Ga naar inhoud

pas

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    79

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Alles dat geplaatst werd door pas

  1. pas
    Hey, kheb er al een hele tijd niet meer naar gekeken. Sorry. Ik zal 'm effe binnensteken in een computerwinkel in de buurt. Toch bedankt voor de hulp!!!
  2. pas
    Beste mensen, Sinds afgelopen weekend ondervind ik problemen met m'n pc. Enerzijds m'n yahoo-mail, die plots 'cannot display the page' zegt, anderzijds als ik verschillende pagina's bezoek op internet, zie ik bepaalde woorden in het groen staan. Ook bij het doorklikken gaat ie vaak naar een andere site, nl https://jsn.dorecore.net Hierbij een logje van de pc. Thuis zal ik eens proberen op de laptop, daar hij me vrij snel van m'n yahoo-pagina gooit. Met ,alweer, veel dank Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:12:08, on 3/12/2013 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\PROGRA~1\AVG\AVG2014\avgrsx.exe C:\Program Files\AVG\AVG2014\avgcsrvx.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\brsvc01a.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\AVG\AVG2014\avgidsagent.exe C:\Program Files\AVG\AVG2014\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\loggingserver.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ExpressFiles\EFUpdater.exe C:\Program Files\AVG\AVG2014\avgnsx.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe C:\Program Files\Dell\Media Experience\DMXLauncher.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\AVG\AVG2014\avgui.exe C:\Program Files\AVG Secure Search\vprot.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe c:\program files\common files\installshield\updateservice\isuspm.exe C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe C:\Program Files\ExpressFiles\ExpressFiles.exe C:\Program Files\Microsoft Office\Office\EXCEL.EXE C:\Program Files\Microsoft Office\Office\WINWORD.EXE C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Start.qone8.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://dellsearchedit.myway.com/samisc/dellsidebar.jhtml?p=DW R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.nl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Start.qone8.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search} R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search} R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Start.qone8.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Search} R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = Search} R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) O2 - BHO: BetterSrf - {8271B5D6-76D3-4ABF-AEB3-1721161C76BC} - C:\Program Files\Better-Surf\ie\BetterSrf.dll O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.24.6\bh\delta.dll O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file) O3 - Toolbar: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.24.6\deltaTlbr.dll O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [iSUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [NTRedirect] C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\esso\Application Data\BabSolution\Shared\enhancedNT.dll",Run O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: login.bat O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file) O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.2\ViProtocol.dll O20 - AppInit_DLLs: c:\docume~1\alluse~1\applic~1\browse~1\261562~1.220\{c16c1~1\browse~1.dll O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe O23 - Service: vToolbarUpdater17.1.2 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe -- End of file - 8432 bytes
  3. pas
    Geen idee, ik vermoed van niet. Normaal brandt een grien lichtje als ik 'm aanzet. Nu knippert er een geel lichtje en de pc zelf doet niks, zelfs geen gezoem.
  4. pas
    Nee, ie doet helemaal niks...
  5. pas
    Ja, die is aangesloten. Als ikde pc aanzet, gaat het lichtje aan en uit. Dit blijft nog effe duren nadat ik de stekker heb uitgetrokken. Bij het voormalig opstarten, maakte ie een beetje lawaai, maar nu doet ie werkelijk niks
  6. pas
    Beste, Bij het verplaatsen van mijn vaste pc, blijkt dat ie helemaal niks meer doet. Na het induwen van de aan/uit-knop, zie ik dat het lampje van die knop knippert. Hij doet verder niks. Is er een reset-knop ergens waar ik dit probleempje mee kan verhelpen?
  7. pas
    Heb tot op heden nog geen 'boete' meer gehad Bedankt!!!
  8. pas
    Ik krijg terug m'n bureablad als 1e gebruiker . Ik heb 'm evenwel een tweede keer laten lopen en die 'als verdachte aangeduidde' qwwjgr7.dss (die zoek.exe was weg, maar deze bleef staan)ook in quarantaine gezet, en 'm dan pas terug opgestart. Ondertussen cc cleaner laten kuis doen.
  9. pas
    logje: HitmanPro 3.7.8.207 [url="http://www.hitmanpro.com"]www.hitmanpro.com[/url] Computer name . . . . : PASCAL-TOSH Windows . . . . . . . : 6.1.1.7601.X64/2 User name . . . . . . : Pascal-TOSH\Pascal UAC . . . . . . . . . : Enabled License . . . . . . . : Trial (30 days left) Scan date . . . . . . : 2013-10-22 17:45:13 Scan mode . . . . . . : Normal Scan duration . . . . : 3m 1s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 0 Traces . . . . . . . : 15 Objects scanned . . . : 1.192.203 Files scanned . . . . : 21.777 Remnants scanned . . : 263.331 files / 907.095 keys Suspicious files ____________________________________________________________ C:\ProgramData\qwwjgr7.dss Size . . . . . . . : 172.032 bytes Age . . . . . . . : 1.0 days (2013-10-21 18:05:31) Entropy . . . . . : 5.3 SHA-256 . . . . . : 2CCCF38AF242A9DCF777810A2BB0525823C3382654CE541070587416AAD7A864 Product . . . . . : Операционная система Microsoft® Windows® Publisher . . . . : Корпорация Майкрософт Description . . . : Поставщик учета IAS Version . . . . . : 5.1.2600.0 Copyright . . . . : © Корпорация Майкрософт. Все права защищены. Gossip . . . . . . : wjgr7.dss Fuzzy . . . . . . : 23.0 The file name extension of this program is not common. Program starts automatically without user intervention. Uses the Startup folder in the Start Menu to run each time the user logs on. Time indicates that the file appeared recently on this computer. Authors name is missing in version info. This is not common to most programs. Startup C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk Forensic Cluster 0.0s C:\ProgramData\qwwjgr7.dss 0.0s C:\ProgramData\qwwjgr7.dss 1.6s C:\ProgramData\7rgjwwq.bxx 1.6s C:\ProgramData\7rgjwwq.bxx 3.6s C:\ProgramData\7rgjwwq.fvv 4.8s C:\ProgramData\7rgjwwq.pss 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk Potential Unwanted Programs _________________________________________________ HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}\ (Softonic) HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\ (Delta Search) HKLM\SOFTWARE\Classes\Prod.cap\ (Claro) HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}\ (Softonic) HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\ (Delta Search) HKLM\SOFTWARE\Wow6432Node\Babylon\ (Babylon) HKLM\SOFTWARE\Wow6432Node\DataMngr\ (SearchQU) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\AppDataLow\Software\Smartbar\ (Conduit) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\BabylonToolbar\ (Babylon) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Conduit\ (Conduit) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\DataMngr\ (SearchQU) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} (Claro) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Softonic\ (Softonic) - - - Updated - - - heb nog een logje, nadat ik 'm per ongeluk 2e maal liet scannen. Ben je hier wat mee? HitmanPro 3.7.8.207 [url="http://www.hitmanpro.com"]www.hitmanpro.com[/url] Computer name . . . . : PASCAL-TOSH Windows . . . . . . . : 6.1.1.7601.X64/2 User name . . . . . . : Pascal-TOSH\Pascal UAC . . . . . . . . . : Enabled License . . . . . . . : Trial (30 days left) Scan date . . . . . . : 2013-10-22 17:37:27 Scan mode . . . . . . : Normal Scan duration . . . . : 3m 18s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 16 Traces . . . . . . . : 31 Objects scanned . . . : 1.192.148 Files scanned . . . . : 21.784 Remnants scanned . . : 263.340 files / 907.024 keys Malware _____________________________________________________________________ C:\Users\Gast\AppData\Local\Temp\Temp2_zoek.zip\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 9.7 days (2013-10-13 01:42:46) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 109.0 Forensic Cluster 0.0s C:\Users\Gast\AppData\Local\Temp\Temp2_zoek.zip\zoek.exe 0.0s C:\Users\Gast\AppData\Local\Temp\Temp5_zoek.zip\zoek.exe 0.0s C:\Users\Gast\Desktop\zoek\zoek.exe C:\Users\Gast\AppData\Local\Temp\Temp3_zoek.zip\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.2 days (2013-10-17 11:44:57) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -1.8s C:\Users\Gast\AppData\Local\Temp\Temp3_zoek.zip\ 0.0s C:\Users\Gast\AppData\Local\Temp\Temp3_zoek.zip\zoek.com C:\Users\Gast\AppData\Local\Temp\Temp4_zoek.zip\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 5.1 days (2013-10-17 15:44:15) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 110.0 Forensic Cluster -34.8s C:\ProgramData\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip -4.4s C:\ProgramData\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip -3.5s C:\Users\Gast\AppData\Local\Temp\Temp4_zoek.zip\ 0.0s C:\Users\Gast\AppData\Local\Temp\Temp4_zoek.zip\zoek.exe C:\Users\Gast\AppData\Local\Temp\Temp5_zoek.zip\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:27:51) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 C:\Users\Gast\AppData\Local\Temp\Temp5_zoek.zip\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 9.7 days (2013-10-13 01:42:46) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 109.0 Forensic Cluster 0.0s C:\Users\Gast\AppData\Local\Temp\Temp2_zoek.zip\zoek.exe 0.0s C:\Users\Gast\AppData\Local\Temp\Temp5_zoek.zip\zoek.exe 0.0s C:\Users\Gast\Desktop\zoek\zoek.exe C:\Users\Gast\AppData\Local\Temp\Temp6_zoek.zip\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:41:45) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 110.0 Forensic Cluster -5.0s C:\Users\Gast\AppData\Local\Temp\Temp6_zoek.zip\ 0.0s C:\Users\Gast\AppData\Local\Temp\Temp6_zoek.zip\zoek.exe C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\zoek.com -> Quarantined Size . . . . . . . : 1.390.123 bytes Age . . . . . . . : 1.0 days (2013-10-21 18:47:29) Entropy . . . . . : 8.0 SHA-256 . . . . . : 6A6FCAC0576B891417BFBF3BD15144AB9321F29765E13F88FCD1B1989451CF0A > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jptr Fuzzy . . . . . . : 116.0 Forensic Cluster -4.9s C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\ -4.9s C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\ -4.9s C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\ 0.0s C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\zoek.com C:\Users\Gast\Desktop\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:42:05) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 C:\Users\Gast\Desktop\zoek.scr -> Quarantined Size . . . . . . . : 1.390.123 bytes Age . . . . . . . : 1.0 days (2013-10-21 18:47:46) Entropy . . . . . : 8.0 SHA-256 . . . . . : 6A6FCAC0576B891417BFBF3BD15144AB9321F29765E13F88FCD1B1989451CF0A > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jptr Fuzzy . . . . . . : 116.0 Forensic Cluster 0.0s C:\Users\Gast\Desktop\zoek.scr 0.0s C:\Users\Gast\Desktop\zoek.scr C:\Users\Gast\Desktop\zoek\zoek.com -> Quarantined Size . . . . . . . : 1.390.123 bytes Age . . . . . . . : 4.7 days (2013-10-18 01:26:22) Entropy . . . . . : 8.0 SHA-256 . . . . . : 6A6FCAC0576B891417BFBF3BD15144AB9321F29765E13F88FCD1B1989451CF0A > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jptr Fuzzy . . . . . . : 116.0 C:\Users\Gast\Desktop\zoek\zoek.scr -> Quarantined Size . . . . . . . : 1.390.123 bytes Age . . . . . . . : 4.7 days (2013-10-18 01:26:22) Entropy . . . . . : 8.0 SHA-256 . . . . . : 6A6FCAC0576B891417BFBF3BD15144AB9321F29765E13F88FCD1B1989451CF0A > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jptr Fuzzy . . . . . . : 116.0 C:\Users\Gast\Documents\zoek\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.1 days (2013-10-17 16:19:42) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -4.5s C:\Users\Gast\Documents\zoek\ -4.3s C:\Users\Gast\Documents\zoek\zoek.exe 0.0s C:\Users\Gast\Documents\zoek\zoek.com 4.6s C:\Users\Gast\Documents\zoek\zoek.scr C:\Users\Gast\Documents\zoek\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 