Ga naar inhoud

jawbone

Lid
  • Items

    6
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door jawbone

  1. De snelheid is al iets beter maar hij is nog steeds traag,

    ook het opstarten van windows duurt lang

    Hier de log

    ComboFix 11-10-15.04 - Jawbone 16-10-2011 14:44:28.2.4 - x64

    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.3894.1446 [GMT 2:00]

    Gestart vanuit: c:\users\Jawbone\Desktop\ComboFix.exe

    gebruikte Opdracht switches :: c:\users\Jawbone\Desktop\CFScript.txt

    AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}

    SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    FILE ::

    "c:\users\Jawbone\AppData\Local\Temp\0059359.tmp"

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\program files (x86)\Conduit

    c:\program files (x86)\Conduit\Community Alerts\Alert.dll

    c:\users\Jawbone\AppData\Local\Conduit

    c:\users\Jawbone\AppData\Local\Conduit\CT1060933\FreecorderAutoUpdateHelper.exe

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    -------\Legacy_X6VA005

    -------\Service_X6va005

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2011-09-16 to 2011-10-16 ))))))))))))))))))))))))))))))

    .

    .

    2011-10-15 19:22 . 2011-10-15 19:22 -------- d-----w- c:\program files (x86)\Xilisoft

    2011-10-15 17:49 . 2011-10-15 17:49 -------- d-----w- c:\users\Jawbone\AppData\Roaming\Malwarebytes

    2011-10-15 17:48 . 2011-10-15 17:48 -------- d-----w- c:\programdata\Malwarebytes

    2011-10-15 17:48 . 2011-10-15 17:49 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

    2011-10-15 17:48 . 2011-08-31 15:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys

    2011-10-15 16:31 . 2011-10-15 16:31 388096 ----a-r- c:\users\Jawbone\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2011-10-15 16:31 . 2011-10-15 16:31 -------- d-----w- c:\program files (x86)\Trend Micro

    2011-10-14 14:49 . 2011-09-13 00:26 9049936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2AA9ED11-E43B-432D-8AF3-D0B2EE250C65}\mpengine.dll

    2011-10-12 19:35 . 2011-08-17 05:32 613888 ----a-w- c:\windows\system32\psisdecd.dll

    2011-10-07 17:51 . 2011-10-07 17:51 27912704 ----a-w- c:\windows\system32\imageres.dll

    2011-10-07 17:26 . 2011-10-07 17:26 -------- d-----w- c:\programdata\Stardock

    2011-10-07 17:26 . 2007-06-05 09:26 56496 ----a-w- c:\windows\SysWow64\wbhelp2.dll

    2011-10-07 17:26 . 2007-06-05 09:26 567040 ----a-w- c:\windows\SysWow64\wbocx.ocx

    2011-10-07 17:26 . 2011-10-07 17:26 -------- d-----w- c:\program files (x86)\Stardock

    2011-10-06 12:07 . 2011-10-06 12:07 -------- d-----w- c:\program files (x86)\SystemRequirementsLab

    2011-10-06 12:07 . 2011-10-06 12:07 -------- d-----w- c:\users\Jawbone\AppData\Roaming\SystemRequirementsLab

    2011-10-05 19:30 . 2010-06-02 02:55 239960 ----a-w- c:\windows\SysWow64\xactengine3_7.dll

    2011-10-05 19:30 . 2010-06-02 02:55 176984 ----a-w- c:\windows\system32\xactengine3_7.dll

    2011-10-05 19:30 . 2010-05-26 09:41 1907552 ----a-w- c:\windows\system32\d3dcsx_43.dll

    2011-10-05 19:30 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll

    2011-10-05 19:30 . 2010-05-26 09:41 511328 ----a-w- c:\windows\system32\d3dx10_43.dll

    2011-10-05 19:30 . 2010-05-26 09:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll

    2011-10-05 18:36 . 2011-10-05 18:36 -------- d-----w- c:\users\Jawbone\AppData\Local\SKIDROW

    2011-10-05 18:34 . 2011-10-05 18:34 -------- d-----w- c:\program files (x86)\Wizards of the Coast LLC

    2011-10-05 14:39 . 2011-10-05 14:39 -------- d-----w- c:\program files (x86)\uTorrent

    2011-10-05 14:38 . 2011-10-05 18:46 -------- d-----w- c:\users\Jawbone\AppData\Roaming\uTorrent

    2011-10-05 14:38 . 2011-10-05 14:38 -------- d-----w- c:\users\Jawbone\AppData\Local\uTorrent

    2011-10-02 15:01 . 2011-10-02 15:01 -------- d-----w- c:\programdata\LightScribe

    2011-10-02 15:01 . 2011-10-15 17:38 -------- d-----w- c:\users\Jawbone\AppData\Roaming\Nero

    2011-10-02 14:57 . 2011-10-02 14:58 -------- d-----w- c:\program files (x86)\Common Files\Nero

    2011-10-02 14:44 . 2011-10-02 14:44 -------- d-----w- c:\program files (x86)\Common Files\LightScribe

    2011-10-02 14:11 . 2011-10-02 14:11 -------- d-----w- c:\users\Jawbone\AppData\Roaming\dvdcss

    2011-10-02 12:35 . 2011-10-15 17:47 -------- d-----w- c:\program files (x86)\ConduitEngine

    2011-10-02 12:35 . 2011-10-16 01:07 -------- d-----w- c:\users\Jawbone\AppData\Local\FLVService

    2011-10-02 12:35 . 2011-10-15 17:47 -------- d-----w- c:\program files (x86)\Freecorder

    2011-10-02 12:27 . 2011-10-02 12:27 -------- d-----w- C:\ConverterOutput

    2011-10-02 12:26 . 2008-08-31 09:59 92102 ----a-w- c:\windows\SysWow64\HKCU_GNU.reg

    2011-10-02 12:26 . 2008-06-17 08:57 6700 ----a-w- c:\windows\SysWow64\HKLM_GNU.reg

    2011-10-02 12:26 . 2008-06-15 08:01 258352 ----a-w- c:\windows\SysWow64\unicows.dll

    2011-10-02 12:26 . 2008-06-15 19:13 6144 ----a-w- c:\windows\SysWow64\ff_acm.acm

    2011-10-02 12:26 . 2008-06-15 19:13 7680 ----a-w- c:\windows\SysWow64\ff_vfw.dll

    2011-10-02 12:26 . 2008-06-15 08:01 60273 ----a-w- c:\windows\SysWow64\pthreadGC2.dll

