Robertt

Een foto van de LP map en de inhoud, slechts 1 van die mappen heeft inhoud, zie foto rechts. Heb PC heropgestart, Internet werkt nog niet en Norton 2006 staat in het startprogramma en maakt van z'n neus dat er een risico is. Nu, die ganse Norton Beveiligingscentrum mag eigenlijk weg als dat kan. Hier een HJack: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:54:32, on 4/01/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe C:\WINDOWS\system32\ANIWConnService.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe C:\WINDOWS\system32\imapi.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\CyberLink\PowerCinema\PCMService.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\HP\HP Software Update\HPwuSchd2.exe C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\ctfmon.exe C:\HP\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = HP | MSN R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe" O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user') O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ? O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 12825 bytes

ComboFix 09-11-07.02 - HP_Eigenaar 04/01/2012 18:01.8.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1023.507 [GMT 1:00] Gestart vanuit: c:\documents and settings\HP_Eigenaar\Bureaublad\BUREAUBLAD\ComboFix.exe gebruikte Opdracht switches :: c:\documents and settings\HP_Eigenaar\Bureaublad\CFScript.txt AV: Norton Internet Security 2006 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton Internet Security 2006 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E} . - VERMINDERDE FUNCTIONALITEIT MODUS - FILE :: "c:\documents and settings\All Users\27l4ozqjbh.exe" "c:\documents and settings\HP_Eigenaar\27l4ozqjbh.exe" "c:\documents and settings\HP_Eigenaar\Application Data\0F153\E9BC6.exe" . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\HP_Eigenaar\Application Data\0F153 c:\documents and settings\HP_Eigenaar\Application Data\0F153\3D4F.F15 c:\documents and settings\HP_Eigenaar\Application Data\0F153\E9BC6.exe c:\windows\system32\sdtmp . (((((((((((((((((((( Bestanden Gemaakt van 2011-12-04 to 2012-01-04 )))))))))))))))))))))))))))))) . 2012-01-04 05:04 . 2012-01-04 05:04 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\PCHealth 2012-01-03 23:44 . 2011-11-15 13:29 222080 ------w- c:\windows\system32\MpSigStub.exe 2012-01-03 19:24 . 2012-01-03 19:25 73191824 ----a-w- c:\documents and settings\All Users\Application Data\PC Tools\DownloadManager\Spyware Doctor8.0\sdsetup_revwire207_aff_dl.exe 2012-01-03 17:48 . 2012-01-03 19:24 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools 2012-01-03 13:57 . 2012-01-04 00:10 -------- d-----w- c:\program files\53D4F 2012-01-03 13:56 . 2012-01-03 20:29 -------- d-----w- c:\program files\LP 2011-12-28 10:45 . 2011-12-28 10:45 5575392 ----a-w- c:\documents and settings\All Users\Application Data\YouTube Downloader\ytd_installer.exe 2011-12-14 01:32 . 2011-12-09 09:45 65536 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\cs3i32f2.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components\XPATLCOM.dll . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-01-04 13:52 . 2009-11-04 20:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP 2012-01-04 01:54 . 2009-07-08 23:21 -------- d-----w- c:\program files\Common Files\Nokia 2012-01-04 01:52 . 2008-12-19 03:34 -------- d-----w- c:\program files\Nokia 2012-01-04 01:49 . 2010-06-28 17:21 -------- d-----w- c:\program files\Google 2012-01-03 23:38 . 2012-01-03 17:45 740156 ----a-w- c:\windows\system32\drivers\Cat.DB 2012-01-03 23:35 . 2006-06-15 11:00 -------- d--h--w- c:\program files\InstallShield Installation Information 2012-01-03 23:31 . 2010-03-25 23:11 -------- d-----w- c:\program files\Maxis 2012-01-02 01:49 . 2006-10-07 22:55 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\CoreFTP 2011-12-30 21:27 . 2006-10-09 13:37 -------- d-----w- c:\program files\Steam 2011-12-28 10:46 . 2011-08-08 17:50 -------- d-----w- c:\documents and settings\All Users\Application Data\YouTube Downloader 2011-12-11 00:15 . 2006-10-08 14:14 -------- d-----w- c:\program files\Sound Forge 2011-12-07 00:36 . 2009-11-05 23:10 -------- d-----w- c:\program files\SeaMonkey 2011-11-17 10:20 . 2004-12-03 03:15 569938 ----a-w- c:\windows\system32\perfh013.dat 2011-11-17 10:20 . 2004-12-03 03:15 118342 ----a-w- c:\windows\system32\perfc013.dat 2011-11-09 23:12 . 2011-11-09 23:12 -------- d-----w- c:\program files\QuickTime 2011-11-09 23:09 . 2011-11-09 23:07 -------- d-----w- c:\program files\iTunes 2011-11-09 23:07 . 2011-11-09 23:07 -------- d-----w- c:\program files\iPod 2011-11-09 23:07 . 2008-04-17 10:01 -------- d-----w- c:\program files\Common Files\Apple 2011-11-09 23:02 . 2011-11-09 23:02 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer 2011-11-09 23:00 . 2011-11-09 23:00 -------- d-----w- c:\program files\Bonjour 2011-11-09 22:59 . 2011-11-09 22:59 73584 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.5.0.142\SetupAdmin.exe 2011-11-09 22:51 . 2011-11-09 22:51 -------- d-----w- c:\program files\Apple Software Update 2011-11-12 18:52 . 2011-05-06 12:39 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Google Update"="c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-09-12 133104] "Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-02-13 7557120] "HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-01 49152] "PCMService"="c:\program files\CyberLink\PowerCinema\PCMService.exe" [2006-02-24 147456] "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568] "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856] "Reminder"="c:\windows\Creator\Remind_XP.exe" [2004-12-13 663552] "HP Software Update"="c:\program files\HP\HP Software Update\HPwuSchd2.exe" [2005-12-15 49152] "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [bU] "MemoryCardManager"="c:\program files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe" [bU] "USB2Check"="c:\windows\system32\PCLECoInst.dll" [2004-09-21 73728] "USBToolTip"="c:\program files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" [2005-06-13 192512] "PinnacleDriverCheck"="c:\windows\system32\\PSDrvCheck.exe" [2004-03-11 406016] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184] "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424] "YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2011-05-23 2068480] "ANIWZCS2Service"="c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2007-01-19 49152] "D-Link D-Link Wireless 150 USB Adapter DWA-125"="c:\program files\D-Link\DWA-125 revA\AirGCFG.exe" [2009-05-04 1683456] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736] "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-03-08 16010240] "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-02-13 1519616] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160] c:\documents and settings\Default User\Menu Start\Programma's\Opstarten\ Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-6-15 27136] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-10-8 113664] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-12-15 282624] Philips GoGear VIBE Device Manager.lnk - c:\program files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe [2010-1-16 1611152] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 "FirewallOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) "DisableNotifications"= 1 (0x1) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= "c:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe"= "c:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe"= "c:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"= "c:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"= "c:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"= "c:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"= "c:\\Program Files\\Quake III Arena\\quake3.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "c:\\Program Files\\Steam\\Steam.exe"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\VoipCheapCom.com\\VoipCheapCom\\VoipCheapCom.exe"= "c:\\Program Files\\GameShadow\\GameShadow.exe"= "c:\\Program Files\\GameShadow\\GSDownload.exe"= "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"= "c:\\Program Files\\Shareaza\\Shareaza.exe"= "c:\\Documents and Settings\\HP_Eigenaar\\Application Data\\Dropbox\\bin\\Dropbox.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\Steam\\steamapps\\oudmetje\\counter-strike\\hl.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "6346:TCP"= 6346:TCP:s R2 ANIWConnService;ANIWConn Service;c:\windows\system32\ANIWConnService.exe [24/07/2011 17:35 147456] R2 sensorsview32;sensorsview32;c:\windows\system32\drivers\sensorsview32.sys [10/01/2010 2:57 14416] R3 rt2870;D-Link 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [24/07/2011 17:33 715520] R3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [15/06/2006 11:40 468768] S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2010 18:21 136176] S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usbxp.sys [30/04/2004 13:35 24832] S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\Aspi32.sys [11/02/2007 17:53 16512] S3 cpuz134;cpuz134;c:\documents and settings\HP_Eigenaar\Mijn documenten\Downloads\pc-wizard_2010.1.961\pcwiz_x32.sys [9/07/2010 12:18 20328] S3 getPlusHelper;getPlus® Helper;c:\windows\System32\svchost.exe -k getPlusHelper [3/08/2004 22:00 14336] S3 GNDHV71;Genius VideoCAM Live V2;c:\windows\system32\DRIVERS\gndhv71.sys --> c:\windows\system32\DRIVERS\gndhv71.sys [?] S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2010 18:21 136176] S3 nosGetPlusHelper;getPlus® Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [3/08/2004 22:00 14336] S3 PLUsbbc2;Hi-Speed USB Bridge Cable Driver;c:\windows\system32\drivers\usbbc2.sys [6/10/2006 22:34 7936] S3 Usblink;Usblink Driver;c:\windows\system32\drivers\ulink.sys [6/10/2006 22:35 40060] --- Andere Services/Drivers In Geheugen --- *Deregistered* - mbr *Deregistered* - PROCEXP113 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] getPlusHelper REG_MULTI_SZ getPlusHelper nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b6bd9efb-3fe6-11df-8202-0016ecbd8ef7}] \Shell\AutoRun\command - L:\APPInst.exe . Inhoud van de 'Gedeelde Taken' map 2011-11-09 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57] 2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-06-28 17:21] 2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-06-28 17:21] 2011-12-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-27657144-3854435335-3181869771-1008Core.job - c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-12 17:35] 2012-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-27657144-3854435335-3181869771-1008UA.job - c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-12 17:35] 2012-01-03 c:\windows\Tasks\OGADaily.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] 2012-01-04 c:\windows\Tasks\OGALogon.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ mStart Page = hxxp://uk.yahoo.com uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=63&bd=PAVILION&pf=desktop uInternet Settings,ProxyOverride = *.local LSP: mswsock.dll FF - ProfilePath - c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\cs3i32f2.default\ FF - prefs.js: browser.search.defaulturl - hxxp://uk.search.yahoo.com/search?fr=ffsp1&p= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.youtube.com/ FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=ffds1&p= FF - prefs.js: network.proxy.http - 127.0.0.1 FF - prefs.js: network.proxy.http_port - 52727 FF - prefs.js: network.proxy.type - 0 FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- FF - user.js: yahoo.ytff.general.dontshowhpoffer - true. ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2012-01-04 18:03 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... c:\windows\$NtUninstallKB62280$:SummaryInformation 0 bytes hidden from API Scan succesvol afgerond verborgen bestanden: 1 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{726245DE-A648-00D6-C30E-E5F5A256B0C5}\InProcServer32*] "jakghnogdkpjbkamdede"=hex:6a,61,6e,66,68,64,6b,65,6f,67,64,64,6a,6c,6d,70,68, 64,6c,6e,00,00 "iakgnmmjmoalapaokn"=hex:6a,61,6e,66,68,64,6b,65,6f,67,64,64,6a,6c,6d,70,68,64, 6c,6e,00,00 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ÿïÄ|ˇˇˇˇïÄ|˘ï9~*] "3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . Voltooingstijd: 2012-01-04 18:07 ComboFix-quarantined-files.txt 2012-01-04 17:07 ComboFix2.txt 2012-01-04 15:30 ComboFix3.txt 2010-05-21 19:45 ComboFix4.txt 2010-05-16 19:12 ComboFix5.txt 2012-01-04 17:00 Pre-Run: 152.292.302.848 bytes beschikbaar Post-Run: 152.269.332.480 bytes beschikbaar - - End Of File - - A6F40F360B06ADFA4C4899233D43CCEB Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:12:34, on 4/01/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe C:\WINDOWS\system32\ANIWConnService.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe C:\WINDOWS\system32\imapi.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\CyberLink\PowerCinema\PCMService.exe C:\Program Files\HP\HP Software Update\HPwuSchd2.exe C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\iPod\bin\iPodService.exe C:\HP\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\WINDOWS\explorer.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = HP | MSN R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe" O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user') O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ? O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 12645 bytes

