xerces-c_3_1.dll

+ 2004-08-03 21:00 . 2010-04-06 02:52 2462720 c:\windows\system32\WMVCore.dll

+ 2004-08-03 21:00 . 2010-06-24 09:02 1852032 c:\windows\system32\win32k.sys

+ 2010-05-09 12:48 . 2010-04-16 06:33 3003680 c:\windows\system32\usbaaplrc.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 1210368 c:\windows\system32\urlmon.dll

+ 2004-08-03 21:00 . 2010-07-27 06:30 8509440 c:\windows\system32\shell32.dll

+ 2004-08-03 21:00 . 2010-02-05 18:27 1295872 c:\windows\system32\quartz.dll

- 2004-08-03 21:00 . 2009-11-27 17:14 1295872 c:\windows\system32\quartz.dll

+ 2007-11-14 10:38 . 2007-11-14 10:38 4014080 c:\windows\system32\qt-mt334.dll

+ 2011-07-24 16:34 . 2005-10-19 16:19 1327189 c:\windows\system32\odSupp_M.dll

+ 2004-08-03 21:00 . 2010-04-28 05:45 2150912 c:\windows\system32\ntoskrnl.exe

- 2004-08-03 21:00 . 2010-02-16 19:09 2150912 c:\windows\system32\ntoskrnl.exe

- 2004-08-04 04:00 . 2010-02-16 19:09 2029056 c:\windows\system32\ntkrnlpa.exe

+ 2004-08-04 04:00 . 2010-04-28 05:45 2029056 c:\windows\system32\ntkrnlpa.exe

- 2004-08-03 21:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll

+ 2004-08-03 21:00 . 2010-06-14 07:43 1172480 c:\windows\system32\msxml3.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 5951488 c:\windows\system32\mshtml.dll

+ 2010-01-27 01:07 . 2010-07-15 11:14 5612496 c:\windows\system32\Macromed\Flash\NPSWF32.dll

+ 2007-12-17 17:30 . 2007-12-17 17:30 1044480 c:\windows\system32\libeay32_0_9_8g.dll

+ 2011-07-24 16:34 . 2008-09-25 11:15 1110016 c:\windows\system32\libeay32.dll

+ 2006-10-17 10:57 . 2010-06-24 12:27 1986560 c:\windows\system32\iertutil.dll

+ 2011-11-09 23:01 . 2011-08-02 16:38 4517664 c:\windows\system32\DRVSTORE\usbaapl_091115F4EDEB41DBA0EC91574CE905B4E0482482\usbaaplrc.dll

+ 2011-11-09 23:02 . 2011-08-02 16:38 1461992 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\wdfcoinstaller01009.dll

+ 2004-08-03 21:00 . 2010-04-06 02:52 2462720 c:\windows\system32\dllcache\WMVCore.dll

+ 2008-10-16 10:45 . 2010-06-24 09:02 1852032 c:\windows\system32\dllcache\win32k.sys

+ 2004-08-03 21:00 . 2010-06-24 12:27 1210368 c:\windows\system32\dllcache\urlmon.dll

+ 2008-06-17 19:03 . 2010-07-27 06:30 8509440 c:\windows\system32\dllcache\shell32.dll

+ 2008-05-07 05:12 . 2010-02-05 18:27 1295872 c:\windows\system32\dllcache\quartz.dll

- 2008-05-07 05:12 . 2009-11-27 17:14 1295872 c:\windows\system32\dllcache\quartz.dll

+ 2008-10-16 10:45 . 2010-04-28 18:15 2194304 c:\windows\system32\dllcache\ntoskrnl.exe

- 2008-10-16 10:45 . 2010-02-17 12:09 2194304 c:\windows\system32\dllcache\ntoskrnl.exe

- 2008-10-16 10:45 . 2010-02-16 19:09 2029056 c:\windows\system32\dllcache\ntkrpamp.exe

+ 2008-10-16 10:45 . 2010-04-28 05:45 2029056 c:\windows\system32\dllcache\ntkrpamp.exe

+ 2008-10-16 10:45 . 2010-04-28 05:45 2071168 c:\windows\system32\dllcache\ntkrnlpa.exe

- 2008-10-16 10:45 . 2010-02-16 19:09 2071168 c:\windows\system32\dllcache\ntkrnlpa.exe

+ 2008-10-16 10:45 . 2010-04-28 05:45 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe

- 2008-10-16 10:45 . 2010-02-16 19:09 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe

- 2008-11-13 01:45 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll

+ 2008-11-13 01:45 . 2010-06-14 07:43 1172480 c:\windows\system32\dllcache\msxml3.dll

+ 2004-08-03 21:00 . 2010-06-24 12:27 5951488 c:\windows\system32\dllcache\mshtml.dll

+ 2010-03-11 18:26 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe

- 2010-03-11 18:26 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe

+ 2007-05-09 16:49 . 2010-06-24 12:27 1986560 c:\windows\system32\dllcache\iertutil.dll

+ 2009-11-06 23:06 . 2009-11-06 23:06 1130824 c:\windows\system32\dfshim.dll

+ 2010-04-07 21:48 . 2010-04-07 21:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll

+ 2010-03-23 03:32 . 2010-03-23 03:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll

- 2008-11-25 03:59 . 2008-11-25 03:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll

+ 2010-03-23 03:32 . 2010-03-23 03:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll

+ 2010-05-11 04:40 . 2010-05-11 04:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

- 2009-08-07 21:51 . 2009-08-07 21:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

+ 2010-05-11 04:40 . 2010-05-11 04:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

+ 2010-04-01 09:42 . 2010-04-01 09:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll

- 2008-05-27 23:35 . 2008-05-27 23:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll

+ 2010-04-01 09:42 . 2010-04-01 09:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll

- 2008-05-27 23:35 . 2008-05-27 23:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll

- 2008-05-27 22:48 . 2008-05-27 22:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll

+ 2010-03-31 12:50 . 2010-03-31 12:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll

+ 2010-03-31 12:50 . 2010-03-31 12:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll

+ 2010-04-01 09:42 . 2010-04-01 09:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll

- 2008-05-27 22:43 . 2008-05-27 22:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll

+ 2011-06-19 15:51 . 2011-06-19 15:51 1660928 c:\windows\Installer\c98f0.msi

+ 2011-11-09 23:12 . 2011-11-09 23:12 9474048 c:\windows\Installer\5f8d8.msi

+ 2011-11-09 23:09 . 2011-11-09 23:09 5235200 c:\windows\Installer\5f627.msi

+ 2011-11-09 23:02 . 2011-11-09 23:02 1717248 c:\windows\Installer\5edc4.msi

+ 2011-11-09 23:00 . 2011-11-09 23:00 2002432 c:\windows\Installer\5ed55.msi

+ 2011-11-09 22:57 . 2011-11-09 22:57 1532928 c:\windows\Installer\5ed0e.msi

+ 2011-11-09 22:52 . 2011-11-09 22:52 1769984 c:\windows\Installer\5ec2e.msi

+ 2010-08-05 10:59 . 2010-08-05 10:59 4033536 c:\windows\Installer\1860f04.msp

+ 2010-08-25 15:06 . 2010-08-25 15:06 6479360 c:\windows\Installer\1860ee2.msp

+ 2010-08-20 11:50 . 2010-08-20 11:50 5518848 c:\windows\Installer\1860ecb.msp

+ 2010-06-28 14:01 . 2010-06-28 14:01 7677952 c:\windows\Installer\1860eb4.msp

+ 2010-06-28 20:53 . 2010-06-28 20:53 6819840 c:\windows\Installer\1860e9d.msp

+ 2010-07-10 18:14 . 2010-07-10 18:14 2850816 c:\windows\Installer\1860e86.msp

+ 2009-11-08 22:25 . 2009-11-08 22:25 1935360 c:\windows\Installer\1860e62.msp

+ 2010-06-11 15:55 . 2010-06-11 15:55 1827328 c:\windows\Installer\1860e46.msp

+ 2010-05-25 09:45 . 2010-05-25 09:45 8445440 c:\windows\Installer\1860e2b.msp

+ 2010-04-11 20:17 . 2010-04-11 20:17 2607104 c:\windows\Installer\1860de0.msp

+ 2010-04-11 20:17 . 2010-04-11 20:17 4210688 c:\windows\Installer\1860ddf.msp

+ 2010-04-24 15:10 . 2010-04-24 15:10 8486400 c:\windows\Installer\1860dd2.msp

+ 2010-05-03 14:11 . 2010-05-03 14:11 4149760 c:\windows\Installer\1860db7.msp

+ 2010-03-30 10:34 . 2010-03-30 10:34 3826688 c:\windows\Installer\1860da0.msp

+ 2010-05-03 14:06 . 2010-05-03 14:06 5053952 c:\windows\Installer\1860d89.msp

+ 2007-05-10 11:43 . 2007-05-10 11:43 6688096 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\MSACCESS.EXE

+ 2007-04-30 12:57 . 2007-04-30 12:57 7084384 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\INFOPATH.EXE

+ 2010-09-19 18:12 . 2010-02-25 06:20 1209344 c:\windows\ie8updates\KB2183461-IE8\urlmon.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 5944832 c:\windows\ie8updates\KB2183461-IE8\mshtml.dll

+ 2010-09-19 18:12 . 2010-02-25 06:20 1985536 c:\windows\ie8updates\KB2183461-IE8\iertutil.dll

+ 2008-10-16 10:45 . 2010-04-28 18:15 2194304 c:\windows\Driver Cache\i386\ntoskrnl.exe

- 2008-10-16 10:45 . 2010-02-17 12:09 2194304 c:\windows\Driver Cache\i386\ntoskrnl.exe

+ 2008-10-16 10:45 . 2010-04-28 05:45 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe

- 2008-10-16 10:45 . 2010-02-16 19:09 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe

- 2008-10-16 10:45 . 2010-02-16 19:09 2071168 c:\windows\Driver Cache\i386\ntkrnlpa.exe

+ 2008-10-16 10:45 . 2010-04-28 05:45 2071168 c:\windows\Driver Cache\i386\ntkrnlpa.exe