    2011-10-02 12:26 . 2006-07-17 19:42 14909 ----a-w- c:\windows\SysWow64\A_reg.reg

    2011-10-02 12:26 . 2003-03-25 04:49 98304 ----a-w- c:\windows\SysWow64\L3CODECX.AX

    2011-10-02 12:26 . 2003-03-18 20:20 1060864 ----a-w- c:\windows\SysWow64\MFC71.DLL

    2011-10-02 12:26 . 2006-07-08 02:07 114688 ----a-w- c:\windows\SysWow64\PropListCtrl.ocx

    2011-10-02 12:26 . 2011-10-02 12:26 -------- d-----w- c:\program files (x86)\Cucusoft

    2011-09-23 19:15 . 2011-09-23 19:15 -------- d-----w- c:\users\Jawbone\AppData\Local\Nokia

    2011-09-23 19:14 . 2011-09-23 19:14 -------- d-----w- c:\programdata\PC Suite

    2011-09-23 19:14 . 2011-09-23 19:20 -------- d-----w- c:\users\Jawbone\AppData\Roaming\PC Suite

    2011-09-23 19:13 . 2011-09-23 19:13 -------- d-----w- c:\program files (x86)\Common Files\Nokia

    2011-09-23 19:12 . 2008-08-28 10:44 25600 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys

    2011-09-23 19:12 . 2011-09-23 19:12 -------- dc----w- c:\windows\system32\DRVSTORE

    2011-09-23 19:12 . 2011-09-23 19:12 -------- d-----w- c:\program files (x86)\PC Connectivity Solution

    2011-09-23 19:11 . 2011-09-23 19:13 -------- d-----w- c:\program files (x86)\Nokia

    2011-09-23 19:11 . 2011-09-23 19:11 -------- d-----w- c:\programdata\NokiaInstallerCache

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2011-10-08 14:41 . 2011-06-10 20:36 281656 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr

    2011-10-08 14:41 . 2011-06-10 20:25 281656 ----a-w- c:\windows\SysWow64\PnkBstrB.exe

    2011-10-08 14:38 . 2011-06-10 20:25 281200 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0

    2011-10-02 14:51 . 2011-05-16 14:43 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2011-07-31 17:51 . 2011-06-05 15:38 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll

    2011-07-30 12:36 . 2011-06-14 08:57 882496 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll

    2011-07-25 13:25 . 2011-07-25 13:25 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys

    2011-07-25 13:18 . 2011-07-25 12:58 867064 ----a-w- c:\windows\system32\drivers\sptd.sys

    .

    .

    ((((((((((((((((((((((((((((( SnapShot@2011-10-15_21.25.04 )))))))))))))))))))))))))))))))))))))))))

    .

    + 2009-07-14 04:46 . 2011-10-16 10:57 80784 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat

    + 2011-10-15 21:28 . 2011-10-15 21:28 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\7b8e6edd6d3b5a4cf107d5b76771ee63\System.Windows.Presentation.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\666d7032e97cc6e91c6b0887604e87d4\System.Web.DynamicData.Design.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\37916700165f83e2e12b534e1b183984\PresentationFontCache.ni.exe

    + 2011-10-15 21:25 . 2011-10-15 21:25 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\3f877902f904a3265ad448c5cb98144e\Microsoft.WSMan.Runtime.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\cffb208a4a5b50f4869b04695281b73c\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\cce1895e5c9bbf3f89feb07e709692f0\Microsoft.Windows.Diagnosis.SDHost.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\63dd19dd224bbab8ac71781b953e9660\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\54794c35e985f595f000140147a7daea\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\3b8f3e3378f9f9ca4b971c0d787612b4\Microsoft.Windows.Diagnosis.SDEngine.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\2c5eb0a603215dfeb964bae310c347b3\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6d4e3a77c41d457a59279ba733c1a056\System.Windows.Presentation.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\e76796d3f5fbcd8f69d9844520964c64\System.Web.DynamicData.Design.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\b003d226416b28f552a86a376cd7ca8d\System.ComponentModel.DataAnnotations.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\49c0850ff20d17128d372aec3efddba2\System.AddIn.Contract.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\5423526ba7cf3c26a62cac30c89428fc\PresentationFontCache.ni.exe

    + 2011-10-15 21:38 . 2011-10-15 21:38 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\4564de62ceb9621599e5518edde9136d\napcrypt.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\32592d1941d17212cb2e195b8841dc5f\Microsoft.WSMan.Runtime.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\f572246e5f58851dca80014a5ed29475\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ef1b11a0b882b8c203daf03b78975706\Microsoft.Windows.Diagnosis.SDHost.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\d79fe39931c99ef0b75fdb946df9c535\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\d1022e36c77de9fd760becc4df10fec3\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\b39a7302b1422ace86306c75e8f887ea\Microsoft.Windows.Diagnosis.SDEngine.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6507ba57a42b19be0dc19bb3c2ecf10a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\4c27057ef4a5c197916e40fcdf3bea1d\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\427cfa4ca740c895f172ca51283f4ebd\Microsoft.Vsa.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c60683cf7fbf944620b248a5b3fb2847\Microsoft.Build.Framework.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\36d1bfcdc1632fa8fdc0a1e72e763a0f\Microsoft.Build.Framework.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\00c50dd89debd099ed76d2be3c461967\ehiUserXp.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\07b33a62990232f9df1cbe7078430571\dfsvc.ni.exe

    - 2011-10-15 18:08 . 2011-10-15 18:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

    + 2011-10-16 12:54 . 2011-10-16 12:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

    + 2011-10-16 12:54 . 2011-10-16 12:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

    - 2011-10-15 18:08 . 2011-10-15 18:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

    + 2011-04-10 10:24 . 2011-10-16 10:47 258090 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin

    + 2009-07-14 09:16 . 2011-10-16 11:58 691728 c:\windows\system32\perfh013.dat

    - 2009-07-14 09:16 . 2011-10-10 16:21 691728 c:\windows\system32\perfh013.dat

    + 2009-07-14 02:36 . 2011-10-16 11:58 607190 c:\windows\system32\perfh009.dat

    - 2009-07-14 02:36 . 2011-10-10 16:21 607190 c:\windows\system32\perfh009.dat

    + 2009-07-14 09:16 . 2011-10-16 11:58 130232 c:\windows\system32\perfc013.dat

    - 2009-07-14 09:16 . 2011-10-10 16:21 130232 c:\windows\system32\perfc013.dat

    + 2009-07-14 02:36 . 2011-10-16 11:58 103568 c:\windows\system32\perfc009.dat

    - 2009-07-14 02:36 . 2011-10-10 16:21 103568 c:\windows\system32\perfc009.dat

    - 2009-07-14 05:01 . 2011-10-15 18:06 370432 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