ComboFix 09-11-07.02 - HP_Eigenaar 04/01/2012 16:21.7.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1023.581 [GMT 1:00] Gestart vanuit: c:\documents and settings\HP_Eigenaar\Bureaublad\BUREAUBLAD\ComboFix.exe AV: Norton Internet Security 2006 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton Internet Security 2006 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E} . - VERMINDERDE FUNCTIONALITEIT MODUS - . (((((((((((((((((((( Bestanden Gemaakt van 2011-12-04 to 2012-01-04 )))))))))))))))))))))))))))))) . 2012-01-04 05:04 . 2012-01-04 05:04 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\PCHealth 2012-01-03 23:44 . 2011-11-15 13:29 222080 ------w- c:\windows\system32\MpSigStub.exe 2012-01-03 19:56 . 2012-01-03 19:56 169984 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\0F153\E9BC6.exe 2012-01-03 19:24 . 2012-01-03 19:25 73191824 ----a-w- c:\documents and settings\All Users\Application Data\PC Tools\DownloadManager\Spyware Doctor8.0\sdsetup_revwire207_aff_dl.exe 2012-01-03 17:48 . 2012-01-03 19:24 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools 2012-01-03 17:42 . 2012-01-03 17:48 -------- d-----w- c:\windows\system32\sdtmp 2012-01-03 13:57 . 2012-01-04 00:10 -------- d-----w- c:\program files\53D4F 2012-01-03 13:56 . 2012-01-04 00:28 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\0F153 2012-01-03 13:56 . 2012-01-03 20:29 -------- d-----w- c:\program files\LP 2011-12-28 10:45 . 2011-12-28 10:45 5575392 ----a-w- c:\documents and settings\All Users\Application Data\YouTube Downloader\ytd_installer.exe 2011-12-14 01:32 . 2011-12-09 09:45 65536 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\cs3i32f2.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components\XPATLCOM.dll . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-01-04 13:52 . 2009-11-04 20:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP 2012-01-04 01:54 . 2009-07-08 23:21 -------- d-----w- c:\program files\Common Files\Nokia 2012-01-04 01:52 . 2008-12-19 03:34 -------- d-----w- c:\program files\Nokia 2012-01-04 01:49 . 2010-06-28 17:21 -------- d-----w- c:\program files\Google 2012-01-03 23:38 . 2012-01-03 17:45 740156 ----a-w- c:\windows\system32\drivers\Cat.DB 2012-01-03 23:35 . 2006-06-15 11:00 -------- d--h--w- c:\program files\InstallShield Installation Information 2012-01-03 23:31 . 2010-03-25 23:11 -------- d-----w- c:\program files\Maxis 2012-01-02 01:49 . 2006-10-07 22:55 -------- d-----w- c:\documents and settings\HP_Eigenaar\Application Data\CoreFTP 2011-12-30 21:27 . 2006-10-09 13:37 -------- d-----w- c:\program files\Steam 2011-12-28 10:46 . 2011-08-08 17:50 -------- d-----w- c:\documents and settings\All Users\Application Data\YouTube Downloader 2011-12-11 00:15 . 2006-10-08 14:14 -------- d-----w- c:\program files\Sound Forge 2011-12-07 00:36 . 2009-11-05 23:10 -------- d-----w- c:\program files\SeaMonkey 2011-11-17 10:20 . 2004-12-03 03:15 569938 ----a-w- c:\windows\system32\perfh013.dat 2011-11-17 10:20 . 2004-12-03 03:15 118342 ----a-w- c:\windows\system32\perfc013.dat 2011-11-09 23:12 . 2011-11-09 23:12 -------- d-----w- c:\program files\QuickTime 2011-11-09 23:09 . 2011-11-09 23:07 -------- d-----w- c:\program files\iTunes 2011-11-09 23:07 . 2011-11-09 23:07 -------- d-----w- c:\program files\iPod 2011-11-09 23:07 . 2008-04-17 10:01 -------- d-----w- c:\program files\Common Files\Apple 2011-11-09 23:02 . 2011-11-09 23:02 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer 2011-11-09 23:00 . 2011-11-09 23:00 -------- d-----w- c:\program files\Bonjour 2011-11-09 22:59 . 2011-11-09 22:59 73584 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.5.0.142\SetupAdmin.exe 2011-11-09 22:51 . 2011-11-09 22:51 -------- d-----w- c:\program files\Apple Software Update 2011-11-12 18:52 . 2011-05-06 12:39 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . ((((((((((((((((((((((((((((( SnapShot_2010-05-21_19.41.13 ))))))))))))))))))))))))))))))))))))))))) . + 2012-01-04 15:06 . 2012-01-04 15:06 16384 c:\windows\Temp\Perflib_Perfdata_71c.dat + 2012-01-04 15:06 . 2012-01-04 15:06 16384 c:\windows\Temp\Perflib_Perfdata_6c8.dat - 2007-01-29 08:58 . 2010-01-23 08:11 46080 c:\windows\system32\tzchange.exe + 2007-01-29 08:58 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe + 2011-04-25 20:49 . 2003-01-26 11:41 40960 c:\windows\system32\ssubtmr6.dll + 2004-08-03 21:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe + 2011-05-23 11:35 . 2011-05-23 11:35 11776 c:\windows\system32\siscardplugins\siscardplugin1_BE_EID_35__ACS ACR38U__.dll + 2010-04-16 21:12 . 2010-04-16 21:12 48464 c:\windows\system32\sirenacm.dll + 2011-07-24 16:33 . 2009-04-15 12:31 13931 c:\windows\system32\RaCoInst.dat + 2010-03-30 22:16 . 2010-03-30 22:16 99176 c:\windows\system32\PresentationHostProxy.dll + 2004-12-03 03:15 . 2011-11-17 10:20 94014 c:\windows\system32\perfc009.dat + 2009-11-06 23:07 . 2009-11-06 23:07 49488 c:\windows\system32\netfxperf.dll + 2009-11-05 20:17 . 2009-11-05 20:17 11600 c:\windows\system32\mui\0409\mscorees.dll + 2006-11-07 20:03 . 2010-06-24 12:27 55296 c:\windows\system32\msfeedsbs.dll - 2006-11-07 20:03 . 2010-02-25 06:20 55296 c:\windows\system32\msfeedsbs.dll + 2004-08-03 21:00 . 2010-06-24 12:27 25600 c:\windows\system32\jsproxy.dll - 2004-08-03 21:00 . 2010-02-25 06:20 25600 c:\windows\system32\jsproxy.dll + 2011-07-24 16:34 . 2005-10-27 06:55 49152 c:\windows\system32\JJAKEn.dll - 2004-08-03 21:00 . 2008-04-14 17:02 80384 c:\windows\system32\iccvid.dll + 2004-08-03 21:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll + 2010-07-18 22:40 . 2010-07-18 22:40 61952 c:\windows\system32\execryptorvb.dll + 2010-09-08 08:20 . 2010-09-08 08:20 40960 c:\windows\system32\eidlibj.dll + 2011-11-09 23:01 . 2011-08-02 16:38 42496 c:\windows\system32\DRVSTORE\usbaapl_091115F4EDEB41DBA0EC91574CE905B4E0482482\usbaapl.sys + 2011-11-09 23:02 . 2011-08-02 16:38 18432 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\netaapl.sys + 2010-12-08 14:25 . 2008-04-13 19:45 15104 c:\windows\system32\drivers\usbscan.sys + 2008-04-17 10:01 . 2010-04-16 06:33 41472 c:\windows\system32\drivers\usbaapl.sys + 2004-04-30 12:35 . 2004-04-30 12:35 24832 c:\windows\system32\drivers\a38usbxp.sys + 2011-08-30 22:05 . 2011-08-30 22:05 73064 c:\windows\system32\dnssd.dll + 2011-08-30 22:05 . 2011-08-30 22:05 83816 c:\windows\system32\dns-sd.exe - 2010-01-25 20:38 . 2010-02-25 06:20 12800 c:\windows\system32\dllcache\xpshims.dll + 2010-01-25 20:38 . 2010-06-24 12:27 12800 c:\windows\system32\dllcache\xpshims.dll + 2010-12-08 14:25 . 2008-04-13 19:45 15104 c:\windows\system32\dllcache\usbscan.sys + 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe + 2007-05-09 16:49 . 2010-06-24 12:27 55296 c:\windows\system32\dllcache\msfeedsbs.dll - 2007-05-09 16:49 . 2010-02-25 06:20 55296 c:\windows\system32\dllcache\msfeedsbs.dll - 2004-08-03 21:00 . 2010-02-25 06:20 25600 c:\windows\system32\dllcache\jsproxy.dll + 2004-08-03 21:00 . 2010-06-24 12:27 25600 c:\windows\system32\dllcache\jsproxy.dll + 2009-12-22 18:39 . 2009-12-22 18:39 62592 c:\windows\system32\dllcache\cdrom.sys + 2010-03-05 14:42 . 2010-03-05 14:42 65536 c:\windows\system32\dllcache\asycfilt.dll + 2010-09-08 08:24 . 2010-09-08 08:24 73728 c:\windows\system32\belpicppgui.dll + 2011-05-23 11:34 . 2011-05-23 11:34 90112 c:\windows\system32\Belgium Identity Card PKCS11.dll + 2010-09-08 08:24 . 2010-09-08 08:24 61440 c:\windows\system32\beidpp\xireid.dll + 2011-05-23 11:34 . 2011-05-23 11:34 90112 c:\windows\system32\beidpkcs11.dll + 2010-09-08 08:20 . 2010-09-08 08:20 40960 c:\windows\system32\beidlibjni.dll + 2011-05-23 11:34 . 2011-05-23 11:34 69632 c:\windows\system32\beidCSPlib.dll + 2010-09-08 08:20 . 2010-09-08 08:20 48128 c:\windows\system32\beidCSP.dll + 2004-08-03 21:00 . 2010-03-05 14:42 65536 c:\windows\system32\asycfilt.dll + 2011-07-24 16:34 . 2008-11-27 16:20 49152 c:\windows\system32\AQCKGen.dll + 2011-07-24 16:34 . 2009-02-09 16:36 48640 c:\windows\system32\ANIO64.sys + 2011-07-24 16:34 . 2007-05-12 14:39 11904 c:\windows\system32\anio4.sys + 2011-07-24 16:34 . 2009-02-09 16:10 29411 c:\windows\system32\ANIO.sys + 2011-07-24 16:34 . 2008-11-27 16:22 45115 c:\windows\system32\ANICtl.dll + 2010-04-07 21:48 . 2010-04-07 21:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll - 2008-07-29 18:16 . 2008-07-29 18:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2010-04-01 09:42 . 2010-04-01 09:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll - 2008-05-27 22:49 . 2008-05-27 22:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2010-03-31 12:51 . 2010-03-31 12:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - 2008-05-27 22:49 . 2008-05-27 22:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2010-03-31 12:51 . 2010-03-31 12:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2010-03-31 12:51 . 2010-03-31 12:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll - 2008-05-27 22:49 . 2008-05-27 22:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2010-03-31 13:32 . 2010-03-31 13:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2008-05-27 23:30 . 2008-05-27 23:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2003-02-20 17:19 . 2003-02-20 17:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2010-03-31 13:32 . 2010-03-31 13:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll + 2009-11-06 23:07 . 2009-11-06 23:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe + 2010-10-01 22:29 . 2010-10-01 22:29 38400 c:\windows\Installer\e8656e.msi + 2011-11-08 12:12 . 2011-11-08 12:12 22016 c:\windows\Installer\c6d2d.msi + 2011-02-20 19:08 . 2011-02-20 19:08 22016 c:\windows\Installer\15ad83a.msi + 2011-02-20 19:06 . 2011-02-20 19:06 27136 c:\windows\Installer\15ad80d.msi + 2011-02-20 19:06 . 2011-02-20 19:06 58880 c:\windows\Installer\15ad7eb.msi + 2010-06-28 17:23 . 2010-06-28 17:23 47104 c:\windows\Installer\120554.msi + 2011-02-20 19:07 . 2011-02-20 19:07 80395 c:\windows\Installer\{CC38A00D-7EED-46CE-9281-D1D97B81F22A}\MsblIco.Exe + 2011-02-20 19:06 . 2011-02-20 19:06 61272 c:\windows\Installer\{C20C2630-B3A7-44BA-BDD0-31E256AE490E}\IconWlc.exe + 2010-09-30 10:39 . 2010-09-30 10:39 89440 c:\windows\Installer\{95140000-007A-0413-0000-0000000FF1CE}\OLCIcon.exe - 2010-04-15 22:00 . 2010-04-15 22:00 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe + 2010-09-19 17:49 . 2010-09-19 17:49 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe - 2010-04-15 21:59 . 2010-04-15 21:59 38240 c:\windows\Installer\{90120000-0020-0413-0000-0000000FF1CE}\O12ConvIcon.exe + 2010-09-19 18:08 . 2010-09-19 18:08 38240 c:\windows\Installer\{90120000-0020-0413-0000-0000000FF1CE}\O12ConvIcon.exe - 2007-08-30 00:28 . 2010-04-15 21:57 23040 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\unbndico.exe + 2007-08-30 00:28 . 2010-09-19 18:16 23040 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\unbndico.exe - 2007-08-30 00:28 . 2010-04-15 21:57 61440 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pubs.exe + 2007-08-30 00:28 . 2010-09-19 18:16 61440 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pubs.exe + 2007-08-30 00:28 . 2010-09-19 18:16 27136 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\oisicon.exe - 2007-08-30 00:28 . 2010-04-15 21:57 27136 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\oisicon.exe + 2007-08-30 00:28 . 2010-09-19 18:16 11264 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\mspicons.exe - 2007-08-30 00:28 . 2010-04-15 21:57 11264 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\mspicons.exe - 2007-08-30 00:28 . 2010-04-15 21:57 86016 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\inficon.exe + 2007-08-30 00:28 . 2010-09-19 18:16 86016 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\inficon.exe - 2007-08-30 00:28 . 2010-04-15 21:57 12288 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\cagicon.exe + 2007-08-30 00:28 . 2010-09-19 18:16 12288 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\cagicon.exe + 2010-10-01 22:30 . 2011-05-12 13:55 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll + 2011-11-09 22:52 . 2011-11-09 22:52 27136 c:\windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe + 2011-02-20 19:08 . 2011-02-20 19:08 58945 c:\windows\Installer\{2869F5EA-93C3-48E5-80DF-DB696BC84A91}\wlmail.exe - 2009-10-02 21:21 . 2009-10-02 21:21 58945 c:\windows\Installer\{2869F5EA-93C3-48E5-80DF-DB696BC84A91}\wlmail.exe + 2007-03-22 17:13 . 2007-03-22 17:13 23904 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\IPDMCTRL.DLL + 2010-09-19 18:12 . 2010-02-25 06:20 12800 c:\windows\ie8updates\KB2183461-IE8\xpshims.dll + 2010-09-19 18:12 . 2010-02-25 06:20 55296 c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll + 2010-09-19 18:12 . 2010-02-25 06:20 25600 c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll + 2010-09-19 17:57 . 2010-09-19 17:57 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_a7297e5b\System.Drawing.Design.dll + 2010-09-19 17:57 . 