Ga naar inhoud

Erikm

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    61

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Alles dat geplaatst werd door Erikm

  1. Erikm
    Oke. Dat is ook gedaan. Ik heb nog steeds die drie verdachte processen lopen. Moet daar nog iets mee gedaan worden?
  2. Erikm
    AVG is klaar met scannen. Geen bedreigingen gevonden! Ik opende nog wel taakbeheer, en zag daar 3 processen zonder gebruiker en beschrijving, namelijk atieclxx.exe, csrss.exe en winlogon.exe. Ook toen ComboFix de PC herstartte, kreeg ik een foutmelding van een dll bestand. Weet zo niet meer welke. Erik
  3. Erikm
    Ik zal het even bekijken. Goed om te horen dat er veel veranderd is. xD
  4. Erikm
    Hierbij de nieuwe log van ComboFix. Hij lijkt mij niet heel erg veranderd te zijn... ComboFix 12-06-14.01 - Erik 14-06-2012 15:56:22.2.2 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.4092.2251 [GMT 2:00] Gestart vanuit: c:\users\Erik\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Erik\Desktop\CFScript.txt AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} FW: AVG Internet Security 2012 *Enabled* {621CC794-9486-F902-D092-0484E8EA828B} SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206} c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\chrome.manifest c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\chrome\utorrentbar_nl.jar c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitAutoCompleteSearch.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitAutoCompleteSearch.xpt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitToolbar.idl c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitToolbar.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitToolbar.xpt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\RadioWMPCore.dll c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\RadioWMPCore.xpt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\RadioWMPCoreGecko19.dll c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\alertSettingsComponent.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\appContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\engineContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\engineSettings.json c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\fbAlert.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\getAppsContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\postAppsContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\toolbarContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\unsharedAppsContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\install.rdf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\lib\xpcom.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\META-INF\manifest.mf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\META-INF\zigbert.rsa c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\META-INF\zigbert.sf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.ico c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.src c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\setup.ini c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\version.txt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\chrome.manifest c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\chrome\conduitengine.jar c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.xpt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitToolbar.idl c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitToolbar.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitToolbar.xpt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\RadioWMPCore.dll c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\RadioWMPCore.xpt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\alertSettingsComponent.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\appContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\engineContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\engineSettings.json c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\fbAlert.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\getAppsContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\postAppsContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\toolbarContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\unsharedAppsContextMenu.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\DualPackage\install.rdf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\install.rdf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\lib\xpcom.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\META-INF\manifest.mf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\META-INF\zigbert.rsa c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\META-INF\zigbert.sf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.ico c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.src c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\setup.ini c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\version.txt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\chrome.manifest c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\components\FFPlugin.dll c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\components\FFUtilities.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\components\IFFPlugin.xpt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\components\IFFUtilities.xpt c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\bandoo.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\BandooComponent.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\ComponentContener.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\Events.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\logo.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\overlay.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\tools.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\install.rdf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome.manifest c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\about.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\about.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\bindings.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\button-bindings.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\cache.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\constants.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\core.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\custom-command-listener.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\dynamic-button-manager.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\dynamic-button.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\events.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\feeds.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\http-headers.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\json.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\lifecycle.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\listeners.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\locale.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\logger.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\network.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\newtab-manager.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\newtab-overlay.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\newtab.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\newtab.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\notification-popup-controller.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\notification-popup-ff3.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\notification-popup.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\notification.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\observer.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\options.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\options.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\preferences.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\prefetch.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\ss-popup-bindings.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\suggestions.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\update.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\utilities.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\webframe-bindings.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\webframe-manager.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\widget-controller.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\widget-popup.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\widgets.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\ask_16x16.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\ask_32x32.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\ask_browser_ff_chrome.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\asklogo.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\b-p.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\b.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\bg.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\bl-pbl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\bl-pbr.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\bl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\blogs.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\br-pbl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\br-pbr.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\br.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\chevron.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\dictionary.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\globe_18x.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\gripper.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\highlighter_off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\highlighter_on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\images.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\l.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-de.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-en.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-es.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-fr.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-it.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-nl.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-pt.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-ru.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-BR.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-DE.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-ES.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-EU.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-FR.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-IT.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-NL.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-RU.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-UK.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-US.properties c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\logo_32x32.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\magnify_search.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\maps.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\news.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\newtab.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\newtab_bkg.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\newtab_search_bkg.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\notification.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\preferences.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\r.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_de.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_es.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_fr.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_it.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_nl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_pl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_pt.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_ru.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_cobrand.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_current_site.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_de.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_es.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_fr.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_grey_73x24.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_it.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_nl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_pl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_pt.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ru.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\shopping.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\stocks.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\t-p.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\t.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tl-ptl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tl-ptr.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\toolbar.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\toolbar.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tr-ptl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tr-ptr.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tr.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\weather.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\web.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\zoomall.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\temp\askToolbar.exe c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-09-Jul-2010-09-42-32-GMT\ff-config.zip c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-15-Dec-2010-13-27-23-GMT\ff-config.zip c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\datastore\cache.sqlite c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\defaults.js.bak c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js.bak c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\install.rdf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1278668551896.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1278668557319.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1292419637958.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1292419642632.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1306767005746.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\searchplugins\askcom.xml c:\users\Erik\AppData\Roaming\Rowoda c:\users\Erik\AppData\Roaming\Yhzal . . (((((((((((((((((((( Bestanden Gemaakt van 2012-05-14 to 2012-06-14 )))))))))))))))))))))))))))))) . . 2012-06-14 14:06 . 2012-06-14 14:06 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-06-14 14:06 . 2012-06-14 14:06 -------- d-----w- c:\users\Administrator\AppData\Local\temp 2012-06-13 14:41 . 2012-06-13 14:41 -------- d-----w- c:\users\Erik\AppData\Roaming\Malwarebytes 2012-06-13 14:40 . 2012-06-13 14:40 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-06-13 14:40 . 2012-06-13 14:40 -------- d-----w- c:\programdata\Malwarebytes 2012-06-13 14:40 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-06-13 13:29 . 2012-06-13 13:29 388096 ----a-r- c:\users\Erik\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-06-13 13:29 . 2012-06-13 13:29 -------- d-----w- c:\program files (x86)\Trend Micro 2012-06-13 13:23 . 2012-06-13 13:23 -------- d-----w- c:\programdata\GFI Software 2012-06-13 13:17 . 2012-04-26 05:34 76288 ----a-w- c:\windows\system32\rdpwsx.dll 2012-06-13 13:17 . 