    + 2009-07-14 05:01 . 2011-10-16 12:53 370432 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

    + 2011-10-15 21:36 . 2011-10-15 21:36 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\44731f222848d1f538b9a845382e3b18\WsatConfig.ni.exe

    + 2011-10-15 21:36 . 2011-10-15 21:36 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\9622e533566fd5e91109ec9e34e5dc67\WindowsFormsIntegration.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\43abe6f88265c760dbf6fbed7498acca\UIAutomationClient.ni.dll

    + 2011-10-15 21:29 . 2011-10-15 21:29 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\7590d8833992734fb56d64a7fccb9fa5\TaskScheduler.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\02178d722346e098e10f284a32a3f6b1\System.Xml.Linq.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\39d8f4d2414a86751bca30abc879dd66\System.Web.Routing.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\cff00856ad385b4932b07e5786375b2c\System.Web.Entity.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\17bb344dd484540a321577ae7cfee869\System.Web.Entity.Design.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\f476d82bdc7ad372eb5b9a8a2f28adbd\System.Web.DynamicData.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\59ef069073d0334e7b1d6e84f891d666\System.Web.Abstractions.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\fea0b554d6c5a81ec9d6a703b52f4478\System.Net.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\a0e089ab33a1b7809cf74714c12425f0\System.Management.Instrumentation.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 569344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\e6c5c0911c71862b4c7647fddb4163af\System.IO.Log.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 493056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\8795785a48b9a023d62439c9a5225c99\System.Data.Services.Design.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\585c3d491005d0895a6d0538abbb65fa\System.Data.DataSetExtensions.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\edc9db1e33a8388a45e213ad9d4ed750\System.ComponentModel.DataAnnotations.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 889344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\7a5180cbe771d22b62b9e5b5ee299077\System.AddIn.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\6fc062e0e95a4b33e8d9ce037f14d2a6\System.AddIn.Contract.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\c2271e4c5ebfda7a99d476e1b51fd6b0\sysglobl.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\9ac75ad570fcd656d319ebfb2ab8d0ce\SMSvcHost.ni.exe

    + 2011-10-15 21:25 . 2011-10-15 21:25 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\a1555b0dcb5d7743425d35f17a0b319d\napsnap.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\7c56ca946b8daeb2de7441d607761d13\napinit.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\e3e76ab6222f38de0f2c890430ef3e2a\naphlpr.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\b7049a3af8e3fdec10b531edd87ccf35\napcrypt.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\9ede59f22d31bf107a38b32dffd78290\MSBuild.ni.exe

    + 2011-10-15 21:25 . 2011-10-15 21:25 681472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\0fa58f2a93960e3e1fb6523e487873c4\Microsoft.WSMan.Management.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d958492b84e8508c0fcd51134d8061a5\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\4e9c48f3045e47c08bf50263c080a7cf\Microsoft.Transactions.Bridge.Dtc.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\dca56fa2987cce5095f43c7acbf3b4f4\Microsoft.PowerShell.GraphicalHost.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\60a57b9a21c138eb50ef6a1dd6b32bf1\Microsoft.PowerShell.Security.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\f9b42272845d5d6aa60de2fa3cfa7ecf\WsatConfig.ni.exe

    + 2011-10-15 21:39 . 2011-10-15 21:39 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a5feb05f9283b0e79e0959b5df220130\WindowsFormsIntegration.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\1248c88237a6421a3742b8a51564a35e\UIAutomationClient.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\a4b76d4dc8769a0f28eaca7066f6548b\TaskScheduler.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\6c1567259547084fc25ef4941b184be5\System.Xml.Linq.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\64d0b9cc7092285fd53572d493db5425\System.Web.Routing.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4537baa6c15adcd338ceb2cd757c89d3\System.Web.Extensions.Design.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\a6dc23c392c667aace76c9b77394a934\System.Web.Entity.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\de6c85841e1533dd83b83655880c64e3\System.Web.Entity.Design.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1dcfeb2dbf84f28c3a4fd4ce833b0c08\System.Web.DynamicData.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\744de7ff26f19b02d2f803cee5cbe984\System.Web.Abstractions.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\9d4bb6d7a9a3baa00a9f422c388f1cfb\System.Net.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\7de44dd3d325af5c49a4d552905ba2c0\System.Messaging.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 997888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\cc6713be0e405d5a89a2783103f7e771\System.Management.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\41a55356ef83329934c5c5595565d504\System.Management.Instrumentation.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\ba625e52bdd7b5d07b72e02c5c7eb5ee\System.IO.Log.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\4a8216dde412c9b0eb216238a77400cd\System.IdentityModel.Selectors.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 887808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a529db128d8aa5aa73539186d40a6826\System.DirectoryServices.AccountManagement.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 356864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3ed63b294dfc24307afc10794856d65f\System.Data.Services.Design.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2dfcf38c62fe7e94afcfdfbc43e5fc2c\System.Data.Services.Client.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 762880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\60310b0641dd38c142629ef6c8feaa3b\System.Data.Entity.Design.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\99bcc03fab1f46d8f7507d518683bb47\System.Data.DataSetExtensions.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\cf525dfab6205fc09e6cb3a69b9ad36d\System.AddIn.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\007a48adac2d981fcda78d8daec3bb2c\sysglobl.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\9edededd2bd05dcf2c882be0b386e4c1\SMSvcHost.ni.exe

    + 2011-10-15 21:37 . 2011-10-15 21:37 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9123843fd33a30164ceb951c98b7ca2a\SMDiagnostics.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\7443e6ae6ce170db4dd8b41f9de1c4dc\napsnap.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\b51ccd53178090e335f951e3744cd52a\napinit.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\d82c431d8f0463c0dd5b143ebb0b7fcc\naphlpr.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\c9501afb093f0df8bcfbf49a783899c1\MSBuild.ni.exe