2010-09-19 17:57 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_b79538ae\CustomMarshalers.dll + 2011-02-20 19:20 . 2011-02-20 19:20 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\4b76ee7cffa5a925f16967eb6d44d79e\WindowsLiveWriter.ni.exe + 2011-02-20 19:20 . 2011-02-20 19:20 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0f3ef21a166df82d34e0147cfa308256\WindowsLive.Writer.Api.ni.dll + 2010-09-19 18:13 . 2010-09-19 18:13 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\aada360296a42e0413579a19c771ec2d\System.Web.DynamicData.Design.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll + 2010-09-19 18:10 . 2010-09-19 18:10 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe + 2010-09-19 18:09 . 2010-09-19 18:09 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\272d51526813ea113970b8e890c92ee2\Microsoft.VisualC.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe + 2010-09-19 18:21 . 2010-09-19 18:21 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll - 2009-10-14 01:10 . 2009-10-14 01:10 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2010-09-19 18:08 . 2010-09-19 18:08 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2009-03-22 10:51 . 2009-03-22 10:51 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll + 2010-09-19 17:54 . 2010-09-19 17:54 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll - 2009-10-14 01:10 . 2009-10-14 01:10 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2010-09-19 18:08 . 2010-09-19 18:08 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2009-10-14 01:10 . 2009-10-14 01:10 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2010-09-19 18:08 . 2010-09-19 18:08 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2009-10-14 01:10 . 2009-10-14 01:10 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2010-09-19 18:08 . 2010-09-19 18:08 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2010-09-19 18:08 . 2010-09-19 18:08 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2009-10-14 01:10 . 2009-10-14 01:10 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2009-10-14 01:10 . 2009-10-14 01:10 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2010-09-19 18:08 . 2010-09-19 18:08 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2009-10-14 01:10 . 2009-10-14 01:10 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2010-09-19 18:08 . 2010-09-19 18:08 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2010-09-19 18:08 . 2010-09-19 18:08 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2009-10-14 01:10 . 2009-10-14 01:10 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2009-10-14 01:10 . 2009-10-14 01:10 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2010-09-19 18:08 . 2010-09-19 18:08 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2009-10-14 01:10 . 2009-10-14 01:10 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2010-09-19 18:08 . 2010-09-19 18:08 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2009-10-14 01:10 . 2009-10-14 01:10 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2010-09-19 18:08 . 2010-09-19 18:08 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2009-10-14 01:10 . 2009-10-14 01:10 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2010-09-19 18:08 . 2010-09-19 18:08 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2010-09-19 18:08 . 2010-09-19 18:08 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2009-10-14 01:10 . 2009-10-14 01:10 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2010-09-19 17:56 . 2010-09-19 17:56 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2010-09-19 18:05 . 2008-04-14 17:02 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll + 2010-09-19 17:45 . 2010-01-23 08:11 46080 c:\windows\$NtUninstallKB981793$\tzchange.exe + 2010-09-19 17:45 . 2010-04-22 22:24 16896 c:\windows\$NtUninstallKB981793$\spuninst\tzchange.dll + 2010-09-19 17:50 . 2008-04-14 17:02 65024 c:\windows\$NtUninstallKB979482$\asycfilt.dll + 2010-09-19 18:14 . 2008-04-14 17:03 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe + 2010-09-19 18:13 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll + 2010-09-19 18:13 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982802\spmsg.dll + 2010-09-19 18:06 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll + 2010-09-19 18:06 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982665\spmsg.dll + 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll + 2010-09-19 18:11 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll + 2010-09-19 18:11 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB982214\spmsg.dll + 2010-09-19 18:11 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll + 2010-09-19 18:11 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB981997\spmsg.dll + 2010-09-19 18:12 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll + 2010-09-19 17:43 . 2010-06-17 13:47 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll + 2010-09-19 18:12 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB981852\spmsg.dll + 2010-09-19 18:13 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll + 2010-09-19 18:13 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB981322\spmsg.dll + 2010-09-19 18:13 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll + 2010-09-19 18:13 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB980436\spmsg.dll + 2010-09-19 17:46 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll + 2010-09-19 17:46 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB980218\spmsg.dll + 2010-09-19 17:50 . 2008-07-08 13:07 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll + 2010-09-19 17:50 . 2008-07-08 13:07 18808 c:\windows\$hf_mig$\KB980195\spmsg.dll + 2010-09-19 17:50 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll + 2010-09-19 17:50 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB979482\spmsg.dll + 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll + 2010-09-19 17:55 . 2008-07-08 13:07 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll + 2010-09-19 17:55 . 2008-07-08 13:07 18808 c:\windows\$hf_mig$\KB975562\spmsg.dll + 2010-09-19 18:14 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll + 2010-09-19 18:14 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2347290\spmsg.dll + 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe + 2010-09-19 18:05 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll + 2010-09-19 18:05 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2286198\spmsg.dll + 2010-09-19 18:13 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll + 2010-09-19 18:13 . 2009-05-26 09:01 18808 c:\windows\$hf_mig$\KB2259922\spmsg.dll + 2010-09-19 17:56 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll + 2010-09-19 17:56 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2229593\spmsg.dll + 2010-09-19 18:12 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2183461-IE8\update\spcustom.dll + 2010-09-19 18:12 . 2009-05-26 09:01 18808 c:\windows\$hf_mig$\KB2183461-IE8\spmsg.dll + 2010-09-19 17:43 . 2010-06-24 12:29 12800 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\xpshims.dll + 2010-09-19 17:43 . 2010-06-24 12:29 55296 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeedsbs.dll + 2010-09-19 17:43 . 2010-06-24 12:29 25600 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\jsproxy.dll + 2010-09-19 18:11 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2160329\update\spcustom.dll + 2010-09-19 18:11 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2160329\spmsg.dll + 2010-09-19 18:13 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll + 2010-09-19 18:13 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2141007\spmsg.dll + 2010-09-19 18:14 . 2010-02-22 14:29 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll + 2010-09-19 18:14 . 2010-02-22 14:29 18808 c:\windows\$hf_mig$\KB2121546\spmsg.dll + 2010-09-19 18:05 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll + 2010-09-19 18:05 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2115168\spmsg.dll + 2010-09-19 18:11 . 2009-05-26 11:41 26488 c:\windows\$hf_mig$\KB2079403\update\spcustom.dll + 2010-09-19 18:11 . 2009-05-26 11:41 18808 c:\windows\$hf_mig$\KB2079403\spmsg.dll - 2009-10-14 01:10 . 2009-10-14 01:10 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2010-09-19 18:08 . 2010-09-19 18:08 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2008-05-05 05:25 . 2010-07-22 06:19 5632 c:\windows\system32\xpsp4res.dll + 2010-12-08 14:25 . 2001-09-06 20:27 5632 c:\windows\system32\ptpusb.dll + 2007-08-30 00:28 . 2010-09-19 18:16 4096 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\opwicon.exe - 2007-08-30 00:28 . 2010-04-15 21:57 4096 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2010-09-19 18:08 . 2010-09-19 18:08 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2009-10-14 01:10 . 2009-10-14 01:10 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2009-10-14 01:10 . 2009-10-14 01:10 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2010-09-19 18:08 . 2010-09-19 18:08 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2009-10-14 01:10 . 2009-10-14 01:10 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2010-09-19 18:08 . 2010-09-19 18:08 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2010-09-19 18:08 . 2010-09-19 18:08 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2010-09-19 18:13 . 2008-05-05 05:25 3072 c:\windows\$NtUninstallKB982802$\xpsp4res.dll + 2010-07-22 06:19 . 2010-07-22 06:19 5632 c:\windows\$hf_mig$\KB982802\SP3QFE\sprv0413.dll - 2009-10-14 01:10 . 2009-10-14 01:10 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2010-09-19 18:08 . 2010-09-19 18:08 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2010-09-19 18:08 . 2010-09-19 18:08 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll - 2009-10-14 01:10 . 2009-10-14 01:10 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2008-10-24 11:15 . 2008-10-24 11:15 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll - 2006-12-01 20:54 . 2006-12-01 20:54 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll - 2006-12-01 20:54 . 2006-12-01 20:54 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll + 2008-10-24 11:15 . 2008-10-24 11:15 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll - 2006-12-01 20:54 . 2006-12-01 20:54 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll + 2008-10-24 11:15 . 2008-10-24 11:15 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll + 2011-05-14 00:17 . 2011-05-14 00:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll + 2011-05-14 00:12 . 2011-05-14 00:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll + 2011-05-14 00:11 . 2011-05-14 00:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll + 2011-07-24 16:34 . 2009-04-22 08:23 270336 c:\windows\system32\wnicapi.dll + 2011-07-24 16:34 . 2009-03-05 09:12 258048 c:\windows\system32\wlanapp.dll - 2004-08-03 21:00 . 2008-04-14 17:02 293888 c:\windows\system32\winsrv.dll + 2004-08-03 21:00 . 2010-06-18 17:47 293888 c:\windows\system32\winsrv.dll - 2004-08-03 21:00 . 2010-02-25 06:20 916480 c:\windows\system32\wininet.dll + 2004-08-03 21:00 . 2010-06-24 12:27 916480 c:\windows\system32\wininet.dll + 2004-08-03 21:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll - 2004-08-03 21:00 . 2008-04-14 17:02 406016 c:\windows\system32\usp10.dll + 2004-04-30 11:00 . 2004-04-30 11:00 110592 c:\windows\system32\usbr38.dll + 2007-12-17 17:30 . 2007-12-17 17:30 200704 c:\windows\system32\ssleay32_0_9_8g.dll + 2011-07-24 16:34 . 2008-09-25 11:16 204800 c:\windows\system32\ssleay32.dll + 2004-08-03 21:00 . 2010-06-30 12:33 149504 c:\windows\system32\schannel.dll + 2004-08-03 21:00 . 2010-07-22 15:46 590848 c:\windows\system32\rpcrt4.dll + 2009-10-26 18:09 . 2012-01-03 20:05 201636 c:\windows\system32\Restore\rstrlog.dat + 2011-07-24 16:33 . 2009-04-15 12:31 221184 c:\windows\system32\RaCoInst.dll + 2010-12-08 14:25 . 2008-04-14 18:02 159232 c:\windows\system32\ptpusd.dll + 2010-03-30 22:10 . 2010-03-30 22:10 295264 c:\windows\system32\PresentationHost.exe + 2004-12-03 03:15 . 2011-11-17 10:20 495662 c:\windows\system32\perfh009.dat + 2004-08-03 21:00 . 2010-06-24 12:27 206848 c:\windows\system32\occache.dll - 2004-08-03 21:00 . 2010-02-25 06:20 206848 c:\windows\system32\occache.dll - 2004-08-03 21:00 . 2010-02-25 06:20 611840 c:\windows\system32\mstime.dll + 2004-08-03 21:00 . 2010-06-24 12:27 611840 c:\windows\system32\mstime.dll + 2006-11-07 20:03 . 2010-06-24 12:27 599040 c:\windows\system32\msfeeds.dll + 2009-11-06 23:07 . 2009-11-06 23:07 297808 c:\windows\system32\mscoree.dll - 2006-10-18 20:47 . 2006-10-18 20:47 317440 c:\windows\system32\MP4SDECD.dll + 2006-10-18 20:47 . 2010-03-30 10:24 317440 c:\windows\system32\mp4sdecd.dll + 2010-07-15 11:14 . 2010-07-15 11:14 231888 c:\windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe + 2010-06-18 09:49 . 2010-06-18 09:49 231888 c:\windows\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe + 2010-06-18 09:49 . 2010-06-18 09:49 311760 c:\windows\system32\Macromed\Flash\FlashUtil10h_ActiveX.dll + 2004-08-03 21:00 . 2010-06-09 07:45 692736 c:\windows\system32\inetcomm.dll + 2009-12-22 18:39 . 2009-12-22 18:39 922112 c:\windows\system32\imapi2fs.dll + 2009-12-22 18:39 . 2009-12-22 18:39 426496 c:\windows\system32\imapi2.dll - 2004-08-03 21:00 . 