jawbone

Ik heb mijn antivirusprogramma uitgeschakeld en de opstart snelheid is al een stuk verbeterd! nu is alleen mijn laptop zelf nog traag

De snelheid is al iets beter maar hij is nog steeds traag, ook het opstarten van windows duurt lang Hier de log ComboFix 11-10-15.04 - Jawbone 16-10-2011 14:44:28.2.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.3894.1446 [GMT 2:00] Gestart vanuit: c:\users\Jawbone\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Jawbone\Desktop\CFScript.txt AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:\users\Jawbone\AppData\Local\Temp\0059359.tmp" . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\Conduit c:\program files (x86)\Conduit\Community Alerts\Alert.dll c:\users\Jawbone\AppData\Local\Conduit c:\users\Jawbone\AppData\Local\Conduit\CT1060933\FreecorderAutoUpdateHelper.exe . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_X6VA005 -------\Service_X6va005 . . (((((((((((((((((((( Bestanden Gemaakt van 2011-09-16 to 2011-10-16 )))))))))))))))))))))))))))))) . . 2011-10-15 19:22 . 2011-10-15 19:22 -------- d-----w- c:\program files (x86)\Xilisoft 2011-10-15 17:49 . 2011-10-15 17:49 -------- d-----w- c:\users\Jawbone\AppData\Roaming\Malwarebytes 2011-10-15 17:48 . 2011-10-15 17:48 -------- d-----w- c:\programdata\Malwarebytes 2011-10-15 17:48 . 2011-10-15 17:49 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-10-15 17:48 . 2011-08-31 15:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-10-15 16:31 . 2011-10-15 16:31 388096 ----a-r- c:\users\Jawbone\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-10-15 16:31 . 2011-10-15 16:31 -------- d-----w- c:\program files (x86)\Trend Micro 2011-10-14 14:49 . 2011-09-13 00:26 9049936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2AA9ED11-E43B-432D-8AF3-D0B2EE250C65}\mpengine.dll 2011-10-12 19:35 . 2011-08-17 05:32 613888 ----a-w- c:\windows\system32\psisdecd.dll 2011-10-07 17:51 . 2011-10-07 17:51 27912704 ----a-w- c:\windows\system32\imageres.dll 2011-10-07 17:26 . 2011-10-07 17:26 -------- d-----w- c:\programdata\Stardock 2011-10-07 17:26 . 2007-06-05 09:26 56496 ----a-w- c:\windows\SysWow64\wbhelp2.dll 2011-10-07 17:26 . 2007-06-05 09:26 567040 ----a-w- c:\windows\SysWow64\wbocx.ocx 2011-10-07 17:26 . 2011-10-07 17:26 -------- d-----w- c:\program files (x86)\Stardock 2011-10-06 12:07 . 2011-10-06 12:07 -------- d-----w- c:\program files (x86)\SystemRequirementsLab 2011-10-06 12:07 . 2011-10-06 12:07 -------- d-----w- c:\users\Jawbone\AppData\Roaming\SystemRequirementsLab 2011-10-05 19:30 . 2010-06-02 02:55 239960 ----a-w- c:\windows\SysWow64\xactengine3_7.dll 2011-10-05 19:30 . 2010-06-02 02:55 176984 ----a-w- c:\windows\system32\xactengine3_7.dll 2011-10-05 19:30 . 2010-05-26 09:41 1907552 ----a-w- c:\windows\system32\d3dcsx_43.dll 2011-10-05 19:30 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll 2011-10-05 19:30 . 2010-05-26 09:41 511328 ----a-w- c:\windows\system32\d3dx10_43.dll 2011-10-05 19:30 . 2010-05-26 09:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll 2011-10-05 18:36 . 2011-10-05 18:36 -------- d-----w- c:\users\Jawbone\AppData\Local\SKIDROW 2011-10-05 18:34 . 2011-10-05 18:34 -------- d-----w- c:\program files (x86)\Wizards of the Coast LLC 2011-10-05 14:39 . 2011-10-05 14:39 -------- d-----w- c:\program files (x86)\uTorrent 2011-10-05 14:38 . 2011-10-05 18:46 -------- d-----w- c:\users\Jawbone\AppData\Roaming\uTorrent 2011-10-05 14:38 . 2011-10-05 14:38 -------- d-----w- c:\users\Jawbone\AppData\Local\uTorrent 2011-10-02 15:01 . 2011-10-02 15:01 -------- d-----w- c:\programdata\LightScribe 2011-10-02 15:01 . 2011-10-15 17:38 -------- d-----w- c:\users\Jawbone\AppData\Roaming\Nero 2011-10-02 14:57 . 2011-10-02 14:58 -------- d-----w- c:\program files (x86)\Common Files\Nero 2011-10-02 14:44 . 2011-10-02 14:44 -------- d-----w- c:\program files (x86)\Common Files\LightScribe 2011-10-02 14:11 . 2011-10-02 14:11 -------- d-----w- c:\users\Jawbone\AppData\Roaming\dvdcss 2011-10-02 12:35 . 2011-10-15 17:47 -------- d-----w- c:\program files (x86)\ConduitEngine 2011-10-02 12:35 . 2011-10-16 01:07 -------- d-----w- c:\users\Jawbone\AppData\Local\FLVService 2011-10-02 12:35 . 2011-10-15 17:47 -------- d-----w- c:\program files (x86)\Freecorder 2011-10-02 12:27 . 2011-10-02 12:27 -------- d-----w- C:\ConverterOutput 2011-10-02 12:26 . 2008-08-31 09:59 92102 ----a-w- c:\windows\SysWow64\HKCU_GNU.reg 2011-10-02 12:26 . 2008-06-17 08:57 6700 ----a-w- c:\windows\SysWow64\HKLM_GNU.reg 2011-10-02 12:26 . 2008-06-15 08:01 258352 ----a-w- c:\windows\SysWow64\unicows.dll 2011-10-02 12:26 . 2008-06-15 19:13 6144 ----a-w- c:\windows\SysWow64\ff_acm.acm 2011-10-02 12:26 . 2008-06-15 19:13 7680 ----a-w- c:\windows\SysWow64\ff_vfw.dll 2011-10-02 12:26 . 2008-06-15 08:01 60273 ----a-w- c:\windows\SysWow64\pthreadGC2.dll 2011-10-02 12:26 . 2006-07-17 19:42 14909 ----a-w- c:\windows\SysWow64\A_reg.reg 2011-10-02 12:26 . 2003-03-25 04:49 98304 ----a-w- c:\windows\SysWow64\L3CODECX.AX 2011-10-02 12:26 . 2003-03-18 20:20 1060864 ----a-w- c:\windows\SysWow64\MFC71.DLL 2011-10-02 12:26 . 2006-07-08 02:07 114688 ----a-w- c:\windows\SysWow64\PropListCtrl.ocx 2011-10-02 12:26 . 2011-10-02 12:26 -------- d-----w- c:\program files (x86)\Cucusoft 2011-09-23 19:15 . 2011-09-23 19:15 -------- d-----w- c:\users\Jawbone\AppData\Local\Nokia 2011-09-23 19:14 . 2011-09-23 19:14 -------- d-----w- c:\programdata\PC Suite 2011-09-23 19:14 . 2011-09-23 19:20 -------- d-----w- c:\users\Jawbone\AppData\Roaming\PC Suite 2011-09-23 19:13 . 2011-09-23 19:13 -------- d-----w- c:\program files (x86)\Common Files\Nokia 2011-09-23 19:12 . 2008-08-28 10:44 25600 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys 2011-09-23 19:12 . 2011-09-23 19:12 -------- dc----w- c:\windows\system32\DRVSTORE 2011-09-23 19:12 . 2011-09-23 19:12 -------- d-----w- c:\program files (x86)\PC Connectivity Solution 2011-09-23 19:11 . 2011-09-23 19:13 -------- d-----w- c:\program files (x86)\Nokia 2011-09-23 19:11 . 2011-09-23 19:11 -------- d-----w- c:\programdata\NokiaInstallerCache . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-10-08 14:41 . 2011-06-10 20:36 281656 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2011-10-08 14:41 . 2011-06-10 20:25 281656 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2011-10-08 14:38 . 2011-06-10 20:25 281200 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2011-10-02 14:51 . 