2012-04-26 05:34 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll 2012-06-13 13:17 . 2012-04-26 05:28 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe 2012-06-13 13:16 . 2012-05-04 10:52 5505392 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-06-13 13:16 . 2012-05-04 10:08 3902320 ----a-w- c:\windows\SysWow64\ntoskrnl.exe 2012-06-13 13:16 . 2012-05-04 10:08 3958128 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe 2012-06-13 13:16 . 2012-05-02 05:32 208896 ----a-w- c:\windows\system32\profsvc.dll 2012-06-13 13:16 . 2012-05-15 01:32 3144192 ----a-w- c:\windows\system32\win32k.sys 2012-06-13 13:16 . 2012-04-28 03:50 204800 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-06-13 13:16 . 2012-04-07 12:18 3213824 ----a-w- c:\windows\system32\msi.dll 2012-06-13 13:16 . 2012-04-07 11:34 2342400 ----a-w- c:\windows\SysWow64\msi.dll 2012-06-13 13:16 . 2012-04-24 05:59 1460224 ----a-w- c:\windows\system32\crypt32.dll 2012-06-13 13:16 . 2012-04-24 04:47 1156608 ----a-w- c:\windows\SysWow64\crypt32.dll 2012-06-13 13:16 . 2012-04-24 05:59 182272 ----a-w- c:\windows\system32\cryptsvc.dll 2012-06-13 13:15 . 2012-04-24 05:59 140288 ----a-w- c:\windows\system32\cryptnet.dll 2012-06-13 13:15 . 2012-04-24 04:47 139264 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2012-06-13 13:15 . 2012-04-24 04:47 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll 2012-06-11 12:59 . 2012-06-11 12:59 -------- d-----w- c:\users\Erik\AppData\Roaming\AVG2012 2012-06-11 12:59 . 2012-06-11 12:59 -------- d-----w- c:\users\Erik\AppData\Local\AVG Secure Search 2012-06-11 12:58 . 2012-06-11 12:59 -------- d-----w- c:\programdata\AVG Secure Search 2012-06-11 12:58 . 2012-06-11 12:58 -------- d-----w- c:\program files (x86)\Common Files\AVG Secure Search 2012-06-11 12:58 . 2012-06-11 12:59 -------- d-----w- c:\program files (x86)\AVG Secure Search 2012-06-11 12:56 . 2012-06-14 13:49 -------- d-----w- c:\windows\system32\drivers\AVG 2012-06-11 12:56 . 2012-06-11 13:14 -------- d-----w- c:\programdata\AVG2012 2012-06-11 12:37 . 2012-06-14 13:50 -------- d-----w- c:\programdata\MFAData 2012-06-10 18:26 . 2012-06-10 18:26 -------- d-----w- c:\users\Erik\AppData\Local\adaware 2012-06-10 18:24 . 2012-06-10 18:24 -------- d-----w- c:\programdata\Lavasoft 2012-06-10 18:23 . 2012-06-13 13:23 -------- d-----w- c:\program files (x86)\Ad-Aware Antivirus 2012-06-10 18:22 . 2012-06-10 18:26 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection 2012-06-10 18:22 . 2012-06-10 18:22 -------- d-----w- c:\program files (x86)\Toolbar Cleaner 2012-06-10 18:22 . 2012-06-10 18:22 -------- d-----w- c:\program files (x86)\adawaretb 2012-06-10 18:19 . 2012-06-10 22:24 -------- d-----w- c:\users\Erik\AppData\Roaming\Ad-Aware Antivirus 2012-06-09 10:14 . 2012-06-09 10:16 -------- d-----w- c:\users\Erik\AppData\Roaming\matrixCache11 2012-06-08 14:59 . 2012-05-08 17:02 8955792 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{39AAABF1-2C9B-49D1-A41B-9E05587D2894}\mpengine.dll 2012-06-02 18:41 . 2012-06-02 18:41 -------- d-----w- c:\program files (x86)\Microsoft Games 2012-06-01 14:58 . 2012-06-01 14:58 -------- d-----w- c:\program files (x86)\Common Files\Java 2012-06-01 14:58 . 2012-06-01 14:58 -------- d-----w- c:\program files (x86)\Oracle 2012-06-01 14:57 . 2012-04-04 16:47 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2012-05-25 14:21 . 2012-05-25 14:21 -------- d-----w- c:\program files (x86)\Common Files\Skype . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-04-19 02:50 . 2012-04-19 02:50 28480 ----a-w- c:\windows\system32\drivers\avgidsha.sys 2012-04-04 16:47 . 2010-04-30 06:48 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-03-30 11:09 . 2012-05-09 18:32 1895280 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-03-19 03:17 . 2012-03-19 03:17 383808 ----a-w- c:\windows\system32\drivers\avgtdia.sys 2012-03-17 07:55 . 2012-05-09 18:32 75632 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-03-16 14:54 . 2011-12-14 15:37 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-03-24 13:51 . 2011-03-24 13:51 40445 ----a-w- c:\program files (x86)\uninstall.exe 2010-06-15 01:54 . 2010-06-15 01:54 153008 ----a-w- c:\program files (x86)\fraps64.dll 2010-06-15 01:54 . 2010-06-15 01:54 206768 ----a-w- c:\program files (x86)\fraps32.dll 2010-06-15 01:54 . 2010-06-15 01:54 74672 ----a-w- c:\program files (x86)\fraps64.dat 2010-06-15 01:54 . 2010-06-15 01:54 2320304 ----a-w- c:\program files (x86)\fraps.exe 2010-06-15 01:46 . 2010-06-15 01:46 163840 ----a-w- c:\program files (x86)\frapslcd.dll . . ((((((((((((((((((((((((((((( SnapShot@2012-06-13_17.40.13 ))))))))))))))))))))))))))))))))))))))))) . + 2012-06-13 19:58 . 2012-05-17 22:25 73216 c:\windows\SysWOW64\mshtmled.dll + 2012-06-13 19:58 . 2012-05-17 22:31 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll - 2012-04-11 19:09 . 2012-02-28 01:08 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll - 2012-04-11 19:09 . 2012-02-28 01:08 65024 c:\windows\SysWOW64\jsproxy.dll + 2012-06-13 19:58 . 2012-05-17 22:31 65024 c:\windows\SysWOW64\jsproxy.dll + 2009-07-14 04:54 . 2012-06-14 13:45 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54 . 2012-06-13 13:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54 . 2012-06-13 13:04 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2012-06-14 13:45 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2012-06-13 13:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2012-06-14 13:45 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-11-27 20:57 . 2012-06-14 14:10 83342 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2012-06-14 14:10 67568 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-02-04 23:26 . 2012-06-14 13:48 30886 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3138168355-341146757-651766743-1001_UserData.bin + 2012-06-13 19:58 . 2012-05-18 01:51 96768 c:\windows\system32\mshtmled.dll + 2012-06-13 19:58 . 2012-05-18 01:56 86528 c:\windows\system32\migration\WininetPlugin.dll - 2012-04-11 19:09 . 2012-02-28 06:47 86528 c:\windows\system32\migration\WininetPlugin.dll + 2012-06-13 19:58 . 2012-05-18 01:56 85504 c:\windows\system32\jsproxy.dll - 2012-04-11 19:09 . 2012-02-28 06:47 85504 c:\windows\system32\jsproxy.dll + 2009-07-14 04:46 . 2012-06-14 13:48 78344 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2012-05-09 20:08 . 2012-05-09 20:08 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-06-13 20:09 . 2012-06-13 20:09 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-06-13 20:09 . 2012-06-13 20:09 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2012-05-09 20:08 . 2012-05-09 20:08 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2012-06-13 20:09 . 2012-06-13 20:09 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2012-05-09 20:08 . 2012-05-09 20:08 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2012-06-13 20:09 . 2012-06-13 20:09 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll - 2012-05-09 20:08 . 2012-05-09 20:08 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll + 2012-06-13 20:09 . 2012-06-13 20:09 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll - 2012-05-09 20:08 . 2012-05-09 20:08 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-06-13 20:09 . 2012-06-13 20:09 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-05-09 20:08 . 2012-05-09 20:08 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-05-09 20:08 . 2012-05-09 20:08 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-06-13 20:08 . 2012-06-13 20:08 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll - 2012-05-09 20:08 . 2012-05-09 20:08 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2012-06-13 20:09 . 2012-06-13 20:09 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll - 2012-05-09 20:08 . 2012-05-09 20:08 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll + 2012-06-13 20:08 . 2012-06-13 20:08 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2012-05-09 20:08 . 2012-05-09 20:08 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2012-06-13 20:08 . 2012-06-13 20:08 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2012-06-13 20:08 . 2012-06-13 20:08 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll - 2012-05-09 20:08 . 2012-05-09 20:08 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2012-06-13 20:08 . 2012-06-13 20:08 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2012-05-09 20:08 . 2012-05-09 20:08 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2012-05-09 20:08 . 2012-05-09 20:08 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll + 2012-06-13 20:08 . 2012-06-13 20:08 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll - 2012-05-09 20:08 . 2012-05-09 20:08 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2012-06-13 20:08 . 2012-06-13 20:08 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2012-05-09 20:08 . 2012-05-09 20:08 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2012-06-13 20:08 . 2012-06-13 20:08 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2012-06-13 20:08 . 2012-06-13 20:08 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll - 2012-05-09 20:08 . 2012-05-09 20:08 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll + 2012-06-13 20:08 . 2012-06-13 20:08 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2012-05-09 20:08 . 2012-05-09 20:08 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2012-06-13 20:08 . 2012-06-13 20:08 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2012-05-09 20:08 . 2012-05-09 20:08 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2012-05-09 20:08 . 2012-05-09 20:08 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2012-06-13 20:08 . 2012-06-13 20:08 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2012-06-13 20:08 . 2012-06-13 20:08 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-09 20:08 . 2012-05-09 20:08 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-09 20:08 . 2012-05-09 20:08 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-13 20:08 . 2012-06-13 20:08 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-13 20:08 . 2012-06-13 20:08 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-09 20:08 . 2012-05-09 20:08 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-06-13 20:08 . 2012-06-13 20:08 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2012-05-09 20:08 . 2012-05-09 20:08 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-14 14:01 . 2012-06-14 14:01 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\86b25cd3802c2b6b36ed86d5c0500505\WindowsLiveWriter.ni.exe + 2012-06-14 14:02 . 2012-06-14 14:02 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\febee1108905a882d857ac65c80d41f3\WindowsLive.Writer.Api.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\f5c5517bf252bf6c4d8de833d2111309\System.Web.DynamicData.Design.ni.dll - 2012-06-13 17:39 . 2012-06-13 17:39 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-06-14 14:08 . 2012-06-14 14:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-06-14 14:08 . 2012-06-14 14:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2012-06-13 17:39 . 2012-06-13 17:39 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-06-13 19:58 . 2012-05-17 22:33 231936 c:\windows\SysWOW64\url.dll - 2012-04-11 19:09 . 2012-02-28 01:09 231936 c:\windows\SysWOW64\url.dll + 2012-06-13 19:58 . 2012-05-17 22:29 716800 c:\windows\SysWOW64\jscript.dll - 2012-04-11 19:09 . 2012-02-28 01:06 716800 c:\windows\SysWOW64\jscript.dll + 2012-06-13 19:58 . 2012-05-17 22:29 142848 c:\windows\SysWOW64\ieUnatt.exe - 2012-03-02 20:14 . 2012-03-02 20:14 142848 c:\windows\SysWOW64\ieUnatt.exe - 2012-04-11 19:09 . 2012-02-28 00:59 176640 c:\windows\SysWOW64\ieui.dll + 2012-06-13 19:58 . 2012-05-17 22:20 176640 c:\windows\SysWOW64\ieui.dll - 2012-04-11 19:09 . 2012-02-28 06:48 237056 c:\windows\system32\url.dll + 2012-06-13 19:58 . 2012-05-18 01:58 237056 c:\windows\system32\url.dll - 2009-11-28 05:38 . 2012-06-10 22:32 711900 c:\windows\system32\perfh013.dat + 2009-11-28 05:38 . 2012-06-13 20:08 711900 c:\windows\system32\perfh013.dat - 2009-07-14 02:36 . 2012-06-10 22:32 625010 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2012-06-13 20:08 625010 c:\windows\system32\perfh009.dat - 2009-11-28 05:38 . 2012-06-10 22:32 138718 c:\windows\system32\perfc013.dat + 2009-11-28 05:38 . 2012-06-13 20:08 138718 c:\windows\system32\perfc013.dat + 2009-07-14 02:36 . 2012-06-13 20:08 110648 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2012-06-10 22:32 110648 c:\windows\system32\perfc009.dat + 2012-06-13 19:58 . 2012-05-18 01:55 818688 c:\windows\system32\jscript.dll - 2012-04-11 19:09 . 2012-02-28 06:45 818688 c:\windows\system32\jscript.dll + 2012-06-13 19:58 . 2012-05-18 01:55 173056 c:\windows\system32\ieUnatt.exe - 2012-03-02 20:14 . 2012-03-02 20:14 173056 c:\windows\system32\ieUnatt.exe - 2012-04-11 19:09 . 2012-02-28 06:39 248320 c:\windows\system32\ieui.dll + 2012-06-13 19:58 . 2012-05-18 01:47 248320 c:\windows\system32\ieui.dll + 2009-07-14 04:45 . 2012-06-14 13:45 440584 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 04:45 . 2012-06-03 08:49 440584 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 05:01 . 2012-06-13 17:38 401944 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2009-07-14 05:01 . 2012-06-14 14:07 401944 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2012-04-21 09:03 . 2012-04-21 09:03 616024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll + 2012-06-13 13:17 . 2012-04-23 22:38 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll - 2012-04-11 12:35 . 2012-01-26 23:32 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll + 2012-04-21 09:03 . 2012-04-21 09:03 616024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll + 2012-06-13 13:17 . 2012-04-23 22:37 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll - 2012-04-11 12:35 . 2012-01-26 23:35 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2012-06-13 20:09 . 2012-06-13 20:09 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2012-05-09 20:08 . 2012-05-09 20:08 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2012-05-09 20:08 . 2012-05-09 20:08 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-06-13 20:09 . 2012-06-13 20:09 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-06-13 20:08 . 2012-06-13 20:08 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2012-05-09 20:08 . 2012-05-09 20:08 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2012-05-09 20:08 . 2012-05-09 20:08 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-06-13 20:09 . 2012-06-13 20:09 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - 2012-05-09 20:08 . 2012-05-09 20:08 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-06-13 20:09 . 2012-06-13 20:09 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-06-13 20:09 . 2012-06-13 20:09 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2012-05-09 20:08 . 2012-05-09 20:08 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2012-05-09 20:08 . 2012-05-09 20:08 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2012-06-13 20:08 . 2012-06-13 20:08 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2012-05-09 20:08 . 2012-05-09 20:08 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-06-13 20:09 . 2012-06-13 20:09 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll - 2012-05-09 20:08 . 2012-05-09 20:08 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll + 2012-06-13 20:09 . 2012-06-13 20:09 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2012-05-09 20:08 . 2012-05-09 20:08 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-06-13 20:09 . 