    + 2011-10-15 21:37 . 2011-10-15 21:37 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\360f0b116b9597a62886b5643cb545ed\MMCFxCommon.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 531456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\2998e6e05ee52a2c187fd2ad28486bcd\Microsoft.WSMan.Management.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\3b7c9f34d866e2f6f93a67d925e83272\Microsoft.Transactions.Bridge.Dtc.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 785920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\e15f138def34d6fe7e0f51ac2a60307a\Microsoft.PowerShell.Commands.Management.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ca9348489f26386b15b5b863ee2b6a82\Microsoft.PowerShell.ConsoleHost.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\9bf1022e29d1617ad9327a7bbb9165b8\Microsoft.PowerShell.Commands.Diagnostics.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\938e9d2a1fffc6dc74e80748ecd8cede\Microsoft.PowerShell.Security.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\26fc0294fa631c5559f4ede31797fb71\Microsoft.PowerShell.GraphicalHost.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\6241f8b046758f569e488ab6161e6ccb\Microsoft.ManagementConsole.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\69bbcc81a36d4e1a386ebff653c0985d\Microsoft.Build.Utilities.v3.5.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0df3be45db18752f208fc37a7276c49d\Microsoft.Build.Utilities.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\46029c82bca5b75632b2b6a938cdd174\Microsoft.Build.Engine.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\525dfc2c4e95fb190c51ccd74113cd0d\Microsoft.Build.Conversion.v3.5.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\4b5b5a5b0dcd510d90e466d93b705649\mcstoredb.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\9371cc6e33034259e7dd8d5384e56590\EventViewer.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\4756d846df325c2f936a0b50ac6eac07\ehRecObj.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\6122ce79471b68d9cb368e11b2f53e05\ehiVidCtl.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\d7cb05bc1b3ae306de88a42c372abb60\ehiProxy.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\d0744480733b33f48db1e8b2c0a4a6a3\ehiExtens.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\347f1765b953e81adc7a8d1284d95181\ehExtHost32.ni.exe

    + 2011-10-15 21:37 . 2011-10-15 21:37 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\545f2e1ca544c2a8a39cbf8565e1c709\CustomMarshalers.ni.dll

    + 2011-10-15 21:36 . 2011-10-15 21:36 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\36b88143252e6de58b377430d7c145c1\ComSvcConfig.ni.exe

    + 2011-10-15 21:36 . 2011-10-15 21:36 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\42e98e4f3e29944621b40ba0b5f4f0a0\BDATunePIA.ni.dll

    + 2011-10-15 21:36 . 2011-10-15 21:36 1458688 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\f3efd62661bb2bc49b5649ef643d29ba\UIAutomationClientsideProviders.ni.dll

    + 2011-10-15 21:29 . 2011-10-15 21:29 1817600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\83c1e83b764014602f78d696e2b96119\System.WorkflowServices.ni.dll

    + 2011-10-15 21:28 . 2011-10-15 21:28 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\19f293b55e1937b1b06f01ec25c91112\System.Web.Mobile.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 3041792 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\f9324989c3f1200436bee4cddeebd87d\System.Web.Extensions.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\f6564cb5f9163822f3fa941ba1eebdee\System.Web.Extensions.Design.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\a3e0cf92fd8e8b56991b4b7bd99d046a\System.Speech.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\a16d95e3fbe91b458747aefb2c4743bd\System.ServiceModel.Web.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 1229824 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\d3ebb34b1aa5d942f6c03f80525dadd6\System.DirectoryServices.AccountManagement.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 1846272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\40be02b82b6532796d6abfda3f53830e\System.Data.Services.ni.dll

    + 2011-10-15 21:27 . 2011-10-15 21:27 1289728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\b73ee98e8f418502d87a5d8b2b8cc5cd\System.Data.Services.Client.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\bac6e79bd99337a7789bdab6cc4d2b3e\System.Data.Linq.ni.dll

    + 2011-10-15 21:26 . 2011-10-15 21:26 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\78fc94e1d183278d33a19c5d47f1bfaf\System.Data.Entity.Design.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 1881088 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\3ad517fa6dce6f6b3a31404cc92c49bc\PresentationBuildTasks.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\27b328c648d9b893c6e8a6bde3fc0a9c\Narrator.ni.exe

    + 2011-10-15 21:25 . 2011-10-15 21:25 2327040 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\6aff8d80fc733568f3908f2b76b8c904\MMCEx.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\0a179b5f44a496e24b89a862b986db68\Microsoft.VisualBasic.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\97699aa22704c43609955cc89418f41d\Microsoft.PowerShell.GPowerShell.ni.dll

    + 2011-10-15 21:25 . 2011-10-15 21:25 5351424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\0ebc995e367eeb8d72a3d7c96cacc338\Microsoft.PowerShell.Editor.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\44579730e067c4ce85f67b95f3699139\UIAutomationClientsideProviders.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\85c13d29137c1ec685fafbfdf46cabca\System.WorkflowServices.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\bd71068de76a8ea185ed0adcf3a99b7f\System.Web.Mobile.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 2402816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\8d33e0e622a4716c83ba06b5123b2a74\System.Web.Extensions.ni.dll

    + 2011-10-15 21:39 . 2011-10-15 21:39 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\a1667fcd757236c8f9e263722683033a\System.Speech.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\48175dbab2d21970343cacecbd9ee67f\System.ServiceModel.Web.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8dba8803fad87c39c0afbdce6c19fdd0\System.Runtime.Serialization.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 8871936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\94e2a6892a5a2fe389c80fe5fff0c3af\System.Management.Automation.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 1072128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\2fe1102950b6bb637339b982724ad63d\System.IdentityModel.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 1328640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\8da7e39f38ef11438c1a07d84e5ce380\System.Data.Services.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\2ce656ab44ac6cc82d78a16cea56b087\System.Data.Linq.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 9921024 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\ffde01cb16604e89884fa892c241607a\System.Data.Entity.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\6d859463c9e6a7423ddb335211a79dda\System.Core.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 1449984 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\60080c5a7731df4be041292f481d1e35\PresentationBuildTasks.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\80acdf938910e5af064a3c12b86cf18a\Narrator.ni.exe

    + 2011-10-15 21:38 . 2011-10-15 21:38 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\ed423e7b284140f4884bcdce78c7791e\MMCEx.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\e8bd4dcc51b16148cedbff4ced954ce7\MIGUIControls.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\168c6417c92bdddd10809791ed32be3e\Microsoft.VisualBasic.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 1092608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\0c9dfe29104180dd2bb9147bbb2fd842\Microsoft.Transactions.Bridge.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 1705472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d4ed2b49d773f8ba656db4d34bce2e77\Microsoft.PowerShell.GPowerShell.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\cf25c6ef6a15d0881e3842f0cd016dfa\Microsoft.PowerShell.Editor.ni.dll