2011-05-16 14:43 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-07-31 17:51 . 2011-06-05 15:38 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll 2011-07-30 12:36 . 2011-06-14 08:57 882496 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll 2011-07-25 13:25 . 2011-07-25 13:25 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2011-07-25 13:18 . 2011-07-25 12:58 867064 ----a-w- c:\windows\system32\drivers\sptd.sys . . ((((((((((((((((((((((((((((( SnapShot@2011-10-15_21.25.04 ))))))))))))))))))))))))))))))))))))))))) . + 2009-07-14 04:46 . 2011-10-16 10:57 80784 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat + 2011-10-15 21:28 . 2011-10-15 21:28 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\7b8e6edd6d3b5a4cf107d5b76771ee63\System.Windows.Presentation.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\666d7032e97cc6e91c6b0887604e87d4\System.Web.DynamicData.Design.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\37916700165f83e2e12b534e1b183984\PresentationFontCache.ni.exe + 2011-10-15 21:25 . 2011-10-15 21:25 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\3f877902f904a3265ad448c5cb98144e\Microsoft.WSMan.Runtime.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\cffb208a4a5b50f4869b04695281b73c\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\cce1895e5c9bbf3f89feb07e709692f0\Microsoft.Windows.Diagnosis.SDHost.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\63dd19dd224bbab8ac71781b953e9660\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\54794c35e985f595f000140147a7daea\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\3b8f3e3378f9f9ca4b971c0d787612b4\Microsoft.Windows.Diagnosis.SDEngine.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\2c5eb0a603215dfeb964bae310c347b3\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6d4e3a77c41d457a59279ba733c1a056\System.Windows.Presentation.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\e76796d3f5fbcd8f69d9844520964c64\System.Web.DynamicData.Design.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\b003d226416b28f552a86a376cd7ca8d\System.ComponentModel.DataAnnotations.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\49c0850ff20d17128d372aec3efddba2\System.AddIn.Contract.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\5423526ba7cf3c26a62cac30c89428fc\PresentationFontCache.ni.exe + 2011-10-15 21:38 . 2011-10-15 21:38 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\4564de62ceb9621599e5518edde9136d\napcrypt.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\32592d1941d17212cb2e195b8841dc5f\Microsoft.WSMan.Runtime.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\f572246e5f58851dca80014a5ed29475\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ef1b11a0b882b8c203daf03b78975706\Microsoft.Windows.Diagnosis.SDHost.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\d79fe39931c99ef0b75fdb946df9c535\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\d1022e36c77de9fd760becc4df10fec3\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\b39a7302b1422ace86306c75e8f887ea\Microsoft.Windows.Diagnosis.SDEngine.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6507ba57a42b19be0dc19bb3c2ecf10a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\4c27057ef4a5c197916e40fcdf3bea1d\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\427cfa4ca740c895f172ca51283f4ebd\Microsoft.Vsa.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c60683cf7fbf944620b248a5b3fb2847\Microsoft.Build.Framework.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\36d1bfcdc1632fa8fdc0a1e72e763a0f\Microsoft.Build.Framework.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\00c50dd89debd099ed76d2be3c461967\ehiUserXp.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\07b33a62990232f9df1cbe7078430571\dfsvc.ni.exe - 2011-10-15 18:08 . 2011-10-15 18:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-10-16 12:54 . 2011-10-16 12:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-10-16 12:54 . 2011-10-16 12:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2011-10-15 18:08 . 2011-10-15 18:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-04-10 10:24 . 2011-10-16 10:47 258090 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2009-07-14 09:16 . 2011-10-16 11:58 691728 c:\windows\system32\perfh013.dat - 2009-07-14 09:16 . 2011-10-10 16:21 691728 c:\windows\system32\perfh013.dat + 2009-07-14 02:36 . 2011-10-16 11:58 607190 c:\windows\system32\perfh009.dat - 2009-07-14 02:36 . 2011-10-10 16:21 607190 c:\windows\system32\perfh009.dat + 2009-07-14 09:16 . 2011-10-16 11:58 130232 c:\windows\system32\perfc013.dat - 2009-07-14 09:16 . 2011-10-10 16:21 130232 c:\windows\system32\perfc013.dat + 2009-07-14 02:36 . 2011-10-16 11:58 103568 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2011-10-10 16:21 103568 c:\windows\system32\perfc009.dat - 2009-07-14 05:01 . 2011-10-15 18:06 370432 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2009-07-14 05:01 . 2011-10-16 12:53 370432 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-10-15 21:36 . 2011-10-15 21:36 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\44731f222848d1f538b9a845382e3b18\WsatConfig.ni.exe + 2011-10-15 21:36 . 2011-10-15 21:36 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\9622e533566fd5e91109ec9e34e5dc67\WindowsFormsIntegration.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\43abe6f88265c760dbf6fbed7498acca\UIAutomationClient.ni.dll + 2011-10-15 21:29 . 2011-10-15 21:29 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\7590d8833992734fb56d64a7fccb9fa5\TaskScheduler.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\02178d722346e098e10f284a32a3f6b1\System.Xml.Linq.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\39d8f4d2414a86751bca30abc879dd66\System.Web.Routing.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\cff00856ad385b4932b07e5786375b2c\System.Web.Entity.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\17bb344dd484540a321577ae7cfee869\System.Web.Entity.Design.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\f476d82bdc7ad372eb5b9a8a2f28adbd\System.Web.DynamicData.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\59ef069073d0334e7b1d6e84f891d666\System.Web.Abstractions.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\fea0b554d6c5a81ec9d6a703b52f4478\System.Net.