2012-06-13 20:09 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll - 2012-05-09 20:08 . 2012-05-09 20:08 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2012-06-13 20:08 . 2012-06-13 20:08 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2012-05-09 20:08 . 2012-05-09 20:08 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-06-13 20:09 . 2012-06-13 20:09 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-06-13 20:09 . 2012-06-13 20:09 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2012-05-09 20:08 . 2012-05-09 20:08 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2012-05-09 20:08 . 2012-05-09 20:08 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2012-06-13 20:09 . 2012-06-13 20:09 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2012-06-13 20:08 . 2012-06-13 20:08 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll - 2012-05-09 20:08 . 2012-05-09 20:08 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll + 2012-06-13 20:09 . 2012-06-13 20:09 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2012-05-09 20:08 . 2012-05-09 20:08 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2012-06-13 20:08 . 2012-06-13 20:08 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2012-05-09 20:08 . 2012-05-09 20:08 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2012-06-13 20:08 . 2012-06-13 20:08 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll - 2012-05-09 20:08 . 2012-05-09 20:08 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll - 2012-05-09 20:08 . 2012-05-09 20:08 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-06-13 20:09 . 2012-06-13 20:09 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-06-13 20:09 . 2012-06-13 20:09 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll - 2012-05-09 20:08 . 2012-05-09 20:08 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-06-13 20:09 . 2012-06-13 20:09 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2012-05-09 20:08 . 2012-05-09 20:08 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2012-06-13 20:08 . 2012-06-13 20:08 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2012-05-09 20:08 . 2012-05-09 20:08 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll + 2012-06-13 20:08 . 2012-06-13 20:08 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-13 20:08 . 2012-06-13 20:08 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2012-05-09 20:08 . 2012-05-09 20:08 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2012-06-13 20:08 . 2012-06-13 20:08 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2012-05-09 20:08 . 2012-05-09 20:08 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2012-05-09 20:08 . 2012-05-09 20:08 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll + 2012-06-13 20:08 . 2012-06-13 20:08 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll + 2012-06-13 20:08 . 2012-06-13 20:08 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2012-05-09 20:08 . 2012-05-09 20:08 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2012-05-09 20:08 . 2012-05-09 20:08 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2012-06-13 20:08 . 2012-06-13 20:08 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2012-05-09 20:08 . 2012-05-09 20:08 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-06-13 20:08 . 2012-06-13 20:08 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll - 2012-05-09 20:08 . 2012-05-09 20:08 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll + 2012-06-13 20:08 . 2012-06-13 20:08 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll + 2012-06-13 20:08 . 2012-06-13 20:08 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2012-05-09 20:08 . 2012-05-09 20:08 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2012-05-09 20:08 . 2012-05-09 20:08 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll + 2012-06-13 20:08 . 2012-06-13 20:08 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll + 2012-06-13 20:08 . 2012-06-13 20:08 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2012-05-09 20:08 . 2012-05-09 20:08 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll + 2012-06-13 20:09 . 2012-06-13 20:09 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll - 2012-05-09 20:08 . 2012-05-09 20:08 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll - 2012-05-09 20:08 . 2012-05-09 20:08 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-06-13 20:08 . 2012-06-13 20:08 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-06-13 20:08 . 2012-06-13 20:08 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2012-05-09 20:08 . 2012-05-09 20:08 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-06-13 20:09 . 2012-06-13 20:09 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2012-05-09 20:08 . 2012-05-09 20:08 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2012-05-09 20:08 . 2012-05-09 20:08 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2012-06-13 20:09 . 2012-06-13 20:09 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll - 2012-05-09 20:08 . 2012-05-09 20:08 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2012-06-13 20:09 . 2012-06-13 20:09 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2012-05-09 20:08 . 2012-05-09 20:08 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2012-06-13 20:09 . 2012-06-13 20:09 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2012-05-09 20:08 . 2012-05-09 20:08 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-06-13 20:09 . 2012-06-13 20:09 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-06-13 20:09 . 2012-06-13 20:09 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2012-05-09 20:08 . 2012-05-09 20:08 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2012-06-13 20:08 . 2012-06-13 20:08 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2012-05-09 20:08 . 2012-05-09 20:08 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2012-05-09 20:08 . 2012-05-09 20:08 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-06-13 20:08 . 2012-06-13 20:08 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2012-05-09 20:08 . 2012-05-09 20:08 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2012-06-13 20:08 . 2012-06-13 20:08 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2012-05-09 20:08 . 2012-05-09 20:08 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-06-13 20:08 . 2012-06-13 20:08 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-06-13 20:08 . 2012-06-13 20:08 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2012-05-09 20:08 . 2012-05-09 20:08 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll + 2012-06-13 20:09 . 2012-06-13 20:09 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-05-09 20:08 . 2012-05-09 20:08 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-05-09 20:08 . 2012-05-09 20:08 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-06-13 20:09 . 2012-06-13 20:09 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-06-13 20:08 . 2012-06-13 20:08 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-05-09 20:08 . 2012-05-09 20:08 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-05-09 20:08 . 2012-05-09 20:08 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-06-13 20:08 . 2012-06-13 20:08 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-06-13 20:08 . 2012-06-13 20:08 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2012-05-09 20:08 . 2012-05-09 20:08 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-13 20:08 . 2012-06-13 20:08 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-05-09 20:08 . 2012-05-09 20:08 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-05-09 20:08 . 2012-05-09 20:08 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-06-13 20:08 . 2012-06-13 20:08 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-06-13 20:08 . 2012-06-13 20:08 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-05-09 20:08 . 2012-05-09 20:08 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-05-09 20:08 . 2012-05-09 20:08 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-06-13 20:08 . 2012-06-13 20:08 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-09 20:08 . 2012-05-09 20:08 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-13 20:08 . 2012-06-13 20:08 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-13 20:08 . 2012-06-13 20:08 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\84cf60f1e403f10f44055b3d319aa79c\System.ServiceProcess.ni.dll + 2012-06-13 20:08 . 2012-06-13 20:08 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\5f4314268d576f7c0052b9008a6830d9\System.Messaging.ni.dll + 2012-06-13 20:08 . 2012-06-13 20:08 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\52792a7ce63196551c29f5201562c1ae\System.Configuration.Install.ni.dll + 2012-06-13 20:07 . 2012-06-13 20:07 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\58441b4216f3051caa7041fa1cd9476d\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\44752ffa92ebb7170951a41898d8b9c6\WindowsFormsIntegration.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\5552b27237c3dbe4f21a10e97adf2edc\System.ServiceProcess.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\a730931e386537e3c229e049c9a6d271\System.Messaging.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c7d60a49e43964b1ae17e9a080376c6d\System.Configuration.Install.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\8cc4dd9babffe370cf375925fba15f84\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-14 13:50 . 2012-06-14 13:50 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\993018172a83c2431adeb6a309aa27cf\System.ServiceProcess.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\984398a06970ec18178ddf072de6167e\System.Messaging.ni.dll + 2012-06-14 13:50 . 2012-06-14 13:50 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\a650d1b1ee920b0fecfe5e8342217265\System.Drawing.Design.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\3266ef1067584da5503061cb4c694b82\ehExtHost.ni.exe + 2012-06-14 14:03 . 2012-06-14 14:03 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\b4339d59d892015b9b85f45da5405968\WindowsLiveLocal.WriterPlugin.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cab30ee882d32c6359c5e71f91115674\WindowsLive.Writer.SpellChecker.ni.dll + 2012-06-14 14:01 . 2012-06-14 14:01 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bf812087547b87d15f5d962567c19ed5\WindowsLive.Writer.Controls.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9fd83508417a1fbcaecbd9bc4517cf87\WindowsLive.Writer.HtmlEditor.ni.dll + 2012-06-14 14:01 . 2012-06-14 14:01 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\94b811060d696946b20fd357b734ee53\WindowsLive.Writer.Interop.ni.dll + 2012-06-14 14:02 . 2012-06-14 14:02 258560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8382b11f7b421755b4cf07b344e761b1\WindowsLive.Writer.Mshtml.ni.dll + 2012-06-14 14:02 . 2012-06-14 14:02 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6b2fbf2e97edff13c87a1d542aec6190\WindowsLive.Writer.BlogClient.ni.dll + 2012-06-14 14:02 . 2012-06-14 14:02 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\58895e1ec530c5a0b4d304c071ea9608\WindowsLive.Writer.BrowserControl.ni.dll + 2012-06-14 14:02 . 2012-06-14 14:02 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\54289c8fe09f12d1257a647b73237956\WindowsLive.Writer.Localization.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4301a860eb28265f4e4181ff0b238f31\WindowsLive.Writer.FileDestinations.ni.dll + 2012-06-14 14:02 . 2012-06-14 14:02 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\16b217f8f1a2694db53b5acda8231485\WindowsLive.Writer.Passport.ni.dll + 2012-06-14 14:02 . 2012-06-14 14:02 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0f0ac77d1901c796f6fb7cd1335ba4d9\WindowsLive.Writer.Extensibility.ni.dll + 2012-06-14 14:02 . 2012-06-14 14:02 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\7cea701bfe1a6fbc1e1b0d09a690f873\WindowsLive.Client.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\961b28b18dc304d4434ca9938abd1d60\WindowsFormsIntegration.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\58b6523c5167dd748a679e8a46330c32\TaskScheduler.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\e8583c3f80cd2a94f552a64b4953dde2\System.Web.Routing.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\394765924d5b924fe87103c943abc69c\System.Web.Extensions.Design.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\4b72a66912627a66c65ebc8ce8d82e91\System.Web.Entity.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\973d534cb631a5c9c7ea74842056332d\System.Web.Entity.Design.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\c80448d686095317e9019f48572b03e0\System.Web.DynamicData.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\a5f548d874a19f075ca408ac46e57d72\System.Web.Abstractions.ni.dll + 2012-06-14 13:52 . 2012-06-14 13:52 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b7a7f9c607e09bfa03c07b5ff3a8ae3\System.ServiceProcess.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\9023843c5179d58bd814b64f440679a1\System.Messaging.ni.dll + 2012-06-14 13:52 . 2012-06-14 13:52 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\4e3449df387e6a0680d25969da6f965a\System.Drawing.Design.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\0e9f88f220b048e2b0d2c8e3801e1fbd\napsnap.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\821bb293acac9e6fbb0dc69087e2a172\napinit.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\1f10581674c9eb08c896e21fc1f43be4\MMCFxCommon.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\49af28b21e53bc36f58c371995dfae1a\Microsoft.ManagementConsole.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\491bfb35b47079843c7faecb5b67787d\EventViewer.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\97a8bea875e2f88da466cfa59340a528\ehExtHost32.ni.exe - 2012-04-11 12:35 . 2012-01-26 23:35 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-13 13:17 . 2012-04-23 22:37 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-13 19:58 . 2012-05-17 22:35 1129472 c:\windows\SysWOW64\wininet.dll + 2012-06-13 19:58 . 2012-05-17 22:36 1103872 c:\windows\SysWOW64\urlmon.dll + 2012-06-13 19:58 . 2012-05-17 22:45 1800192 c:\windows\SysWOW64\jscript9.dll + 2012-06-13 19:58 . 2012-05-17 22:27 1793024 c:\windows\SysWOW64\iertutil.dll + 2012-06-13 19:58 . 2012-05-17 22:48 9737728 c:\windows\SysWOW64\ieframe.dll + 2012-06-13 19:58 . 2012-05-18 01:59 1392128 c:\windows\system32\wininet.dll + 2012-06-13 19:58 . 2012-05-18 01:59 1346048 c:\windows\system32\urlmon.dll + 2012-06-13 19:58 . 2012-05-18 02:06 2311680 c:\windows\system32\jscript9.dll + 2012-06-13 19:58 . 2012-05-18 01:54 2144768 c:\windows\system32\iertutil.dll + 2009-07-14 04:45 . 2012-06-14 13:47 3777877 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat - 2009-07-14 04:45 . 2012-06-05 12:33 3777877 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2010-02-04 23:23 . 2012-06-14 14:07 1243712 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2010-02-04 23:23 . 2012-06-14 14:07 6455900 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3138168355-341146757-651766743-1001-8192.dat + 2012-03-15 11:17 . 2012-03-15 11:17 5029672 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll - 2009-07-13 20:37 . 2009-06-10 20:40 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll + 2012-06-13 13:15 . 2012-03-21 22:28 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll + 2012-03-15 11:17 . 2012-03-15 11:17 5029672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll - 2009-07-13 20:46 . 2009-06-10 21:23 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2012-06-13 13:15 . 2012-03-21 22:29 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2012-06-13 20:09 . 