- 2008-10-16 10:45 . 2010-02-16 19:09 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe

+ 2008-10-16 10:45 . 2010-04-28 05:45 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe

+ 2010-09-19 17:57 . 2010-09-19 17:57 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_f4c7cd91\System.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_69585c29\System.dll

+ 2010-09-19 17:58 . 2010-09-19 17:58 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_c0a7692c\System.Xml.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_ab0b9604\System.Xml.dll

+ 2010-09-19 17:57 . 2010-09-19 17:58 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_469e0bdc\System.Windows.Forms.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_21391ebf\System.Windows.Forms.dll

+ 2010-09-19 17:58 . 2010-09-19 17:58 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_fd864985\System.Drawing.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_dabead16\System.Design.dll

+ 2010-09-19 17:58 . 2010-09-19 17:58 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_81c8d25c\System.Design.dll

+ 2010-09-19 17:58 . 2010-09-19 17:58 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_a7f2b2cb\mscorlib.dll

+ 2010-09-19 17:57 . 2010-09-19 17:57 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_47688f6c\mscorlib.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 2018816 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\87b3fa44d2fcc7360bdc7ae915256040\WindowsLive.Writer.CoreServices.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4f183789843f054fba4ea676b9637b04\WindowsLive.Writer.ApplicationFramework.ni.dll

+ 2011-02-20 19:20 . 2011-02-20 19:20 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\08bb7d2c13cd210872afda1d3e6299a6\WindowsLive.Writer.PostEditor.ni.dll

+ 2010-09-19 18:09 . 2010-09-19 18:09 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll

+ 2010-09-19 18:13 . 2010-09-19 18:13 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll

+ 2010-09-19 18:09 . 2010-09-19 18:09 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll

+ 2010-09-19 18:13 . 2010-09-19 18:13 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll

+ 2010-09-19 18:25 . 2010-09-19 18:25 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\60b3c9a63b2065a6952d16256545c25d\System.WorkflowServices.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\5cc2a23ce8ac371c7a97b5e542ee27ed\System.Workflow.Runtime.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\c0aabf67e7ef98dc10c3e174c136731b\System.Workflow.ComponentModel.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\66682c8a064608ba4ffd0463cf09aef9\System.Workflow.Activities.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2d662564b8d9c57a34c588cc2970902b\System.Web.Services.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\9b455702c9b7b02c5708406f87986751\System.Web.Mobile.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\49c7a1c78ed9502ba97c11e6bd993f63\System.Web.Extensions.ni.dll

+ 2010-09-19 18:12 . 2010-09-19 18:12 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\f5790a1b7b41e7b8d05f01b549c80f39\System.ServiceModel.Web.ni.dll

+ 2010-09-19 18:14 . 2010-09-19 18:14 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll

+ 2010-09-19 18:12 . 2010-09-19 18:12 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll

+ 2010-09-19 18:14 . 2010-09-19 18:14 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\0885f31c21b796465fde6297dba20981\System.IdentityModel.ni.dll

+ 2010-09-19 18:12 . 2010-09-19 18:12 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll

+ 2010-09-19 18:11 . 2010-09-19 18:11 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\23cf0498f2ebe4c8ffa5cc79efca2dc5\System.Data.Services.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\58202ed61096113d08815c0a78313b66\System.Data.OracleClient.ni.dll

+ 2010-09-19 18:11 . 2010-09-19 18:11 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll

+ 2010-09-19 18:23 . 2010-09-19 18:23 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll

+ 2010-09-19 18:11 . 2010-09-19 18:11 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll

+ 2010-09-19 18:11 . 2010-09-19 18:11 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll

+ 2010-09-19 18:11 . 2010-09-19 18:11 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll

+ 2010-09-19 18:09 . 2010-09-19 18:09 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\9732a7c993055f82040642966db07ccf\Microsoft.VisualBasic.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll

+ 2010-09-19 18:24 . 2010-09-19 18:24 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll

+ 2010-09-19 18:04 . 2010-09-19 18:04 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

- 2009-10-14 01:11 . 2009-10-14 01:11 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

+ 2010-09-19 18:07 . 2010-09-19 18:07 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

+ 2010-09-19 17:54 . 2010-09-19 17:54 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

+ 2010-09-19 18:04 . 2010-09-19 18:04 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

+ 2010-09-19 18:07 . 2010-09-19 18:07 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

- 2009-10-14 01:10 . 2009-10-14 01:10 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

+ 2010-09-19 18:04 . 2010-09-19 18:04 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll

- 2009-03-22 10:51 . 2009-03-22 10:51 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll

+ 2010-09-19 18:08 . 2010-09-19 18:08 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

- 2009-10-14 01:03 . 2009-10-14 01:03 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll

+ 2010-09-19 17:56 . 2010-09-19 17:56 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll

+ 2010-09-19 17:56 . 2010-09-19 17:56 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll

- 2009-10-14 01:03 . 2009-10-14 01:03 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll

+ 2010-09-19 18:11 . 2009-10-23 15:28 3558912 c:\windows\$NtUninstallKB981997$\moviemk.exe