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\a0e089ab33a1b7809cf74714c12425f0\System.Management.Instrumentation.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 569344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\e6c5c0911c71862b4c7647fddb4163af\System.IO.Log.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 493056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\8795785a48b9a023d62439c9a5225c99\System.Data.Services.Design.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\585c3d491005d0895a6d0538abbb65fa\System.Data.DataSetExtensions.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\edc9db1e33a8388a45e213ad9d4ed750\System.ComponentModel.DataAnnotations.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 889344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\7a5180cbe771d22b62b9e5b5ee299077\System.AddIn.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\6fc062e0e95a4b33e8d9ce037f14d2a6\System.AddIn.Contract.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\c2271e4c5ebfda7a99d476e1b51fd6b0\sysglobl.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\9ac75ad570fcd656d319ebfb2ab8d0ce\SMSvcHost.ni.exe + 2011-10-15 21:25 . 2011-10-15 21:25 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\a1555b0dcb5d7743425d35f17a0b319d\napsnap.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\7c56ca946b8daeb2de7441d607761d13\napinit.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\e3e76ab6222f38de0f2c890430ef3e2a\naphlpr.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\b7049a3af8e3fdec10b531edd87ccf35\napcrypt.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\9ede59f22d31bf107a38b32dffd78290\MSBuild.ni.exe + 2011-10-15 21:25 . 2011-10-15 21:25 681472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\0fa58f2a93960e3e1fb6523e487873c4\Microsoft.WSMan.Management.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d958492b84e8508c0fcd51134d8061a5\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\4e9c48f3045e47c08bf50263c080a7cf\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\dca56fa2987cce5095f43c7acbf3b4f4\Microsoft.PowerShell.GraphicalHost.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\60a57b9a21c138eb50ef6a1dd6b32bf1\Microsoft.PowerShell.Security.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\f9b42272845d5d6aa60de2fa3cfa7ecf\WsatConfig.ni.exe + 2011-10-15 21:39 . 2011-10-15 21:39 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a5feb05f9283b0e79e0959b5df220130\WindowsFormsIntegration.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\1248c88237a6421a3742b8a51564a35e\UIAutomationClient.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\a4b76d4dc8769a0f28eaca7066f6548b\TaskScheduler.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\6c1567259547084fc25ef4941b184be5\System.Xml.Linq.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\64d0b9cc7092285fd53572d493db5425\System.Web.Routing.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4537baa6c15adcd338ceb2cd757c89d3\System.Web.Extensions.Design.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\a6dc23c392c667aace76c9b77394a934\System.Web.Entity.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\de6c85841e1533dd83b83655880c64e3\System.Web.Entity.Design.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1dcfeb2dbf84f28c3a4fd4ce833b0c08\System.Web.DynamicData.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\744de7ff26f19b02d2f803cee5cbe984\System.Web.Abstractions.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\9d4bb6d7a9a3baa00a9f422c388f1cfb\System.Net.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\7de44dd3d325af5c49a4d552905ba2c0\System.Messaging.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 997888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\cc6713be0e405d5a89a2783103f7e771\System.Management.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\41a55356ef83329934c5c5595565d504\System.Management.Instrumentation.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\ba625e52bdd7b5d07b72e02c5c7eb5ee\System.IO.Log.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\4a8216dde412c9b0eb216238a77400cd\System.IdentityModel.Selectors.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 887808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a529db128d8aa5aa73539186d40a6826\System.DirectoryServices.AccountManagement.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 356864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3ed63b294dfc24307afc10794856d65f\System.Data.Services.Design.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2dfcf38c62fe7e94afcfdfbc43e5fc2c\System.Data.Services.Client.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 762880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\60310b0641dd38c142629ef6c8feaa3b\System.Data.Entity.Design.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\99bcc03fab1f46d8f7507d518683bb47\System.Data.DataSetExtensions.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\cf525dfab6205fc09e6cb3a69b9ad36d\System.AddIn.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\007a48adac2d981fcda78d8daec3bb2c\sysglobl.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\9edededd2bd05dcf2c882be0b386e4c1\SMSvcHost.ni.exe + 2011-10-15 21:37 . 2011-10-15 21:37 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9123843fd33a30164ceb951c98b7ca2a\SMDiagnostics.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\7443e6ae6ce170db4dd8b41f9de1c4dc\napsnap.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\b51ccd53178090e335f951e3744cd52a\napinit.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\d82c431d8f0463c0dd5b143ebb0b7fcc\naphlpr.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\c9501afb093f0df8bcfbf49a783899c1\MSBuild.ni.exe + 2011-10-15 21:37 . 2011-10-15 21:37 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\360f0b116b9597a62886b5643cb545ed\MMCFxCommon.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 531456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\2998e6e05ee52a2c187fd2ad28486bcd\Microsoft.WSMan.Management.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\3b7c9f34d866e2f6f93a67d925e83272\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 785920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\e15f138def34d6fe7e0f51ac2a60307a\Microsoft.PowerShell.Commands.Management.