5.1 days (2013-10-17 16:19:38) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 110.0 Forensic Cluster -0.1s C:\Users\Gast\Documents\zoek\ 0.0s C:\Users\Gast\Documents\zoek\zoek.exe 4.3s C:\Users\Gast\Documents\zoek\zoek.com 8.9s C:\Users\Gast\Documents\zoek\zoek.scr C:\Users\Gast\Documents\zoek\zoek.scr -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.1 days (2013-10-17 16:19:47) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -9.0s C:\Users\Gast\Documents\zoek\ -8.9s C:\Users\Gast\Documents\zoek\zoek.exe -4.6s C:\Users\Gast\Documents\zoek\zoek.com 0.0s C:\Users\Gast\Documents\zoek\zoek.scr C:\Users\Gast\Downloads\zoek (1)\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:46:37) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -4.0s C:\Users\Gast\Downloads\zoek (1)\ 0.0s C:\Users\Gast\Downloads\zoek (1)\zoek.com 5.2s C:\Users\Gast\Downloads\zoek (1)\zoek.scr C:\Users\Gast\Downloads\zoek (1)\zoek.scr -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:46:42) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -9.2s C:\Users\Gast\Downloads\zoek (1)\ -5.2s C:\Users\Gast\Downloads\zoek (1)\zoek.com 0.0s C:\Users\Gast\Downloads\zoek (1)\zoek.scr Suspicious files ____________________________________________________________ C:\ProgramData\qwwjgr7.dss Size . . . . . . . : 172.032 bytes Age . . . . . . . : 1.0 days (2013-10-21 18:05:31) Entropy . . . . . : 5.3 SHA-256 . . . . . : 2CCCF38AF242A9DCF777810A2BB0525823C3382654CE541070587416AAD7A864 Product . . . . . : Операционная система Microsoft® Windows® Publisher . . . . : Корпорация Майкрософт Description . . . : Поставщик учета IAS Version . . . . . : 5.1.2600.0 Copyright . . . . : © Корпорация Майкрософт. Все права защищены. Gossip . . . . . . : wjgr7.dss Fuzzy . . . . . . : 23.0 The file name extension of this program is not common. Program starts automatically without user intervention. Uses the Startup folder in the Start Menu to run each time the user logs on. Time indicates that the file appeared recently on this computer. Authors name is missing in version info. This is not common to most programs. Startup C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk Forensic Cluster 0.0s C:\ProgramData\qwwjgr7.dss 0.0s C:\ProgramData\qwwjgr7.dss 1.6s C:\ProgramData\7rgjwwq.bxx 1.6s C:\ProgramData\7rgjwwq.bxx 3.6s C:\ProgramData\7rgjwwq.fvv 4.8s C:\ProgramData\7rgjwwq.pss 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk Potential Unwanted Programs _________________________________________________ HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}\ (Softonic) HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\ (Delta Search) HKLM\SOFTWARE\Classes\Prod.cap\ (Claro) HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}\ (Softonic) HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\ (Delta Search) HKLM\SOFTWARE\Wow6432Node\Babylon\ (Babylon) HKLM\SOFTWARE\Wow6432Node\DataMngr\ (SearchQU) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\AppDataLow\Software\Smartbar\ (Conduit) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\BabylonToolbar\ (Babylon) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Conduit\ (Conduit) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\DataMngr\ (SearchQU) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} (Claro) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Softonic\ (Softonic) - - - Updated - - - heb nog een logje, nadat ik 'm per ongeluk 2e maal liet scannen. Ben je hier wat mee? HitmanPro 3.7.8.207 [url="http://www.hitmanpro.com"]www.hitmanpro.com[/url] Computer name . . . . : PASCAL-TOSH Windows . . . . . . . : 6.1.1.7601.X64/2 User name . . . . . . : Pascal-TOSH\Pascal UAC . . . . . . . . . : Enabled License . . . . . . . : Trial (30 days left) Scan date . . . . . . : 2013-10-22 17:37:27 Scan mode . . . . . . : Normal Scan duration . . . . : 3m 18s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 16 Traces . . . . . . . : 31 Objects scanned . . . : 1.192.148 Files scanned . . . . : 21.784 Remnants scanned . . : 263.340 files / 907.024 keys Malware _____________________________________________________________________ C:\Users\Gast\AppData\Local\Temp\Temp2_zoek.zip\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 9.7 days (2013-10-13 01:42:46) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 109.0 Forensic Cluster 0.0s C:\Users\Gast\AppData\Local\Temp\Temp2_zoek.zip\zoek.exe 0.0s C:\Users\Gast\AppData\Local\Temp\Temp5_zoek.zip\zoek.exe 0.0s C:\Users\Gast\Desktop\zoek\zoek.exe C:\Users\Gast\AppData\Local\Temp\Temp3_zoek.zip\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.2 days (2013-10-17 11:44:57) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -1.8s C:\Users\Gast\AppData\Local\Temp\Temp3_zoek.zip\ 0.0s C:\Users\Gast\AppData\Local\Temp\Temp3_zoek.zip\zoek.com C:\Users\Gast\AppData\Local\Temp\Temp4_zoek.zip\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 5.1 days (2013-10-17 15:44:15) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 110.0 Forensic Cluster -34.8s C:\ProgramData\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip -4.4s C:\ProgramData\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip -3.5s C:\Users\Gast\AppData\Local\Temp\Temp4_zoek.zip\ 0.0s C:\Users\Gast\AppData\Local\Temp\Temp4_zoek.zip\zoek.exe C:\Users\Gast\AppData\Local\Temp\Temp5_zoek.zip\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:27:51) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 C:\Users\Gast\AppData\Local\Temp\Temp5_zoek.zip\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 9.7 days (2013-10-13 01:42:46) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 109.0 Forensic Cluster 0.0s C:\Users\Gast\AppData\Local\Temp\Temp2_zoek.zip\zoek.exe 0.0s C:\Users\Gast\AppData\Local\Temp\Temp5_zoek.zip\zoek.exe 0.0s C:\Users\Gast\Desktop\zoek\zoek.exe C:\Users\Gast\AppData\Local\Temp\Temp6_zoek.zip\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:41:45) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 110.0 Forensic Cluster -5.0s C:\Users\Gast\AppData\Local\Temp\Temp6_zoek.zip\ 0.0s C:\Users\Gast\AppData\Local\Temp\Temp6_zoek.zip\zoek.exe C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\zoek.com -> Quarantined Size . . . . . . . : 1.390.123 bytes Age . . . . . . . : 1.0 days (2013-10-21 18:47:29) Entropy . . . . . : 8.0 SHA-256 . . . . . : 6A6FCAC0576B891417BFBF3BD15144AB9321F29765E13F88FCD1B1989451CF0A > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jptr Fuzzy . . . . . . : 116.0 Forensic Cluster -4.9s C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\ -4.9s C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\ -4.9s C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\ 0.0s C:\Users\Gast\AppData\Local\Temp\Temp7_zoek.zip\zoek.com C:\Users\Gast\Desktop\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:42:05) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 C:\Users\Gast\Desktop\zoek.scr -> Quarantined Size . . . . . . . : 1.390.123 bytes Age . . . . . . . : 1.0 days (2013-10-21 18:47:46) Entropy . . . . . : 8.0 SHA-256 . . . . . : 6A6FCAC0576B891417BFBF3BD15144AB9321F29765E13F88FCD1B1989451CF0A > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jptr Fuzzy . . . . . . : 116.0 Forensic Cluster 0.0s C:\Users\Gast\Desktop\zoek.scr 0.0s C:\Users\Gast\Desktop\zoek.scr C:\Users\Gast\Desktop\zoek\zoek.com -> Quarantined Size . . . . . . . : 1.390.123 bytes Age . . . . . . . : 4.7 days (2013-10-18 01:26:22) Entropy . . . . . : 8.0 SHA-256 . . . . . : 6A6FCAC0576B891417BFBF3BD15144AB9321F29765E13F88FCD1B1989451CF0A > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jptr Fuzzy . . . . . . : 116.0 C:\Users\Gast\Desktop\zoek\zoek.scr -> Quarantined Size . . . . . . . : 1.390.123 bytes Age . . . . . . . : 4.7 days (2013-10-18 01:26:22) Entropy . . . . . : 8.0 SHA-256 . . . . . : 6A6FCAC0576B891417BFBF3BD15144AB9321F29765E13F88FCD1B1989451CF0A > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jptr Fuzzy . . . . . . : 116.0 C:\Users\Gast\Documents\zoek\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.1 days (2013-10-17 16:19:42) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -4.5s C:\Users\Gast\Documents\zoek\ -4.3s C:\Users\Gast\Documents\zoek\zoek.exe 0.0s C:\Users\Gast\Documents\zoek\zoek.com 4.6s C:\Users\Gast\Documents\zoek\zoek.scr C:\Users\Gast\Documents\zoek\zoek.exe -> Quarantined Size . . . . . . . : 1.265.664 bytes Age . . . . . . . : 5.1 days (2013-10-17 16:19:38) Entropy . . . . . : 8.0 SHA-256 . . . . . : 85DC5F633AA84B6EE997B1874387019964A689163B3A4A6FFF6D022B7465339B Needs elevation . : Yes Product . . . . . : Zoek Publisher . . . . : [url]http://hijackthis.nl/smeenk[/url] Description . . . : Search Tool Version . . . . . : 4,0,0,5 Copyright . . . . : 2010 - 2013 (c) Smeenk > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmz Fuzzy . . . . . . : 110.0 Forensic Cluster -0.1s C:\Users\Gast\Documents\zoek\ 0.0s C:\Users\Gast\Documents\zoek\zoek.exe 4.3s C:\Users\Gast\Documents\zoek\zoek.com 8.9s C:\Users\Gast\Documents\zoek\zoek.scr C:\Users\Gast\Documents\zoek\zoek.scr -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.1 days (2013-10-17 16:19:47) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -9.0s C:\Users\Gast\Documents\zoek\ -8.9s C:\Users\Gast\Documents\zoek\zoek.exe -4.6s C:\Users\Gast\Documents\zoek\zoek.com 0.0s C:\Users\Gast\Documents\zoek\zoek.scr C:\Users\Gast\Downloads\zoek (1)\zoek.com -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:46:37) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -4.0s C:\Users\Gast\Downloads\zoek (1)\ 0.0s C:\Users\Gast\Downloads\zoek (1)\zoek.com 5.2s C:\Users\Gast\Downloads\zoek (1)\zoek.scr C:\Users\Gast\Downloads\zoek (1)\zoek.scr -> Quarantined Size . . . . . . . : 1.388.542 bytes Age . . . . . . . : 5.0 days (2013-10-17 16:46:42) Entropy . . . . . : 8.0 SHA-256 . . . . . : F1F4F9664437E5D89D94116BA5E665404D23145005024860E05B372D833D3735 > Kaspersky . . . . : Trojan-Dropper.Win32.Injector.jpmy Fuzzy . . . . . . : 116.0 Forensic Cluster -9.2s C:\Users\Gast\Downloads\zoek (1)\ -5.2s C:\Users\Gast\Downloads\zoek (1)\zoek.com 0.0s C:\Users\Gast\Downloads\zoek (1)\zoek.scr Suspicious files ____________________________________________________________ C:\ProgramData\qwwjgr7.dss Size . . . . . . . : 172.032 bytes Age . . . . . . . : 1.0 days (2013-10-21 18:05:31) Entropy . . . . . : 5.3 SHA-256 . . . . . : 2CCCF38AF242A9DCF777810A2BB0525823C3382654CE541070587416AAD7A864 Product . . . . . : Операционная система Microsoft® Windows® Publisher . . . . : Корпорация Майкрософт Description . . . : Поставщик учета IAS Version . . . . . : 5.1.2600.0 Copyright . . . . : © Корпорация Майкрософт. Все права защищены. Gossip . . . . . . : wjgr7.dss Fuzzy . . . . . . : 23.0 The file name extension of this program is not common. Program starts automatically without user intervention. Uses the Startup folder in the Start Menu to run each time the user logs on. Time indicates that the file appeared recently on this computer. Authors name is missing in version info. This is not common to most programs. Startup C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk Forensic Cluster 0.0s C:\ProgramData\qwwjgr7.dss 0.0s C:\ProgramData\qwwjgr7.dss 1.6s C:\ProgramData\7rgjwwq.bxx 1.6s C:\ProgramData\7rgjwwq.bxx 3.6s C:\ProgramData\7rgjwwq.fvv 4.8s C:\ProgramData\7rgjwwq.pss 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 5.1s C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk Potential Unwanted Programs _________________________________________________ HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}\ (Softonic) HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\ (Delta Search) HKLM\SOFTWARE\Classes\Prod.cap\ (Claro) HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}\ (Softonic) HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\ (Delta Search) HKLM\SOFTWARE\Wow6432Node\Babylon\ (Babylon) HKLM\SOFTWARE\Wow6432Node\DataMngr\ (SearchQU) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\AppDataLow\Software\Smartbar\ (Conduit) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\BabylonToolbar\ (Babylon) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Conduit\ (Conduit) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\DataMngr\ (SearchQU) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} (Claro) HKU\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Softonic\ (Softonic) - - - Updated - - - Ja, sorry. Heb net wat zitten prutsen... 2e logje zal het eerste geweest zijn.