2010-02-25 06:20 184320 c:\windows\system32\iepeers.dll + 2004-08-03 21:00 . 2010-06-24 12:27 184320 c:\windows\system32\iepeers.dll + 2004-08-03 21:00 . 2010-06-24 12:27 387584 c:\windows\system32\iedkcs32.dll - 2004-08-03 21:00 . 2010-02-25 06:20 387584 c:\windows\system32\iedkcs32.dll - 2004-08-03 21:00 . 2010-02-24 09:56 173056 c:\windows\system32\ie4uinit.exe + 2004-08-03 21:00 . 2010-06-23 12:08 173056 c:\windows\system32\ie4uinit.exe + 2004-12-03 03:12 . 2011-04-24 18:46 461232 c:\windows\system32\FNTCACHE.DAT + 2010-09-08 08:20 . 2010-09-08 08:20 114688 c:\windows\system32\EIDLibCtrl.dll + 2011-05-23 11:33 . 2011-05-23 11:33 200704 c:\windows\system32\eidlib.dll + 2004-08-03 21:00 . 2010-06-21 15:27 354304 c:\windows\system32\drivers\srv.sys + 2011-07-24 16:33 . 2009-04-15 12:32 715520 c:\windows\system32\drivers\rt2870.sys + 2010-06-18 17:47 . 2010-06-18 17:47 293888 c:\windows\system32\dllcache\winsrv.dll - 2004-08-03 21:00 . 2010-02-25 06:20 916480 c:\windows\system32\dllcache\wininet.dll + 2004-08-03 21:00 . 2010-06-24 12:27 916480 c:\windows\system32\dllcache\wininet.dll + 2010-04-16 15:38 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll + 2008-10-16 10:45 . 2010-06-21 15:27 354304 c:\windows\system32\dllcache\srv.sys + 2008-12-05 06:58 . 2010-06-30 12:33 149504 c:\windows\system32\dllcache\schannel.dll + 2009-04-15 14:55 . 2010-07-22 15:46 590848 c:\windows\system32\dllcache\rpcrt4.dll + 2004-08-03 21:00 . 2010-06-24 12:27 206848 c:\windows\system32\dllcache\occache.dll - 2004-08-03 21:00 . 2010-02-25 06:20 206848 c:\windows\system32\dllcache\occache.dll + 2008-04-13 19:21 . 2008-04-13 19:21 162816 c:\windows\system32\dllcache\netbt.sys - 2004-08-03 21:00 . 2010-02-25 06:20 611840 c:\windows\system32\dllcache\mstime.dll + 2004-08-03 21:00 . 2010-06-24 12:27 611840 c:\windows\system32\dllcache\mstime.dll + 2007-05-09 16:49 . 2010-06-24 12:27 599040 c:\windows\system32\dllcache\msfeeds.dll + 2010-03-30 10:24 . 2010-03-30 10:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll + 2008-08-13 16:29 . 2010-06-09 07:45 692736 c:\windows\system32\dllcache\inetcomm.dll + 2009-12-22 18:39 . 2009-12-22 18:39 922112 c:\windows\system32\dllcache\imapi2fs.dll + 2009-12-22 18:39 . 2009-12-22 18:39 426496 c:\windows\system32\dllcache\imapi2.dll + 2010-01-25 20:38 . 2010-06-24 12:27 247808 c:\windows\system32\dllcache\ieproxy.dll - 2010-01-25 20:38 . 2010-02-25 06:20 247808 c:\windows\system32\dllcache\ieproxy.dll - 2004-08-03 21:00 . 2010-02-25 06:20 184320 c:\windows\system32\dllcache\iepeers.dll + 2004-08-03 21:00 . 2010-06-24 12:27 184320 c:\windows\system32\dllcache\iepeers.dll + 2010-09-19 17:43 . 2010-06-24 12:27 743424 c:\windows\system32\dllcache\iedvtool.dll - 2004-08-03 21:00 . 2010-02-25 06:20 387584 c:\windows\system32\dllcache\iedkcs32.dll + 2004-08-03 21:00 . 2010-06-24 12:27 387584 c:\windows\system32\dllcache\iedkcs32.dll + 2004-08-03 21:00 . 2010-06-23 12:08 173056 c:\windows\system32\dllcache\ie4uinit.exe - 2004-08-03 21:00 . 2010-02-24 09:56 173056 c:\windows\system32\dllcache\ie4uinit.exe + 2010-09-19 17:41 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe + 2010-04-20 05:35 . 2010-04-20 05:35 285696 c:\windows\system32\dllcache\atmfd.dll + 2010-09-08 08:24 . 2010-09-08 08:24 282624 c:\windows\system32\beidwinscard.dll + 2010-09-08 08:24 . 2010-09-08 08:24 163840 c:\windows\system32\beidssleay32.dll + 2010-09-08 08:24 . 2010-09-08 08:24 200791 c:\windows\system32\beidlibopensc.dll + 2010-09-08 08:24 . 2010-09-08 08:24 868352 c:\windows\system32\beidlibeay32.dll + 2010-09-08 08:20 . 2010-09-08 08:20 114688 c:\windows\system32\beidlibaxctrl.dll + 2011-05-23 11:33 . 2011-05-23 11:33 200704 c:\windows\system32\beidlib.dll + 2010-09-08 08:24 . 2010-09-08 08:24 270336 c:\windows\system32\beidgui.dll + 2011-05-23 11:33 . 2011-05-23 11:33 266240 c:\windows\system32\beid35DlgsWin32.dll + 2011-05-23 11:32 . 2011-05-23 11:32 126976 c:\windows\system32\beid35common.dll + 2011-05-23 11:33 . 2011-05-23 11:33 200704 c:\windows\system32\beid35cardlayer.dll + 2011-05-23 11:34 . 2011-05-23 11:34 360448 c:\windows\system32\beid35applayer.dll - 2004-08-03 21:00 . 2008-04-14 17:00 285696 c:\windows\system32\atmfd.dll + 2004-08-03 21:00 . 2010-04-20 05:35 285696 c:\windows\system32\atmfd.dll + 2011-07-24 16:34 . 2009-04-17 17:24 700416 c:\windows\system32\ANIWZCS2.dll + 2011-07-24 16:34 . 2009-02-26 09:22 237568 c:\windows\system32\ANIWPS.exe + 2011-07-24 16:35 . 2009-02-26 11:46 147456 c:\windows\system32\ANIWConnService.exe + 2011-07-24 16:34 . 2009-02-26 11:38 692224 c:\windows\system32\ANIOWPS.dll + 2011-07-24 16:34 . 2009-02-09 16:26 315392 c:\windows\system32\ANIOApi.dll + 2011-07-24 16:34 . 2008-11-27 16:25 204800 c:\windows\system32\aIPH.dll + 2004-08-03 21:00 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe - 2004-08-03 21:00 . 2008-04-14 17:03 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe + 2010-03-30 22:16 . 2010-03-30 22:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll + 2010-04-07 21:48 . 2010-04-07 21:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll - 2008-07-29 18:16 . 2008-07-29 18:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll + 2010-04-07 21:48 . 2010-04-07 21:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll + 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2010-02-09 10:22 . 2010-02-09 10:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll - 2008-07-25 10:17 . 2008-07-25 10:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2010-05-11 04:40 . 2010-05-11 04:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll - 2009-08-07 21:51 . 2009-08-07 21:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2010-05-11 04:40 . 2010-05-11 04:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2010-03-31 12:51 . 2010-03-31 12:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2008-05-27 22:49 . 2008-05-27 22:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2010-03-31 12:49 . 2010-03-31 12:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2008-05-27 22:48 . 2008-05-27 22:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2008-05-27 23:30 . 2008-05-27 23:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2010-03-31 13:32 . 2010-03-31 13:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2006-06-15 10:46 . 1998-10-29 14:45 306688 c:\windows\IsUninst.exe - 2006-06-15 10:46 . 1998-10-29 13:45 306688 c:\windows\IsUninst.exe + 2012-01-03 23:37 . 2012-01-03 23:37 301056 c:\windows\Installer\a7dace.msi + 2010-09-30 10:39 . 2010-09-30 10:39 926208 c:\windows\Installer\97ebf9.msi + 2010-02-24 22:14 . 2010-02-24 22:14 543232 c:\windows\Installer\1860e13.msp + 2011-02-20 19:08 . 2011-02-20 19:08 570368 c:\windows\Installer\15ad88d.msi + 2011-02-20 19:08 . 2011-02-20 19:08 861184 c:\windows\Installer\15ad86b.msi + 2011-02-20 19:07 . 2011-02-20 19:07 429056 c:\windows\Installer\15ad82f.msi + 2011-02-20 19:06 . 2011-02-20 19:06 149504 c:\windows\Installer\15ad7fe.msi + 2007-08-30 00:28 . 2010-09-19 18:16 409600 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\xlicons.exe - 2007-08-30 00:28 . 2010-04-15 21:57 409600 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\xlicons.exe + 2007-08-30 00:28 . 2010-09-19 18:16 286720 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe - 2007-08-30 00:28 . 2010-04-15 21:57 286720 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe - 2007-08-30 00:28 . 2010-04-15 21:57 249856 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pptico.exe + 2007-08-30 00:28 . 2010-09-19 18:16 249856 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pptico.exe + 2007-08-30 00:28 . 2010-09-19 18:16 794624 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\outicon.exe - 2007-08-30 00:28 . 2010-04-15 21:57 794624 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\outicon.exe + 2007-08-30 00:28 . 2010-09-19 18:16 135168 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\misc.exe - 2007-08-30 00:28 . 2010-04-15 21:57 135168 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\misc.exe - 2007-08-30 00:28 . 2010-04-15 21:57 593920 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe + 2007-08-30 00:28 . 2010-09-19 18:16 593920 c:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe + 2011-11-09 23:09 . 2011-11-09 23:09 380928 c:\windows\Installer\{29ED20C9-5E15-4969-9279-25BF3727A3DA}\iTunesIco.exe + 2007-04-19 12:01 . 2007-04-19 12:01 238424 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\MSCDM.DLL + 2007-01-16 18:32 . 2007-01-16 18:32 136032 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\MSAEXP30.DLL + 2008-06-13 01:06 . 2008-06-13 01:06 103776 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\IPATHPIA.DLL + 2007-04-19 11:54 . 2007-04-19 11:54 169312 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\ACCWIZ.DLL + 2010-09-19 18:12 . 2010-02-25 06:20 916480 c:\windows\ie8updates\KB2183461-IE8\wininet.dll + 2010-09-19 18:12 . 2010-02-22 14:29 401272 c:\windows\ie8updates\KB2183461-IE8\spuninst\updspapi.dll + 2010-09-19 18:12 . 2009-05-26 09:01 234872 c:\windows\ie8updates\KB2183461-IE8\spuninst\spuninst.exe + 2010-09-19 18:12 . 2010-02-25 06:20 206848 c:\windows\ie8updates\KB2183461-IE8\occache.dll + 2010-09-19 18:12 . 2010-02-25 06:20 611840 c:\windows\ie8updates\KB2183461-IE8\mstime.dll + 2010-09-19 18:12 . 2010-02-25 06:20 594432 c:\windows\ie8updates\KB2183461-IE8\msfeeds.dll + 2010-09-19 18:12 . 2010-02-25 06:20 247808 c:\windows\ie8updates\KB2183461-IE8\ieproxy.dll + 2010-09-19 18:12 . 2010-02-25 06:20 184320 c:\windows\ie8updates\KB2183461-IE8\iepeers.dll + 2010-09-19 18:12 . 2009-03-08 03:35 742912 c:\windows\ie8updates\KB2183461-IE8\iedvtool.dll + 2010-09-19 18:12 . 2010-02-25 06:20 387584 c:\windows\ie8updates\KB2183461-IE8\iedkcs32.dll + 2010-09-19 18:12 . 2010-02-24 09:56 173056 c:\windows\ie8updates\KB2183461-IE8\ie4uinit.exe + 2010-09-19 17:57 . 2010-09-19 17:57 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_25df7d5e\System.Drawing.dll + 2010-09-19 17:57 . 2010-09-19 17:57 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_dad3231f\System.Drawing.Design.dll + 2010-09-19 17:57 . 2010-09-19 17:57 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_423c8e42\CustomMarshalers.dll + 2010-09-19 18:21 . 2010-09-19 18:21 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe + 2011-02-20 19:21 . 2011-02-20 19:21 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\c30f8128b641bb1fac88cc983958a507\WindowsLiveLocal.WriterPlugin.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f7eecdbf8f73f127df632e81bc835484\WindowsLive.Writer.Interop.Mshtml.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cf5151086dd038a82602c9167c9acad5\WindowsLive.Writer.Passport.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cb1b830e0cf0889fda4e4a9d619d816d\WindowsLive.Writer.HtmlParser.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c46d84073499887c745801bda334c97f\WindowsLive.Writer.Interop.SHDocVw.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\879fd6f22250247f79ee663b80199b73\WindowsLive.Writer.Localization.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\80ce7f3c877dff36e07711517ed49b19\WindowsLive.Writer.BrowserControl.ni.dll + 2011-02-20 19:21 . 2011-02-20 19:21 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\796b11733fd16a0128c89ae37abce0f4\WindowsLive.Writer.Instrumentation.ni.dll + 2011-02-20 19:21 . 2011-02-20 19:21 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\75f2d6dc2e4d4219276c1c02265f20a1\WindowsLive.Writer.HtmlEditor.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\70cc2bbf8d87c63f36d05bf7a4a01a69\WindowsLive.Writer.Mshtml.ni.dll + 2011-02-20 19:21 . 2011-02-20 19:21 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\69968aa6fb3a6fb47df1b2dd59f1e1a2\WindowsLive.Writer.FileDestinations.ni.dll + 2011-02-20 19:21 . 2011-02-20 19:21 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\42b360f37602c772fa51c82607fe477d\WindowsLive.Writer.BlogClient.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\36888cd642eab375b37c2d8ae121d2ad\WindowsLive.Writer.Controls.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\323d5898b41430c73305874d4b93bf25\WindowsLive.Writer.Extensibility.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0e5d49b051e355c696ed7a2b5b24a623\WindowsLive.Writer.Interop.ni.dll + 2011-02-20 19:21 . 2011-02-20 19:21 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0d82d08289c6b8f928d8804f69f959ec\WindowsLive.Writer.SpellChecker.ni.dll + 2011-02-20 19:21 . 2011-02-20 19:21 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\b34623aa698e02b699e5b4706b1cd248\WindowsLive.Client.ni.dll + 2010-09-19 18:13 . 2010-09-19 18:13 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll + 2010-09-19 18:13 . 2010-09-19 18:13 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll + 2010-09-19 18:13 . 2010-09-19 18:13 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll + 2010-09-19 18:25 . 2010-09-19 18:25 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\5e16c279496a553c988c6199f0cee8aa\System.Web.Routing.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\720b28d81e987b889180b291ea19b821\System.Web.Extensions.Design.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\da36fd678161cd3444ef547c894e3f35\System.Web.Entity.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\49ae7c73fac8827123d5db1714c22599\System.Web.Entity.Design.