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ca9348489f26386b15b5b863ee2b6a82\Microsoft.PowerShell.ConsoleHost.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\9bf1022e29d1617ad9327a7bbb9165b8\Microsoft.PowerShell.Commands.Diagnostics.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\938e9d2a1fffc6dc74e80748ecd8cede\Microsoft.PowerShell.Security.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\26fc0294fa631c5559f4ede31797fb71\Microsoft.PowerShell.GraphicalHost.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\6241f8b046758f569e488ab6161e6ccb\Microsoft.ManagementConsole.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\69bbcc81a36d4e1a386ebff653c0985d\Microsoft.Build.Utilities.v3.5.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0df3be45db18752f208fc37a7276c49d\Microsoft.Build.Utilities.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\46029c82bca5b75632b2b6a938cdd174\Microsoft.Build.Engine.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\525dfc2c4e95fb190c51ccd74113cd0d\Microsoft.Build.Conversion.v3.5.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\4b5b5a5b0dcd510d90e466d93b705649\mcstoredb.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\9371cc6e33034259e7dd8d5384e56590\EventViewer.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\4756d846df325c2f936a0b50ac6eac07\ehRecObj.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\6122ce79471b68d9cb368e11b2f53e05\ehiVidCtl.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\d7cb05bc1b3ae306de88a42c372abb60\ehiProxy.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\d0744480733b33f48db1e8b2c0a4a6a3\ehiExtens.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\347f1765b953e81adc7a8d1284d95181\ehExtHost32.ni.exe + 2011-10-15 21:37 . 2011-10-15 21:37 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\545f2e1ca544c2a8a39cbf8565e1c709\CustomMarshalers.ni.dll + 2011-10-15 21:36 . 2011-10-15 21:36 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\36b88143252e6de58b377430d7c145c1\ComSvcConfig.ni.exe + 2011-10-15 21:36 . 2011-10-15 21:36 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\42e98e4f3e29944621b40ba0b5f4f0a0\BDATunePIA.ni.dll + 2011-10-15 21:36 . 2011-10-15 21:36 1458688 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\f3efd62661bb2bc49b5649ef643d29ba\UIAutomationClientsideProviders.ni.dll + 2011-10-15 21:29 . 2011-10-15 21:29 1817600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\83c1e83b764014602f78d696e2b96119\System.WorkflowServices.ni.dll + 2011-10-15 21:28 . 2011-10-15 21:28 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\19f293b55e1937b1b06f01ec25c91112\System.Web.Mobile.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 3041792 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\f9324989c3f1200436bee4cddeebd87d\System.Web.Extensions.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\f6564cb5f9163822f3fa941ba1eebdee\System.Web.Extensions.Design.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\a3e0cf92fd8e8b56991b4b7bd99d046a\System.Speech.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\a16d95e3fbe91b458747aefb2c4743bd\System.ServiceModel.Web.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 1229824 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\d3ebb34b1aa5d942f6c03f80525dadd6\System.DirectoryServices.AccountManagement.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 1846272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\40be02b82b6532796d6abfda3f53830e\System.Data.Services.ni.dll + 2011-10-15 21:27 . 2011-10-15 21:27 1289728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\b73ee98e8f418502d87a5d8b2b8cc5cd\System.Data.Services.Client.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\bac6e79bd99337a7789bdab6cc4d2b3e\System.Data.Linq.ni.dll + 2011-10-15 21:26 . 2011-10-15 21:26 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\78fc94e1d183278d33a19c5d47f1bfaf\System.Data.Entity.Design.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 1881088 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\3ad517fa6dce6f6b3a31404cc92c49bc\PresentationBuildTasks.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\27b328c648d9b893c6e8a6bde3fc0a9c\Narrator.ni.exe + 2011-10-15 21:25 . 2011-10-15 21:25 2327040 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\6aff8d80fc733568f3908f2b76b8c904\MMCEx.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\0a179b5f44a496e24b89a862b986db68\Microsoft.VisualBasic.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\97699aa22704c43609955cc89418f41d\Microsoft.PowerShell.GPowerShell.ni.dll + 2011-10-15 21:25 . 2011-10-15 21:25 5351424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\0ebc995e367eeb8d72a3d7c96cacc338\Microsoft.PowerShell.Editor.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\44579730e067c4ce85f67b95f3699139\UIAutomationClientsideProviders.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\85c13d29137c1ec685fafbfdf46cabca\System.WorkflowServices.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\bd71068de76a8ea185ed0adcf3a99b7f\System.Web.Mobile.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 2402816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\8d33e0e622a4716c83ba06b5123b2a74\System.Web.Extensions.ni.dll + 2011-10-15 21:39 . 2011-10-15 21:39 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\a1667fcd757236c8f9e263722683033a\System.Speech.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\48175dbab2d21970343cacecbd9ee67f\System.ServiceModel.Web.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8dba8803fad87c39c0afbdce6c19fdd0\System.Runtime.Serialization.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 8871936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\94e2a6892a5a2fe389c80fe5fff0c3af\System.Management.Automation.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 1072128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\2fe1102950b6bb637339b982724ad63d\System.IdentityModel.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 1328640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\8da7e39f38ef11438c1a07d84e5ce380\System.Data.Services.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\2ce656ab44ac6cc82d78a16cea56b087\System.Data.Linq.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 9921024 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\ffde01cb16604e89884fa892c241607a\System.Data.Entity.