  10. pas
    Ziehier logje met bovenstaande code Zoek.exe Version 4.0.0.5 Updated 22-October-2013 Tool run by Pascal on di 22/10/2013 at 16:35:28,42. Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gast\Desktop\zoek\zoek.exe [script inserted] ==== Older Logs ====================== \zoek-results2013-10-21-173102.log 33789 bytes \zoek-results2013-10-21-181719.log 17057 bytes \zoek-results2013-10-21-185730.log 3962 bytes \zoek-results2013-10-21-193241.log 4104 bytes \zoek-results2013-10-22-105334.log 576 bytes \zoek-results2013-10-22-142851.log 115068 bytes ==== Torpig Check ====================== HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem {217FC9C0-3AEA-1069-A2DB-08002B30309D} %SystemRoot%\system32\shell32.dll HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing {40dd6e20-7c17-11ce-a804-00aa003ca9f6} %SystemRoot%\system32\ntshrui.dll ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Registry Exports ====================== [HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers] [HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem] @="{217FC9C0-3AEA-1069-A2DB-08002B30309D}" [HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing] @="{40dd6e20-7c17-11ce-a804-00aa003ca9f6}" ==== Registry Exports x64 ====================== [HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers] [HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem] @="{217FC9C0-3AEA-1069-A2DB-08002B30309D}" [HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing] @="{40dd6e20-7c17-11ce-a804-00aa003ca9f6}" ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Pascal\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2013-10-11 13:36:05 351B1A5B8A02A59DD29D122B0D231FA6 2706432 ----a-w- C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 13:36:04 5E775F0C365F01A8A7382BBEFC4A53A5 391168 ----a-w- C:\Windows\SysWOW64\ieui.dll 2013-10-11 13:36:01 BE8F3297A0BC3D3E3B66D9A45F64F0B9 61440 ----a-w- C:\Windows\SysWOW64\iesetup.dll 2013-10-11 13:36:01 6E9013E3D112E26A42EC057CAE990649 109056 ----a-w- C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 13:36:01 58A43D9DFFF91C1457EC47BDCF969B59 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 13:36:01 556F70EDECE99CCD64C7D8897F3264F4 33280 ----a-w- C:\Windows\SysWOW64\iernonce.dll 2013-10-11 13:36:00 122B216B091D06F672CC8D331128FB06 2048512 ----a-w- C:\Windows\SysWOW64\iertutil.dll 2013-10-11 13:35:57 883C0D3A22CE87A3203CD5518EBB5758 493056 ----a-w- C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 13:35:56 E02C01EB0ED522327AFF3BE5CBCF6017 690688 ----a-w- C:\Windows\SysWOW64\jscript.dll 2013-10-11 13:35:53 5A847E98EAF032928E67EE52DE08952D 2876928 ----a-w- C:\Windows\SysWOW64\jscript9.dll 2013-10-11 13:35:52 61DC3F2BE3093FE22CD717260946D7AD 1141248 ----a-w- C:\Windows\SysWOW64\urlmon.dll 2013-10-11 13:35:48 E4FEB264B47360B7296AEA4E052F88D8 1767936 ----a-w- C:\Windows\SysWOW64\wininet.dll 2013-10-11 13:35:48 DC7DB5BC0E2D135103730E08FE1C540D 39424 ----a-w- C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 13:35:46 8F5EAAF76A6811332A8C67DB0D4C395F 13761024 ----a-w- C:\Windows\SysWOW64\ieframe.dll 2013-10-11 13:35:35 A7221924181C8EB92B64C5A2D888BEA5 14335488 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2013-10-10 05:23:02 75F5E1FE8D55CF8E577E0EC5F2290D3F 530432 ----a-w- C:\Windows\SysWOW64\comctl32.dll 2013-10-10 05:22:59 CC23295DA8F7B5C53F93804D2F5D30EB 25600 ----a-w- C:\Windows\SysWOW64\lpk.dll 2013-10-10 05:22:59 8CC4638FA7B5B921B9080CF962582C0B 70656 ----a-w- C:\Windows\SysWOW64\fontsub.dll 2013-10-10 05:22:59 7D27E63B54DB093BB0D9E95F81094D75 34304 ----a-w- C:\Windows\SysWOW64\atmlib.dll 2013-10-10 05:22:59 5C6B44F9CAAC475B7B9EBBC29CB7F065 295424 ----a-w- C:\Windows\SysWOW64\atmfd.dll 2013-10-10 05:22:59 2342EC9254F4C60CA98441BD65C89E12 10240 ----a-w- C:\Windows\SysWOW64\dciman32.dll 2013-10-10 05:22:55 E94C583CDE2348950155F2AF2876F34D 231424 ----a-w- C:\Windows\SysWOW64\mswsock.dll 2013-10-10 05:22:53 EAF4712B706936C0B10D3B5319B37E81 81920 ----a-w- C:\Windows\SysWOW64\davclnt.dll 2013-10-10 05:22:53 75E8EBD7040CE238684333F97014762A 205824 ----a-w- C:\Windows\SysWOW64\WebClnt.dll 2013-10-10 05:22:38 482C8CD985C727C7C78A5E9B320947F0 3969472 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-10 05:22:36 813A7F5A2D6D366EB3FFB643B851BCE5 3914176 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-10 05:22:36 401D25136E26B237D77DA1BF1198B3BD 619520 ----a-w- C:\Windows\SysWOW64\tdh.dll 2013-10-10 05:22:35 D67472125471784DE7147946EDA25FEB 640512 ----a-w- C:\Windows\SysWOW64\advapi32.dll 2013-10-10 05:22:35 A2B0924D50F4435FD389499047CE553A 1292192 ----a-w- C:\Windows\SysWOW64\ntdll.dll 2013-10-10 05:22:34 DEE3A05EB88EAFE9C5FF9643676ECC60 14336 ----a-w- C:\Windows\SysWOW64\ntvdm64.dll 2013-10-10 05:22:34 DA1340AC8B22D0719F47222C8D508393 25600 ----a-w- C:\Windows\SysWOW64\setup16.exe 2013-10-10 05:22:34 D37B27C1F5FE8CFFCCA80FFD4F91149B 5120 ----a-w- C:\Windows\SysWOW64\wow32.dll 2013-10-10 05:22:34 8C3D064E7B7C0F3685A441A37A93C5D1 7680 ----a-w- C:\Windows\SysWOW64\instnm.exe 2013-10-10 05:22:34 5244D544B022E70881794563D657B5EF 2048 ----a-w- C:\Windows\SysWOW64\user.exe 2013-10-10 05:22:25 2A01B40C8334A8124001CFAC256FCA83 102608 ----a-w- C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2013-10-11 13:36:05 990235D752A40F5F8243ED537FAB2035 2706432 ----a-w- C:\Windows\Sysnative\mshtml.tlb 2013-10-11 13:36:03 991A9D6B797B4D7E9EB29BE1FB4B1D28 526336 ----a-w- C:\Windows\Sysnative\ieui.dll 2013-10-11 13:36:01 C4DDAC3F3062739C4C2BB759B36E005D 51712 ----a-w- C:\Windows\Sysnative\ie4uinit.exe 2013-10-11 13:36:01 A80B91A93EDFFDE3DD2646D6E4CDDC44 67072 ----a-w- C:\Windows\Sysnative\iesetup.dll 2013-10-11 13:36:01 742B2C69643527763E162C0BA923D086 136704 ----a-w- C:\Windows\Sysnative\iesysprep.dll 2013-10-11 13:36:01 4163195B6D07D3434BDEA78C293B7E0E 89600 ----a-w- C:\Windows\Sysnative\RegisterIEPKEYs.exe 2013-10-11 13:36:01 38CFAC1BAFEBC8B0AF8A22093803D38E 39936 ----a-w- C:\Windows\Sysnative\iernonce.dll 2013-10-11 13:35:59 199BD40B1890E1EEFF7438B59787534F 2647552 ----a-w- C:\Windows\Sysnative\iertutil.dll 2013-10-11 13:35:57 214E39F0A8E382F1889B26B46DE0AF81 603136 ----a-w- C:\Windows\Sysnative\msfeeds.dll 2013-10-11 13:35:56 7B4E06047031B2AAA4AE10F00C59BFC7 855552 ----a-w- C:\Windows\Sysnative\jscript.dll 2013-10-11 13:35:54 D383602755758FA81166B0FD8AFE6D40 3959296 ----a-w- C:\Windows\Sysnative\jscript9.dll 2013-10-11 13:35:51 882AC0DD997CFC90FBB468D698BD55C6 1365504 ----a-w- C:\Windows\Sysnative\urlmon.dll 2013-10-11 13:35:48 16A3E229F60FA4B05573A0937AB3C3CB 53248 ----a-w- C:\Windows\Sysnative\jsproxy.dll 2013-10-11 13:35:47 D28B35DE88D27EFB27DF4B1E8319E3C0 2241024 ----a-w- C:\Windows\Sysnative\wininet.dll 2013-10-11 13:35:44 CCDB8FDC289AA9AFA5F8827A2ADB21AD 15404544 ----a-w- C:\Windows\Sysnative\ieframe.dll 2013-10-11 13:35:40 F026C6F104758D0EB215B017016FAE27 19252224 ----a-w- C:\Windows\Sysnative\mshtml.dll 2013-10-10 05:23:02 9028D1621C43DF8DFBD1C76860412A11 633856 ----a-w- C:\Windows\Sysnative\comctl32.dll 2013-10-10 05:22:59 E1BB958681BE311E7CFF06CFEC5F1F2B 368128 ----a-w- C:\Windows\Sysnative\atmfd.dll 2013-10-10 05:22:59 D6BAE9B4B210D71CDDADC224CEFCDB5F 100864 ----a-w- C:\Windows\Sysnative\fontsub.dll 2013-10-10 05:22:59 A5ED9421B8D09ED4F57CDA386307713E 14336 ----a-w- C:\Windows\Sysnative\dciman32.dll 2013-10-10 05:22:59 796B47A4B82EF1C39F13435B88834C48 41472 ----a-w- C:\Windows\Sysnative\lpk.dll 2013-10-10 05:22:59 142671F462619CB64BA74F5B70136CB4 46080 ----a-w- C:\Windows\Sysnative\atmlib.dll 2013-10-10 05:22:55 9A9F9F1A77D6A80EE28B57664F00013E 327168 ----a-w- C:\Windows\Sysnative\mswsock.dll 2013-10-10 05:22:53 B32AB94A432289AC2DF77A3DCAD32EED 102400 ----a-w- C:\Windows\Sysnative\davclnt.dll 2013-10-10 05:22:53 0EB0E5D22B1760F2DBCE632F2DD7A54D 259584 ----a-w- C:\Windows\Sysnative\WebClnt.dll 2013-10-10 05:22:50 19320B121BFE7462EADD50A42C81AFD0 3155968 ----a-w- C:\Windows\Sysnative\win32k.sys 2013-10-10 05:22:44 5B9A6A310326D9C438F2C19FBBE97C97 5549504 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe 2013-10-10 05:22:39 63A580C88CFAF72A92550940054569EF 878080 ----a-w- C:\Windows\Sysnative\advapi32.dll 2013-10-10 05:22:37 A3FCC4F97551087D65F8FEE879FEF736 859648 ----a-w- C:\Windows\Sysnative\tdh.dll 2013-10-10 05:22:35 CAAAC014C5C56A69F710B5F1B836DE22 1732032 ----a-w- C:\Windows\Sysnative\ntdll.dll 2013-10-10 05:22:35 70833F5A59F65908698093889C34BCA2 243712 ----a-w- C:\Windows\Sysnative\wow64.dll 2013-10-10 05:22:25 764DF431D13537A575752009E7740F18 124112 ----a-w- C:\Windows\Sysnative\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 05:22:23 56661BB55AE4633677F846FFCD080ECA 461312 ----a-w- C:\Windows\Sysnative\scavengeui.dll ====== C:\Windows\Sysnative\drivers ===== 2013-10-10 05:22:58 E2C933EDBC389386EBE6D2BA953F43D8 785624 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys 2013-10-10 05:22:57 B0435098C81D04CAFFF80DDB746CD3A2 109824 ----a-w- C:\Windows\Sysnative\drivers\USBAUDIO.sys 2013-10-10 05:22:57 80B0F7D5CCF86CEB5D402EAAF61FEC31 100864 ----a-w- C:\Windows\Sysnative\drivers\usbcir.sys 2013-10-10 05:22:57 1F775DA4CF1A3A1834207E975A72E9D7 185344 ----a-w- C:\Windows\Sysnative\drivers\usbvideo.sys 2013-10-10 05:22:55 40AF23633D197905F03AB5628C558C51 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2013-10-10 05:22:55 314C17917AC8523EC77A710215012A65 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys 2013-10-10 05:22:53 1A4F75E63C9FB84B85DFFC6B63FD5404 140800 ----a-w- C:\Windows\Sysnative\drivers\mrxdav.sys 2013-10-10 05:22:52 856E76B3641746ABBC2946BED1372098 32896 ----a-w- C:\Windows\Sysnative\drivers\hidparse.sys 2013-10-10 05:22:52 597C3699384E53CC59587ED50CCE5CA2 76800 ----a-w- C:\Windows\Sysnative\drivers\hidclass.sys 2013-10-10 05:22:24 88612F1CE3BF42256913BF6E61C70D52 983488 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys ====== C:\Windows\Tasks ====== 2013-10-15 14:18:14 B2F9E6CAFE98A5A40DC51763495EBB3A 2986 ----a-w- C:\Windows\Sysnative\Tasks\{DE3254F7-47A8-4820-963C-79B6F919DB55} ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-10-17 06:53:39 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2013-10-21 16:25:02 -------- d-----w- C:\PROGRA~2\trend micro ======= ===== 2013-10-17 17:22:16 17B9CCE651B406BE96291C5BEDD375CA 656 ----a-w- \DelFix.txt ====== C:\Users\Pascal\AppData\Roaming ====== 2013-10-22 14:01:22 -------- d-----w- C:\Users\Gast\AppData\Local\VirtualStore 2013-10-22 13:59:36 -------- d-----w- C:\Users\Pascal\AppData\Local\Temp 2013-10-16 20:57:53 -------- d-----w- C:\Users\Pascal\AppData\Locallow\Sun ====== C:\Users\Pascal ====== 2013-10-21 16:05:35 EDC417C7BA6AEC76A01C9FDA7B701610 61544 ----atw- C:\ProgramData\7rgjwwq.pss 2013-10-21 16:05:34 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\ProgramData\7rgjwwq.fvv 2013-10-21 16:05:32 34BF02DE3EA9AA2C4919C67BA3716050 95025368 ----atw- C:\ProgramData\7rgjwwq.bxx 2013-10-21 16:05:31 26390559BAA41CEBCC3624926F9BA840 172032 ----a-w- C:\ProgramData\qwwjgr7.dss ====== C: exe-files == 2013-10-21 16:25:03 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files (x86)\trend micro\Pascal.exe 2013-10-17 06:53:40 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Pascal.exe === C: other files == 2013-10-22 13:49:56 FE52F2B42EBA49022ACFABFF5A62540F 502 ----a-w- C:\Documents and Settings\Public\Desktop\sample_20132210_1549.