2012-06-13 20:09 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2012-05-09 20:08 . 2012-05-09 20:08 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2012-05-09 20:08 . 2012-05-09 20:08 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll + 2012-06-13 20:08 . 2012-06-13 20:08 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - 2012-05-09 20:08 . 2012-05-09 20:08 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-06-13 20:08 . 2012-06-13 20:08 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-06-13 20:08 . 2012-06-13 20:08 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-06-13 20:08 . 2012-06-13 20:08 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll - 2012-05-09 20:08 . 2012-05-09 20:08 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll - 2012-05-09 20:08 . 2012-05-09 20:08 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2012-06-13 20:09 . 2012-06-13 20:09 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2012-05-09 20:08 . 2012-05-09 20:08 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2012-06-13 20:09 . 2012-06-13 20:09 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2012-06-13 20:08 . 2012-06-13 20:08 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2012-05-09 20:08 . 2012-05-09 20:08 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll + 2012-06-13 20:08 . 2012-06-13 20:08 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2012-05-09 20:08 . 2012-05-09 20:08 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2012-05-09 20:08 . 2012-05-09 20:08 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2012-06-13 20:09 . 2012-06-13 20:09 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll - 2012-05-09 20:08 . 2012-05-09 20:08 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll + 2012-06-13 20:09 . 2012-06-13 20:09 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2012-05-09 20:08 . 2012-05-09 20:08 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-06-13 20:09 . 2012-06-13 20:09 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-06-13 20:08 . 2012-06-13 20:08 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-09 20:08 . 2012-05-09 20:08 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-09 20:08 . 2012-05-09 20:08 3825952 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-13 20:09 . 2012-06-13 20:09 3825952 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-13 20:08 . 2012-06-13 20:08 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2012-05-09 20:08 . 2012-05-09 20:08 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2012-05-09 20:08 . 2012-05-09 20:08 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-06-13 20:08 . 2012-06-13 20:08 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-05-09 20:08 . 2012-05-09 20:08 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-06-13 20:08 . 2012-06-13 20:08 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-06-13 20:08 . 2012-06-13 20:08 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-05-09 20:08 . 2012-05-09 20:08 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-13 20:08 . 2012-06-13 20:08 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2012-05-09 20:08 . 2012-05-09 20:08 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-13 20:08 . 2012-06-13 20:08 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-05-09 20:08 . 2012-05-09 20:08 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-04-22 20:46 . 2012-04-22 20:46 1187328 c:\windows\Installer\837d5f.msp + 2012-03-15 12:26 . 2012-03-15 12:26 4212736 c:\windows\Installer\837d55.msp + 2012-06-13 20:07 . 2012-06-13 20:07 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\8fce722dc334f83b7695e7f64a629986\System.Deployment.ni.dll + 2012-06-13 20:07 . 2012-06-13 20:07 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\201c37951ad7baf71b37fa3c55097e58\System.Activities.Presentation.ni.dll + 2012-06-13 20:07 . 2012-06-13 20:07 2056704 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\32bece98175466e5a63d120d96e33269\PresentationUI.ni.dll + 2012-06-13 20:07 . 2012-06-13 20:07 1843712 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\f866554cae3c9bf97ef2fa2e90f4ebda\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-13 20:06 . 2012-06-13 20:06 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\44f8907ea08f9c7ff390b17a925a98fd\Microsoft.VisualBasic.ni.dll + 2012-06-13 20:09 . 2012-06-13 20:09 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\7f0476e4df01ca2219f7db531408e91c\System.Windows.Forms.DataVisualization.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\f87f8bc0bc9563096150f23f6c220e7b\System.Printing.ni.dll + 2012-06-13 20:09 . 2012-06-13 20:09 1666048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\e899cda47704280f54949c69b78c55cc\System.Deployment.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\36299fad6b7b591cfb6bd9e50dbd33df\System.Activities.Presentation.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\442af6f7c8b447bdec3ad8d23da89c5a\ReachFramework.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\cf455da9b8fedf66767c1a7ab3eea9c9\PresentationUI.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 1139712 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2ed0173a2e75b1a3943bd2d96649a50c\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\09c2f8f606e09d85cfe6e0ad89fbe729\Microsoft.VisualBasic.ni.dll + 2012-06-14 13:50 . 2012-06-14 13:50 2707456 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\13dec2cd87ea433f1746027ccbaa3bc4\System.Workflow.Runtime.ni.dll + 2012-06-14 13:50 . 2012-06-14 13:50 5955072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\1c1764b9120f6a73ebdfb58b8e4ab9df\System.Workflow.ComponentModel.ni.dll + 2012-06-14 13:50 . 2012-06-14 13:50 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\254e69d8d12742213f715fc860aad36f\System.Workflow.Activities.ni.dll + 2012-06-14 13:49 . 2012-06-14 13:49 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\35b994e63fbc2836f32326e9f5862a1b\System.Web.Services.ni.dll + 2012-06-14 13:49 . 2012-06-14 13:49 1453568 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\86a3611cdef98c49edd41c3cb52d5b81\System.Printing.ni.dll + 2012-06-14 13:47 . 2012-06-14 13:47 2318336 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\6ea40f2da0e2321428a7bdd387e475fd\System.Drawing.ni.dll + 2012-06-14 13:47 . 2012-06-14 13:47 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\817485fd285d4ceca00b5a2f54127187\System.Deployment.ni.dll + 2012-06-14 13:49 . 2012-06-14 13:49 3101696 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\ace65925339dc7a67f7d5801d305fea7\ReachFramework.ni.dll + 2012-06-14 13:48 . 2012-06-14 13:48 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\bb6de6dc7e0983ff5d5eb50e4d303401\PresentationUI.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b6af7cba1817dc28bdcea3f0552b05f3\Microsoft.MediaCenter.UI.ni.dll + 2012-06-14 14:06 . 2012-06-14 14:06 1516032 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\77cfbc9d38b1f0ba1dda1acbf8dc864e\Microsoft.MediaCenter.ni.dll + 2012-06-14 14:01 . 2012-06-14 14:01 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b7831aa9ae1459f54994bb88096135a0\WindowsLive.Writer.PostEditor.ni.dll + 2012-06-14 14:02 . 2012-06-14 14:02 1105408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5970a18cc76b9e7f063e964d61a7f3e4\WindowsLive.Writer.ApplicationFramework.ni.dll + 2012-06-14 14:01 . 2012-06-14 14:01 2018304 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2137f840aa4841440459310c974098ab\WindowsLive.Writer.CoreServices.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\b345f2895557e6ef39b94aebdeb4a57e\System.WorkflowServices.ni.dll + 2012-06-14 13:52 . 2012-06-14 13:52 1914880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\fd5cec6034bba6b7c0c9b8429b6f2222\System.Workflow.Runtime.ni.dll + 2012-06-14 13:52 . 2012-06-14 13:52 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\7ad53a4ed45b577ddc8f80aa5c8e012d\System.Workflow.ComponentModel.ni.dll + 2012-06-14 13:52 . 2012-06-14 13:52 2994688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\5c617f481e72820be334a511ad7e0648\System.Workflow.Activities.ni.dll + 2012-06-14 13:52 . 2012-06-14 13:52 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\a31a450e93129457172e6e101f3f328a\System.Web.Services.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\e950097b782a3726f9ec9a2662944e73\System.Web.Mobile.ni.dll + 2012-06-14 14:05 . 2012-06-14 14:05 2403840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\99d890cec9c7b5d0883d2d84ad98a457\System.Web.Extensions.ni.dll + 2012-06-14 13:51 . 2012-06-14 13:51 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\da97dedec4a2fd679a2c45b6e91b2481\System.Printing.ni.dll + 2012-06-14 13:51 . 2012-06-14 13:51 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ebefde27b0ef7f39bb49c493b34a602c\System.Drawing.ni.dll + 2012-06-14 13:51 . 2012-06-14 13:51 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\37aa8a6e1a69671c23eb916417629682\System.Deployment.ni.dll + 2012-06-14 13:51 . 2012-06-14 13:51 2147328 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4ddbf3609f6efff982c900440dcdb181\ReachFramework.ni.dll + 2012-06-14 13:51 . 2012-06-14 13:51 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\1b357b8f86096b51ac50f1d7c90fd9b9\PresentationUI.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\edd366eb04c2fe0aaabba01c5a2105e0\Narrator.ni.exe + 2012-06-14 14:04 . 2012-06-14 14:04 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\e143c439fa3698366c4b2b1911a5f8f2\MMCEx.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\66183b1d79527c54e9d5ffdd8f8fda69\MIGUIControls.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3eaec5bc57c67c3b24ca2bb281ca249d\Microsoft.VisualBasic.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b02bdb4f1d9b1e3fb1c5b79838e371e4\Microsoft.PowerShell.Editor.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4f309ae82c753663e09a9a4cdb8375e1\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\f606df7f73ca8fb4ad5fc8edf23c3a88\Microsoft.MediaCenter.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\3e794c9f632eef8f63037605644b2385\Microsoft.MediaCenter.UI.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\4c9b801dd450ef4344d43ba63cd8928f\Microsoft.Ink.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d7fe0033c89960de70477f3a3bf6f139\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-14 14:04 . 2012-06-14 14:04 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\608fbe1dfdc8d81dacec493fb0359ff4\Microsoft.Build.Tasks.ni.dll + 2012-06-14 14:03 . 2012-06-14 14:03 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\9118d768723cabeb71ee31c9ae817dd5\mcstore.ni.dll + 2012-06-13 13:15 . 2012-03-21 22:29 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2009-07-13 20:46 . 2009-06-10 21:23 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-06-13 19:58 . 2012-05-17 23:11 12314624 c:\windows\SysWOW64\mshtml.dll - 2009-07-14 02:34 . 2012-06-13 15:17 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat + 2009-07-14 02:34 . 2012-06-14 14:00 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat + 2012-06-13 19:58 . 2012-05-18 02:47 17807360 c:\windows\system32\mshtml.dll + 2010-02-15 09:11 . 2012-06-13 20:05 58957832 c:\windows\system32\MRT.exe + 2012-06-13 19:58 . 2012-05-18 02:16 10924032 c:\windows\system32\ieframe.dll + 2012-06-13 20:07 . 2012-06-13 20:07 17355264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\d9f25602d3fabd454ee8f8c0b7cd987f\System.Windows.Forms.ni.dll + 2012-06-13 20:09 . 2012-06-13 20:09 13198336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll + 2012-06-13 20:09 . 2012-06-13 20:09 18000896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll + 2012-06-13 20:09 . 2012-06-13 20:09 11451904 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll + 2012-06-14 13:48 . 2012-06-14 13:48 17382912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\ced1d3b0790804426463ad06a61f180e\System.Windows.Forms.ni.dll + 2012-06-14 13:49 . 2012-06-14 13:49 15252992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\f6514b690596d60ca9f4fa64e14a8355\System.Web.ni.dll + 2012-06-14 13:50 . 2012-06-14 13:50 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\dfb7152260d641e49ec1ecf0f2df0f37\System.Design.ni.dll + 2012-06-14 13:48 . 2012-06-14 13:48 19173376 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\916af5e5c39e1226e0b87a80e3a979f2\PresentationFramework.ni.dll + 2012-06-14 13:46 . 2012-06-14 13:46 16517120 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\ea90a194614680a484a25b6ccc4df754\PresentationCore.ni.dll + 2012-06-14 13:51 . 2012-06-14 13:51 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\009c50fb69919b90fb233cb4c35d0ad7\System.Windows.Forms.ni.dll + 2012-06-14 13:52 . 2012-06-14 13:52 11824128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\84fbf353f91385690a3e4e982aa6930e\System.Web.ni.dll + 2012-06-14 13:52 . 2012-06-14 13:52 10578432 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\1321319c8922886e520d2821b5a64dca\System.Design.ni.dll + 2012-06-14 13:51 . 2012-06-14 13:51 14325760 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\517358eb2fd962a942dd1ea6afc5b93e\PresentationFramework.ni.dll + 2012-06-14 13:51 . 2012-06-14 13:51 12218880 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\e9d0ba41128f363f2390c7e630129c2b\PresentationCore.ni.dll . -- Snapshot teruggezet naar huidige datum -- . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}] 2012-04-11 20:08 87440 ----a-w- c:\program files (x86)\adawaretb\adawareDx.dll . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] 2012-06-11 12:58 2068536 ----a-w- c:\program files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\adawaretb\adawareDx.dll" [2012-04-11 87440] "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll" [2012-06-11 2068536] . [HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}] . [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] "HPADVISOR"="c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-09-29 1685048] "RGSC"="c:\program files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" [2008-11-14 305064] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-08-17 39408] "Steam"="c:\program files (x86)\Steam\steam.exe" [2011-08-02 1242448] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-04 98304] "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504] "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2010-02-25 323640] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2010-03-23 500792] "VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976] "Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032] "AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008] "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-06-11 1104440] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files (x86)\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\progra~2\Bandoo\BndHook.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x] R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 135664] R2 NNFSVC;Norman Network Filtering service;c:\program files\Norman\Ngs\Bin\Nnf.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-05-03 158856] R3 dump_wmimmc;dump_wmimmc;c:\ijji\ENGLISH\AVA\Binaries\GameGuard\dump_wmimmc.sys [x] R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 135664] R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x] S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6a.