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\6d859463c9e6a7423ddb335211a79dda\System.Core.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 1449984 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\60080c5a7731df4be041292f481d1e35\PresentationBuildTasks.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\80acdf938910e5af064a3c12b86cf18a\Narrator.ni.exe + 2011-10-15 21:38 . 2011-10-15 21:38 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\ed423e7b284140f4884bcdce78c7791e\MMCEx.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\e8bd4dcc51b16148cedbff4ced954ce7\MIGUIControls.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\168c6417c92bdddd10809791ed32be3e\Microsoft.VisualBasic.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 1092608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\0c9dfe29104180dd2bb9147bbb2fd842\Microsoft.Transactions.Bridge.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 1705472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d4ed2b49d773f8ba656db4d34bce2e77\Microsoft.PowerShell.GPowerShell.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\cf25c6ef6a15d0881e3842f0cd016dfa\Microsoft.PowerShell.Editor.ni.dll + 2011-10-15 21:38 . 2011-10-15 21:38 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\19e9c2ff41ec7172d9783ade51e7fb59\Microsoft.PowerShell.Commands.Utility.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\406f73b084414f11581798181932c876\Microsoft.MediaCenter.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\400bfbea4fa22402d6cfb6129caef9e0\Microsoft.MediaCenter.UI.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 2332672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b6811aa41cca1457c8f24e848c9e94e4\Microsoft.JScript.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\f7203d54b6b5487d9204682b1878b6eb\Microsoft.Ink.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\e4920c53b4141ca178c02e8de4e69f2c\Microsoft.Build.Tasks.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\591b4b5731b6d64b7b36a1428627058e\Microsoft.Build.Tasks.v3.5.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\fce6605af686e9bcd7776964dde7b706\Microsoft.Build.Engine.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 2031104 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\58ab228f6280560cec5c825333479169\mcstore.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 3014656 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\d2f664756d1d08dcf0e1c0db14adcbd2\mcepg.ni.dll + 2009-07-14 02:34 . 2011-10-16 11:07 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat - 2009-07-14 02:34 . 2011-10-15 18:36 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat + 2011-04-13 07:51 . 2011-10-16 12:53 22164236 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1461214366-2769493618-3975586674-1000-8192.dat + 2011-10-15 21:26 . 2011-10-15 21:26 13757952 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\d057c43ab3a184ed0f7e9879c9c8f959\System.Data.Entity.ni.dll + 2011-10-15 21:37 . 2011-10-15 21:37 17400320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\cc3d9cb5c17d1863e3146c2a0d5c9e86\System.ServiceModel.ni.dll . -- Snapshot teruggezet naar huidige datum -- . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-09-09 98304] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408] "Freecorder FLV Service"="c:\program files (x86)\Freecorder\FLVSrvc.exe" [2011-03-24 167936] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-12-29 1082656] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW . R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x] R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2011-07-08 2428968] R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-04-11 1436424] R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys [x] R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [x] R3 RTCore64;RTCore64;c:\users\Jawbone\Desktop\Nieuwe map\RTCore64.sys [x] R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [x] R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x] S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x] S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144] S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x] S2 mi-raysat_3dsmax2011_64;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit;c:\program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [2010-03-09 86016] S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080] S2 RadeonPro Support Service;RadeonPro Support Service;c:\program files (x86)\RadeonPro\RadeonProSupport.exe [2011-02-09 12800] S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe [2010-10-21 5790064] S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe [2010-10-21 487280] S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-03-30 2026304] S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-04-15 2533400] S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe [2010-01-07 1926448] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x] S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x] S3 RTL8167;Realtek 8167 NT-stuurprogramma;c:\windows\system32\DRIVERS\Rt64win7.sys [x] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2010-11-29 11856] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2009-06-17 10:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Inhoud van de 'Gedeelde Taken' map . 2011-10-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1461214366-2769493618-3975586674-1000Core.job - c:\users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-09 18:22] . 2011-10-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1461214366-2769493618-3975586674-1000UA.job - c:\users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-09 18:22] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll [bU] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-27 161304] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-27 386584] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-27 415256] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656] "combofix"="c:\combofix\CF10148.3XE" [2009-07-14 344576] . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.nl/ mLocal Page = c:\windows\SysWOW64\blank.htm IE: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Free YouTube Download - c:\users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm IE: Free YouTube to MP3 Converter - c:\users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Pagina verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm IE: Sothink SWF Catcher - c:\program files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm TCP: DhcpNameServer = 192.168.1.1 FF - ProfilePath - c:\users\Jawbone\AppData\Roaming\Mozilla\Firefox\Profiles\4dlswvrc.default\ . - - - - ORPHANS VERWIJDERD - - - - . WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file) . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info] @Denied: (2) (LocalSystem) "AppDataDir"="c:\\ProgramData\\ESET\\ESET NOD32 Antivirus\\" "DataDir"="ESET\\ESET NOD32 Antivirus\\" "EditionName"=" " "InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\" "LanguageId"=dword:00000413 "PackageTag"=dword:6090e758 "ProductBase"=dword:00000000 "ProductCode"="{9C197982-CE27-448E-8993-97F6E7735306}" "ProductName"="ESET NOD32 Antivirus" "ProductType"="eav" "ProductVersion"="4.2.71.2" "UniqueId"="374600504E552910" "ScannerBuild"=dword:0000215d "ScannerVersionId"=dword:00001695 "ScannerVersion"="Open window for status." "ei2"=hex(:c6,82,9f,a0,2e,1e,5b,e6 "ei1"=hex(:c8,0a,a9,d9,8d,0c,00,00 "ei3"=hex(:cc,2a,55,4e,00,00,00,00 "ei4"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe c:\windows\SysWOW64\IoctlSvc.exe c:\windows\SysWOW64\PnkBstrA.exe c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe c:\program files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe . ************************************************************************** . Voltooingstijd: 2011-10-16 15:03:07 - machine werd herstart ComboFix-quarantined-files.txt 2011-10-16 13:03 ComboFix2.txt 2011-10-15 21:29 . Pre-Run: 422.111.019.008 bytes beschikbaar Post-Run: 421.796.257.792 bytes beschikbaar . - - End Of File - - B0B7CFEF6B9A2642FB2847133DA176F8

Hier het logbestand voor Combofix ComboFix 11-10-15.04 - Jawbone 15-10-2011 23:14:23.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.3894.1484 [GMT 2:00] Gestart vanuit: c:\users\Jawbone\Desktop\ComboFix.exe AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2011-09-15 to 2011-10-15 )))))))))))))))))))))))))))))) . . 2011-10-15 21:24 . 2011-10-15 21:24 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-10-15 19:22 . 2011-10-15 19:22 -------- d-----w- c:\program files (x86)\Xilisoft 2011-10-15 17:49 . 2011-10-15 17:49 -------- d-----w- c:\users\Jawbone\AppData\Roaming\Malwarebytes 2011-10-15 17:48 . 2011-10-15 17:48 -------- d-----w- c:\programdata\Malwarebytes 2011-10-15 17:48 . 2011-10-15 17:49 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-10-15 17:48 . 2011-08-31 15:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-10-15 16:31 . 2011-10-15 16:31 388096 ----a-r- c:\users\Jawbone\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-10-15 16:31 . 2011-10-15 16:31 -------- d-----w- c:\program files (x86)\Trend Micro 2011-10-14 14:49 . 2011-10-15 18:16 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2AA9ED11-E43B-432D-8AF3-D0B2EE250C65}\offreg.dll 2011-10-14 14:49 . 2011-09-13 00:26 9049936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2AA9ED11-E43B-432D-8AF3-D0B2EE250C65}\mpengine.dll 2011-10-12 19:35 . 2011-08-17 05:32 613888 ----a-w- c:\windows\system32\psisdecd.dll 2011-10-07 17:51 . 2011-10-07 17:51 27912704 ----a-w- c:\windows\system32\imageres.dll 2011-10-07 17:26 . 2011-10-07 17:26 -------- d-----w- c:\programdata\Stardock 2011-10-07 17:26 . 2007-06-05 09:26 56496 ----a-w- c:\windows\SysWow64\wbhelp2.dll 2011-10-07 17:26 . 2007-06-05 09:26 567040 ----a-w- c:\windows\SysWow64\wbocx.ocx 2011-10-07 17:26 . 2011-10-07 17:26 -------- d-----w- c:\program files (x86)\Stardock 2011-10-06 12:07 . 2011-10-06 12:07 -------- d-----w- c:\program files (x86)\SystemRequirementsLab 2011-10-06 12:07 . 2011-10-06 12:07 -------- d-----w- c:\users\Jawbone\AppData\Roaming\SystemRequirementsLab 2011-10-05 19:30 . 2010-06-02 02:55 239960 ----a-w- c:\windows\SysWow64\xactengine3_7.dll 2011-10-05 19:30 . 2010-06-02 02:55 176984 ----a-w- c:\windows\system32\xactengine3_7.dll 2011-10-05 19:30 . 2010-05-26 09:41 1907552 ----a-w- c:\windows\system32\d3dcsx_43.dll 2011-10-05 19:30 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll 2011-10-05 19:30 . 2010-05-26 09:41 511328 ----a-w- c:\windows\system32\d3dx10_43.dll 2011-10-05 19:30 . 2010-05-26 09:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll 2011-10-05 18:36 . 2011-10-05 18:36 -------- d-----w- c:\users\Jawbone\AppData\Local\SKIDROW 2011-10-05 18:34 . 2011-10-05 18:34 -------- d-----w- c:\program files (x86)\Wizards of the Coast LLC 2011-10-05 14:39 . 2011-10-05 14:39 -------- d-----w- c:\program files (x86)\uTorrent 2011-10-05 14:38 . 2011-10-05 18:46 -------- d-----w- c:\users\Jawbone\AppData\Roaming\uTorrent 2011-10-05 14:38 . 2011-10-05 14:38 -------- d-----w- c:\users\Jawbone\AppData\Local\uTorrent 2011-10-02 15:01 . 2011-10-02 15:01 -------- d-----w- c:\programdata\LightScribe 2011-10-02 15:01 . 2011-10-15 17:38 -------- d-----w- c:\users\Jawbone\AppData\Roaming\Nero 2011-10-02 14:57 . 2011-10-02 14:58 -------- d-----w- c:\program files (x86)\Common Files\Nero 2011-10-02 14:44 . 2011-10-02 14:44 -------- d-----w- c:\program files (x86)\Common Files\LightScribe 2011-10-02 14:11 . 2011-10-02 14:11 -------- d-----w- c:\users\Jawbone\AppData\Roaming\dvdcss 2011-10-02 12:36 . 2011-10-02 12:36 -------- d-----w- c:\program files (x86)\Conduit 2011-10-02 12:35 . 2011-10-02 12:35 -------- d-----w- c:\users\Jawbone\AppData\Local\Conduit 2011-10-02 12:35 . 2011-10-15 21:13 -------- d-----w- c:\users\Jawbone\AppData\Local\FLVService 2011-10-02 12:35 . 2011-10-15 17:47 -------- d-----w- c:\program files (x86)\Freecorder 2011-10-02 12:27 . 2011-10-02 12:27 -------- d-----w- C:\ConverterOutput 2011-10-02 12:26 . 2008-08-31 09:59 92102 ----a-w- c:\windows\SysWow64\HKCU_GNU.reg 2011-10-02 12:26 . 2008-06-17 08:57 6700 ----a-w- c:\windows\SysWow64\HKLM_GNU.reg 2011-10-02 12:26 . 2008-06-15 08:01 258352 ----a-w- c:\windows\SysWow64\unicows.dll 2011-10-02 12:26 . 2008-06-15 19:13 6144 ----a-w- c:\windows\SysWow64\ff_acm.acm 2011-10-02 12:26 . 2008-06-15 19:13 7680 ----a-w- c:\windows\SysWow64\ff_vfw.dll 2011-10-02 12:26 . 2008-06-15 08:01 60273 ----a-w- c:\windows\SysWow64\pthreadGC2.dll 2011-10-02 12:26 . 2006-07-17 19:42 14909 ----a-w- c:\windows\SysWow64\A_reg.reg 2011-10-02 12:26 . 