+ 2010-09-19 18:12 . 2010-02-16 19:09 2150912 c:\windows\$NtUninstallKB981852$\ntoskrnl.exe

+ 2010-09-19 18:12 . 2010-02-16 19:09 2029056 c:\windows\$NtUninstallKB981852$\ntkrpamp.exe

+ 2010-09-19 18:12 . 2010-02-16 19:09 2029056 c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe

+ 2010-09-19 18:12 . 2010-02-16 19:09 2150912 c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe

+ 2010-09-19 17:46 . 2009-05-20 02:56 2458112 c:\windows\$NtUninstallKB978695_WM9$\wmvcore.dll

+ 2010-09-19 17:55 . 2009-11-27 17:14 1295872 c:\windows\$NtUninstallKB975562$\quartz.dll

+ 2010-09-19 18:05 . 2008-06-17 19:03 8508416 c:\windows\$NtUninstallKB2286198$\shell32.dll

+ 2010-09-19 18:11 . 2009-08-14 15:16 1850752 c:\windows\$NtUninstallKB2160329$\win32k.sys

+ 2010-09-19 18:11 . 2009-07-31 04:35 1172480 c:\windows\$NtUninstallKB2079403$\msxml3.dll

+ 2010-09-19 17:42 . 2010-06-18 13:43 3558912 c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe

+ 2010-09-19 17:43 . 2010-04-28 05:20 2194432 c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe

+ 2010-09-19 17:43 . 2010-04-28 05:20 2029056 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe

+ 2010-04-28 21:20 . 2010-04-28 21:20 2071296 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe

+ 2010-09-19 17:43 . 2010-04-28 05:20 2150912 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe

+ 2010-02-05 18:34 . 2010-02-05 18:34 1295872 c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll

+ 2010-07-27 06:29 . 2010-07-27 06:29 8510464 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 1211904 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\urlmon.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 5954560 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 1987072 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iertutil.dll

+ 2010-06-24 21:30 . 2010-06-24 21:30 1861248 c:\windows\$hf_mig$\KB2160329\SP3QFE\win32k.sys

+ 2010-06-14 07:40 . 2010-06-14 07:40 1172480 c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll

+ 2006-10-06 15:09 . 2010-09-10 12:34 35552200 c:\windows\system32\MRT.exe

+ 2006-11-07 20:03 . 2010-06-24 15:57 11077120 c:\windows\system32\ieframe.dll

+ 2007-05-09 16:49 . 2010-06-24 15:57 11077120 c:\windows\system32\dllcache\ieframe.dll

+ 2010-04-02 17:29 . 2010-04-02 17:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp

+ 2010-10-01 22:30 . 2010-10-01 22:30 20303872 c:\windows\Installer\e86576.msp

+ 2011-05-12 13:54 . 2011-05-12 13:54 20314624 c:\windows\Installer\97120d.msp

+ 2011-04-02 15:58 . 2011-04-02 15:58 20304384 c:\windows\Installer\4e7e7.msp

+ 2010-05-19 11:08 . 2010-05-19 11:08 11408896 c:\windows\Installer\1860e7c.msp

+ 2010-03-30 23:23 . 2010-03-30 23:23 15638528 c:\windows\Installer\1860e70.msp

+ 2010-06-11 15:52 . 2010-06-11 15:52 45542912 c:\windows\Installer\1860e47.msp

+ 2010-04-02 10:30 . 2010-04-02 10:30 17456640 c:\windows\Installer\1860e0b.msp

+ 2010-04-11 20:17 . 2010-04-11 20:17 14599680 c:\windows\Installer\1860df0.msp

+ 2010-04-24 15:09 . 2010-04-24 15:09 11750912 c:\windows\Installer\1860dc1.msp

+ 2011-04-12 21:29 . 2011-04-12 21:29 20308992 c:\windows\Installer\180769.msp

+ 2010-09-19 18:12 . 2010-02-25 09:50 11070976 c:\windows\ie8updates\KB2183461-IE8\ieframe.dll

+ 2010-09-19 18:12 . 2010-09-19 18:12 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll

+ 2010-09-19 18:22 . 2010-09-19 18:22 11798016 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\411a627d6f5cb83509332253406988e5\System.Web.ni.dll

+ 2010-09-19 18:21 . 2010-09-19 18:21 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\f523a69e7c93ee4f245c996eac4b3a57\System.ServiceModel.ni.dll

+ 2010-09-19 18:12 . 2010-09-19 18:12 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\b307acf63075b997d02a97a7492d0d9c\System.Design.ni.dll

+ 2010-09-19 18:10 . 2010-09-19 18:10 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll

+ 2010-09-19 18:09 . 2010-09-19 18:09 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll

+ 2010-09-19 18:09 . 2010-09-19 18:09 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll

+ 2010-09-19 17:43 . 2010-06-24 12:29 11079168 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieframe.dll

.