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x] S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2009-03-02 89600] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 avgfws;AVG Firewall;c:\program files (x86)\AVG\AVG2012\avgfws.exe [2012-03-23 2321520] S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe [2012-04-30 5106744] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288] S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176] S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816] S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x] S2 vToolbarUpdater11.1.0;vToolbarUpdater11.1.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe [2012-06-11 935480] S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [x] S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [x] S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896] S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2009-08-20 12:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Inhoud van de 'Gedeelde Taken' map . 2012-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 09:55] . 2012-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 09:55] . 2012-06-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3138168355-341146757-651766743-1001Core.job - c:\users\Erik\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-23 11:52] . 2012-06-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3138168355-341146757-651766743-1001UA.job - c:\users\Erik\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-23 11:52] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-07-22 450048] "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-08-25 610872] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-27 171520] . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.lauwerscollege.nl/ uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office10\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll FF - ProfilePath - c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - AVG Secure Search FF - prefs.js: browser.startup.homepage - hxxp://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_1&u=AFBB9A88CC87736C2EF0A64FD4E5DFBC FF - prefs.js: keyword.URL - hxxp://nl.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=937811&p= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - user.js: network.cookie.cookieBehavior - 0 FF - user.js: privacy.clearOnShutdown.cookies - false FF - user.js: security.warn_viewing_mixed - false FF - user.js: security.warn_viewing_mixed.show_once - false FF - user.js: security.warn_submit_insecure - false FF - user.js: security.warn_submit_insecure.show_once - false . - - - - ORPHANS VERWIJDERD - - - - . WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) WebBrowser-{A8864317-E18B-4292-99D9-E6E65AB905D3} - (no file) WebBrowser-{87775FDB-6972-41F9-AE51-8326E38CB206} - (no file) WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_USERS\S-1-5-21-3138168355-341146757-651766743-1001\Software\SecuROM\License information*] "datasecu"=hex:9e,42,29,b6,f5,ae,c3,9f,d4,24,fc,66,9c,33,7c,af,23,1b,81,b4,12, 79,da,9d,64,f6,6f,83,40,c7,ca,6a,62,fd,83,7f,46,2a,48,35,a0,92,e7,5e,11,f4,\ "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe c:\program files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\program files (x86)\CyberLink\Shared files\RichVideo.exe c:\progra~2\Bandoo\Bandoo.exe c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe c:\program files (x86)\Common Files\Steam\SteamService.exe . ************************************************************************** . Voltooingstijd: 2012-06-14 16:16:16 - machine werd herstart ComboFix-quarantined-files.txt 2012-06-14 14:16 ComboFix2.txt 2012-06-13 17:47 . Pre-Run: 111.534.292.992 bytes beschikbaar Post-Run: 111.261.200.384 bytes beschikbaar . - - End Of File - - B38CBB18BF817E5344C4DC3C083BF6D9
  5. Erikm
    ComboFix is klaar, internet doet het weer. Hier de log: ComboFix 12-06-13.03 - Erik 13-06-2012 19:15:29.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.4092.2123 [GMT 2:00] Gestart vanuit: c:\users\Erik\Desktop\ComboFix.exe AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} FW: AVG Internet Security 2012 *Enabled* {621CC794-9486-F902-D092-0484E8EA828B} SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\HyperCam Toolbar\tbHElper.dll c:\program files (x86)\Windows Searchqu Toolbar c:\program files (x86)\Windows Searchqu Toolbar\INSTALL.LOG c:\program files (x86)\Windows Searchqu Toolbar\main.ico c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\.#searchqutb.js.1.3 c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search\engines.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search\search.xsl c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\about.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxpanelwin.xul c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxprefwin.xul c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxwin.xul c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\emailnotifierproviders.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\external.js c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\neterror.xhtml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\wmpstreamer.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\modules\datastore.jsm c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\preferences.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\searchqutb.js c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-mdl.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tl.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tr.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-dragresize.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-down.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-over.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-down.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-down.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-over.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\navico-home.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\panel.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\powered-mystart.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\tb_icon.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.js c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-mdl.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tl.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tr.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-dragresize.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-down.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-over.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-down.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-down.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-over.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\navico-home.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\panel.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\powered-mystart.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\tb_icon.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.js c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217.zip c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\bluelite.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\bluesky.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-search-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-search.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-settings-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-settings.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-widgets-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-widgets.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn_settings.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-back-ff.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-back.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-left.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-right.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-splitter.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-back.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-left.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-right.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-splitter.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-back-ff.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-back.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-left.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-right.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-splitter.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\ca.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\dictionary.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\divider.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\downloadcom.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\email.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\email_on.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\games.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\graphred0.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\graphred0_5.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\grey.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\headsup.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\ico-shield.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\images.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\add.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\aol.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-dn.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-right.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-up.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-end.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-start.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-end.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-start.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\blank.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-down-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-down-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-down-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\checkmark.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\chevron.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\collapse.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\comcast.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\dtx.css c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back-hot.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\expand.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\found.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\gmail.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_blue.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_cyan.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_lime.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_magenta.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_yellow.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\hotmail.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\imap.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\loadingMid.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lock.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\mailcom.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_bg-basic.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_separator_bar.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitem-splitter.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-vista.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\move.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\movetarget.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupGames.css c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\footer.htm c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gameData.js c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gameList.xsl c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gametype.xsl c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-download.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-play.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-download.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-play.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\popupGames.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\popupWidgets.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\pop.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\manager.css c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\slider.css c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\music-note.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slider.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slideron.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\track.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\managerpanel.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\volumeslider.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\remove.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rename.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\resize-box.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rss.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsschannelback.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\RSSLogo.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsstabdivider.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-left.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-right.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search-go.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\text-ellipsis.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\throbber.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\toolbarsplitter.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\transparent_1px.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_02.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_03.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_04.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_06.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_07.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_08.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_09.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_10.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_11.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_12.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_13.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_14.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_15.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_16.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_18.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_19.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_20.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_21.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-hot.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-normal.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\proxy.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\templateFF.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\throbber.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\weather.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\yahoo.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\lichen.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\logo-about.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\logo.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\maps.bmp c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\menuseparatorback.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\modify-save.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\modify.