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip ==== Folders in C:\ProgramData 0-6 Months Old ====================== 2013-06-26 10:58:47 -------- d-----w- C:\ProgramData\Microsoft Help ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PDG59EC3 will be deleted at reboot C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0UPXB3UZ will be deleted at reboot C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1Q1HJ63T will be deleted at reboot C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W2MO6PML will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome Cache found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Pascal\AppData\Local\Temp successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PDG59EC3" not found "C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0UPXB3UZ" not found "C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1Q1HJ63T" not found "C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W2MO6PML" not found ==== EOF on di 22/10/2013 at 17:04:37,16 ======================
  11. pas
    Beste Juisterr, Ik had 'm net nog laten draaien met de code die je me gister gaf. Hierna volgt het logje. Ik kan enkel 'gast' gebruiken. Mijn normale bureaublad is geblokkeerd. Ik zal nu zoek.exe opnieuw starten, ditmaal met de zonet gegeven code.
  12. pas
    dit kreeg ik ook : Zoek.exe Version 4.0.0.5 Updated 17-October-2013 Tool run by Pascal on ma 21/10/2013 at 21:02:15,55. Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gast\Desktop\zoek.scr [script inserted] ==== Older Logs ====================== C:\zoek-results2013-10-21-173102.log 33789 bytes C:\zoek-results2013-10-21-181719.log 17057 bytes C:\zoek-results2013-10-21-185730.log 3962 bytes ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== "C:\ProgramData\4rjlf7t7t.pzz" not found "C:\ProgramData\4rjlf7t7t.ctrl" not found "C:\ProgramData\4rjlf7t7t.pff" not found "C:\ProgramData\t7t7fljr4.plz" not found "C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4rjlf7t7t.lnk" not found "C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis 02@SpeedAnalysis.com" not found ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome Cache found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Pascal\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on ma 21/10/2013 at 21:32:41,20 ======================
  13. pas
    ja, is nog steeds geblokkeerd
  14. pas
    Effe proberen nu
  15. pas
    Deze is met uw code, juisterr Zoek.exe Version 4.0.0.5 Updated 17-October-2013 Tool run by Pascal on ma 21/10/2013 at 19:48:30,61. Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gast\Desktop\zoek.scr [script inserted] ==== Older Logs ====================== \zoek-results2013-10-21-173102.log 33789 bytes ==== Empty Folders Check ====================== C:\PROGRA~2\McAfee deleted successfully C:\PROGRA~2\MSXML 4.0 deleted successfully C:\Program Files\Google deleted successfully C:\Users\Pascal\AppData\Roaming\TP deleted successfully C:\Users\Pascal\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\Gast\AppData\Local\VirtualStore deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully ==== Deleting Services ====================== ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Pascal\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2013-10-11 13:36:05 351B1A5B8A02A59DD29D122B0D231FA6 2706432 ----a-w- C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 13:36:04 5E775F0C365F01A8A7382BBEFC4A53A5 391168 ----a-w- C:\Windows\SysWOW64\ieui.dll 2013-10-11 13:36:01 BE8F3297A0BC3D3E3B66D9A45F64F0B9 61440 ----a-w- C:\Windows\SysWOW64\iesetup.dll 2013-10-11 13:36:01 6E9013E3D112E26A42EC057CAE990649 109056 ----a-w- C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 13:36:01 58A43D9DFFF91C1457EC47BDCF969B59 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 13:36:01 556F70EDECE99CCD64C7D8897F3264F4 33280 ----a-w- C:\Windows\SysWOW64\iernonce.dll 2013-10-11 13:36:00 122B216B091D06F672CC8D331128FB06 2048512 ----a-w- C:\Windows\SysWOW64\iertutil.dll 2013-10-11 13:35:57 883C0D3A22CE87A3203CD5518EBB5758 493056 ----a-w- C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 13:35:56 E02C01EB0ED522327AFF3BE5CBCF6017 690688 ----a-w- C:\Windows\SysWOW64\jscript.dll 2013-10-11 13:35:53 5A847E98EAF032928E67EE52DE08952D 2876928 ----a-w- C:\Windows\SysWOW64\jscript9.dll 2013-10-11 13:35:52 61DC3F2BE3093FE22CD717260946D7AD 1141248 ----a-w- C:\Windows\SysWOW64\urlmon.dll 2013-10-11 13:35:48 E4FEB264B47360B7296AEA4E052F88D8 1767936 ----a-w- C:\Windows\SysWOW64\wininet.dll 2013-10-11 13:35:48 DC7DB5BC0E2D135103730E08FE1C540D 39424 ----a-w- C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 13:35:46 8F5EAAF76A6811332A8C67DB0D4C395F 13761024 ----a-w- C:\Windows\SysWOW64\ieframe.dll 2013-10-11 13:35:35 A7221924181C8EB92B64C5A2D888BEA5 14335488 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2013-10-10 05:23:02 75F5E1FE8D55CF8E577E0EC5F2290D3F 530432 ----a-w- C:\Windows\SysWOW64\comctl32.dll 2013-10-10 05:22:59 CC23295DA8F7B5C53F93804D2F5D30EB 25600 ----a-w- C:\Windows\SysWOW64\lpk.dll 2013-10-10 05:22:59 8CC4638FA7B5B921B9080CF962582C0B 70656 ----a-w- C:\Windows\SysWOW64\fontsub.dll 2013-10-10 05:22:59 7D27E63B54DB093BB0D9E95F81094D75 34304 ----a-w- C:\Windows\SysWOW64\atmlib.dll 2013-10-10 05:22:59 5C6B44F9CAAC475B7B9EBBC29CB7F065 295424 ----a-w- C:\Windows\SysWOW64\atmfd.dll 2013-10-10 05:22:59 2342EC9254F4C60CA98441BD65C89E12 10240 ----a-w- C:\Windows\SysWOW64\dciman32.dll 2013-10-10 05:22:55 E94C583CDE2348950155F2AF2876F34D 231424 ----a-w- C:\Windows\SysWOW64\mswsock.dll 2013-10-10 05:22:53 EAF4712B706936C0B10D3B5319B37E81 81920 ----a-w- C:\Windows\SysWOW64\davclnt.dll 2013-10-10 05:22:53 75E8EBD7040CE238684333F97014762A 205824 ----a-w- C:\Windows\SysWOW64\WebClnt.dll 2013-10-10 05:22:38 482C8CD985C727C7C78A5E9B320947F0 3969472 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-10 05:22:36 813A7F5A2D6D366EB3FFB643B851BCE5 3914176 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-10 05:22:36 401D25136E26B237D77DA1BF1198B3BD 619520 ----a-w- C:\Windows\SysWOW64\tdh.dll 2013-10-10 05:22:35 D67472125471784DE7147946EDA25FEB 640512 ----a-w- C:\Windows\SysWOW64\advapi32.dll 2013-10-10 05:22:35 A2B0924D50F4435FD389499047CE553A 1292192 ----a-w- C:\Windows\SysWOW64\ntdll.dll 2013-10-10 05:22:34 DEE3A05EB88EAFE9C5FF9643676ECC60 14336 ----a-w- C:\Windows\SysWOW64\ntvdm64.dll 2013-10-10 05:22:34 DA1340AC8B22D0719F47222C8D508393 25600 ----a-w- C:\Windows\SysWOW64\setup16.exe 2013-10-10 05:22:34 D37B27C1F5FE8CFFCCA80FFD4F91149B 5120 ----a-w- C:\Windows\SysWOW64\wow32.dll 2013-10-10 05:22:34 8C3D064E7B7C0F3685A441A37A93C5D1 7680 ----a-w- C:\Windows\SysWOW64\instnm.exe 2013-10-10 05:22:34 5244D544B022E70881794563D657B5EF 2048 ----a-w- C:\Windows\SysWOW64\user.exe 2013-10-10 05:22:25 2A01B40C8334A8124001CFAC256FCA83 102608 ----a-w- C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2013-10-11 13:36:05 990235D752A40F5F8243ED537FAB2035 2706432 ----a-w- C:\Windows\Sysnative\mshtml.tlb 2013-10-11 13:36:03 991A9D6B797B4D7E9EB29BE1FB4B1D28 526336 ----a-w- C:\Windows\Sysnative\ieui.dll 2013-10-11 13:36:01 C4DDAC3F3062739C4C2BB759B36E005D 51712 ----a-w- C:\Windows\Sysnative\ie4uinit.exe 2013-10-11 13:36:01 A80B91A93EDFFDE3DD2646D6E4CDDC44 67072 ----a-w- C:\Windows\Sysnative\iesetup.dll 2013-10-11 13:36:01 742B2C69643527763E162C0BA923D086 136704 ----a-w- C:\Windows\Sysnative\iesysprep.dll 2013-10-11 13:36:01 4163195B6D07D3434BDEA78C293B7E0E 89600 ----a-w- C:\Windows\Sysnative\RegisterIEPKEYs.exe 2013-10-11 13:36:01 38CFAC1BAFEBC8B0AF8A22093803D38E 39936 ----a-w- C:\Windows\Sysnative\iernonce.dll 2013-10-11 13:35:59 199BD40B1890E1EEFF7438B59787534F 2647552 ----a-w- C:\Windows\Sysnative\iertutil.dll 2013-10-11 13:35:57 214E39F0A8E382F1889B26B46DE0AF81 603136 ----a-w- C:\Windows\Sysnative\msfeeds.dll 2013-10-11 13:35:56 7B4E06047031B2AAA4AE10F00C59BFC7 855552 ----a-w- C:\Windows\Sysnative\jscript.dll 2013-10-11 13:35:54 D383602755758FA81166B0FD8AFE6D40 3959296 ----a-w- C:\Windows\Sysnative\jscript9.dll 2013-10-11 13:35:51 882AC0DD997CFC90FBB468D698BD55C6 1365504 ----a-w- C:\Windows\Sysnative\urlmon.dll 2013-10-11 13:35:48 16A3E229F60FA4B05573A0937AB3C3CB 53248 ----a-w- C:\Windows\Sysnative\jsproxy.dll 2013-10-11 13:35:47 D28B35DE88D27EFB27DF4B1E8319E3C0 2241024 ----a-w- C:\Windows\Sysnative\wininet.dll 2013-10-11 13:35:44 CCDB8FDC289AA9AFA5F8827A2ADB21AD 