    + 2011-10-15 21:38 . 2011-10-15 21:38 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\19e9c2ff41ec7172d9783ade51e7fb59\Microsoft.PowerShell.Commands.Utility.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\406f73b084414f11581798181932c876\Microsoft.MediaCenter.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\400bfbea4fa22402d6cfb6129caef9e0\Microsoft.MediaCenter.UI.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 2332672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b6811aa41cca1457c8f24e848c9e94e4\Microsoft.JScript.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\f7203d54b6b5487d9204682b1878b6eb\Microsoft.Ink.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\e4920c53b4141ca178c02e8de4e69f2c\Microsoft.Build.Tasks.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\591b4b5731b6d64b7b36a1428627058e\Microsoft.Build.Tasks.v3.5.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\fce6605af686e9bcd7776964dde7b706\Microsoft.Build.Engine.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 2031104 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\58ab228f6280560cec5c825333479169\mcstore.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 3014656 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\d2f664756d1d08dcf0e1c0db14adcbd2\mcepg.ni.dll

    + 2009-07-14 02:34 . 2011-10-16 11:07 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat

    - 2009-07-14 02:34 . 2011-10-15 18:36 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat

    + 2011-04-13 07:51 . 2011-10-16 12:53 22164236 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1461214366-2769493618-3975586674-1000-8192.dat

    + 2011-10-15 21:26 . 2011-10-15 21:26 13757952 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\d057c43ab3a184ed0f7e9879c9c8f959\System.Data.Entity.ni.dll

    + 2011-10-15 21:37 . 2011-10-15 21:37 17400320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\cc3d9cb5c17d1863e3146c2a0d5c9e86\System.ServiceModel.ni.dll

    .

    -- Snapshot teruggezet naar huidige datum --

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

    "NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]

    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-09-09 98304]

    "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]

    "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]

    "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]

    "Freecorder FLV Service"="c:\program files (x86)\Freecorder\FLVSrvc.exe" [2011-03-24 167936]

    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]

    .

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

    Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-12-29 1082656]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"

    "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

    .

    R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]

    R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2011-07-08 2428968]

    R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-04-11 1436424]

    R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys [x]

    R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [x]

    R3 RTCore64;RTCore64;c:\users\Jawbone\Desktop\Nieuwe map\RTCore64.sys [x]

    R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [x]

    R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

    R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [x]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

    S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]

    S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]

    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

    S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

    S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x]

    S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]

    S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]

    S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]

    S2 mi-raysat_3dsmax2011_64;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit;c:\program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [2010-03-09 86016]

    S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]

    S2 RadeonPro Support Service;RadeonPro Support Service;c:\program files (x86)\RadeonPro\RadeonProSupport.exe [2011-02-09 12800]

    S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe [2010-10-21 5790064]

    S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe [2010-10-21 487280]

    S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-03-30 2026304]

    S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-04-15 2533400]

    S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe [2010-01-07 1926448]

    S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]

    S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]

    S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]

    S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]

    S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]

    S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x]

    S3 RTL8167;Realtek 8167 NT-stuurprogramma;c:\windows\system32\DRIVERS\Rt64win7.sys [x]

    S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2010-11-29 11856]

    .

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

    Akamai REG_MULTI_SZ Akamai

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

    2009-06-17 10:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2011-10-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1461214366-2769493618-3975586674-1000Core.job

    - c:\users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-09 18:22]

    .

    2011-10-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1461214366-2769493618-3975586674-1000UA.job

    - c:\users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-09 18:22]

    .

    .

    --------- x86-64 -----------

    .

    .

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]

    c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll [bU]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

    @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU]

    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-27 161304]

    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-27 386584]

    "Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-27 415256]

    "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]

    "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656]

    "combofix"="c:\combofix\CF10148.3XE" [2009-07-14 344576]

    .

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

    UxTuneUp

    .

    ------- Bijkomende Scan -------

    .

    uLocal Page = c:\windows\system32\blank.htm

    uStart Page = hxxp://www.google.nl/

    mLocal Page = c:\windows\SysWOW64\blank.htm

    IE: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    IE: Free YouTube Download - c:\users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm

    IE: Free YouTube to MP3 Converter - c:\users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

    IE: Pagina verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    IE: Sothink SWF Catcher - c:\program files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

    TCP: DhcpNameServer = 192.168.1.1

    FF - ProfilePath - c:\users\Jawbone\AppData\Roaming\Mozilla\Firefox\Profiles\4dlswvrc.default\

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

    WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)

    .

    .

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Shockwave Flash Object"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

    @="0"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

    @="ShockwaveFlash.ShockwaveFlash.10"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="ShockwaveFlash.ShockwaveFlash"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Macromedia Flash Factory Object"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

    @="FlashFactory.FlashFactory.1"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="FlashFactory.FlashFactory"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker4"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info]

    @Denied: (2) (LocalSystem)

    "AppDataDir"="c:\\ProgramData\\ESET\\ESET NOD32 Antivirus\\"

    "DataDir"="ESET\\ESET NOD32 Antivirus\\"

    "EditionName"=" "

    "InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\"

    "LanguageId"=dword:00000413

    "PackageTag"=dword:6090e758

    "ProductBase"=dword:00000000

    "ProductCode"="{9C197982-CE27-448E-8993-97F6E7735306}"

    "ProductName"="ESET NOD32 Antivirus"

    "ProductType"="eav"

    "ProductVersion"="4.2.71.2"

    "UniqueId"="374600504E552910"

    "ScannerBuild"=dword:0000215d

    "ScannerVersionId"=dword:00001695

    "ScannerVersion"="Open window for status."

    "ei2"=hex(B):c6,82,9f,a0,2e,1e,5b,e6

    "ei1"=hex(B):c8,0a,a9,d9,8d,0c,00,00

    "ei3"=hex(B):cc,2a,55,4e,00,00,00,00

    "ei4"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe

    c:\windows\SysWOW64\IoctlSvc.exe

    c:\windows\SysWOW64\PnkBstrA.exe

    c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

    c:\program files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe

    c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe

    c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2011-10-16 15:03:07 - machine werd herstart

    ComboFix-quarantined-files.txt 2011-10-16 13:03

    ComboFix2.txt 2011-10-15 21:29

    .

    Pre-Run: 422.111.019.008 bytes beschikbaar

    Post-Run: 421.796.257.792 bytes beschikbaar

    .

    - - End Of File - - B0B7CFEF6B9A2642FB2847133DA176F8

  2. Hier het logbestand voor Combofix

    ComboFix 11-10-15.04 - Jawbone 15-10-2011 23:14:23.1.4 - x64

    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.3894.1484 [GMT 2:00]

    Gestart vanuit: c:\users\Jawbone\Desktop\ComboFix.exe

    AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}

    SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2011-09-15 to 2011-10-15 ))))))))))))))))))))))))))))))

    .