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\modifyhot.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\music.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\news.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-main.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-search.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-weather.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-widgets.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\orange.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\pixsy.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\relatedlinks.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-collapse.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-delete.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-expand.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-feed.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder-remove.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder-rename.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-found.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-reload.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-subscribe.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rssback.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\rsstopback.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\search-over.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\search.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-left.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-right.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchqutb.css c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\settings.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\shopping.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\siteinfo.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-bluelite.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-bluesky.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-grey.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-lichen.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-orange.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-yellow.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\technorati.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\throbber.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\toolbarsplitter.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\video.bmp c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\weather.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\web.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_allocine.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_bliptv.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calcal.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calculator.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_gservices.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_sudoku.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.jpg c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_trio.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_uconverter.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widgets-square-16px.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\widgets.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\wikipedia.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\yahoosearch.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\yellow.gif c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\youtube.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\chrome\skin\zoom.png c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\components\windowmediator.js c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\manifest.xml c:\program files (x86)\Windows Searchqu Toolbar\ToolBar\uninstall.exe c:\program files (x86)\Windows Searchqu Toolbar\UNWISE.EXE c:\program files (x86)\Windows Searchqu Toolbar\UnwiseLauncher.exe c:\users\Erik\AppData\Roaming\Iswa c:\users\Erik\AppData\Roaming\Iswa\gyim.cyx c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020} c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome.manifest c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\.#searchqutb.js.1.3 c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\data\search\engines.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\data\search\search.xsl c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\about.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxpanelwin.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxprefwin.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxwin.xul c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\emailnotifierproviders.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\external.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\neterror.xhtml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\wmpstreamer.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\modules\datastore.jsm c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\preferences.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\searchqutb.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-mdl.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tl.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tr.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-dragresize.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-down.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-over.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-down.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-down.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-over.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\navico-home.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\panel.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\powered-mystart.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\tb_icon.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-mdl.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tl.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tr.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-dragresize.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-down.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-over.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-down.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-down.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-over.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\navico-home.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\panel.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\powered-mystart.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\tb_icon.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217.zip c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\bluelite.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\bluesky.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-search-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-search.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-settings-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-settings.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-widgets-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-widgets.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn_settings.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-back-ff.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-back.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-left.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-right.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-splitter.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-back.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-left.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-right.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-splitter.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-back-ff.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-back.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-left.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-right.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-splitter.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\ca.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\dictionary.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\divider.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\downloadcom.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\email.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\email_on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\games.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\graphred0.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\graphred0_5.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\grey.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\headsup.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\ico-shield.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\images.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\add.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\aol.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-dn.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-right.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-up.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-end.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-mdl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-mdl_ff.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-start.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-end.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-mdl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-mdl_ff.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-start.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\blank.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnback-down-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnback-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnleft-down-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnleft-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnright-down-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnright-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\button-splitter-down-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\button-splitter-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\checkmark.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\chevron.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\collapse.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\comcast.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\dtx.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\edit-back-hot.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\edit-back.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\expand.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\found.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\gmail.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_blue.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_cyan.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_lime.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_magenta.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_yellow.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\hotmail.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\imap.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\lastsearch-thumb-back.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\loadingMid.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\lock.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\mailcom.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menu_bg-basic.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menu_separator_bar.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitem-splitter.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemback-down-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemback-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemleft-down-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemleft-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemright-down-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemright-vista.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\move.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\movetarget.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupAbout.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupGames.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupWidgets.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\footer.htm c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gamecategory.xsl c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gameData.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gameList.xsl c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gametype.xsl c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrow-sml-drop.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrow-sml.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrowr-bluew5.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-aboutbox.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-btnover.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-pnl520x390.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-close-grey.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-close-greyover.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-drag.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-next-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-next.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-previous-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-previous.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\gamethumb-on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\gamethumb2-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-calendar.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-download.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-joystick24.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-play.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-tags.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-Add.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-download.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-Info.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-play.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-shop.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\menul-bgon.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\menul-bgover.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\panel-botm-noscroll.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-bg-206.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-bg.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-topwin.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-disable.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-down.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-disable.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-down.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\star_x_grey.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\star_x_orange.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\TRUSTe_about.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-detailed-on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-detailed-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-thumb-on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-thumb-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\widgets-square-16px.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\widgets-square-24px.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\popupGames.