-- Snapshot teruggezet naar huidige datum --

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Google Update"="c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-09-12 133104]

"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-02-13 7557120]

"HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-01 49152]

"PCMService"="c:\program files\CyberLink\PowerCinema\PCMService.exe" [2006-02-24 147456]

"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]

"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]

"Reminder"="c:\windows\Creator\Remind_XP.exe" [2004-12-13 663552]

"HP Software Update"="c:\program files\HP\HP Software Update\HPwuSchd2.exe" [2005-12-15 49152]

"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [bU]

"MemoryCardManager"="c:\program files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe" [bU]

"USB2Check"="c:\windows\system32\PCLECoInst.dll" [2004-09-21 73728]

"USBToolTip"="c:\program files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" [2005-06-13 192512]

"PinnacleDriverCheck"="c:\windows\system32\\PSDrvCheck.exe" [2004-03-11 406016]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]

"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]

"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]

"beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2011-05-23 2068480]

"ANIWZCS2Service"="c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2007-01-19 49152]

"D-Link D-Link Wireless 150 USB Adapter DWA-125"="c:\program files\D-Link\DWA-125 revA\AirGCFG.exe" [2009-05-04 1683456]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]

"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-03-08 16010240]

"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-02-13 1519616]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]

c:\documents and settings\Default User\Menu Start\Programma's\Opstarten\

Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-6-15 27136]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-10-8 113664]

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-12-15 282624]

Philips GoGear VIBE Device Manager.lnk - c:\program files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe [2010-1-16 1611152]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

"DisableNotifications"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=

"c:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe"=

"c:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe"=

"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"=

"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"=

"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"=

"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"=

"c:\\Program Files\\Quake III Arena\\quake3.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\LimeWire\\LimeWire.exe"=

"c:\\Program Files\\Steam\\Steam.exe"=

"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

"c:\\Program Files\\VoipCheapCom.com\\VoipCheapCom\\VoipCheapCom.exe"=

"c:\\Program Files\\GameShadow\\GameShadow.exe"=

"c:\\Program Files\\GameShadow\\GSDownload.exe"=

"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=

"c:\\Program Files\\Shareaza\\Shareaza.exe"=

"c:\\Documents and Settings\\HP_Eigenaar\\Application Data\\Dropbox\\bin\\Dropbox.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=

"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

"c:\\Program Files\\Steam\\steamapps\\oudmetje\\counter-strike\\hl.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"6346:TCP"= 6346:TCP:s

R2 ANIWConnService;ANIWConn Service;c:\windows\system32\ANIWConnService.exe [24/07/2011 17:35 147456]

R2 sensorsview32;sensorsview32;c:\windows\system32\drivers\sensorsview32.sys [10/01/2010 2:57 14416]

R3 rt2870;D-Link 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [24/07/2011 17:33 715520]

R3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [15/06/2006 11:40 468768]

S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2010 18:21 136176]

S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usbxp.sys [30/04/2004 13:35 24832]

S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\Aspi32.sys [11/02/2007 17:53 16512]

S3 cpuz134;cpuz134;c:\documents and settings\HP_Eigenaar\Mijn documenten\Downloads\pc-wizard_2010.1.961\pcwiz_x32.sys [9/07/2010 12:18 20328]

S3 getPlusHelper;getPlus® Helper;c:\windows\System32\svchost.exe -k getPlusHelper [3/08/2004 22:00 14336]

S3 GNDHV71;Genius VideoCAM Live V2;c:\windows\system32\DRIVERS\gndhv71.sys --> c:\windows\system32\DRIVERS\gndhv71.sys [?]

S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2010 18:21 136176]

S3 nosGetPlusHelper;getPlus® Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [3/08/2004 22:00 14336]

S3 PLUsbbc2;Hi-Speed USB Bridge Cable Driver;c:\windows\system32\drivers\usbbc2.sys [6/10/2006 22:34 7936]

S3 Usblink;Usblink Driver;c:\windows\system32\drivers\ulink.sys [6/10/2006 22:35 40060]

--- Andere Services/Drivers In Geheugen ---

*Deregistered* - mbr

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

getPlusHelper REG_MULTI_SZ getPlusHelper

nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b6bd9efb-3fe6-11df-8202-0016ecbd8ef7}]

\Shell\AutoRun\command - L:\APPInst.exe

.

Inhoud van de 'Gedeelde Taken' map

2011-11-09 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]

2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-28 17:21]

2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-28 17:21]

2011-12-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-27657144-3854435335-3181869771-1008Core.job

- c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-12 17:35]

2012-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-27657144-3854435335-3181869771-1008UA.job

- c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-12 17:35]

2012-01-03 c:\windows\Tasks\OGADaily.job

- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2012-01-04 c:\windows\Tasks\OGALogon.job

- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

mStart Page = hxxp://uk.yahoo.com

uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=63&bd=PAVILION&pf=desktop

uInternet Settings,ProxyOverride = *.local

uInternet Settings,ProxyServer = http=127.0.0.1:52727

IE: Download with &Shareaza - c:\program files\Shareaza\RazaWebHook32.dll/3000

LSP: mswsock.dll

FF - ProfilePath - c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\cs3i32f2.default\

FF - prefs.js: browser.search.defaulturl - hxxp://uk.search.yahoo.com/search?fr=ffsp1&p=

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.youtube.com/

FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=ffds1&p=

FF - prefs.js: network.proxy.http - 127.0.0.1

FF - prefs.js: network.proxy.http_port - 52727

FF - prefs.js: network.proxy.type - 0

FF - component: c:\program files\Google\Google Gears\Firefox\lib\ff36\gears.dll

FF - plugin: c:\documents and settings\HP_Eigenaar\Application Data\Facebook\npfbplugin_1_0_3.dll

FF - plugin: c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll

FF - plugin: c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Yahoo!\BrowserPlus\2.7.1\Plugins\npybrowserplus_2.7.1.dll

FF - plugin: c:\program files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

FF - plugin: c:\program files\Microsoft Silverlight\4.0.60310.0\npctrlui.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll

FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----

FF - user.js: yahoo.ytff.general.dontshowhpoffer - true.