    .

    2011-10-15 21:24 . 2011-10-15 21:24 -------- d-----w- c:\users\Default\AppData\Local\temp

    2011-10-15 19:22 . 2011-10-15 19:22 -------- d-----w- c:\program files (x86)\Xilisoft

    2011-10-15 17:49 . 2011-10-15 17:49 -------- d-----w- c:\users\Jawbone\AppData\Roaming\Malwarebytes

    2011-10-15 17:48 . 2011-10-15 17:48 -------- d-----w- c:\programdata\Malwarebytes

    2011-10-15 17:48 . 2011-10-15 17:49 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

    2011-10-15 17:48 . 2011-08-31 15:00 25416 ----a-w- c:\windows\system32\drivers\mbam.sys

    2011-10-15 16:31 . 2011-10-15 16:31 388096 ----a-r- c:\users\Jawbone\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2011-10-15 16:31 . 2011-10-15 16:31 -------- d-----w- c:\program files (x86)\Trend Micro

    2011-10-14 14:49 . 2011-10-15 18:16 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2AA9ED11-E43B-432D-8AF3-D0B2EE250C65}\offreg.dll

    2011-10-14 14:49 . 2011-09-13 00:26 9049936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2AA9ED11-E43B-432D-8AF3-D0B2EE250C65}\mpengine.dll

    2011-10-12 19:35 . 2011-08-17 05:32 613888 ----a-w- c:\windows\system32\psisdecd.dll

    2011-10-07 17:51 . 2011-10-07 17:51 27912704 ----a-w- c:\windows\system32\imageres.dll

    2011-10-07 17:26 . 2011-10-07 17:26 -------- d-----w- c:\programdata\Stardock

    2011-10-07 17:26 . 2007-06-05 09:26 56496 ----a-w- c:\windows\SysWow64\wbhelp2.dll

    2011-10-07 17:26 . 2007-06-05 09:26 567040 ----a-w- c:\windows\SysWow64\wbocx.ocx

    2011-10-07 17:26 . 2011-10-07 17:26 -------- d-----w- c:\program files (x86)\Stardock

    2011-10-06 12:07 . 2011-10-06 12:07 -------- d-----w- c:\program files (x86)\SystemRequirementsLab

    2011-10-06 12:07 . 2011-10-06 12:07 -------- d-----w- c:\users\Jawbone\AppData\Roaming\SystemRequirementsLab

    2011-10-05 19:30 . 2010-06-02 02:55 239960 ----a-w- c:\windows\SysWow64\xactengine3_7.dll

    2011-10-05 19:30 . 2010-06-02 02:55 176984 ----a-w- c:\windows\system32\xactengine3_7.dll

    2011-10-05 19:30 . 2010-05-26 09:41 1907552 ----a-w- c:\windows\system32\d3dcsx_43.dll

    2011-10-05 19:30 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll

    2011-10-05 19:30 . 2010-05-26 09:41 511328 ----a-w- c:\windows\system32\d3dx10_43.dll

    2011-10-05 19:30 . 2010-05-26 09:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll

    2011-10-05 18:36 . 2011-10-05 18:36 -------- d-----w- c:\users\Jawbone\AppData\Local\SKIDROW

    2011-10-05 18:34 . 2011-10-05 18:34 -------- d-----w- c:\program files (x86)\Wizards of the Coast LLC

    2011-10-05 14:39 . 2011-10-05 14:39 -------- d-----w- c:\program files (x86)\uTorrent

    2011-10-05 14:38 . 2011-10-05 18:46 -------- d-----w- c:\users\Jawbone\AppData\Roaming\uTorrent

    2011-10-05 14:38 . 2011-10-05 14:38 -------- d-----w- c:\users\Jawbone\AppData\Local\uTorrent

    2011-10-02 15:01 . 2011-10-02 15:01 -------- d-----w- c:\programdata\LightScribe

    2011-10-02 15:01 . 2011-10-15 17:38 -------- d-----w- c:\users\Jawbone\AppData\Roaming\Nero

    2011-10-02 14:57 . 2011-10-02 14:58 -------- d-----w- c:\program files (x86)\Common Files\Nero

    2011-10-02 14:44 . 2011-10-02 14:44 -------- d-----w- c:\program files (x86)\Common Files\LightScribe

    2011-10-02 14:11 . 2011-10-02 14:11 -------- d-----w- c:\users\Jawbone\AppData\Roaming\dvdcss

    2011-10-02 12:36 . 2011-10-02 12:36 -------- d-----w- c:\program files (x86)\Conduit

    2011-10-02 12:35 . 2011-10-02 12:35 -------- d-----w- c:\users\Jawbone\AppData\Local\Conduit

    2011-10-02 12:35 . 2011-10-15 21:13 -------- d-----w- c:\users\Jawbone\AppData\Local\FLVService

    2011-10-02 12:35 . 2011-10-15 17:47 -------- d-----w- c:\program files (x86)\Freecorder

    2011-10-02 12:27 . 2011-10-02 12:27 -------- d-----w- C:\ConverterOutput

    2011-10-02 12:26 . 2008-08-31 09:59 92102 ----a-w- c:\windows\SysWow64\HKCU_GNU.reg

    2011-10-02 12:26 . 2008-06-17 08:57 6700 ----a-w- c:\windows\SysWow64\HKLM_GNU.reg

    2011-10-02 12:26 . 2008-06-15 08:01 258352 ----a-w- c:\windows\SysWow64\unicows.dll

    2011-10-02 12:26 . 2008-06-15 19:13 6144 ----a-w- c:\windows\SysWow64\ff_acm.acm

    2011-10-02 12:26 . 2008-06-15 19:13 7680 ----a-w- c:\windows\SysWow64\ff_vfw.dll

    2011-10-02 12:26 . 2008-06-15 08:01 60273 ----a-w- c:\windows\SysWow64\pthreadGC2.dll

    2011-10-02 12:26 . 2006-07-17 19:42 14909 ----a-w- c:\windows\SysWow64\A_reg.reg

    2011-10-02 12:26 . 2003-03-25 04:49 98304 ----a-w- c:\windows\SysWow64\L3CODECX.AX

    2011-10-02 12:26 . 2003-03-18 20:20 1060864 ----a-w- c:\windows\SysWow64\MFC71.DLL

    2011-10-02 12:26 . 2006-07-08 02:07 114688 ----a-w- c:\windows\SysWow64\PropListCtrl.ocx