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\popupWidgets.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\pop.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\css\manager.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\css\slider.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\bg-pnl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\btn-close-grey.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\btn-close-greyover.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\collapsed_button.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\expanded_button.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation-down.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-radio.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\music-note.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-pause-on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-pause.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-play-on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-play.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-bg.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-busy.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-on.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-warning.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-design-on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-design.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-on.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-0.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-1.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-2.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-3.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-mute.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\scrollbar-handle.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\scrollbar-track.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\slider.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\slideron.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\track.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\managerpanel.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\volumeslider.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\remove.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rename.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\resize-box.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rss.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rsschannelback.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\RSSLogo.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rsstabdivider.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\scroll-left.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\scroll-right.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\search-go.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\search.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\text-ellipsis.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\throbber.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\toolbarsplitter.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\transparent_1px.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_02.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_03.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_04.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_06.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_07.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_08.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_09.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_10.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_11.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_12.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_13.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_14.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_15.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_16.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_18.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_19.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_20.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_21.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\btn-close-grey.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\btn-close-greyover.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\close-hot.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\close-normal.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\loadingMid.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\proxy.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\template.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\template.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\templateFF.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\throbber.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\cond999.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\icons.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\na-s.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\na.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\weather.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\add.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\box-check.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\popupWeather.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\popupWeather.html c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\yahoo.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lichen.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\logo-about.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\logo.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\maps.bmp c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\menuseparatorback.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modify-save.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modify.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modifyhot.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\music.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\news.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-main.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-search.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-weather.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-widgets.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\orange.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\pixsy.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\relatedlinks.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-collapse.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-delete.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-expand.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-feed.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder-remove.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder-rename.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-found.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-reload.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-subscribe.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rssback.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rsstopback.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\search-over.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\search.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-left.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-middle.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-right.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchqutb.css c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\settings.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\shopping.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\siteinfo.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-bluelite.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-bluesky.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-grey.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-lichen.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-orange.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-yellow.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\technorati.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\throbber.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\toolbarsplitter.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\video.bmp c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\weather.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\web.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_allocine.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_bliptv.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_calcal.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_calculator.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_gservices.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_sudoku.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_todo.jpg c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_todo.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_trio.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_uconverter.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widgets-square-16px.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widgets.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\wikipedia.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\yahoosearch.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\yellow.gif c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\youtube.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\zoom.png c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\components\windowmediator.js c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\install.rdf c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\manifest.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\games\00d2dfc64c07a4f32824abac1d6f735b c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\games\3e4265e00cbc4a9cf22a105046a46d8a c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\games\44a5d79f5451d3036ba3986425e234c8 c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\games\GameCategories.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\games\GameTypes.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\guid.dat c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\preferences.dat c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\stats.dat c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\uninstallFF.dat c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\version.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\weather\ad50fc50723a0a4a3372293db4836476 c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\weather\f3f6ce303a8cb681b4839931e0d57e3d c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\weather\forecasts_cache.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\weather\observations_cache.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\weatherbutton_prefs.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\widgets_cache\84b70525cff6359fdeca553342c23e4c c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\widgets_cache\bf5b6317ae07da699882fc948f22eda4 c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\widgets_cache\category_cache.xml c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\searchqutb\widgets_cache\widget_cache.xml c:\users\Erik\Librarys\wgesdwx c:\windows\IsUn0413.exe . . (((((((((((((((((((( Bestanden Gemaakt van 2012-05-13 to 2012-06-13 )))))))))))))))))))))))))))))) . . 2012-06-13 17:25 . 2012-06-13 17:25 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-06-13 14:41 . 2012-06-13 14:41 -------- d-----w- c:\users\Erik\AppData\Roaming\Malwarebytes 2012-06-13 14:40 . 2012-06-13 14:40 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-06-13 14:40 . 2012-06-13 14:40 -------- d-----w- c:\programdata\Malwarebytes 2012-06-13 14:40 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-06-13 13:29 . 2012-06-13 13:29 388096 ----a-r- c:\users\Erik\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-06-13 13:29 . 2012-06-13 13:29 -------- d-----w- c:\program files (x86)\Trend Micro 2012-06-13 13:23 . 2012-06-13 13:23 -------- d-----w- c:\programdata\GFI Software 2012-06-11 12:59 . 2012-06-11 12:59 -------- d-----w- c:\users\Erik\AppData\Roaming\AVG2012 2012-06-11 12:59 . 2012-06-11 12:59 -------- d-----w- c:\users\Erik\AppData\Local\AVG Secure Search 2012-06-11 12:58 . 2012-06-11 12:59 -------- d-----w- c:\programdata\AVG Secure Search 2012-06-11 12:58 . 2012-06-11 12:58 -------- d-----w- c:\program files (x86)\Common Files\AVG Secure Search 2012-06-11 12:58 . 2012-06-11 12:59 -------- d-----w- c:\program files (x86)\AVG Secure Search 2012-06-11 12:56 . 2012-06-13 16:31 -------- d-----w- c:\windows\system32\drivers\AVG 2012-06-11 12:56 . 2012-06-11 13:14 -------- d-----w- c:\programdata\AVG2012 2012-06-11 12:37 . 2012-06-13 16:31 -------- d-----w- c:\programdata\MFAData 2012-06-10 18:26 . 2012-06-10 18:26 -------- d-----w- c:\users\Erik\AppData\Local\adaware 2012-06-10 18:24 . 2012-06-10 18:24 -------- d-----w- c:\programdata\Lavasoft 2012-06-10 18:23 . 2012-06-13 13:23 -------- d-----w- c:\program files (x86)\Ad-Aware Antivirus 2012-06-10 18:22 . 2012-06-10 18:26 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection 2012-06-10 18:22 . 2012-06-10 18:22 -------- d-----w- c:\program files (x86)\Toolbar Cleaner 2012-06-10 18:22 . 2012-06-10 18:22 -------- d-----w- c:\program files (x86)\adawaretb 2012-06-10 18:19 . 2012-06-10 22:24 -------- d-----w- c:\users\Erik\AppData\Roaming\Ad-Aware Antivirus 2012-06-09 10:14 . 2012-06-09 10:16 -------- d-----w- c:\users\Erik\AppData\Roaming\matrixCache11 2012-06-08 14:59 . 2012-05-08 17:02 8955792 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{39AAABF1-2C9B-49D1-A41B-9E05587D2894}\mpengine.dll 2012-06-02 18:41 . 2012-06-02 18:41 -------- d-----w- c:\program files (x86)\Microsoft Games 2012-06-01 14:58 . 2012-06-01 14:58 -------- d-----w- c:\program files (x86)\Common Files\Java 2012-06-01 14:58 . 2012-06-01 14:58 -------- d-----w- c:\program files (x86)\Oracle 2012-06-01 14:57 . 2012-04-04 16:47 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2012-05-25 14:21 . 2012-05-25 14:21 -------- d-----w- c:\program files (x86)\Common Files\Skype 2012-05-17 13:09 . 2012-06-13 17:39 -------- d-----w- c:\users\Erik\AppData\Roaming\Rowoda 2012-05-17 13:09 . 2012-06-10 15:38 -------- d-----w- c:\users\Erik\AppData\Roaming\Yhzal . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-04-19 02:50 . 2012-04-19 02:50 28480 ----a-w- c:\windows\system32\drivers\avgidsha.sys 2012-04-04 16:47 . 2010-04-30 06:48 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-04-02 05:34 . 2012-05-09 18:32 5504880 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-04-02 04:46 . 2012-05-09 18:32 3958128 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe 2012-04-02 04:46 . 2012-05-09 18:32 3902320 ----a-w- c:\windows\SysWow64\ntoskrnl.exe 2012-04-02 03:01 . 2012-05-09 18:32 3143680 ----a-w- c:\windows\system32\win32k.sys 2012-03-30 11:09 . 2012-05-09 18:32 1895280 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-03-19 03:17 . 2012-03-19 03:17 383808 ----a-w- c:\windows\system32\drivers\avgtdia.sys 2012-03-17 07:55 . 2012-05-09 18:32 75632 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-03-16 14:54 . 2011-12-14 15:37 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-03-24 13:51 . 2011-03-24 13:51 40445 ----a-w- c:\program files (x86)\uninstall.exe 2010-06-15 01:54 . 2010-06-15 01:54 153008 ----a-w- c:\program files (x86)\fraps64.dll 2010-06-15 01:54 . 