- - - - ORPHANS VERWIJDERD - - - -

URLSearchHooks-{472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)

HKCU-Run-27l4ozqjbh - c:\documents and settings\HP_Eigenaar\27l4ozqjbh.exe

HKLM-Run-27l4ozqjbh - c:\documents and settings\All Users\27l4ozqjbh.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-01-04 16:25

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

c:\windows\$NtUninstallKB62280$:SummaryInformation 0 bytes hidden from API

Scan succesvol afgerond

verborgen bestanden: 1

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{726245DE-A648-00D6-C30E-E5F5A256B0C5}\InProcServer32*]

"jakghnogdkpjbkamdede"=hex:6a,61,6e,66,68,64,6b,65,6f,67,64,64,6a,6c,6d,70,68,

64,6c,6e,00,00

"iakgnmmjmoalapaokn"=hex:6a,61,6e,66,68,64,6b,65,6f,67,64,64,6a,6c,6d,70,68,64,

6c,6e,00,00

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ÿïÄ|ˇˇˇˇïÄ|˘ï9~*]

"3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'explorer.exe'(3296)

c:\windows\system32\nview.dll

c:\windows\system32\NVWRSNL.DLL

c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

c:\windows\system32\nvwddi.dll

c:\windows\system32\webcheck.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

Voltooingstijd: 2012-01-04 16:30

ComboFix-quarantined-files.txt 2012-01-04 15:30

ComboFix2.txt 2010-05-21 19:45

ComboFix3.txt 2010-05-16 19:12

ComboFix4.txt 2009-11-08 13:50

ComboFix5.txt 2012-01-04 15:20

Pre-Run: 150.824.747.008 bytes beschikbaar

Post-Run: 152.273.534.976 bytes beschikbaar

- - End Of File - - 1904432E9170CD51E6D2A1362B9080E8

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

c:\documents and settings\HP_Eigenaar\Application Data\0F153\E9BC6.exe

c:\documents and settings\HP_Eigenaar\27l4ozqjbh.exe

c:\documents and settings\All Users\27l4ozqjbh.exe

Folder::

c:\windows\system32\sdtmp

c:\program files\53D4F

c:\documents and settings\HP_Eigenaar\Application Data\0F153

c:\windows\system32\drivers\Cat.DB

DDS::

uInternet Settings,ProxyServer = http=127.0.0.1:52727

IE: Download with &Shareaza - c:\program files\Shareaza\RazaWebHook32.dll/3000

Sla dit bestand op je bureaublad op als CFScript.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht samen met een nieuw logje van HijackThis.

Link naar reactie
Delen op andere sites
Robertt Bijdrager

Robertt

Geplaatst:
  • Auteur
Geplaatst:

ComboFix 09-11-07.02 - HP_Eigenaar 04/01/2012 18:01.8.2 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1023.507 [GMT 1:00]

Gestart vanuit: c:\documents and settings\HP_Eigenaar\Bureaublad\BUREAUBLAD\ComboFix.exe

gebruikte Opdracht switches :: c:\documents and settings\HP_Eigenaar\Bureaublad\CFScript.txt

AV: Norton Internet Security 2006 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}

FW: Norton Internet Security 2006 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

.

- VERMINDERDE FUNCTIONALITEIT MODUS -

FILE ::

"c:\documents and settings\All Users\27l4ozqjbh.exe"

"c:\documents and settings\HP_Eigenaar\27l4ozqjbh.exe"

"c:\documents and settings\HP_Eigenaar\Application Data\0F153\E9BC6.exe"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\HP_Eigenaar\Application Data\0F153

c:\documents and settings\HP_Eigenaar\Application Data\0F153\3D4F.F15

c:\documents and settings\HP_Eigenaar\Application Data\0F153\E9BC6.exe

c:\windows\system32\sdtmp

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-12-04 to 2012-01-04 ))))))))))))))))))))))))))))))

.