    2011-10-02 12:26 . 2011-10-02 12:26 -------- d-----w- c:\program files (x86)\Cucusoft

    2011-09-23 19:15 . 2011-09-23 19:15 -------- d-----w- c:\users\Jawbone\AppData\Local\Nokia

    2011-09-23 19:14 . 2011-09-23 19:14 -------- d-----w- c:\programdata\PC Suite

    2011-09-23 19:14 . 2011-09-23 19:20 -------- d-----w- c:\users\Jawbone\AppData\Roaming\PC Suite

    2011-09-23 19:13 . 2011-09-23 19:13 -------- d-----w- c:\program files (x86)\Common Files\Nokia

    2011-09-23 19:12 . 2008-08-28 10:44 25600 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys

    2011-09-23 19:12 . 2011-09-23 19:12 -------- dc----w- c:\windows\system32\DRVSTORE

    2011-09-23 19:12 . 2011-09-23 19:12 -------- d-----w- c:\program files (x86)\PC Connectivity Solution

    2011-09-23 19:11 . 2011-09-23 19:13 -------- d-----w- c:\program files (x86)\Nokia

    2011-09-23 19:11 . 2011-09-23 19:11 -------- d-----w- c:\programdata\NokiaInstallerCache

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2011-10-08 14:41 . 2011-06-10 20:36 281656 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr

    2011-10-08 14:41 . 2011-06-10 20:25 281656 ----a-w- c:\windows\SysWow64\PnkBstrB.exe

    2011-10-08 14:38 . 2011-06-10 20:25 281200 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0

    2011-10-02 14:51 . 2011-05-16 14:43 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2011-07-31 17:51 . 2011-06-05 15:38 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll

    2011-07-30 12:36 . 2011-06-14 08:57 882496 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll

    2011-07-25 13:25 . 2011-07-25 13:25 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys

    2011-07-25 13:18 . 2011-07-25 12:58 867064 ----a-w- c:\windows\system32\drivers\sptd.sys

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 94208 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

    "NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]

    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-09-09 98304]

    "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]

    "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]

    "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]

    "Freecorder FLV Service"="c:\program files (x86)\Freecorder\FLVSrvc.exe" [2011-03-24 167936]

    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]

    .

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

    Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-12-29 1082656]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"

    "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

    .

    R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]

    R2 mi-raysat_3dsmax2011_64;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit;c:\program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [2010-03-09 86016]

    R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2011-07-08 2428968]

    R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-04-11 1436424]

    R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys [x]

    R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys [x]

    R3 RTCore64;RTCore64;c:\users\Jawbone\Desktop\Nieuwe map\RTCore64.sys [x]

    R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [x]

    R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

    R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [x]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

    R3 X6va005;X6va005;c:\users\Jawbone\AppData\Local\Temp\0059359.tmp [x]

    S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]

    S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]

    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

    S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

    S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x]

    S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]

    S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]

    S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]

    S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]

    S2 RadeonPro Support Service;RadeonPro Support Service;c:\program files (x86)\RadeonPro\RadeonProSupport.exe [2011-02-09 12800]

    S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe [2010-10-21 5790064]

    S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe [2010-10-21 487280]

    S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-03-30 2026304]

    S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-04-15 2533400]

    S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe [2010-01-07 1926448]

    S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]

    S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]

    S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]

    S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]

    S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]

    S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x]

    S3 RTL8167;Realtek 8167 NT-stuurprogramma;c:\windows\system32\DRIVERS\Rt64win7.sys [x]

    S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2010-11-29 11856]

    .

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

    Akamai REG_MULTI_SZ Akamai

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

    2009-06-17 10:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2011-10-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1461214366-2769493618-3975586674-1000Core.job

    - c:\users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-09 18:22]

    .

    2011-10-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1461214366-2769493618-3975586674-1000UA.job

    - c:\users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-09 18:22]

    .

    .

    --------- x86-64 -----------

    .

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

    @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

    [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

    2011-02-18 05:12 97792 ----a-w- c:\users\Jawbone\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-27 161304]

    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-27 386584]

    "Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-27 415256]

    "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]

    "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

    "LoadAppInit_DLLs"=0x0

    .

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

    UxTuneUp

    .

    ------- Bijkomende Scan -------

    .

    uLocal Page = c:\windows\system32\blank.htm

    uStart Page = hxxp://www.google.nl/

    mLocal Page = c:\windows\SysWOW64\blank.htm

    IE: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    IE: Free YouTube Download - c:\users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm

    IE: Free YouTube to MP3 Converter - c:\users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

    IE: Pagina verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    IE: Sothink SWF Catcher - c:\program files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

    TCP: DhcpNameServer = 192.168.1.1

    FF - ProfilePath - c:\users\Jawbone\AppData\Roaming\Mozilla\Firefox\Profiles\4dlswvrc.default\

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll

    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

    WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)

    HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

    AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe

    AddRemove-Emoticon Packs for Messenger - c:\users\Jawbone\Desktop\Emoticon Packs for Messenger\uninstall.exe

    AddRemove-sunpoker - c:\poker\SunPoker\_SetupPoker_927e8b.exe

    .

    .

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va005]

    "ImagePath"="\??\c:\users\Jawbone\AppData\Local\Temp\0059359.tmp"

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Shockwave Flash Object"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

    @="0"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

    @="ShockwaveFlash.ShockwaveFlash.10"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="ShockwaveFlash.ShockwaveFlash"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Macromedia Flash Factory Object"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

    @="FlashFactory.FlashFactory.1"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="FlashFactory.FlashFactory"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker4"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info]

    @Denied: (2) (LocalSystem)

    "AppDataDir"="c:\\ProgramData\\ESET\\ESET NOD32 Antivirus\\"

    "DataDir"="ESET\\ESET NOD32 Antivirus\\"

    "EditionName"=" "

    "InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\"

    "LanguageId"=dword:00000413

    "PackageTag"=dword:6090e758

    "ProductBase"=dword:00000000

    "ProductCode"="{9C197982-CE27-448E-8993-97F6E7735306}"

    "ProductName"="ESET NOD32 Antivirus"

    "ProductType"="eav"

    "ProductVersion"="4.2.71.2"

    "UniqueId"="374600504E552910"

    "ScannerBuild"=dword:0000215d

    "ScannerVersionId"=dword:00001695

    "ScannerVersion"="Open window for status."