2010-06-15 01:54 206768 ----a-w- c:\program files (x86)\fraps32.dll 2010-06-15 01:54 . 2010-06-15 01:54 74672 ----a-w- c:\program files (x86)\fraps64.dat 2010-06-15 01:54 . 2010-06-15 01:54 2320304 ----a-w- c:\program files (x86)\fraps.exe 2010-06-15 01:46 . 2010-06-15 01:46 163840 ----a-w- c:\program files (x86)\frapslcd.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}] 2012-04-11 20:08 87440 ----a-w- c:\program files (x86)\adawaretb\adawareDx.dll . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] 2012-06-11 12:58 2068536 ----a-w- c:\program files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\adawaretb\adawareDx.dll" [2012-04-11 87440] "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll" [2012-06-11 2068536] . [HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}] . [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] "HPADVISOR"="c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-09-29 1685048] "RGSC"="c:\program files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" [2008-11-14 305064] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-08-17 39408] "Steam"="c:\program files (x86)\Steam\steam.exe" [2011-08-02 1242448] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-04 98304] "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504] "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2010-02-25 323640] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2010-03-23 500792] "VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976] "Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032] "AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008] "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-06-11 1104440] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files (x86)\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\progra~2\Bandoo\BndHook.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x] R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 135664] R2 NNFSVC;Norman Network Filtering service;c:\program files\Norman\Ngs\Bin\Nnf.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-05-03 158856] R3 dump_wmimmc;dump_wmimmc;c:\ijji\ENGLISH\AVA\Binaries\GameGuard\dump_wmimmc.sys [x] R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 135664] R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x] S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6a.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x] S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2009-03-02 89600] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 avgfws;AVG Firewall;c:\program files (x86)\AVG\AVG2012\avgfws.exe [2012-03-23 2321520] S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe [2012-04-30 5106744] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288] S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176] S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816] S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x] S2 vToolbarUpdater11.1.0;vToolbarUpdater11.1.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe [2012-06-11 935480] S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [x] S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [x] S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896] S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2009-08-20 12:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Inhoud van de 'Gedeelde Taken' map . 2012-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 09:55] . 2012-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 09:55] . 2012-06-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3138168355-341146757-651766743-1001Core.job - c:\users\Erik\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-23 11:52] . 2012-06-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3138168355-341146757-651766743-1001UA.job - c:\users\Erik\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-23 11:52] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-07-22 450048] "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-08-25 610872] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-27 171520] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x1 . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.lauwerscollege.nl/ uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office10\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll FF - ProfilePath - c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - AVG Secure Search FF - prefs.js: browser.startup.homepage - hxxp://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_1&u=AFBB9A88CC87736C2EF0A64FD4E5DFBC FF - prefs.js: keyword.URL - hxxp://nl.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=937811&p= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com FF - Ext: Bandoo for Firefox: firefox@bandoo.com - %profile%\extensions\firefox@bandoo.com FF - Ext: Ask Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com FF - Ext: uTorrentBar_NL Community Toolbar: {87775fdb-6972-41f9-ae51-8326e38cb206} - %profile%\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206} FF - user.js: network.cookie.cookieBehavior - 0 FF - user.js: privacy.clearOnShutdown.cookies - false FF - user.js: security.warn_viewing_mixed - false FF - user.js: security.warn_viewing_mixed.show_once - false FF - user.js: security.warn_submit_insecure - false FF - user.js: security.warn_submit_insecure.show_once - false . - - - - ORPHANS VERWIJDERD - - - - . Wow6432Node-HKCU-Run-DAEMON Tools Lite - c:\program files (x86)\DAEMON Tools Lite\DTLite.exe Wow6432Node-HKCU-Run-EA Core - c:\program files (x86)\Electronic Arts\EADM\Core.exe WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) WebBrowser-{A8864317-E18B-4292-99D9-E6E65AB905D3} - (no file) WebBrowser-{87775FDB-6972-41F9-AE51-8326E38CB206} - (no file) WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-BabylonToolbar - c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.31.2\uninstall.exe AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe AddRemove-LEGO Racers - c:\windows\IsUn0413.exe AddRemove-mmfvsetup_is1 - c:\program files (x86)\MixMeister Fusion + Video\unins000.exe AddRemove-Monopoly v2.00.101 Crack - By Maggot Brain - c:\$recycle.bin\S-1-5-~3\$R5ETFWW\UNWISE.EXE AddRemove-SAMSUNG CDMA Modem - c:\windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe AddRemove-SAMSUNG Mobile USB Modem - c:\windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe AddRemove-SAMSUNG Mobile USB Modem 1.0 - c:\windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe AddRemove-WhatPulse - c:\program files (x86)\WhatPulse\uninst.exe AddRemove-{B60DCA15-56A3-4D2D-8747-22CF7D7B588B} - c:\program files (x86)\InstallShield Installation Information\{B60DCA15-56A3-4D2D-8747-22CF7D7B588B}\setup.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_USERS\S-1-5-21-3138168355-341146757-651766743-1001\Software\SecuROM\License information*] "datasecu"=hex:9e,42,29,b6,f5,ae,c3,9f,d4,24,fc,66,9c,33,7c,af,23,1b,81,b4,12, 79,da,9d,64,f6,6f,83,40,c7,ca,6a,62,fd,83,7f,46,2a,48,35,a0,92,e7,5e,11,f4,\ "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe c:\program files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\program files (x86)\CyberLink\Shared files\RichVideo.exe c:\progra~2\Bandoo\Bandoo.exe c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe c:\program files (x86)\Common Files\Steam\SteamService.exe c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe . ************************************************************************** . Voltooingstijd: 2012-06-13 19:47:37 - machine werd herstart ComboFix-quarantined-files.txt 2012-06-13 17:47 . Pre-Run: 109.692.362.752 bytes beschikbaar Post-Run: 109.666.111.488 bytes beschikbaar . - - End Of File - - D69ED446ED7D7CE80083AAB8F7A5C8E0
  6. Erikm
    Ik heb ComboFix gebruikt. Hij lijkt klaar te zijn, weet ik niet zeker. Ook probeerde ik internet te openen, het internet is nu weg. (Dit verstuur ik vanaf een andere pc.) Lijkt me dus niet echt goed. Erik ---------- Post toegevoegd om 19:42 ---------- Vorige post was om 19:30 ---------- Mijn pc is nu herstart door ComboFix, dus misschien is er niks aan de hand. Dus even afwachten.
  7. Erikm
    AVG heeft gescand, en vond een Trojaans Paard Agent3.BRDU. Hij heeft hem naar de quarantaine verplaatst.
  8. Erikm
    Zal ik doen.
  9. Erikm
    Hierbij het nieuwe HJT log en het MBAM log: HJT log: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:14:41, on 13-6-2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\Steam\Steam.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe C:\Program Files (x86)\AVG\AVG2012\avgtray.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\Internet Explorer\IELowutil.exe c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11g_ActiveX.exe C:\Windows\SysWOW64\NOTEPAD.EXE C:\Windows\SysWOW64\NOTEPAD.EXE C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Lauwers College R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Message from the Microsoft Safety & Security Center R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R3 - URLSearchHook: (no name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll O2 - BHO: Ad-Aware Security Toolbar - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: Ad-Aware Security Toolbar - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam" O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start O4 - HKLM\..\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\steam.exe" -silent O4 - HKCU\..\Run: [Google Update] "C:\Users\Erik\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll O20 - AppInit_DLLs: c:\progra~2\bandoo\bndhook.dll O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: ASP.NET-statusservice (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe O23 - Service: Bandoo Coordinator - Discordia Limited - C:\PROGRA~2\Bandoo\Bandoo.exe O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norman Network Filtering service (NNFSVC) - Unknown owner - C:\Program Files\Norman\Ngs\Bin\Nnf.exe (file missing) O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater11.1.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 15051 bytes MBAM log: Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Databaseversie: v2012.06.13.05 Windows 7 x64 NTFS Internet Explorer 9.0.8112.16421 Erik :: ERIK-LAPTOP [administrator] 13-6-2012 16:43:31 mbam-log-2012-06-13 (16-43-31).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 282442 Verstreken tijd: 15 minuut/minuten, 24 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 1 HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> Succesvol in quarantaine geplaatst en verwijderd. Registerwaarden gedetecteerd: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Microsoft® Windows® Operating System (Backdoor.Messa) -> Data: C:\Users\Erik\AppData\Roaming\Microsoft\Windows\Templates\VSCover.exe -> Succesvol in quarantaine geplaatst en verwijderd. Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) (einde) Dat waren ze dan. Erik.
  10. Erikm
    Hallo, Als ik het opdrachtprompt opstart en daarna sc stop etc intyp, komt bij de bandoo coordinator dat hij niet geinstalleerd is, en bij de NNFSVC en npggsvc 'toegang geweigerd'. Enig idee hoe dit op te lossen? Ik neem aan dat ik eerst dat moet doen voordat ik verder ga met de andere stappen. Alvast bedankt, Erik. ---------- Post toegevoegd om 16:32 ---------- Vorige post was om 16:29 ---------- Oh. Ik had niet gelezen dat als ik een foutmelding kreeg, ik gewoon verder moest gaan. Sorry. Erik
  11. Erikm
    Hallo, Ik heb wat problemen met mijn pc, namelijk een Trojaans Paard PSW.Generic9. AVG vond deze trojan in een heel aantal bestanden. Ook vond hij nog wat andere dingen, een Trojaans Paard Inject.KJ, een Trojaans Paard BackDoor.gen en nog een andere. Zouden jullie mij hiermee kunnen helpen? Hierbij een HJT logje: (Ik zag heel wat toolbars, geen idee waar die vandaan komen... Vast geinstalleerd met een of ander programma.) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:33:20, on 13-6-2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\Steam\Steam.exe C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe C:\Program Files (x86)\Ask.com\Updater\Updater.exe C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe C:\Program Files (x86)\AVG\AVG2012\avgtray.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IELowutil.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11g_ActiveX.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lauwerscollege.nl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Message from the Microsoft Safety & Security Center R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.6\youtubedownloaderToolbarIE.dll R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll R3 - URLSearchHook: RuneScape Toolbar - {a8864317-e18b-4292-99d9-e6e65ab905d3} - C:\Program Files (x86)\Runescape\tbRun1.dll R3 - URLSearchHook: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\tbuTor.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.31.2\bh\BabylonToolbar.dll (file missing) O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Ad-Aware Security Toolbar - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll O2 - BHO: Searchqu Toolbar - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\Program Files (x86)\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll O2 - BHO: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\tbuTor.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll O2 - BHO: RuneScape Toolbar - {a8864317-e18b-4292-99d9-e6e65ab905d3} - C:\Program Files (x86)\Runescape\tbRun1.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files (x86)\Bandoo\Plugins\IE\ieplugin.dll O2 - BHO: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.6\youtubedownloaderToolbarIE.dll O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O3 - Toolbar: HyperCam Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O3 - Toolbar: Searchqu Toolbar - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\Program Files (x86)\Windows Searchqu Toolbar\ToolBar\SearchquDx.dll O3 - Toolbar: RuneScape Toolbar - {a8864317-e18b-4292-99d9-e6e65ab905d3} - C:\Program Files (x86)\Runescape\tbRun1.dll O3 - Toolbar: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\tbuTor.dll O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.31.2\BabylonToolbarTlbr.dll (file missing) O3 - Toolbar: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.6\youtubedownloaderToolbarIE.dll O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: Ad-Aware Security Toolbar - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam" O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start O4 - HKLM\..\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start Free Uninstall Survey | AVG Nederland O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\steam.exe" -silent O4 - HKCU\..\Run: [Google Update] "C:\Users\Erik\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Microsoft® Windows® Operating System] C:\Users\Erik\AppData\Roaming\Microsoft\Windows\Templates\VSCover.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll O20 - AppInit_DLLs: c:\progra~2\bandoo\bndhook.dll O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: ASP.NET-statusservice (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe O23 - Service: Bandoo Coordinator - Discordia Limited - C:\PROGRA~2\Bandoo\Bandoo.exe O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norman Network Filtering service (NNFSVC) - Unknown owner - C:\Program Files\Norman\Ngs\Bin\Nnf.exe (file missing) O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater11.1.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 19217 bytes
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.