15404544 ----a-w- C:\Windows\Sysnative\ieframe.dll 2013-10-11 13:35:40 F026C6F104758D0EB215B017016FAE27 19252224 ----a-w- C:\Windows\Sysnative\mshtml.dll 2013-10-10 05:23:02 9028D1621C43DF8DFBD1C76860412A11 633856 ----a-w- C:\Windows\Sysnative\comctl32.dll 2013-10-10 05:22:59 E1BB958681BE311E7CFF06CFEC5F1F2B 368128 ----a-w- C:\Windows\Sysnative\atmfd.dll 2013-10-10 05:22:59 D6BAE9B4B210D71CDDADC224CEFCDB5F 100864 ----a-w- C:\Windows\Sysnative\fontsub.dll 2013-10-10 05:22:59 A5ED9421B8D09ED4F57CDA386307713E 14336 ----a-w- C:\Windows\Sysnative\dciman32.dll 2013-10-10 05:22:59 796B47A4B82EF1C39F13435B88834C48 41472 ----a-w- C:\Windows\Sysnative\lpk.dll 2013-10-10 05:22:59 142671F462619CB64BA74F5B70136CB4 46080 ----a-w- C:\Windows\Sysnative\atmlib.dll 2013-10-10 05:22:55 9A9F9F1A77D6A80EE28B57664F00013E 327168 ----a-w- C:\Windows\Sysnative\mswsock.dll 2013-10-10 05:22:53 B32AB94A432289AC2DF77A3DCAD32EED 102400 ----a-w- C:\Windows\Sysnative\davclnt.dll 2013-10-10 05:22:53 0EB0E5D22B1760F2DBCE632F2DD7A54D 259584 ----a-w- C:\Windows\Sysnative\WebClnt.dll 2013-10-10 05:22:50 19320B121BFE7462EADD50A42C81AFD0 3155968 ----a-w- C:\Windows\Sysnative\win32k.sys 2013-10-10 05:22:44 5B9A6A310326D9C438F2C19FBBE97C97 5549504 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe 2013-10-10 05:22:39 63A580C88CFAF72A92550940054569EF 878080 ----a-w- C:\Windows\Sysnative\advapi32.dll 2013-10-10 05:22:37 A3FCC4F97551087D65F8FEE879FEF736 859648 ----a-w- C:\Windows\Sysnative\tdh.dll 2013-10-10 05:22:35 CAAAC014C5C56A69F710B5F1B836DE22 1732032 ----a-w- C:\Windows\Sysnative\ntdll.dll 2013-10-10 05:22:35 70833F5A59F65908698093889C34BCA2 243712 ----a-w- C:\Windows\Sysnative\wow64.dll 2013-10-10 05:22:25 764DF431D13537A575752009E7740F18 124112 ----a-w- C:\Windows\Sysnative\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 05:22:23 56661BB55AE4633677F846FFCD080ECA 461312 ----a-w- C:\Windows\Sysnative\scavengeui.dll ====== C:\Windows\Sysnative\drivers ===== 2013-10-10 05:22:58 E2C933EDBC389386EBE6D2BA953F43D8 785624 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys 2013-10-10 05:22:57 B0435098C81D04CAFFF80DDB746CD3A2 109824 ----a-w- C:\Windows\Sysnative\drivers\USBAUDIO.sys 2013-10-10 05:22:57 80B0F7D5CCF86CEB5D402EAAF61FEC31 100864 ----a-w- C:\Windows\Sysnative\drivers\usbcir.sys 2013-10-10 05:22:57 1F775DA4CF1A3A1834207E975A72E9D7 185344 ----a-w- C:\Windows\Sysnative\drivers\usbvideo.sys 2013-10-10 05:22:55 40AF23633D197905F03AB5628C558C51 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2013-10-10 05:22:55 314C17917AC8523EC77A710215012A65 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys 2013-10-10 05:22:53 1A4F75E63C9FB84B85DFFC6B63FD5404 140800 ----a-w- C:\Windows\Sysnative\drivers\mrxdav.sys 2013-10-10 05:22:52 856E76B3641746ABBC2946BED1372098 32896 ----a-w- C:\Windows\Sysnative\drivers\hidparse.sys 2013-10-10 05:22:52 597C3699384E53CC59587ED50CCE5CA2 76800 ----a-w- C:\Windows\Sysnative\drivers\hidclass.sys 2013-10-10 05:22:24 88612F1CE3BF42256913BF6E61C70D52 983488 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys ====== C:\Windows\Tasks ====== 2013-10-15 14:18:14 B2F9E6CAFE98A5A40DC51763495EBB3A 2986 ----a-w- C:\Windows\Sysnative\Tasks\{DE3254F7-47A8-4820-963C-79B6F919DB55} ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-10-17 06:53:39 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2013-10-21 16:25:02 -------- d-----w- C:\PROGRA~2\trend micro ======= ===== 2013-10-17 17:22:16 17B9CCE651B406BE96291C5BEDD375CA 656 ----a-w- \DelFix.txt ====== C:\Users\Pascal\AppData\Roaming ====== 2013-10-21 17:27:40 -------- d-----w- C:\Users\Pascal\AppData\Local\Temp 2013-10-16 20:57:53 -------- d-----w- C:\Users\Pascal\AppData\Locallow\Sun ====== C:\Users\Pascal ====== 2013-10-21 16:05:35 EDC417C7BA6AEC76A01C9FDA7B701610 61544 ----atw- C:\ProgramData\7rgjwwq.pss 2013-10-21 16:05:34 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\ProgramData\7rgjwwq.fvv 2013-10-21 16:05:32 3D1D994540798205959701CEB04A04E4 95025368 ----atw- C:\ProgramData\7rgjwwq.bxx 2013-10-21 16:05:31 26390559BAA41CEBCC3624926F9BA840 172032 ----a-w- C:\ProgramData\qwwjgr7.dss ====== C: exe-files == 2013-10-21 16:25:03 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files (x86)\trend micro\Pascal.exe 2013-10-17 06:53:40 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Pascal.exe === C: other files == 2013-10-21 17:46:48 2366CC996D98410C7E1B199F47324269 3798480 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\8cbc9fc1-6c8d-47d3-b1e8-69c1a5f7a540.zip 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Reset Google Chrome ====================== Nothing found to reset ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome Cache found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Pascal\AppData\Local\Temp successfully emptied ==== EOF on ma 21/10/2013 at 20:17:19,06 ======================
  16. pas
    Deze log kwam van de vorige code die ik kreeg van kape. Ben je daar iets mee, of herbegin ik? Zoek.exe Version 4.0.0.5 Updated 17-October-2013 Tool run by Pascal on ma 21/10/2013 at 18:51:13,42. Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gast\Desktop\zoek\zoek.exe [script inserted] [Checkboxes used] ==== System Restore Info ====================== Failed to create System Restore Point ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Pascal\AppData\Local\Temp ==== 2013-10-21 16:05:29 26390559BAA41CEBCC3624926F9BA840 172032 ----a-w- C:\Users\Pascal\AppData\Local\Temp\~tmf2837293926631570826.dll 2013-10-21 14:06:12 EE7D9473BEFD0F26B7A41D35107136B6 32542880 ----a-w- C:\Users\Pascal\AppData\Local\Temp\SkypeSetup.exe ====== Java Cache ===== 2013-10-21 16:05:23 B2EACDD8508EF29B1330276B017FF128 9139 ----a-w- C:\Users\Pascal\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\7ca9207-57f81e0c ====== C:\Windows\SysWOW64 ===== 2013-10-11 13:36:05 351B1A5B8A02A59DD29D122B0D231FA6 2706432 ----a-w- C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 13:36:04 5E775F0C365F01A8A7382BBEFC4A53A5 391168 ----a-w- C:\Windows\SysWOW64\ieui.dll 2013-10-11 13:36:01 BE8F3297A0BC3D3E3B66D9A45F64F0B9 61440 ----a-w- C:\Windows\SysWOW64\iesetup.dll 2013-10-11 13:36:01 6E9013E3D112E26A42EC057CAE990649 109056 ----a-w- C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 13:36:01 58A43D9DFFF91C1457EC47BDCF969B59 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 13:36:01 556F70EDECE99CCD64C7D8897F3264F4 33280 ----a-w- C:\Windows\SysWOW64\iernonce.dll 2013-10-11 13:36:00 122B216B091D06F672CC8D331128FB06 2048512 ----a-w- C:\Windows\SysWOW64\iertutil.dll 2013-10-11 13:35:57 883C0D3A22CE87A3203CD5518EBB5758 493056 ----a-w- C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 13:35:56 E02C01EB0ED522327AFF3BE5CBCF6017 690688 ----a-w- C:\Windows\SysWOW64\jscript.dll 2013-10-11 13:35:53 5A847E98EAF032928E67EE52DE08952D 2876928 ----a-w- C:\Windows\SysWOW64\jscript9.dll 2013-10-11 13:35:52 61DC3F2BE3093FE22CD717260946D7AD 1141248 ----a-w- C:\Windows\SysWOW64\urlmon.dll 2013-10-11 13:35:48 E4FEB264B47360B7296AEA4E052F88D8 1767936 ----a-w- C:\Windows\SysWOW64\wininet.dll 2013-10-11 13:35:48 DC7DB5BC0E2D135103730E08FE1C540D 39424 ----a-w- C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 13:35:46 8F5EAAF76A6811332A8C67DB0D4C395F 13761024 ----a-w- C:\Windows\SysWOW64\ieframe.dll 2013-10-11 13:35:35 A7221924181C8EB92B64C5A2D888BEA5 14335488 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2013-10-10 05:23:02 75F5E1FE8D55CF8E577E0EC5F2290D3F 530432 ----a-w- C:\Windows\SysWOW64\comctl32.dll 2013-10-10 05:22:59 CC23295DA8F7B5C53F93804D2F5D30EB 25600 ----a-w- C:\Windows\SysWOW64\lpk.dll 2013-10-10 05:22:59 8CC4638FA7B5B921B9080CF962582C0B 70656 ----a-w- C:\Windows\SysWOW64\fontsub.dll 2013-10-10 05:22:59 7D27E63B54DB093BB0D9E95F81094D75 34304 ----a-w- C:\Windows\SysWOW64\atmlib.dll 2013-10-10 05:22:59 5C6B44F9CAAC475B7B9EBBC29CB7F065 295424 ----a-w- C:\Windows\SysWOW64\atmfd.dll 2013-10-10 05:22:59 2342EC9254F4C60CA98441BD65C89E12 10240 ----a-w- C:\Windows\SysWOW64\dciman32.dll 2013-10-10 05:22:55 E94C583CDE2348950155F2AF2876F34D 231424 ----a-w- C:\Windows\SysWOW64\mswsock.dll 2013-10-10 05:22:53 EAF4712B706936C0B10D3B5319B37E81 81920 ----a-w- C:\Windows\SysWOW64\davclnt.dll 2013-10-10 05:22:53 75E8EBD7040CE238684333F97014762A 205824 ----a-w- C:\Windows\SysWOW64\WebClnt.dll 2013-10-10 05:22:38 482C8CD985C727C7C78A5E9B320947F0 3969472 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-10 05:22:36 813A7F5A2D6D366EB3FFB643B851BCE5 3914176 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-10 05:22:36 401D25136E26B237D77DA1BF1198B3BD 619520 ----a-w- C:\Windows\SysWOW64\tdh.dll 2013-10-10 05:22:35 D67472125471784DE7147946EDA25FEB 640512 ----a-w- C:\Windows\SysWOW64\advapi32.dll 2013-10-10 05:22:35 A2B0924D50F4435FD389499047CE553A 1292192 ----a-w- C:\Windows\SysWOW64\ntdll.dll 2013-10-10 05:22:34 DEE3A05EB88EAFE9C5FF9643676ECC60 14336 ----a-w- C:\Windows\SysWOW64\ntvdm64.dll 2013-10-10 05:22:34 DA1340AC8B22D0719F47222C8D508393 25600 ----a-w- C:\Windows\SysWOW64\setup16.exe 2013-10-10 05:22:34 D37B27C1F5FE8CFFCCA80FFD4F91149B 5120 ----a-w- C:\Windows\SysWOW64\wow32.dll 2013-10-10 05:22:34 8C3D064E7B7C0F3685A441A37A93C5D1 7680 ----a-w- C:\Windows\SysWOW64\instnm.exe 2013-10-10 05:22:34 5244D544B022E70881794563D657B5EF 2048 ----a-w- C:\Windows\SysWOW64\user.exe 2013-10-10 05:22:25 2A01B40C8334A8124001CFAC256FCA83 102608 ----a-w- C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2013-10-11 13:36:05 990235D752A40F5F8243ED537FAB2035 2706432 ----a-w- C:\Windows\Sysnative\mshtml.tlb 2013-10-11 13:36:03 991A9D6B797B4D7E9EB29BE1FB4B1D28 526336 ----a-w- C:\Windows\Sysnative\ieui.dll 2013-10-11 13:36:01 C4DDAC3F3062739C4C2BB759B36E005D 51712 ----a-w- C:\Windows\Sysnative\ie4uinit.exe 2013-10-11 13:36:01 A80B91A93EDFFDE3DD2646D6E4CDDC44 67072 ----a-w- C:\Windows\Sysnative\iesetup.dll 2013-10-11 13:36:01 