2012-01-04 05:04 . 2012-01-04 05:04 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\PCHealth

2012-01-03 23:44 . 2011-11-15 13:29 222080 ------w- c:\windows\system32\MpSigStub.exe

2012-01-03 19:24 . 2012-01-03 19:25 73191824 ----a-w- c:\documents and settings\All Users\Application Data\PC Tools\DownloadManager\Spyware Doctor8.0\sdsetup_revwire207_aff_dl.exe

2012-01-03 17:48 . 2012-01-03 19:24 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools

2012-01-03 13:57 . 2012-01-04 00:10 -------- d-----w- c:\program files\53D4F

2012-01-03 13:56 . 2012-01-03 20:29 -------- d-----w- c:\program files\LP

2011-12-28 10:45 . 2011-12-28 10:45 5575392 ----a-w- c:\documents and settings\All Users\Application Data\YouTube Downloader\ytd_installer.exe

2011-12-14 01:32 . 2011-12-09 09:45 65536 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\cs3i32f2.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components\XPATLCOM.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-01-04 13:52 . 2009-11-04 20:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2012-01-04 01:54 . 2009-07-08 23:21 -------- d-----w- c:\program files\Common Files\Nokia

2012-01-04 01:52 . 2008-12-19 03:34 -------- d-----w- c:\program files\Nokia

2012-01-04 01:49 . 2010-06-28 17:21 -------- d-----w- c:\program files\Google

2012-01-03 23:38 . 2012-01-03 17:45 740156 ----a-w- c:\windows\system32\drivers\Cat.DB

2012-01-03 23:35 . 2006-06-15 11:00 -------- d--h--w- c:\program files\InstallShield Installation Information

2012-01-03 23:31 . 2010-03-25 23:11 -------- d-----w- c:\program files\Maxis

2012-01-02 01:49 . 2006-10-07 22:55 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\CoreFTP

2011-12-30 21:27 . 2006-10-09 13:37 -------- d-----w- c:\program files\Steam

2011-12-28 10:46 . 2011-08-08 17:50 -------- d-----w- c:\documents and settings\All Users\Application Data\YouTube Downloader

2011-12-11 00:15 . 2006-10-08 14:14 -------- d-----w- c:\program files\Sound Forge

2011-12-07 00:36 . 2009-11-05 23:10 -------- d-----w- c:\program files\SeaMonkey

2011-11-17 10:20 . 2004-12-03 03:15 569938 ----a-w- c:\windows\system32\perfh013.dat

2011-11-17 10:20 . 2004-12-03 03:15 118342 ----a-w- c:\windows\system32\perfc013.dat

2011-11-09 23:12 . 2011-11-09 23:12 -------- d-----w- c:\program files\QuickTime

2011-11-09 23:09 . 2011-11-09 23:07 -------- d-----w- c:\program files\iTunes

2011-11-09 23:07 . 2011-11-09 23:07 -------- d-----w- c:\program files\iPod

2011-11-09 23:07 . 2008-04-17 10:01 -------- d-----w- c:\program files\Common Files\Apple

2011-11-09 23:02 . 2011-11-09 23:02 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer

2011-11-09 23:00 . 2011-11-09 23:00 -------- d-----w- c:\program files\Bonjour

2011-11-09 22:59 . 2011-11-09 22:59 73584 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.5.0.142\SetupAdmin.exe

2011-11-09 22:51 . 2011-11-09 22:51 -------- d-----w- c:\program files\Apple Software Update

2011-11-12 18:52 . 2011-05-06 12:39 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Google Update"="c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-09-12 133104]

"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-02-13 7557120]

"HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-01 49152]

"PCMService"="c:\program files\CyberLink\PowerCinema\PCMService.exe" [2006-02-24 147456]

"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]

"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]

"Reminder"="c:\windows\Creator\Remind_XP.exe" [2004-12-13 663552]

"HP Software Update"="c:\program files\HP\HP Software Update\HPwuSchd2.exe" [2005-12-15 49152]

"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [bU]

"MemoryCardManager"="c:\program files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe" [bU]

"USB2Check"="c:\windows\system32\PCLECoInst.dll" [2004-09-21 73728]

"USBToolTip"="c:\program files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" [2005-06-13 192512]

"PinnacleDriverCheck"="c:\windows\system32\\PSDrvCheck.exe" [2004-03-11 406016]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]

"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]

"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]

"beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2011-05-23 2068480]

"ANIWZCS2Service"="c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2007-01-19 49152]

"D-Link D-Link Wireless 150 USB Adapter DWA-125"="c:\program files\D-Link\DWA-125 revA\AirGCFG.exe" [2009-05-04 1683456]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]

"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-03-08 16010240]

"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-02-13 1519616]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]

c:\documents and settings\Default User\Menu Start\Programma's\Opstarten\

Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-6-15 27136]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-10-8 113664]

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-12-15 282624]

Philips GoGear VIBE Device Manager.lnk - c:\program files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe [2010-1-16 1611152]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

"DisableNotifications"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=

"c:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe"=

"c:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe"=

"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"=

"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"=

"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"=

"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"=

"c:\\Program Files\\Quake III Arena\\quake3.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\LimeWire\\LimeWire.exe"=

"c:\\Program Files\\Steam\\Steam.exe"=

"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

"c:\\Program Files\\VoipCheapCom.com\\VoipCheapCom\\VoipCheapCom.exe"=

"c:\\Program Files\\GameShadow\\GameShadow.exe"=

"c:\\Program Files\\GameShadow\\GSDownload.exe"=

"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=

"c:\\Program Files\\Shareaza\\Shareaza.exe"=

"c:\\Documents and Settings\\HP_Eigenaar\\Application Data\\Dropbox\\bin\\Dropbox.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=