2003-03-25 04:49 98304 ----a-w- c:\windows\SysWow64\L3CODECX.AX 2011-10-02 12:26 . 2003-03-18 20:20 1060864 ----a-w- c:\windows\SysWow64\MFC71.DLL 2011-10-02 12:26 . 2006-07-08 02:07 114688 ----a-w- c:\windows\SysWow64\PropListCtrl.ocx 2011-10-02 12:26 . 2011-10-02 12:26 -------- d-----w- c:\program files (x86)\Cucusoft 2011-09-23 19:15 . 2011-09-23 19:15 -------- d-----w- c:\users\Jawbone\AppData\Local\Nokia 2011-09-23 19:14 . 2011-09-23 19:14 -------- d-----w- c:\programdata\PC Suite 2011-09-23 19:14 . 2011-09-23 19:20 -------- d-----w- c:\users\Jawbone\AppData\Roaming\PC Suite 2011-09-23 19:13 . 2011-09-23 19:13 -------- d-----w- c:\program files (x86)\Common Files\Nokia 2011-09-23 19:12 . 2008-08-28 10:44 25600 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys 2011-09-23 19:12 . 2011-09-23 19:12 -------- dc----w- c:\windows\system32\DRVSTORE 2011-09-23 19:12 . 2011-09-23 19:12 -------- d-----w- c:\program files (x86)\PC Connectivity Solution 2011-09-23 19:11 . 2011-09-23 19:13 -------- d-----w- c:\program files (x86)\Nokia 2011-09-23 19:11 . 2011-09-23 19:11 -------- d-----w- c:\programdata\NokiaInstallerCache . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-10-08 14:41 . 2011-06-10 20:36 281656 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2011-10-08 14:41 . 2011-06-10 20:25 281656 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2011-10-08 14:38 . 2011-06-10 20:25 281200 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2011-10-02 14:51 . 2011-05-16 14:43 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-07-31 17:51 . 2011-06-05 15:38 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll 2011-07-30 12:36 . 2011-06-14 08:57 882496 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll 2011-07-25 13:25 . 2011-07-25 13:25 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2011-07-25 13:18 . 2011-07-25 12:58 867064 ----a-w- c:\windows\system32\drivers\sptd.sys . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-09-09 98304] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408] "Freecorder FLV Service"="c:\program files (x86)\Freecorder\FLVSrvc.exe" [2011-03-24 167936] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-12-29 1082656] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW . R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x] R2 mi-raysat_3dsmax2011_64;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit;c:\program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [2010-03-09 86016] R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2011-07-08 2428968] R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-04-11 1436424] R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys [x] R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [x] R3 RTCore64;RTCore64;c:\users\Jawbone\Desktop\Nieuwe map\RTCore64.sys [x] R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [x] R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 X6va005;X6va005;c:\users\Jawbone\AppData\Local\Temp\0059359.tmp [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x] S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x] S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144] S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x] S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080] S2 RadeonPro Support Service;RadeonPro Support Service;c:\program files (x86)\RadeonPro\RadeonProSupport.exe [2011-02-09 12800] S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe [2010-10-21 5790064] S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe [2010-10-21 487280] S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-03-30 2026304] S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-04-15 2533400] S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe [2010-01-07 1926448] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x] S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x] S3 RTL8167;Realtek 8167 NT-stuurprogramma;c:\windows\system32\DRIVERS\Rt64win7.sys [x] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2010-11-29 11856] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2009-06-17 10:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Inhoud van de 'Gedeelde Taken' map . 2011-10-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1461214366-2769493618-3975586674-1000Core.job - c:\users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-09 18:22] . 2011-10-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1461214366-2769493618-3975586674-1000UA.job - c:\users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-09 18:22] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-27 161304] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-27 386584] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-27 415256] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.nl/ mLocal Page = c:\windows\SysWOW64\blank.htm IE: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Free YouTube Download - c:\users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm IE: Free YouTube to MP3 Converter - c:\users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Pagina verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm IE: Sothink SWF Catcher - c:\program files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm TCP: DhcpNameServer = 192.168.1.1 FF - ProfilePath - c:\users\Jawbone\AppData\Roaming\Mozilla\Firefox\Profiles\4dlswvrc.default\ . - - - - ORPHANS VERWIJDERD - - - - . BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-Emoticon Packs for Messenger - c:\users\Jawbone\Desktop\Emoticon Packs for Messenger\uninstall.exe AddRemove-sunpoker - c:\poker\SunPoker\_SetupPoker_927e8b.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va005] "ImagePath"="\??\c:\users\Jawbone\AppData\Local\Temp\0059359.tmp" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info] @Denied: (2) (LocalSystem) "AppDataDir"="c:\\ProgramData\\ESET\\ESET NOD32 Antivirus\\" "DataDir"="ESET\\ESET NOD32 Antivirus\\" "EditionName"=" " "InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\" "LanguageId"=dword:00000413 "PackageTag"=dword:6090e758 "ProductBase"=dword:00000000 "ProductCode"="{9C197982-CE27-448E-8993-97F6E7735306}" "ProductName"="ESET NOD32 Antivirus" "ProductType"="eav" "ProductVersion"="4.2.71.2" "UniqueId"="374600504E552910" "ScannerBuild"=dword:0000215d "ScannerVersionId"=dword:00001695 "ScannerVersion"="Open window for status." "ei2"=hex(:c6,82,9f,a0,2e,1e,5b,e6 "ei1"=hex(:c8,0a,a9,d9,8d,0c,00,00 "ei3"=hex(:cc,2a,55,4e,00,00,00,00 "ei4"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2011-10-15 23:29:05 ComboFix-quarantined-files.txt 2011-10-15 21:29 . Pre-Run: 398.340.780.032 bytes beschikbaar Post-Run: 419.838.480.384 bytes beschikbaar . - - End Of File - - C87CB9CD47A624DF47F2FCC105F69369