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ce3aa27d3c4c052845ac5abb1374defa\System.Web.DynamicData.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\95fab896ef2af14876e3e1524379773b\System.Web.Abstractions.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3de39eb60b9d32af46f32f6c7a88fc7f\System.Runtime.Remoting.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll + 2010-09-19 18:14 . 2010-09-19 18:14 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll + 2010-09-19 18:22 . 2010-09-19 18:22 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll + 2010-09-19 18:12 . 2010-09-19 18:12 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll + 2010-09-19 18:23 . 2010-09-19 18:23 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\488c4017d45e861644a34fae557aa80f\System.Data.Entity.Design.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe + 2010-09-19 18:21 . 2010-09-19 18:21 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\5aeb40ff7128df2881fb03c01d070b20\ServiceModelReg.ni.exe + 2010-09-19 18:11 . 2010-09-19 18:11 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll + 2010-09-19 18:11 . 2010-09-19 18:11 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll + 2010-09-19 18:11 . 2010-09-19 18:11 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll + 2010-09-19 18:11 . 2010-09-19 18:11 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe + 2010-09-19 18:21 . 2010-09-19 18:21 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe + 2010-09-19 18:21 . 2010-09-19 18:21 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\56aec0938ef1bbdeca65b07a5fe8cd39\AspNetMMCExt.ni.dll + 2010-09-19 18:08 . 2010-09-19 18:08 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2009-10-14 01:10 . 2009-10-14 01:10 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2010-09-19 18:08 . 2010-09-19 18:08 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2009-10-14 01:10 . 2009-10-14 01:10 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2009-10-14 01:10 . 2009-10-14 01:10 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2010-09-19 18:08 . 2010-09-19 18:08 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2009-10-14 01:10 . 2009-10-14 01:10 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2010-09-19 18:08 . 2010-09-19 18:08 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2010-09-19 17:54 . 2010-09-19 17:54 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2010-09-19 18:08 . 2010-09-19 18:08 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2009-10-14 01:10 . 2009-10-14 01:10 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2009-10-14 01:10 . 2009-10-14 01:10 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2010-09-19 18:08 . 2010-09-19 18:08 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2009-10-14 01:10 . 2009-10-14 01:10 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2010-09-19 18:08 . 2010-09-19 18:08 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2010-09-19 18:08 . 2010-09-19 18:08 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2009-10-14 01:10 . 2009-10-14 01:10 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2010-09-19 17:54 . 2010-09-19 17:54 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2010-09-19 18:08 . 2010-09-19 18:08 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2009-10-14 01:10 . 2009-10-14 01:10 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2009-10-14 01:10 . 2009-10-14 01:10 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2010-09-19 18:08 . 2010-09-19 18:08 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2010-09-19 18:08 . 2010-09-19 18:08 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2009-10-14 01:10 . 2009-10-14 01:10 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2009-10-14 01:10 . 2009-10-14 01:10 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2010-09-19 18:08 . 2010-09-19 18:08 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2009-10-14 01:10 . 2009-10-14 01:10 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2010-09-19 18:08 . 2010-09-19 18:08 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2009-10-14 01:10 . 2009-10-14 01:10 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2010-09-19 18:08 . 2010-09-19 18:08 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2010-09-19 18:08 . 2010-09-19 18:08 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2009-10-14 01:10 . 2009-10-14 01:10 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2010-09-19 17:54 . 2010-09-19 17:54 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll - 2009-03-22 10:51 . 2009-03-22 10:51 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll + 2010-09-19 18:08 . 2010-09-19 18:08 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2009-10-14 01:10 . 2009-10-14 01:10 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2009-10-14 01:10 . 2009-10-14 01:10 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2010-09-19 18:08 . 2010-09-19 18:08 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2009-10-14 01:10 . 2009-10-14 01:10 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2010-09-19 18:08 . 2010-09-19 18:08 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2009-10-14 01:10 . 2009-10-14 01:10 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2010-09-19 18:08 . 2010-09-19 18:08 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2009-10-14 01:10 . 2009-10-14 01:10 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2010-09-19 18:08 . 2010-09-19 18:08 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2010-09-19 18:08 . 2010-09-19 18:08 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2009-10-14 01:10 . 2009-10-14 01:10 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2010-09-19 18:07 . 2010-09-19 18:07 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2009-10-14 01:10 . 2009-10-14 01:10 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2009-10-14 01:10 . 2009-10-14 01:10 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2010-09-19 18:08 . 2010-09-19 18:08 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2010-09-19 18:08 . 2010-09-19 18:08 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2010-09-19 18:08 . 2010-09-19 18:08 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2009-10-14 01:10 . 2009-10-14 01:10 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2010-09-19 18:08 . 2010-09-19 18:08 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2010-09-19 17:48 . 2010-09-19 17:48 111624 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll + 2010-09-19 18:13 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll + 2010-09-19 18:13 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2009-04-15 14:55 585216 c:\windows\$NtUninstallKB982802$\rpcrt4.dll + 2010-09-19 18:05 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982665$\spuninst\updspapi.dll + 2010-09-19 18:05 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982665$\spuninst\spuninst.exe + 2010-09-19 18:11 . 2009-12-31 16:50 353792 c:\windows\$NtUninstallKB982214$\srv.sys + 2010-09-19 18:11 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB982214$\spuninst\updspapi.dll + 2010-09-19 18:11 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB982214$\spuninst\spuninst.exe + 2010-09-19 18:11 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB981997$\spuninst\updspapi.dll + 2010-09-19 18:11 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB981997$\spuninst\spuninst.exe + 2010-09-19 18:12 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB981852$\spuninst\updspapi.dll + 2010-09-19 18:12 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB981852$\spuninst\spuninst.exe + 2010-09-19 17:45 . 2009-05-26 09:01 401272 c:\windows\$NtUninstallKB981793$\spuninst\updspapi.dll + 2010-09-19 17:45 . 2009-05-26 09:01 234872 c:\windows\$NtUninstallKB981793$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2008-04-14 17:02 406016 c:\windows\$NtUninstallKB981322$\usp10.dll + 2010-09-19 18:13 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll + 2010-09-19 18:13 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB980436$\spuninst\updspapi.dll + 2010-09-19 18:13 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB980436$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2009-06-25 08:27 147456 c:\windows\$NtUninstallKB980436$\schannel.dll + 2010-09-19 17:46 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB980218$\spuninst\updspapi.dll + 2010-09-19 17:46 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB980218$\spuninst\spuninst.exe + 2010-09-19 17:46 . 2008-04-14 17:00 285696 c:\windows\$NtUninstallKB980218$\atmfd.dll + 2010-09-19 17:50 . 2008-07-08 13:07 401272 c:\windows\$NtUninstallKB980195$\spuninst\updspapi.dll + 2010-09-19 17:50 . 2008-07-08 13:07 234872 c:\windows\$NtUninstallKB980195$\spuninst\spuninst.exe + 2010-09-19 17:50 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB979482$\spuninst\updspapi.dll + 2010-09-19 17:50 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB979482$\spuninst\spuninst.exe + 2010-09-19 17:46 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB978695_WM9$\spuninst\updspapi.dll + 2010-09-19 17:46 . 2007-07-27 19:04 234872 c:\windows\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe + 2010-09-19 17:55 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB975562$\spuninst\updspapi.dll + 2010-09-19 17:55 . 2008-07-08 13:07 234872 c:\windows\$NtUninstallKB975562$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2007-07-27 21:11 382840 c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll + 2010-09-19 18:13 . 2007-07-27 19:04 234872 c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2006-10-18 20:47 317440 c:\windows\$NtUninstallKB975558_WM8$\mp4sdecd.dll + 2010-07-21 21:20 . 2009-12-22 18:39 379184 c:\windows\$NtUninstallKB952011$\spuninst\updspapi.dll + 2010-07-21 21:20 . 2009-12-22 18:39 221488 c:\windows\$NtUninstallKB952011$\spuninst\spuninst.exe + 2010-09-19 18:14 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll + 2010-09-19 18:14 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe + 2010-09-19 18:05 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2286198$\spuninst\updspapi.dll + 2010-09-19 18:05 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2286198$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2009-05-26 09:01 401272 c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll + 2010-09-19 18:13 . 2009-05-26 09:01 234872 c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe + 2010-09-19 17:56 . 2010-02-22 17:59 401272 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll + 2010-09-19 17:56 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe + 2010-09-19 17:56 . 2008-04-14 17:03 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe + 2010-09-19 18:11 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2160329$\spuninst\updspapi.dll + 2010-09-19 18:11 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2160329$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll + 2010-09-19 18:13 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2008-04-11 19:06 691712 c:\windows\$NtUninstallKB2141007$\inetcomm.dll + 2010-09-19 18:14 . 2008-04-14 17:02 293888 c:\windows\$NtUninstallKB2121546$\winsrv.dll + 2010-09-19 18:14 . 2010-02-22 14:29 401272 c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll + 2010-09-19 18:14 . 2010-02-22 14:29 234872 c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe + 2010-09-19 18:05 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2115168$\spuninst\updspapi.dll + 2010-09-19 18:05 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2115168$\spuninst\spuninst.exe + 2010-09-19 18:11 . 2009-05-26 11:41 401272 c:\windows\$NtUninstallKB2079403$\spuninst\updspapi.dll + 2010-09-19 18:11 . 2009-05-26 11:41 234872 c:\windows\$NtUninstallKB2079403$\spuninst\spuninst.exe + 2010-09-19 18:13 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982802\update\updspapi.dll + 2010-09-19 18:13 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982802\update\update.exe + 2010-09-19 18:13 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982802\spuninst.exe + 2010-07-23 06:17 . 2010-07-23 06:17 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll + 2010-09-19 18:06 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982665\update\updspapi.dll + 2010-09-19 18:06 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982665\update\update.exe + 2010-09-19 18:06 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982665\spuninst.exe + 2010-09-19 18:11 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB982214\update\updspapi.dll + 2010-09-19 18:11 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB982214\update\update.exe + 2010-09-19 18:11 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB982214\spuninst.exe + 2010-09-19 17:42 . 