742B2C69643527763E162C0BA923D086 136704 ----a-w- C:\Windows\Sysnative\iesysprep.dll 2013-10-11 13:36:01 4163195B6D07D3434BDEA78C293B7E0E 89600 ----a-w- C:\Windows\Sysnative\RegisterIEPKEYs.exe 2013-10-11 13:36:01 38CFAC1BAFEBC8B0AF8A22093803D38E 39936 ----a-w- C:\Windows\Sysnative\iernonce.dll 2013-10-11 13:35:59 199BD40B1890E1EEFF7438B59787534F 2647552 ----a-w- C:\Windows\Sysnative\iertutil.dll 2013-10-11 13:35:57 214E39F0A8E382F1889B26B46DE0AF81 603136 ----a-w- C:\Windows\Sysnative\msfeeds.dll 2013-10-11 13:35:56 7B4E06047031B2AAA4AE10F00C59BFC7 855552 ----a-w- C:\Windows\Sysnative\jscript.dll 2013-10-11 13:35:54 D383602755758FA81166B0FD8AFE6D40 3959296 ----a-w- C:\Windows\Sysnative\jscript9.dll 2013-10-11 13:35:51 882AC0DD997CFC90FBB468D698BD55C6 1365504 ----a-w- C:\Windows\Sysnative\urlmon.dll 2013-10-11 13:35:48 16A3E229F60FA4B05573A0937AB3C3CB 53248 ----a-w- C:\Windows\Sysnative\jsproxy.dll 2013-10-11 13:35:47 D28B35DE88D27EFB27DF4B1E8319E3C0 2241024 ----a-w- C:\Windows\Sysnative\wininet.dll 2013-10-11 13:35:44 CCDB8FDC289AA9AFA5F8827A2ADB21AD 15404544 ----a-w- C:\Windows\Sysnative\ieframe.dll 2013-10-11 13:35:40 F026C6F104758D0EB215B017016FAE27 19252224 ----a-w- C:\Windows\Sysnative\mshtml.dll 2013-10-10 05:23:02 9028D1621C43DF8DFBD1C76860412A11 633856 ----a-w- C:\Windows\Sysnative\comctl32.dll 2013-10-10 05:22:59 E1BB958681BE311E7CFF06CFEC5F1F2B 368128 ----a-w- C:\Windows\Sysnative\atmfd.dll 2013-10-10 05:22:59 D6BAE9B4B210D71CDDADC224CEFCDB5F 100864 ----a-w- C:\Windows\Sysnative\fontsub.dll 2013-10-10 05:22:59 A5ED9421B8D09ED4F57CDA386307713E 14336 ----a-w- C:\Windows\Sysnative\dciman32.dll 2013-10-10 05:22:59 796B47A4B82EF1C39F13435B88834C48 41472 ----a-w- C:\Windows\Sysnative\lpk.dll 2013-10-10 05:22:59 142671F462619CB64BA74F5B70136CB4 46080 ----a-w- C:\Windows\Sysnative\atmlib.dll 2013-10-10 05:22:55 9A9F9F1A77D6A80EE28B57664F00013E 327168 ----a-w- C:\Windows\Sysnative\mswsock.dll 2013-10-10 05:22:53 B32AB94A432289AC2DF77A3DCAD32EED 102400 ----a-w- C:\Windows\Sysnative\davclnt.dll 2013-10-10 05:22:53 0EB0E5D22B1760F2DBCE632F2DD7A54D 259584 ----a-w- C:\Windows\Sysnative\WebClnt.dll 2013-10-10 05:22:50 19320B121BFE7462EADD50A42C81AFD0 3155968 ----a-w- C:\Windows\Sysnative\win32k.sys 2013-10-10 05:22:44 5B9A6A310326D9C438F2C19FBBE97C97 5549504 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe 2013-10-10 05:22:39 63A580C88CFAF72A92550940054569EF 878080 ----a-w- C:\Windows\Sysnative\advapi32.dll 2013-10-10 05:22:37 A3FCC4F97551087D65F8FEE879FEF736 859648 ----a-w- C:\Windows\Sysnative\tdh.dll 2013-10-10 05:22:35 CAAAC014C5C56A69F710B5F1B836DE22 1732032 ----a-w- C:\Windows\Sysnative\ntdll.dll 2013-10-10 05:22:35 70833F5A59F65908698093889C34BCA2 243712 ----a-w- C:\Windows\Sysnative\wow64.dll 2013-10-10 05:22:25 764DF431D13537A575752009E7740F18 124112 ----a-w- C:\Windows\Sysnative\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 05:22:23 56661BB55AE4633677F846FFCD080ECA 461312 ----a-w- C:\Windows\Sysnative\scavengeui.dll ====== C:\Windows\Sysnative\drivers ===== 2013-10-10 05:22:58 E2C933EDBC389386EBE6D2BA953F43D8 785624 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys 2013-10-10 05:22:57 B0435098C81D04CAFFF80DDB746CD3A2 109824 ----a-w- C:\Windows\Sysnative\drivers\USBAUDIO.sys 2013-10-10 05:22:57 80B0F7D5CCF86CEB5D402EAAF61FEC31 100864 ----a-w- C:\Windows\Sysnative\drivers\usbcir.sys 2013-10-10 05:22:57 1F775DA4CF1A3A1834207E975A72E9D7 185344 ----a-w- C:\Windows\Sysnative\drivers\usbvideo.sys 2013-10-10 05:22:55 40AF23633D197905F03AB5628C558C51 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2013-10-10 05:22:55 314C17917AC8523EC77A710215012A65 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys 2013-10-10 05:22:53 1A4F75E63C9FB84B85DFFC6B63FD5404 140800 ----a-w- C:\Windows\Sysnative\drivers\mrxdav.sys 2013-10-10 05:22:52 856E76B3641746ABBC2946BED1372098 32896 ----a-w- C:\Windows\Sysnative\drivers\hidparse.sys 2013-10-10 05:22:52 597C3699384E53CC59587ED50CCE5CA2 76800 ----a-w- C:\Windows\Sysnative\drivers\hidclass.sys 2013-10-10 05:22:24 88612F1CE3BF42256913BF6E61C70D52 983488 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys ====== C:\Windows\Tasks ====== 2013-10-15 14:18:14 B2F9E6CAFE98A5A40DC51763495EBB3A 2986 ----a-w- C:\Windows\Sysnative\Tasks\{DE3254F7-47A8-4820-963C-79B6F919DB55} ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-10-17 06:53:39 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2013-10-21 16:25:02 -------- d-----w- C:\PROGRA~2\trend micro ======= C: ===== 2013-10-17 17:22:16 17B9CCE651B406BE96291C5BEDD375CA 656 ----a-w- C:\DelFix.txt ====== C:\Users\Pascal\AppData\Roaming ====== 2013-10-17 15:13:05 -------- d-----w- C:\Users\Pascal\AppData\Local\Temp 2013-10-16 20:57:53 -------- d-----w- C:\Users\Pascal\AppData\Locallow\Sun ====== C:\Users\Pascal ====== 2013-10-21 16:05:35 EDC417C7BA6AEC76A01C9FDA7B701610 61544 ----atw- C:\ProgramData\7rgjwwq.pss 2013-10-21 16:05:34 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\ProgramData\7rgjwwq.fvv 2013-10-21 16:05:32 3D1D994540798205959701CEB04A04E4 95025368 ----atw- C:\ProgramData\7rgjwwq.bxx 2013-10-21 16:05:31 26390559BAA41CEBCC3624926F9BA840 172032 ----a-w- C:\ProgramData\qwwjgr7.dss ====== C: exe-files == 2013-10-21 16:25:03 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files (x86)\trend micro\Pascal.exe 2013-10-21 14:06:12 EE7D9473BEFD0F26B7A41D35107136B6 32542880 ----a-w- C:\Users\Pascal\AppData\Local\Temp\SkypeSetup.exe 2013-10-17 06:53:40 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Pascal.exe === C: other files == 2013-10-17 14:49:26 450E448A80CA3372CAAD421021D89341 3718530 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5ec829e9-6949-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:47:21 CB681EFC299D12A62297CCB829A8E236 3718521 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\e540c2ce-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:30:28 87DB150394C48BAB63B02B88D8C12E29 3718480 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\d2978e62-694b-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:29:21 9BA64AF08A7BE13DAD6D34B078B6CF0B 3745 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\2834d3f3-694a-47d3-b149-69c1a5f7a540.zip 2013-10-17 14:25:28 51E38C573ED1787076F4B4406F46F696 3764 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\604c74d3-6931-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:51:14 79BD207E28BC292ED937128B329FE830 3715896 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\6d5f8a2e-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:44:11 0CCE329DC32E63F015DE675C8CBE45EF 1071 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\737a231c-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:43:40 3F6ED19474F3643B368E15B51F535D0A 3736 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5f4b9adf-6930-47d3-b149-69c1a5f7a540.zip 2013-10-17 13:42:59 3064DC785B05537179F85DB29F81B43B 2249 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\6cd0b82b-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:54:07 CE8D3FAF80AD6553AEB4CD3ED68BD9C4 3759 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\3bf95694-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:52:01 1F8C2557EFD801228AEE6472A36B703D 3765 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\11114300-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:48 CA09064188C27AE84BE7298103983AD4 3715850 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\e253b6a7-6939-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:50:28 D0AF4A514EF1035D18BBB888253881C5 649017 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\9f976830-6938-47d3-b149-69c1a5f7a540.zip 2013-10-17 12:40:15 991715790B12AA2D4931FC72B3A1809D 137793 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\86fdf71a-6913-47d3-b149-69c1a5f7a540.zip 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"="C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NBAgent"="c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe /WinStart" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "SVPWUTIL"="C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL" "HWSetup"="C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP" "KeNotify"="C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe LPCM" "ToshibaServiceStation"="C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60" "AVG_UI"="C:\Program Files (x86)\AVG\AVG2013\avgui.exe /TRAYONLY" "Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "TWebCamera"=""C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"="C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Toshiba TEMPRO"="C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe" "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 " "TosVolRegulator"="C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" "Toshiba Registration"="C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe" "Cm106Sound"="C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd" "TosNC"="%ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe " "TosReelTimeMonitor"="%ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe " "TPwrMain"="%ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE" "SmoothView"="%ProgramFiles%\Toshiba\SmoothView\SmoothView.exe " "00TCrdMain"="%ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe " "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " "TosSENotify"="C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" "SmartFaceVWatcher"="%ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe " ==== Startup Folders ====================== 2011-08-22 16:45:29 1254 ----a-w- C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2011-08-22 16:45:29 1254 ----a-w- C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2013-05-18 14:21:29 2042 ----a-w- C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2013-10-21 16:05:36 1038 ----a-w- C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7rgjwwq.lnk 2012-06-21 12:49:01 2042 ----a-w- C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2012-11-02 18:46:34 2005 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk 2011-08-22 17:27:49 773 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [08/10/2013 21:16] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000Core.job --a------ C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe [23/01/2013 21:49] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000UA.job --a------ C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe [23/01/2013 21:49] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\ConfigFree Startup Programs" [C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000Core" [C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000UA" [C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\SysNative\tasks\{AD721C1A-4B42-4095-8BFC-FFD1250303E9}" ["C:\Program Files (x86)\Internet Explorer\iexplore.exe" Download Skype op uw computer ? Mac, Windows, Linux*?