    "ei2"=hex(B):c6,82,9f,a0,2e,1e,5b,e6

    "ei1"=hex(B):c8,0a,a9,d9,8d,0c,00,00

    "ei3"=hex(B):cc,2a,55,4e,00,00,00,00

    "ei4"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    Voltooingstijd: 2011-10-15 23:29:05

    ComboFix-quarantined-files.txt 2011-10-15 21:29

    .

    Pre-Run: 398.340.780.032 bytes beschikbaar

    Post-Run: 419.838.480.384 bytes beschikbaar

    .

    - - End Of File - - C87CB9CD47A624DF47F2FCC105F69369

  3. Hier het logje van MBAM

    Malwarebytes' Anti-Malware 1.51.2.1300

    Malwarebytes : Free anti-malware, anti-virus and spyware removal download

    Databaseversie: 7954

    Windows 6.1.7600

    Internet Explorer 8.0.7600.16385

    15-10-2011 20:01:32

    mbam-log-2011-10-15 (20-01-32).txt

    Scantype: Snelle scan

    Objecten gescand: 187057

    Verstreken tijd: 11 minuut/minuten, 12 seconde(n)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 15

    Registerwaarden geïnfecteerd: 4

    Registerdata geïnfecteerd: 1

    Mappen geïnfecteerd: 0

    Bestanden geïnfecteerd: 7

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels geïnfecteerd:

    HKEY_CLASSES_ROOT\Typelib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\Typelib\{D44FD6F0-9746-484E-B5C4-C66688393872} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.HbAx (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.HbAx.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.IEButton (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.IEButton.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.

    HKEY_LOCAL_MACHINE\SOFTWARE\ScanQuery (Adware.ScanQuery) -> Quarantined and deleted successfully.

    Registerwaarden geïnfecteerd:

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.

    Registerdata geïnfecteerd:

    HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

    Mappen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden geïnfecteerd:

    c:\Users\Jawbone\documents\downloads\flvblaster (1).exe (Adware.Hotbar) -> Quarantined and deleted successfully.

    c:\Users\Jawbone\documents\downloads\flvblaster (2).exe (Adware.Hotbar) -> Quarantined and deleted successfully.

    c:\Users\Jawbone\documents\downloads\flvblaster.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

    c:\Users\Jawbone\documents\downloads\videoconvertersetup.exe (Adware.Agent) -> Quarantined and deleted successfully.

    c:\Users\Jawbone\documents\downloads\xvidsetup (1).exe (Adware.Hotbar) -> Quarantined and deleted successfully.

    c:\Users\Jawbone\documents\downloads\xvidsetup.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

    c:\Users\Jawbone\AppData\Local\Temp\icreinstall\videoconvertersetup.exe (Adware.Agent) -> Quarantined and deleted successfully.

    Hier het nieuwe HijackThis logje

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 20:31:42, on 15-10-2011

    Platform: Windows 7 (WinNT 6.00.3504)

    MSIE: Internet Explorer v8.00 (8.00.7600.16869)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

    C:\Users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe

    C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe

    C:\Program Files (x86)\Freecorder\FLVSrvc.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe

    C:\Program Files (x86)\Opera\opera.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

    C:\Windows\SysWOW64\NOTEPAD.EXE

    C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    F2 - REG:system.ini: UserInit=userinit.exe,

    O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

    O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    O4 - HKLM\..\Run: [startCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

    O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

    O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"

    O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup

    O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [Google Update] "C:\Users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O4 - Global Startup: Bluetooth.lnk = ?

    O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    O8 - Extra context menu item: Free YouTube Download - C:\Users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm

    O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

    O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

    O9 - Extra button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra 'Tools' menuitem: Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

    O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

    O23 - Service: CyberGhost VPN Client (CGVPNCliSrvc) - mobile concepts GmbH - C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

    O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

    O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit (mi-raysat_3dsmax2011_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

    O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe

    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: RadeonPro Support Service - Mr. John aka japamd - C:\Program Files (x86)\RadeonPro\RadeonProSupport.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

    O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

    O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe

    O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe

    O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --

    End of file - 11432 bytes

  4. Wanneer ik het logje wil openen in kladblok geeft hij de melding dat het bestand niet kan worden gevonden, ook als ik naar de map ga waar het logje in hoort te staan, staat er niks.

    als ik scan only kies en daarna klik op save log, dan zie ik in het schermpje waar ik kan opslaan wel de oude log staan, alleen er staat een slotje bij,

    het lijkt net alsof mijn pc mijn account niet als admin ziet.

    ---------- Post toegevoegd om 17:45 ---------- Vorige post was om 17:38 ----------

    Ik moest hem gewoon als administrator openen.

    hier is de log:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 18:43:59, on 15-10-2011

    Platform: Windows 7 (WinNT 6.00.3504)

    MSIE: Internet Explorer v8.00 (8.00.7600.16839)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

    C:\Users\Jawbone\AppData\Local\Temp\Rar$EX89.760\Desktops.exe

    C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe

    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

    C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

    C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe

    C:\Program Files (x86)\Freecorder\FLVSrvc.exe

    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

    c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe

    C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

    C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

    C:\Program Files (x86)\BitTorrent\BitTorrent.exe

    C:\Program Files (x86)\Opera\opera.exe

    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Windows\SysWOW64\rundll32.exe

    C:\Users\Jawbone\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe

    C:\Program Files (x86)\Windows Media Player\wmplayer.exe

    C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Your Home Page Has Been Changed

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll

    F2 - REG:system.ini: UserInit=userinit.exe

    O2 - BHO: Freecorder - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll

    O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll

    O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

    O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    O3 - Toolbar: Foxit PDF Creator Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll

    O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll

    O4 - HKLM\..\Run: [startCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

    O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

    O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"

    O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup

    O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [Google Update] "C:\Users\Jawbone\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    O4 - HKCU\..\Run: [sysinternals Desktops] C:\Users\Jawbone\AppData\Local\Temp\Rar$EX89.760\Desktops.exe

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O4 - Global Startup: Bluetooth.lnk = ?

    O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    O8 - Extra context menu item: Free YouTube Download - C:\Users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm

    O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Jawbone\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

    O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

    O9 - Extra button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra 'Tools' menuitem: Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

    O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files (x86)\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

    O23 - Service: CyberGhost VPN Client (CGVPNCliSrvc) - mobile concepts GmbH - C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

    O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

    O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit (mi-raysat_3dsmax2011_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

    O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe

    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: RadeonPro Support Service - Mr. John aka japamd - C:\Program Files (x86)\RadeonPro\RadeonProSupport.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

    O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

    O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe

    O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe

    O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --

    End of file - 13629 bytes

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.