Hier het logje van MBAM Malwarebytes' Anti-Malware 1.51.2.1300 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Databaseversie: 7954 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 15-10-2011 20:01:32 mbam-log-2011-10-15 (20-01-32).txt Scantype: Snelle scan Objecten gescand: 187057 Verstreken tijd: 11 minuut/minuten, 12 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 15 Registerwaarden geïnfecteerd: 4 Registerdata geïnfecteerd: 1 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 7 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: HKEY_CLASSES_ROOT\Typelib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{D44FD6F0-9746-484E-B5C4-C66688393872} (Adware.ShoppingReport2) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C} (Adware.ShoppingReport2) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.HbAx (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.HbAx.1 (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand.1 (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.IEButton (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.IEButton.1 (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA.1 (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl.1 (Adware.ShopperReports) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\ScanQuery (Adware.ScanQuery) -> Quarantined and deleted successfully. Registerwaarden geïnfecteerd: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully. Registerdata geïnfecteerd: HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully. Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: c:\Users\Jawbone\documents\downloads\flvblaster (1).exe (Adware.Hotbar) -> Quarantined and deleted successfully. c:\Users\Jawbone\documents\downloads\flvblaster (2).exe (Adware.Hotbar) -> Quarantined and deleted successfully. c:\Users\Jawbone\documents\downloads\flvblaster.exe (Adware.Hotbar) -> Quarantined and deleted successfully. c:\Users\Jawbone\documents\downloads\videoconvertersetup.exe (Adware.Agent) -> Quarantined and deleted successfully. c:\Users\Jawbone\documents\downloads\xvidsetup (1).exe (Adware.Hotbar) -> Quarantined and deleted successfully. c:\Users\Jawbone\documents\downloads\xvidsetup.exe (Adware.Hotbar) -> Quarantined and deleted successfully. c:\Users\Jawbone\AppData\Local\Temp\icreinstall\videoconvertersetup.exe (Adware.Agent) -> Quarantined and deleted successfully. Hier het nieuwe HijackThis logje Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:31:42, on 15-10-2011 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16869) Boot mode: Normal Running processes: C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\Program Files (x86)\Freecorder\FLVSrvc.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe C:\Program Files (x86)\Opera\opera.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Windows\SysWOW64\NOTEPAD.EXE C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [startCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam" O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Google Update] "C:\Users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: Bluetooth.lnk = ? O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Free YouTube Download - C:\Users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: CyberGhost VPN Client (CGVPNCliSrvc) - mobile concepts GmbH - C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit (mi-raysat_3dsmax2011_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: RadeonPro Support Service - Mr. John aka japamd - C:\Program Files (x86)\RadeonPro\RadeonProSupport.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11432 bytes

Wanneer ik het logje wil openen in kladblok geeft hij de melding dat het bestand niet kan worden gevonden, ook als ik naar de map ga waar het logje in hoort te staan, staat er niks. als ik scan only kies en daarna klik op save log, dan zie ik in het schermpje waar ik kan opslaan wel de oude log staan, alleen er staat een slotje bij, het lijkt net alsof mijn pc mijn account niet als admin ziet. ---------- Post toegevoegd om 17:45 ---------- Vorige post was om 17:38 ---------- Ik moest hem gewoon als administrator openen. hier is de log: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:43:59, on 15-10-2011 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16839) Boot mode: Normal Running processes: C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe C:\Users\Jawbone\AppData\Local\Temp\Rar$EX89.760\Desktops.exe C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\Program Files (x86)\Freecorder\FLVSrvc.exe C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe C:\Program Files (x86)\BitTorrent\BitTorrent.exe C:\Program Files (x86)\Opera\opera.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\rundll32.exe C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Your Home Page Has Been Changed R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: Freecorder - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Foxit PDF Creator Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll O4 - HKLM\..\Run: [startCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam" O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Google Update] "C:\Users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [sysinternals Desktops] C:\Users\Jawbone\AppData\Local\Temp\Rar$EX89.760\Desktops.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: Bluetooth.lnk = ? O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Free YouTube Download - C:\Users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: CyberGhost VPN Client (CGVPNCliSrvc) - mobile concepts GmbH - C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit (mi-raysat_3dsmax2011_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: RadeonPro Support Service - Mr. John aka japamd - C:\Program Files (x86)\RadeonPro\RadeonProSupport.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 13629 bytes

Hallo, Sinds een tijdje is mijn laptop erg traag, ik zou graag willen weten hoe ik hem kan versnellen