*Skype] "C:\Windows\SysNative\tasks\{DE3254F7-47A8-4820-963C-79B6F919DB55}" [C:\Program Files (x86)\Microsoft Office\Office\EXCEL.EXE] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Reset Google Chrome ====================== Nothing found to reset ==== HijackThis Entries ====================== R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [NBAgent] "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP O4 - HKLM\..\Run: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun O4 - HKLM\..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60 O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?') O4 - HKUS\S-1-5-21-2457209422-596169401-3258411151-1000\..\Run: [Facebook Update] "C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-1000 Startup: 7rgjwwq.lnk = C:\Windows\System32\rundll32.exe (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-1000 Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-501 Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User '?') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user') O4 - Startup: 7rgjwwq.lnk = C:\Windows\System32\rundll32.exe O4 - Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Toshiba Places Icon Utility.lnk = ? O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm O8 - Extra context menu item: Toevoegen aan TOSHIBA Bulletin Board - res://C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll/1000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-229 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-228 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @c:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - c:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing) O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NYI0QYC will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome Cache found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Pascal\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NYI0QYC" deleted ==== EOF on ma 21/10/2013 at 19:31:02,76 ======================
  17. pas
    Oeps, ben net bezig met de vorige code
  18. pas
    Beste, Na 5 dagen!! staat ie er alweer op ... Ik volg opnieuw uw aanwijzingen van de vorige keer en post hier de logs. Effe feedback: de eerste keer kwam er melding van java; de tweede keer niks. Beide keren op de site van xhamster - - - Updated - - - Logfile of random's system information tool 1.09 (written by random/random) Run by Pascal at 2013-10-21 18:24:32 WIN_7 Service Pack 1 System drive C: has 165 GB (69%) free of 238 GB Total RAM: 3692 MB (43% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:27:54, on 21/10/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16720) Boot mode: Normal Running processes: C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Audacity\audacity.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroBroker.exe C:\PROGRA~2\Java\jre6\bin\jp2launcher.exe C:\Program Files (x86)\Java\jre6\bin\java.exe C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NYI0QYC\RSIT.exe C:\Program Files (x86)\trend micro\Pascal.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [NBAgent] "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP O4 - HKLM\..\Run: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun O4 - HKLM\..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60 O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?') O4 - HKUS\S-1-5-21-2457209422-596169401-3258411151-1000\..\Run: [Facebook Update] "C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-1000 Startup: 7rgjwwq.lnk = C:\Windows\System32\rundll32.exe (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-1000 Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-501 Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User '?') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user') O4 - Startup: 7rgjwwq.lnk = C:\Windows\System32\rundll32.exe O4 - Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Toshiba Places Icon Utility.lnk = ? O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm O8 - Extra context menu item: Toevoegen aan TOSHIBA Bulletin Board - res://C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll/1000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-229 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-228 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @c:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - c:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing) O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12148 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000Core.job C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000UA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 77576] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5FF49FE8-B332-4CB9-B102-FB6951629E55}] Virtual Storage Mount Notification - C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-01-17 155416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-08-22 41760] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NBAgent"=c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2011-06-29 1409424] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-06-28 336384] "SVPWUTIL"=C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [2010-11-09 532480] "HWSetup"=C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [2010-03-04 423936] "KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2010-08-15 34160] "TWebCamera"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2010-11-02 2475384] "ToshibaServiceStation"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [2010-07-01 1295224] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-08-15 4411440] "Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-12-19 41208] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"=C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-23 138096] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE Toshiba Places Icon Utility.lnk - C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 7rgjwwq.lnk - C:\Windows\System32\rundll32.exe TRDCReminder.lnk - C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-01-17 155416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler] Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-01-17 155416] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLinkedConnections"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvyu"=msyuv.dll "vidc.iyuv"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "vidc.yvu9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm "vidc.cvid"=iccvid.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "msacm.siren"=sirenacm.dll "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2013-10-21 18:25:02 ----D---- C:\Program Files (x86)\trend micro 2013-10-21 18:24:32 ----D---- C:\rsit 2013-10-17 19:22:16 ----A---- C:\DelFix.txt 2013-10-17 17:53:41 ----SHD---- C:\$RECYCLE.BIN 2013-10-17 17:13:06 ----A---- C:\Windows\zoek-delete.exe 2013-10-17 17:13:05 ----D---- C:\Windows\Temp 2013-10-11 15:36:04 ----A---- C:\Windows\SysWOW64\ieui.dll 2013-10-11 15:36:01 ----A---- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 15:36:01 ----A---- C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 15:36:01 ----A---- C:\Windows\SysWOW64\iesetup.dll 2013-10-11 15:36:01 ----A---- C:\Windows\SysWOW64\iernonce.dll 2013-10-11 15:36:00 ----A---- C:\Windows\SysWOW64\iertutil.dll 2013-10-11 15:35:57 ----A---- C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 15:35:56 ----A---- C:\Windows\SysWOW64\jscript.dll 2013-10-11 15:35:53 ----A---- C:\Windows\SysWOW64\jscript9.dll 2013-10-11 15:35:52 ----A---- C:\Windows\SysWOW64\urlmon.dll 2013-10-11 15:35:48 ----A---- C:\Windows\SysWOW64\wininet.dll 2013-10-11 15:35:48 ----A---- C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 15:35:46 ----A---- C:\Windows\SysWOW64\ieframe.dll 2013-10-11 15:35:35 ----A---- C:\Windows\SysWOW64\mshtml.dll 2013-10-10 07:23:02 ----A---- C:\Windows\SysWOW64\comctl32.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SysWOW64\lpk.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SysWOW64\fontsub.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SysWOW64\dciman32.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SysWOW64\atmlib.