2010-06-21 14:18 354304 c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys + 2010-09-19 18:11 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB981997\update\updspapi.dll + 2010-09-19 18:11 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB981997\update\update.exe + 2010-09-19 18:11 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB981997\spuninst.exe + 2010-09-19 18:12 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB981852\update\updspapi.dll + 2010-09-19 18:12 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB981852\update\update.exe + 2010-09-19 18:12 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB981852\spuninst.exe + 2010-09-19 18:13 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB981322\update\updspapi.dll + 2010-09-19 18:13 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB981322\update\update.exe + 2010-09-19 18:13 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB981322\spuninst.exe + 2010-04-16 15:31 . 2010-04-16 15:31 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll + 2010-09-19 18:13 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB980436\update\updspapi.dll + 2010-09-19 18:13 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB980436\update\update.exe + 2010-09-19 18:13 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB980436\spuninst.exe + 2010-06-30 12:25 . 2010-06-30 12:25 149504 c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll + 2010-09-19 17:46 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB980218\update\updspapi.dll + 2010-09-19 17:46 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB980218\update\update.exe + 2010-09-19 17:46 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB980218\spuninst.exe + 2010-04-20 05:41 . 2010-04-20 05:41 285824 c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll + 2010-09-19 17:50 . 2008-07-08 13:07 401272 c:\windows\$hf_mig$\KB980195\update\updspapi.dll + 2010-09-19 17:50 . 2008-07-08 13:07 765304 c:\windows\$hf_mig$\KB980195\update\update.exe + 2010-09-19 17:50 . 2008-07-08 13:07 234872 c:\windows\$hf_mig$\KB980195\spuninst.exe + 2010-09-19 17:50 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB979482\update\updspapi.dll + 2010-09-19 17:50 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB979482\update\update.exe + 2010-09-19 17:50 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB979482\spuninst.exe + 2010-09-19 17:55 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB975562\update\updspapi.dll + 2010-09-19 17:55 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB975562\update\update.exe + 2010-09-19 17:55 . 2008-07-08 13:07 234872 c:\windows\$hf_mig$\KB975562\spuninst.exe + 2010-09-19 18:14 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll + 2010-09-19 18:14 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2347290\update\update.exe + 2010-09-19 18:14 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2347290\spuninst.exe + 2010-09-19 18:05 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll + 2010-09-19 18:05 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2286198\update\update.exe + 2010-09-19 18:05 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2286198\spuninst.exe + 2010-09-19 18:13 . 2009-05-26 09:01 401272 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll + 2010-09-19 18:13 . 2009-05-26 09:01 765304 c:\windows\$hf_mig$\KB2259922\update\update.exe + 2010-09-19 18:13 . 2009-05-26 09:01 234872 c:\windows\$hf_mig$\KB2259922\spuninst.exe + 2010-09-19 17:56 . 2010-02-22 17:59 401272 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll + 2010-09-19 17:56 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2229593\update\update.exe + 2010-09-19 17:56 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2229593\spuninst.exe + 2010-09-19 17:41 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe + 2010-09-19 18:12 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2183461-IE8\update\updspapi.dll + 2010-09-19 18:12 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2183461-IE8\update\update.exe + 2010-09-19 18:12 . 2009-05-26 09:01 234872 c:\windows\$hf_mig$\KB2183461-IE8\spuninst.exe + 2010-09-19 17:43 . 2010-06-24 12:29 919040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll + 2010-09-19 17:43 . 2010-06-24 12:29 206848 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\occache.dll + 2010-09-19 17:43 . 2010-06-24 12:29 611840 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mstime.dll + 2010-09-19 17:43 . 2010-06-24 12:29 599040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeeds.dll + 2010-09-19 17:43 . 2010-06-24 12:29 247808 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieproxy.dll + 2010-09-19 17:43 . 2010-06-24 12:29 184320 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iepeers.dll + 2010-09-19 17:43 . 2010-06-24 12:29 743424 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedvtool.dll + 2010-09-19 17:43 . 2010-06-24 12:29 387584 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedkcs32.dll + 2010-09-19 17:43 . 2010-06-23 11:31 173056 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ie4uinit.exe + 2010-09-19 18:11 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2160329\update\updspapi.dll + 2010-09-19 18:11 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2160329\update\update.exe + 2010-09-19 18:11 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2160329\spuninst.exe + 2010-09-19 18:13 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll + 2010-09-19 18:13 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2141007\update\update.exe + 2010-09-19 18:13 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2141007\spuninst.exe + 2010-06-09 07:42 . 2010-06-09 07:42 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll + 2010-09-19 18:14 . 2010-02-22 14:29 401272 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll + 2010-09-19 18:14 . 2010-02-22 14:29 765304 c:\windows\$hf_mig$\KB2121546\update\update.exe + 2010-09-19 18:14 . 2010-02-22 14:29 234872 c:\windows\$hf_mig$\KB2121546\spuninst.exe + 2010-06-18 17:46 . 2010-06-18 17:46 293888 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll + 2010-09-19 18:05 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll + 2010-09-19 18:05 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2115168\update\update.exe + 2010-09-19 18:05 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2115168\spuninst.exe + 2010-09-19 18:11 . 2009-05-26 11:41 401272 c:\windows\$hf_mig$\KB2079403\update\updspapi.dll + 2010-09-19 18:11 . 2009-05-26 11:41 765304 c:\windows\$hf_mig$\KB2079403\update\update.exe + 2010-09-19 18:11 . 2009-05-26 11:41 234872 c:\windows\$hf_mig$\KB2079403\spuninst.exe + 2010-02-09 09:54 . 2010-02-09 09:54 2293760 c:\windows\system32\xerces-c_3_1.dll + 2004-08-03 21:00 . 2010-04-06 02:52 2462720 c:\windows\system32\WMVCore.dll + 2004-08-03 21:00 . 2010-06-24 09:02 1852032 c:\windows\system32\win32k.sys + 2010-05-09 12:48 . 2010-04-16 06:33 3003680 c:\windows\system32\usbaaplrc.dll + 2004-08-03 21:00 . 2010-06-24 12:27 1210368 c:\windows\system32\urlmon.dll + 2004-08-03 21:00 . 2010-07-27 06:30 8509440 c:\windows\system32\shell32.dll + 2004-08-03 21:00 . 2010-02-05 18:27 1295872 c:\windows\system32\quartz.dll - 2004-08-03 21:00 . 2009-11-27 17:14 1295872 c:\windows\system32\quartz.dll + 2007-11-14 10:38 . 2007-11-14 10:38 4014080 c:\windows\system32\qt-mt334.dll + 2011-07-24 16:34 . 2005-10-19 16:19 1327189 c:\windows\system32\odSupp_M.dll + 2004-08-03 21:00 . 2010-04-28 05:45 2150912 c:\windows\system32\ntoskrnl.exe - 2004-08-03 21:00 . 2010-02-16 19:09 2150912 c:\windows\system32\ntoskrnl.exe - 2004-08-04 04:00 . 2010-02-16 19:09 2029056 c:\windows\system32\ntkrnlpa.exe + 2004-08-04 04:00 . 2010-04-28 05:45 2029056 c:\windows\system32\ntkrnlpa.exe - 2004-08-03 21:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll + 2004-08-03 21:00 . 2010-06-14 07:43 1172480 c:\windows\system32\msxml3.dll + 2004-08-03 21:00 . 2010-06-24 12:27 5951488 c:\windows\system32\mshtml.dll + 2010-01-27 01:07 . 2010-07-15 11:14 5612496 c:\windows\system32\Macromed\Flash\NPSWF32.dll + 2007-12-17 17:30 . 2007-12-17 17:30 1044480 c:\windows\system32\libeay32_0_9_8g.dll + 2011-07-24 16:34 . 2008-09-25 11:15 1110016 c:\windows\system32\libeay32.dll + 2006-10-17 10:57 . 2010-06-24 12:27 1986560 c:\windows\system32\iertutil.dll + 2011-11-09 23:01 . 2011-08-02 16:38 4517664 c:\windows\system32\DRVSTORE\usbaapl_091115F4EDEB41DBA0EC91574CE905B4E0482482\usbaaplrc.dll + 2011-11-09 23:02 . 2011-08-02 16:38 1461992 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\wdfcoinstaller01009.dll + 2004-08-03 21:00 . 2010-04-06 02:52 2462720 c:\windows\system32\dllcache\WMVCore.dll + 2008-10-16 10:45 . 2010-06-24 09:02 1852032 c:\windows\system32\dllcache\win32k.sys + 2004-08-03 21:00 . 2010-06-24 12:27 1210368 c:\windows\system32\dllcache\urlmon.dll + 2008-06-17 19:03 . 2010-07-27 06:30 8509440 c:\windows\system32\dllcache\shell32.dll + 2008-05-07 05:12 . 2010-02-05 18:27 1295872 c:\windows\system32\dllcache\quartz.dll - 2008-05-07 05:12 . 2009-11-27 17:14 1295872 c:\windows\system32\dllcache\quartz.dll + 2008-10-16 10:45 . 2010-04-28 18:15 2194304 c:\windows\system32\dllcache\ntoskrnl.exe - 2008-10-16 10:45 . 2010-02-17 12:09 2194304 c:\windows\system32\dllcache\ntoskrnl.exe - 2008-10-16 10:45 . 2010-02-16 19:09 2029056 c:\windows\system32\dllcache\ntkrpamp.exe + 2008-10-16 10:45 . 2010-04-28 05:45 2029056 c:\windows\system32\dllcache\ntkrpamp.exe + 2008-10-16 10:45 . 2010-04-28 05:45 2071168 c:\windows\system32\dllcache\ntkrnlpa.exe - 2008-10-16 10:45 . 2010-02-16 19:09 2071168 c:\windows\system32\dllcache\ntkrnlpa.exe + 2008-10-16 10:45 . 2010-04-28 05:45 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe - 2008-10-16 10:45 . 2010-02-16 19:09 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe - 2008-11-13 01:45 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll + 2008-11-13 01:45 . 2010-06-14 07:43 1172480 c:\windows\system32\dllcache\msxml3.dll + 2004-08-03 21:00 . 2010-06-24 12:27 5951488 c:\windows\system32\dllcache\mshtml.dll + 2010-03-11 18:26 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe - 2010-03-11 18:26 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe + 2007-05-09 16:49 . 2010-06-24 12:27 1986560 c:\windows\system32\dllcache\iertutil.dll + 2009-11-06 23:06 . 2009-11-06 23:06 1130824 c:\windows\system32\dfshim.dll + 2010-04-07 21:48 . 2010-04-07 21:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll + 2010-03-23 03:32 . 2010-03-23 03:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll - 2008-11-25 03:59 . 2008-11-25 03:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2010-03-23 03:32 . 2010-03-23 03:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2010-05-11 04:40 . 2010-05-11 04:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - 2009-08-07 21:51 . 2009-08-07 21:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2010-05-11 04:40 . 2010-05-11 04:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2010-04-01 09:42 . 2010-04-01 09:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll - 2008-05-27 23:35 . 2008-05-27 23:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2010-04-01 09:42 . 2010-04-01 09:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll - 2008-05-27 23:35 . 2008-05-27 23:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll - 2008-05-27 22:48 . 2008-05-27 22:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2010-03-31 12:50 . 2010-03-31 12:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2010-03-31 12:50 . 2010-03-31 12:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll + 2010-04-01 09:42 . 2010-04-01 09:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll - 2008-05-27 22:43 . 2008-05-27 22:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2011-06-19 15:51 . 2011-06-19 15:51 1660928 c:\windows\Installer\c98f0.msi + 2011-11-09 23:12 . 2011-11-09 23:12 9474048 c:\windows\Installer\5f8d8.msi + 2011-11-09 23:09 . 2011-11-09 23:09 5235200 c:\windows\Installer\5f627.msi + 2011-11-09 23:02 . 2011-11-09 23:02 1717248 c:\windows\Installer\5edc4.msi + 2011-11-09 23:00 . 2011-11-09 23:00 2002432 c:\windows\Installer\5ed55.msi + 2011-11-09 22:57 . 2011-11-09 22:57 1532928 c:\windows\Installer\5ed0e.msi + 2011-11-09 22:52 . 2011-11-09 22:52 1769984 c:\windows\Installer\5ec2e.msi + 2010-08-05 10:59 . 2010-08-05 10:59 4033536 c:\windows\Installer\1860f04.msp + 2010-08-25 15:06 . 2010-08-25 15:06 6479360 c:\windows\Installer\1860ee2.msp + 2010-08-20 11:50 . 2010-08-20 11:50 5518848 c:\windows\Installer\1860ecb.msp + 2010-06-28 14:01 . 2010-06-28 14:01 7677952 c:\windows\Installer\1860eb4.msp + 2010-06-28 20:53 . 2010-06-28 20:53 6819840 c:\windows\Installer\1860e9d.msp + 2010-07-10 18:14 . 2010-07-10 18:14 2850816 c:\windows\Installer\1860e86.msp + 2009-11-08 22:25 . 2009-11-08 22:25 1935360 c:\windows\Installer\1860e62.msp + 2010-06-11 15:55 . 2010-06-11 15:55 1827328 c:\windows\Installer\1860e46.msp + 2010-05-25 09:45 . 2010-05-25 09:45 8445440 c:\windows\Installer\1860e2b.msp + 2010-04-11 20:17 . 2010-04-11 20:17 2607104 c:\windows\Installer\1860de0.msp + 2010-04-11 20:17 . 2010-04-11 20:17 4210688 c:\windows\Installer\1860ddf.msp + 2010-04-24 15:10 . 2010-04-24 15:10 8486400 c:\windows\Installer\1860dd2.msp + 2010-05-03 14:11 . 2010-05-03 14:11 4149760 c:\windows\Installer\1860db7.msp + 2010-03-30 10:34 . 2010-03-30 10:34 3826688 c:\windows\Installer\1860da0.msp + 2010-05-03 14:06 . 2010-05-03 14:06 5053952 c:\windows\Installer\1860d89.msp + 2007-05-10 11:43 . 2007-05-10 11:43 6688096 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\MSACCESS.EXE + 2007-04-30 12:57 . 