"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

"c:\\Program Files\\Steam\\steamapps\\oudmetje\\counter-strike\\hl.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"6346:TCP"= 6346:TCP:s

R2 ANIWConnService;ANIWConn Service;c:\windows\system32\ANIWConnService.exe [24/07/2011 17:35 147456]

R2 sensorsview32;sensorsview32;c:\windows\system32\drivers\sensorsview32.sys [10/01/2010 2:57 14416]

R3 rt2870;D-Link 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [24/07/2011 17:33 715520]

R3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [15/06/2006 11:40 468768]

S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2010 18:21 136176]

S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usbxp.sys [30/04/2004 13:35 24832]

S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\Aspi32.sys [11/02/2007 17:53 16512]

S3 cpuz134;cpuz134;c:\documents and settings\HP_Eigenaar\Mijn documenten\Downloads\pc-wizard_2010.1.961\pcwiz_x32.sys [9/07/2010 12:18 20328]

S3 getPlusHelper;getPlus® Helper;c:\windows\System32\svchost.exe -k getPlusHelper [3/08/2004 22:00 14336]

S3 GNDHV71;Genius VideoCAM Live V2;c:\windows\system32\DRIVERS\gndhv71.sys --> c:\windows\system32\DRIVERS\gndhv71.sys [?]

S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2010 18:21 136176]

S3 nosGetPlusHelper;getPlus® Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [3/08/2004 22:00 14336]

S3 PLUsbbc2;Hi-Speed USB Bridge Cable Driver;c:\windows\system32\drivers\usbbc2.sys [6/10/2006 22:34 7936]

S3 Usblink;Usblink Driver;c:\windows\system32\drivers\ulink.sys [6/10/2006 22:35 40060]

--- Andere Services/Drivers In Geheugen ---

*Deregistered* - mbr

*Deregistered* - PROCEXP113

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

getPlusHelper REG_MULTI_SZ getPlusHelper

nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b6bd9efb-3fe6-11df-8202-0016ecbd8ef7}]

\Shell\AutoRun\command - L:\APPInst.exe

.

Inhoud van de 'Gedeelde Taken' map

2011-11-09 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]

2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-28 17:21]

2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-28 17:21]

2011-12-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-27657144-3854435335-3181869771-1008Core.job

- c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-12 17:35]

2012-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-27657144-3854435335-3181869771-1008UA.job

- c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-12 17:35]

2012-01-03 c:\windows\Tasks\OGADaily.job

- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2012-01-04 c:\windows\Tasks\OGALogon.job

- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

mStart Page = hxxp://uk.yahoo.com

uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=63&bd=PAVILION&pf=desktop

uInternet Settings,ProxyOverride = *.local

LSP: mswsock.dll

FF - ProfilePath - c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\cs3i32f2.default\

FF - prefs.js: browser.search.defaulturl - hxxp://uk.search.yahoo.com/search?fr=ffsp1&p=

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.youtube.com/

FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=ffds1&p=

FF - prefs.js: network.proxy.http - 127.0.0.1

FF - prefs.js: network.proxy.http_port - 52727

FF - prefs.js: network.proxy.type - 0

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----

FF - user.js: yahoo.ytff.general.dontshowhpoffer - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-01-04 18:03

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

c:\windows\$NtUninstallKB62280$:SummaryInformation 0 bytes hidden from API

Scan succesvol afgerond

verborgen bestanden: 1

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{726245DE-A648-00D6-C30E-E5F5A256B0C5}\InProcServer32*]

"jakghnogdkpjbkamdede"=hex:6a,61,6e,66,68,64,6b,65,6f,67,64,64,6a,6c,6d,70,68,

64,6c,6e,00,00

"iakgnmmjmoalapaokn"=hex:6a,61,6e,66,68,64,6b,65,6f,67,64,64,6a,6c,6d,70,68,64,

6c,6e,00,00

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ÿïÄ|ˇˇˇˇïÄ|˘ï9~*]

"3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

.

Voltooingstijd: 2012-01-04 18:07

ComboFix-quarantined-files.txt 2012-01-04 17:07

ComboFix2.txt 2012-01-04 15:30

ComboFix3.txt 2010-05-21 19:45

ComboFix4.txt 2010-05-16 19:12

ComboFix5.txt 2012-01-04 17:00

Pre-Run: 152.292.302.848 bytes beschikbaar

Post-Run: 152.269.332.480 bytes beschikbaar

- - End Of File - - A6F40F360B06ADFA4C4899233D43CCEB

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 19:12:34, on 4/01/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\LEXPPS.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

C:\WINDOWS\system32\ANIWConnService.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe

C:\WINDOWS\system32\imapi.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\CyberLink\PowerCinema\PCMService.exe

C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe

C:\Program Files\Belgium Identity Card\beid35gui.exe

C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac

C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\HP\KBD\KBD.EXE

c:\windows\system\hpsysdrv.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = HP | MSN

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll

O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect

O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run

O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup

O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController

O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe"

O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"

O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')

O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ?

O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe

O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--

End of file - 12645 bytes

Link naar reactie
Delen op andere sites
Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.