2007-04-30 12:57 7084384 c:\windows\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\INFOPATH.EXE + 2010-09-19 18:12 . 2010-02-25 06:20 1209344 c:\windows\ie8updates\KB2183461-IE8\urlmon.dll + 2010-09-19 18:12 . 2010-02-25 06:20 5944832 c:\windows\ie8updates\KB2183461-IE8\mshtml.dll + 2010-09-19 18:12 . 2010-02-25 06:20 1985536 c:\windows\ie8updates\KB2183461-IE8\iertutil.dll + 2008-10-16 10:45 . 2010-04-28 18:15 2194304 c:\windows\Driver Cache\i386\ntoskrnl.exe - 2008-10-16 10:45 . 2010-02-17 12:09 2194304 c:\windows\Driver Cache\i386\ntoskrnl.exe + 2008-10-16 10:45 . 2010-04-28 05:45 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe - 2008-10-16 10:45 . 2010-02-16 19:09 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe - 2008-10-16 10:45 . 2010-02-16 19:09 2071168 c:\windows\Driver Cache\i386\ntkrnlpa.exe + 2008-10-16 10:45 . 2010-04-28 05:45 2071168 c:\windows\Driver Cache\i386\ntkrnlpa.exe - 2008-10-16 10:45 . 2010-02-16 19:09 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe + 2008-10-16 10:45 . 2010-04-28 05:45 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe + 2010-09-19 17:57 . 2010-09-19 17:57 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_f4c7cd91\System.dll + 2010-09-19 17:57 . 2010-09-19 17:57 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_69585c29\System.dll + 2010-09-19 17:58 . 2010-09-19 17:58 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_c0a7692c\System.Xml.dll + 2010-09-19 17:57 . 2010-09-19 17:57 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_ab0b9604\System.Xml.dll + 2010-09-19 17:57 . 2010-09-19 17:58 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_469e0bdc\System.Windows.Forms.dll + 2010-09-19 17:57 . 2010-09-19 17:57 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_21391ebf\System.Windows.Forms.dll + 2010-09-19 17:58 . 2010-09-19 17:58 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_fd864985\System.Drawing.dll + 2010-09-19 17:57 . 2010-09-19 17:57 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_dabead16\System.Design.dll + 2010-09-19 17:58 . 2010-09-19 17:58 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_81c8d25c\System.Design.dll + 2010-09-19 17:58 . 2010-09-19 17:58 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_a7f2b2cb\mscorlib.dll + 2010-09-19 17:57 . 2010-09-19 17:57 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_47688f6c\mscorlib.dll + 2011-02-20 19:20 . 2011-02-20 19:20 2018816 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\87b3fa44d2fcc7360bdc7ae915256040\WindowsLive.Writer.CoreServices.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4f183789843f054fba4ea676b9637b04\WindowsLive.Writer.ApplicationFramework.ni.dll + 2011-02-20 19:20 . 2011-02-20 19:20 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\08bb7d2c13cd210872afda1d3e6299a6\WindowsLive.Writer.PostEditor.ni.dll + 2010-09-19 18:09 . 2010-09-19 18:09 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll + 2010-09-19 18:13 . 2010-09-19 18:13 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll + 2010-09-19 18:09 . 2010-09-19 18:09 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll + 2010-09-19 18:13 . 2010-09-19 18:13 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll + 2010-09-19 18:25 . 2010-09-19 18:25 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\60b3c9a63b2065a6952d16256545c25d\System.WorkflowServices.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\5cc2a23ce8ac371c7a97b5e542ee27ed\System.Workflow.Runtime.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\c0aabf67e7ef98dc10c3e174c136731b\System.Workflow.ComponentModel.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\66682c8a064608ba4ffd0463cf09aef9\System.Workflow.Activities.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2d662564b8d9c57a34c588cc2970902b\System.Web.Services.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\9b455702c9b7b02c5708406f87986751\System.Web.Mobile.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\49c7a1c78ed9502ba97c11e6bd993f63\System.Web.Extensions.ni.dll + 2010-09-19 18:12 . 2010-09-19 18:12 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\f5790a1b7b41e7b8d05f01b549c80f39\System.ServiceModel.Web.ni.dll + 2010-09-19 18:14 . 2010-09-19 18:14 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll + 2010-09-19 18:12 . 2010-09-19 18:12 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll + 2010-09-19 18:14 . 2010-09-19 18:14 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\0885f31c21b796465fde6297dba20981\System.IdentityModel.ni.dll + 2010-09-19 18:12 . 2010-09-19 18:12 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll + 2010-09-19 18:11 . 2010-09-19 18:11 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\23cf0498f2ebe4c8ffa5cc79efca2dc5\System.Data.Services.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\58202ed61096113d08815c0a78313b66\System.Data.OracleClient.ni.dll + 2010-09-19 18:11 . 2010-09-19 18:11 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll + 2010-09-19 18:23 . 2010-09-19 18:23 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll + 2010-09-19 18:11 . 2010-09-19 18:11 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll + 2010-09-19 18:11 . 2010-09-19 18:11 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll + 2010-09-19 18:11 . 2010-09-19 18:11 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll + 2010-09-19 18:09 . 2010-09-19 18:09 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\9732a7c993055f82040642966db07ccf\Microsoft.VisualBasic.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll + 2010-09-19 18:24 . 2010-09-19 18:24 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll + 2010-09-19 18:04 . 2010-09-19 18:04 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2010-09-19 18:08 . 2010-09-19 18:08 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2010-09-19 18:08 . 2010-09-19 18:08 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2009-10-14 01:11 . 2009-10-14 01:11 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2010-09-19 18:07 . 2010-09-19 18:07 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2009-10-14 01:10 . 2009-10-14 01:10 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2010-09-19 17:54 . 2010-09-19 17:54 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2010-09-19 18:08 . 2010-09-19 18:08 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2009-10-14 01:10 . 2009-10-14 01:10 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2010-09-19 18:04 . 2010-09-19 18:04 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll - 2009-10-14 01:10 . 2009-10-14 01:10 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2010-09-19 18:07 . 2010-09-19 18:07 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2009-10-14 01:10 . 2009-10-14 01:10 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2010-09-19 18:08 . 2010-09-19 18:08 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2010-09-19 18:04 . 2010-09-19 18:04 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2009-03-22 10:51 . 2009-03-22 10:51 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2010-09-19 18:08 . 2010-09-19 18:08 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2009-10-14 01:03 . 2009-10-14 01:03 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2010-09-19 17:56 . 2010-09-19 17:56 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2010-09-19 17:56 . 2010-09-19 17:56 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll - 2009-10-14 01:03 . 2009-10-14 01:03 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2010-09-19 18:11 . 2009-10-23 15:28 3558912 c:\windows\$NtUninstallKB981997$\moviemk.exe + 2010-09-19 18:12 . 2010-02-16 19:09 2150912 c:\windows\$NtUninstallKB981852$\ntoskrnl.exe + 2010-09-19 18:12 . 2010-02-16 19:09 2029056 c:\windows\$NtUninstallKB981852$\ntkrpamp.exe + 2010-09-19 18:12 . 2010-02-16 19:09 2029056 c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe + 2010-09-19 18:12 . 2010-02-16 19:09 2150912 c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe + 2010-09-19 17:46 . 2009-05-20 02:56 2458112 c:\windows\$NtUninstallKB978695_WM9$\wmvcore.dll + 2010-09-19 17:55 . 2009-11-27 17:14 1295872 c:\windows\$NtUninstallKB975562$\quartz.dll + 2010-09-19 18:05 . 2008-06-17 19:03 8508416 c:\windows\$NtUninstallKB2286198$\shell32.dll + 2010-09-19 18:11 . 2009-08-14 15:16 1850752 c:\windows\$NtUninstallKB2160329$\win32k.sys + 2010-09-19 18:11 . 2009-07-31 04:35 1172480 c:\windows\$NtUninstallKB2079403$\msxml3.dll + 2010-09-19 17:42 . 2010-06-18 13:43 3558912 c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe + 2010-09-19 17:43 . 2010-04-28 05:20 2194432 c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe + 2010-09-19 17:43 . 2010-04-28 05:20 2029056 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe + 2010-04-28 21:20 . 2010-04-28 21:20 2071296 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe + 2010-09-19 17:43 . 2010-04-28 05:20 2150912 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe + 2010-02-05 18:34 . 2010-02-05 18:34 1295872 c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll + 2010-07-27 06:29 . 2010-07-27 06:29 8510464 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll + 2010-09-19 17:43 . 2010-06-24 12:29 1211904 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\urlmon.dll + 2010-09-19 17:43 . 2010-06-24 12:29 5954560 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll + 2010-09-19 17:43 . 2010-06-24 12:29 1987072 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iertutil.dll + 2010-06-24 21:30 . 2010-06-24 21:30 1861248 c:\windows\$hf_mig$\KB2160329\SP3QFE\win32k.sys + 2010-06-14 07:40 . 2010-06-14 07:40 1172480 c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll + 2006-10-06 15:09 . 2010-09-10 12:34 35552200 c:\windows\system32\MRT.exe + 2006-11-07 20:03 . 2010-06-24 15:57 11077120 c:\windows\system32\ieframe.dll + 2007-05-09 16:49 . 2010-06-24 15:57 11077120 c:\windows\system32\dllcache\ieframe.dll + 2010-04-02 17:29 . 2010-04-02 17:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp + 2010-10-01 22:30 . 2010-10-01 22:30 20303872 c:\windows\Installer\e86576.msp + 2011-05-12 13:54 . 2011-05-12 13:54 20314624 c:\windows\Installer\97120d.msp + 2011-04-02 15:58 . 2011-04-02 15:58 20304384 c:\windows\Installer\4e7e7.msp + 2010-05-19 11:08 . 2010-05-19 11:08 11408896 c:\windows\Installer\1860e7c.msp + 2010-03-30 23:23 . 2010-03-30 23:23 15638528 c:\windows\Installer\1860e70.msp + 2010-06-11 15:52 . 2010-06-11 15:52 45542912 c:\windows\Installer\1860e47.msp + 2010-04-02 10:30 . 2010-04-02 10:30 17456640 c:\windows\Installer\1860e0b.msp + 2010-04-11 20:17 . 2010-04-11 20:17 14599680 c:\windows\Installer\1860df0.msp + 2010-04-24 15:09 . 2010-04-24 15:09 11750912 c:\windows\Installer\1860dc1.msp + 2011-04-12 21:29 . 2011-04-12 21:29 20308992 c:\windows\Installer\180769.msp + 2010-09-19 18:12 . 2010-02-25 09:50 11070976 c:\windows\ie8updates\KB2183461-IE8\ieframe.dll + 2010-09-19 18:12 . 2010-09-19 18:12 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll + 2010-09-19 18:22 . 2010-09-19 18:22 11798016 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\411a627d6f5cb83509332253406988e5\System.Web.ni.dll + 2010-09-19 18:21 . 2010-09-19 18:21 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\f523a69e7c93ee4f245c996eac4b3a57\System.ServiceModel.ni.dll + 2010-09-19 18:12 . 2010-09-19 18:12 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\b307acf63075b997d02a97a7492d0d9c\System.Design.ni.dll + 2010-09-19 18:10 . 2010-09-19 18:10 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll + 2010-09-19 18:09 . 2010-09-19 18:09 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll + 2010-09-19 18:09 . 2010-09-19 18:09 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll + 2010-09-19 17:43 . 2010-06-24 12:29 11079168 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieframe.dll . -- Snapshot teruggezet naar huidige datum -- . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2010-10-06 23:36 94208 ----a-w- c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Google Update"="c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-09-12 133104] "Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-02-13 7557120] "HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-01 49152] "PCMService"="c:\program files\CyberLink\PowerCinema\PCMService.exe" [2006-02-24 147456] "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568] "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856] "Reminder"="c:\windows\Creator\Remind_XP.exe" [2004-12-13 663552] "HP Software Update"="c:\program files\HP\HP Software Update\HPwuSchd2.exe" [2005-12-15 49152] "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [bU] "MemoryCardManager"="c:\program files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe" [bU] "USB2Check"="c:\windows\system32\PCLECoInst.dll" [2004-09-21 73728] "USBToolTip"="c:\program files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" [2005-06-13 192512] "PinnacleDriverCheck"="c:\windows\system32\\PSDrvCheck.exe" [2004-03-11 406016] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184] "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424] "YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2011-05-23 2068480] "ANIWZCS2Service"="c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2007-01-19 49152] "D-Link D-Link Wireless 150 USB Adapter DWA-125"="c:\program files\D-Link\DWA-125 revA\AirGCFG.exe" [2009-05-04 1683456] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736] "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-03-08 16010240] "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-02-13 1519616] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160] c:\documents and settings\Default User\Menu Start\Programma's\Opstarten\ Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-6-15 27136] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-10-8 113664] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-12-15 282624] Philips GoGear VIBE Device Manager.lnk - c:\program files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe [2010-1-16 1611152] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 "FirewallOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) "DisableNotifications"= 1 (0x1) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= "c:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe"= "c:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe"= "c:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"= "c:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"= "c:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"= "c:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"= "c:\\Program Files\\Quake III Arena\\quake3.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "c:\\Program Files\\Steam\\Steam.exe"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\VoipCheapCom.com\\VoipCheapCom\\VoipCheapCom.exe"= "c:\\Program Files\\GameShadow\\GameShadow.exe"= "c:\\Program Files\\GameShadow\\GSDownload.exe"= "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"= "c:\\Program Files\\Shareaza\\Shareaza.exe"= "c:\\Documents and Settings\\HP_Eigenaar\\Application Data\\Dropbox\\bin\\Dropbox.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\Steam\\steamapps\\oudmetje\\counter-strike\\hl.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "6346:TCP"= 6346:TCP:s R2 ANIWConnService;ANIWConn Service;c:\windows\system32\ANIWConnService.exe [24/07/2011 17:35 147456] R2 sensorsview32;sensorsview32;c:\windows\system32\drivers\sensorsview32.sys [10/01/2010 2:57 14416] R3 rt2870;D-Link 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [24/07/2011 17:33 715520] R3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [15/06/2006 11:40 468768] S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2010 18:21 136176] S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usbxp.sys [30/04/2004 13:35 24832] S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\Aspi32.sys [11/02/2007 17:53 16512] S3 cpuz134;cpuz134;c:\documents and settings\HP_Eigenaar\Mijn documenten\Downloads\pc-wizard_2010.1.961\pcwiz_x32.sys [9/07/2010 12:18 20328] S3 getPlusHelper;getPlus® Helper;c:\windows\System32\svchost.exe -k getPlusHelper [3/08/2004 22:00 14336] S3 GNDHV71;Genius VideoCAM Live V2;c:\windows\system32\DRIVERS\gndhv71.sys --> c:\windows\system32\DRIVERS\gndhv71.sys [?] S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2010 18:21 136176] S3 nosGetPlusHelper;getPlus® Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [3/08/2004 22:00 14336] S3 PLUsbbc2;Hi-Speed USB Bridge Cable Driver;c:\windows\system32\drivers\usbbc2.sys [6/10/2006 22:34 7936] S3 Usblink;Usblink Driver;c:\windows\system32\drivers\ulink.sys [6/10/2006 22:35 40060] --- Andere Services/Drivers In Geheugen --- *Deregistered* - mbr [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] getPlusHelper REG_MULTI_SZ getPlusHelper nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b6bd9efb-3fe6-11df-8202-0016ecbd8ef7}] \Shell\AutoRun\command - L:\APPInst.exe . Inhoud van de 'Gedeelde Taken' map 2011-11-09 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57] 2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-06-28 17:21] 2012-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-06-28 17:21] 2011-12-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-27657144-3854435335-3181869771-1008Core.job - c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-12 17:35] 2012-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-27657144-3854435335-3181869771-1008UA.job - c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-09-12 17:35] 2012-01-03 c:\windows\Tasks\OGADaily.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] 2012-01-04 c:\windows\Tasks\OGALogon.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ mStart Page = hxxp://uk.yahoo.com uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=63&bd=PAVILION&pf=desktop uInternet Settings,ProxyOverride = *.local uInternet Settings,ProxyServer = http=127.0.0.1:52727 IE: Download with &Shareaza - c:\program files\Shareaza\RazaWebHook32.dll/3000 LSP: mswsock.dll FF - ProfilePath - c:\documents and settings\HP_Eigenaar\Application Data\Mozilla\Firefox\Profiles\cs3i32f2.default\ FF - prefs.js: browser.search.defaulturl - hxxp://uk.search.yahoo.com/search?fr=ffsp1&p= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.youtube.com/ FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=ffds1&p= FF - prefs.js: network.proxy.http - 127.0.0.1 FF - prefs.js: network.proxy.http_port - 52727 FF - prefs.js: network.proxy.type - 0 FF - component: c:\program files\Google\Google Gears\Firefox\lib\ff36\gears.dll FF - plugin: c:\documents and settings\HP_Eigenaar\Application Data\Facebook\npfbplugin_1_0_3.dll FF - plugin: c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll FF - plugin: c:\documents and settings\HP_Eigenaar\Local Settings\Application Data\Yahoo!\BrowserPlus\2.7.1\Plugins\npybrowserplus_2.7.1.dll FF - plugin: c:\program files\Google\Update\1.3.21.79\npGoogleUpdate3.dll FF - plugin: c:\program files\Microsoft Silverlight\4.0.60310.0\npctrlui.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- FF - user.js: yahoo.ytff.general.dontshowhpoffer - true. - - - - ORPHANS VERWIJDERD - - - - URLSearchHooks-{472734EA-242A-422b-ADF8-83D1E48CC825} - (no file) HKCU-Run-27l4ozqjbh - c:\documents and settings\HP_Eigenaar\27l4ozqjbh.exe HKLM-Run-27l4ozqjbh - c:\documents and settings\All Users\27l4ozqjbh.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2012-01-04 16:25 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... c:\windows\$NtUninstallKB62280$:SummaryInformation 0 bytes hidden from API Scan succesvol afgerond verborgen bestanden: 1 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{726245DE-A648-00D6-C30E-E5F5A256B0C5}\InProcServer32*] "jakghnogdkpjbkamdede"=hex:6a,61,6e,66,68,64,6b,65,6f,67,64,64,6a,6c,6d,70,68, 64,6c,6e,00,00 "iakgnmmjmoalapaokn"=hex:6a,61,6e,66,68,64,6b,65,6f,67,64,64,6a,6c,6d,70,68,64, 6c,6e,00,00 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ÿïÄ|ˇˇˇˇïÄ|˘ï9~*] "3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'explorer.exe'(3296) c:\windows\system32\nview.dll c:\windows\system32\NVWRSNL.DLL c:\documents and settings\HP_Eigenaar\Application Data\Dropbox\bin\DropboxExt.14.dll c:\windows\system32\nvwddi.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Voltooingstijd: 2012-01-04 16:30 ComboFix-quarantined-files.txt 2012-01-04 15:30 ComboFix2.txt 2010-05-21 19:45 ComboFix3.txt 2010-05-16 19:12 ComboFix4.txt 2009-11-08 13:50 ComboFix5.txt 2012-01-04 15:20 Pre-Run: 150.824.747.008 bytes beschikbaar Post-Run: 152.273.534.976 bytes beschikbaar - - End Of File - - 1904432E9170CD51E6D2A1362B9080E8

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:48:08, on 4/01/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Safe mode Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! UK R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = HP | MSN R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52727 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file) O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe" O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [27l4ozqjbh] C:\Documents and Settings\All Users\27l4ozqjbh.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [27l4ozqjbh] C:\Documents and Settings\HP_Eigenaar\27l4ozqjbh.exe O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user') O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ? O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000 O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 11230 bytes

Gisterenavond heb ik door Microsoft Security essentials te downloaden ervoor kunnen zorgen dat malwarebytes terug kon starten en heb ik, zo lijkt het, 'xp internet security 2012' kunnen verwijderen. Via msconfig zie ik bij Opstarten wel 2x het volgende bestand staan: 27|4ozqjbh, kan het niet echt thuisbrengen en vind het raar dat het er 2x tussenstaat. Hoedanook: grootste probleem is nu dat mijn PC wel zegt dat er internet is maar ik geen verbinding kan maken met geen enkele browser (chrome, IE & Firefox) en ook niet met bvb messenger. Bijgevoegd dus een nieuw HJAckfile gemaakt (en via usb overgezet op de computer (macbook) waarvan ik nu werk) Hopelijk krijgen jullie internet terug aan de praat Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:09:12, on 4/01/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe C:\WINDOWS\system32\ANIWConnService.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe C:\WINDOWS\system32\imapi.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\CyberLink\PowerCinema\PCMService.exe C:\Program Files\HP\HP Software Update\HPwuSchd2.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe C:\Program Files\iPod\bin\iPodService.exe C:\HP\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! UK R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=63&bd=PAVILION&pf=desktop R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52727 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file) O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe" O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [27l4ozqjbh] C:\Documents and Settings\All Users\27l4ozqjbh.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [27l4ozqjbh] C:\Documents and Settings\HP_Eigenaar\27l4ozqjbh.exe O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user') O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ? O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000 O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 13512 bytes

Belangrijke toevoeging: Ik kan bepaalde programma's zelfs niet eens meer openen, onder meer malwarebytes!! (ook niet in veilige modus heb ik de indruk maar misschien doe ik iets verkeerd) En via internet explorer worden sites doorgestuurd naar spamsites: grrrr

Sinds vandaag is mijn pc besmet met deze vreselijk irritante fake firewall/virusprotector. Er is online wel wat info te vinden maar om het weg te krijgen moet ik blijkbaar enkele programma's aankopen. Kunnen jullie dit virus van mijn pc krijgen? Hier alvast een hjackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:49:54, on 3/01/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe C:\WINDOWS\system32\ANIWConnService.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe C:\WINDOWS\system32\imapi.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\PC Tools Security\pctsAuxs.exe C:\Program Files\PC Tools Security\pctsSvc.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\PC Tools Security\pctsGui.exe C:\Documents and Settings\HP_Eigenaar\Application Data\0F153\E075D.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\uha.exe C:\Program Files\CyberLink\PowerCinema\PCMService.exe C:\Program Files\HP\HP Software Update\HPwuSchd2.exe C:\Program Files\LP\CD70\FF7.exe C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe C:\Program Files\53D4F\lvvm.exe C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\System32\ping.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\HP\KBD\KBD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! UK R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = HP | MSN R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52727 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file) O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\MEDIAC~1\INTERN~1\ARCURL~1.DLL O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController O4 - HKLM\..\Run: [uSBToolTip] "C:\Program Files\Pinnacle\Shared Files\\Programs\USBTip\USBTip.exe" O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe" O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [D-Link D-Link Wireless 150 USB Adapter DWA-125] C:\Program Files\D-Link\DWA-125 revA\AirGCFG.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [FF7.exe] C:\Program Files\LP\CD70\FF7.exe O4 - HKLM\..\Run: [27l4ozqjbh] C:\Documents and Settings\All Users\27l4ozqjbh.exe O4 - HKLM\..\Run: [iSTray] "C:\Program Files\PC Tools Security\pctsGui.exe" /hideGUI O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe O4 - HKCU\..\Run: [27l4ozqjbh] C:\Documents and Settings\HP_Eigenaar\27l4ozqjbh.exe O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ? O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000 O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\WINDOWS\system32\ANIWConnService.exe O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\PC Tools Security\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\PC Tools Security\pctsSvc.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 14538 bytes