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SysWOW64\atmfd.dll 2013-10-10 07:22:55 ----A---- C:\Windows\SysWOW64\mswsock.dll 2013-10-10 07:22:53 ----A---- C:\Windows\SysWOW64\WebClnt.dll 2013-10-10 07:22:53 ----A---- C:\Windows\SysWOW64\davclnt.dll 2013-10-10 07:22:38 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-10 07:22:36 ----A---- C:\Windows\SysWOW64\tdh.dll 2013-10-10 07:22:36 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-10 07:22:35 ----A---- C:\Windows\SysWOW64\ntdll.dll 2013-10-10 07:22:35 ----A---- C:\Windows\SysWOW64\advapi32.dll 2013-10-10 07:22:34 ----A---- C:\Windows\SysWOW64\wow32.dll 2013-10-10 07:22:34 ----A---- C:\Windows\SysWOW64\user.exe 2013-10-10 07:22:34 ----A---- C:\Windows\SysWOW64\setup16.exe 2013-10-10 07:22:34 ----A---- C:\Windows\SysWOW64\ntvdm64.dll 2013-10-10 07:22:34 ----A---- C:\Windows\SysWOW64\instnm.exe 2013-10-10 07:22:25 ----A---- C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ======List of files/folders modified in the last 1 month====== 2013-10-21 18:25:02 ----RD---- C:\Program Files (x86) 2013-10-21 18:05:35 ----HD---- C:\ProgramData 2013-10-21 17:30:02 ----D---- C:\Users\Pascal\AppData\Roaming\Audacity 2013-10-21 17:20:30 ----D---- C:\ProgramData\MFAData 2013-10-21 17:07:41 ----D---- C:\Users\Pascal\AppData\Roaming\Skype 2013-10-21 16:03:49 ----D---- C:\Windows 2013-10-18 16:33:55 ----D---- C:\Windows\rescache 2013-10-17 19:27:16 ----D---- C:\Windows\Panther 2013-10-17 19:27:16 ----D---- C:\Windows\Minidump 2013-10-17 19:27:16 ----D---- C:\Windows\Logs 2013-10-17 19:27:16 ----D---- C:\Windows\inf 2013-10-17 19:27:16 ----D---- C:\Windows\debug 2013-10-17 19:25:45 ----RD---- C:\Program Files 2013-10-17 19:24:12 ----SHD---- C:\System Volume Information 2013-10-17 17:16:23 ----D---- C:\Windows\SysWOW64 2013-10-17 12:30:00 ----D---- C:\Windows\Prefetch 2013-10-17 09:58:39 ----D---- C:\Program Files (x86)\Common Files\DVDVideoSoft 2013-10-17 09:58:33 ----D---- C:\Windows\Tasks 2013-10-16 21:08:35 ----D---- C:\Windows\System32 2013-10-12 14:58:41 ----D---- C:\Windows\Microsoft.NET 2013-10-12 14:57:51 ----RSD---- C:\Windows\assembly 2013-10-11 20:02:40 ----D---- C:\Windows\winsxs 2013-10-11 20:01:43 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2013-10-11 19:58:45 ----D---- C:\Program Files (x86)\Internet Explorer 2013-10-11 19:58:42 ----D---- C:\Windows\AppPatch 2013-10-11 19:58:36 ----D---- C:\Windows\SysWOW64\drivers 2013-10-11 15:35:23 ----SHD---- C:\Windows\Installer 2013-10-08 21:16:51 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-10-08 15:58:44 ----D---- C:\Program Files (x86)\Common Files 2013-10-08 15:56:51 ----SD---- C:\ProgramData\Microsoft 2013-10-08 15:56:51 ----D---- C:\Program Files (x86)\Common Files\microsoft shared 2013-10-08 15:56:50 ----D---- C:\Program Files (x86)\Microsoft Office 2013-10-08 15:56:04 ----D---- C:\Users\Pascal\AppData\Roaming\SoftGrid Client ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [] R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [] R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [] R0 LPCFilter;LPC Lower Filter Driver; C:\Windows\system32\DRIVERS\LPCFilter.sys [] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [] R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [] R1 cbfs3;cbfs3; \??\C:\Windows\system32\drivers\cbfs3.sys [] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [] R3 CeKbFilter;CeKbFilter; C:\Windows\system32\DRIVERS\CeKbFilter.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] R3 PGEffect;Pangu effect driver; C:\Windows\system32\DRIVERS\pgeffect.sys [] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [] R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver; C:\Windows\system32\DRIVERS\rtl8192Ce.sys [] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [] R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [] S3 athr;Stuurprogramma Atheros Extensible draadloze LAN-apparaat; C:\Windows\system32\DRIVERS\athrx.sys [] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [] S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [] S3 USBMULCD;Aureon 7.1 USB Interface; C:\Windows\system32\drivers\CM10664.sys [] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-07-04 4939312] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-07-23 283136] R2 cfWiMAXService;ConfigFree WiMAX Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-01-28 249200] R2 ConfigFree Service;ConfigFree Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448] R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2010-08-04 1809920] R2 NAUpdate;@c:\Program Files (x86)\Nero\Update\NASvc.exe,-200; c:\Program Files (x86)\Nero\Update\NASvc.exe [2011-03-29 598312] R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [] R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2010-09-28 489384] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480] R3 TMachInfo;TMachInfo; C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2010-07-01 51576] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-07-25 162672] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08 257416] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448] S3 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO); C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2011-02-10 112080] S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-02-05 137560] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [] -----------------EOF-----------------
  19. pas
    Kape, 't is precies allemaal in orde. Hartelijk bedankt voor uw hulp!!!
  20. pas
    Alles lijkt ok volgens AVG. Zou alles nu weg zijn?
  21. pas
    Op 't eerste zicht lijkt alles ok. Ik laat nu m'n AVG draaien...
  22. pas
    Is dit het? Zoek.exe Version 4.0.0.5 Updated 17-October-2013 Tool run by Pascal on do 17/10/2013 at 16:52:19,58. Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gast\Desktop\zoek.exe [script inserted] ==== Older Logs ====================== \zoek-results2013-10-17-081135.log 38531 bytes \zoek-results2013-10-17-094619.log 31739 bytes \zoek-results2013-10-17-123917.log 3692 bytes ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== "C:\ProgramData\4rjlf7t7t.pzz" not found "C:\ProgramData\4rjlf7t7t.ctrl" not found "C:\ProgramData\4rjlf7t7t.pff" not found "C:\ProgramData\t7t7fljr4.plz" not found "C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4rjlf7t7t.lnk" not found "C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis 02@SpeedAnalysis.com" not found ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome Cache found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Pascal\AppData\Local\Temp successfully emptied ==== EOF on do 17/10/2013 at 17:16:26,20 ======================
  23. pas
    Ik hoop dat ik alles goed heb gedaan... Zoek.exe Version 4.0.0.5 Updated 13-October-2013 Tool run by Pascal on do 17/10/2013 at 11:07:56,05. Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gast\Desktop\zoek\zoek.exe [script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2013-10-17-081135.log 38531 bytes ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Pascal\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2013-10-11 13:36:05 351B1A5B8A02A59DD29D122B0D231FA6 2706432 ----a-w- C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 13:36:04 5E775F0C365F01A8A7382BBEFC4A53A5 391168 ----a-w- C:\Windows\SysWOW64\ieui.dll 2013-10-11 13:36:01 BE8F3297A0BC3D3E3B66D9A45F64F0B9 61440 ----a-w- C:\Windows\SysWOW64\iesetup.dll 2013-10-11 13:36:01 6E9013E3D112E26A42EC057CAE990649 109056 ----a-w- C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 13:36:01 58A43D9DFFF91C1457EC47BDCF969B59 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 13:36:01 556F70EDECE99CCD64C7D8897F3264F4 33280 ----a-w- C:\Windows\SysWOW64\iernonce.dll 2013-10-11 13:36:00 122B216B091D06F672CC8D331128FB06 2048512 ----a-w- C:\Windows\SysWOW64\iertutil.dll 2013-10-11 13:35:57 883C0D3A22CE87A3203CD5518EBB5758 493056 ----a-w- C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 13:35:56 E02C01EB0ED522327AFF3BE5CBCF6017 690688 ----a-w- C:\Windows\SysWOW64\jscript.dll 2013-10-11 13:35:53 5A847E98EAF032928E67EE52DE08952D 2876928 ----a-w- C:\Windows\SysWOW64\jscript9.dll 2013-10-11 13:35:52 61DC3F2BE3093FE22CD717260946D7AD 1141248 ----a-w- C:\Windows\SysWOW64\urlmon.dll 2013-10-11 13:35:48 E4FEB264B47360B7296AEA4E052F88D8 1767936 ----a-w- C:\Windows\SysWOW64\wininet.dll 2013-10-11 13:35:48 DC7DB5BC0E2D135103730E08FE1C540D 39424 ----a-w- C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 13:35:46 8F5EAAF76A6811332A8C67DB0D4C395F 13761024 ----a-w- C:\Windows\SysWOW64\ieframe.dll 2013-10-11 13:35:35 A7221924181C8EB92B64C5A2D888BEA5 14335488 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2013-10-10 05:23:02 75F5E1FE8D55CF8E577E0EC5F2290D3F 530432 ----a-w- C:\Windows\SysWOW64\comctl32.dll 2013-10-10 05:22:59 CC23295DA8F7B5C53F93804D2F5D30EB 25600 ----a-w- C:\Windows\SysWOW64\lpk.dll 2013-10-10 05:22:59 8CC4638FA7B5B921B9080CF962582C0B 70656 ----a-w- C:\Windows\SysWOW64\fontsub.dll 2013-10-10 05:22:59 7D27E63B54DB093BB0D9E95F81094D75 34304 ----a-w- C:\Windows\SysWOW64\atmlib.dll 2013-10-10 05:22:59 5C6B44F9CAAC475B7B9EBBC29CB7F065 295424 ----a-w- C:\Windows\SysWOW64\atmfd.dll 2013-10-10 05:22:59 2342EC9254F4C60CA98441BD65C89E12 10240 ----a-w- C:\Windows\SysWOW64\dciman32.dll 2013-10-10 05:22:55 E94C583CDE2348950155F2AF2876F34D 231424 ----a-w- C:\Windows\SysWOW64\mswsock.dll 2013-10-10 05:22:53 EAF4712B706936C0B10D3B5319B37E81 81920 ----a-w- C:\Windows\SysWOW64\davclnt.dll 2013-10-10 05:22:53 75E8EBD7040CE238684333F97014762A 205824 ----a-w- C:\Windows\SysWOW64\WebClnt.dll 2013-10-10 05:22:38 482C8CD985C727C7C78A5E9B320947F0 3969472 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-10 05:22:36 813A7F5A2D6D366EB3FFB643B851BCE5 3914176 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-10 05:22:36 401D25136E26B237D77DA1BF1198B3BD 619520 ----a-w- C:\Windows\SysWOW64\tdh.dll 2013-10-10 05:22:35 D67472125471784DE7147946EDA25FEB 640512 ----a-w- C:\Windows\SysWOW64\advapi32.dll 2013-10-10 05:22:35 A2B0924D50F4435FD389499047CE553A 1292192 ----a-w- C:\Windows\SysWOW64\ntdll.dll 2013-10-10 05:22:34 DEE3A05EB88EAFE9C5FF9643676ECC60 14336 ----a-w- C:\Windows\SysWOW64\ntvdm64.dll 2013-10-10 05:22:34 DA1340AC8B22D0719F47222C8D508393 25600 ----a-w- C:\Windows\SysWOW64\setup16.exe 2013-10-10 05:22:34 D37B27C1F5FE8CFFCCA80FFD4F91149B 5120 ----a-w- C:\Windows\SysWOW64\wow32.dll 2013-10-10 05:22:34 8C3D064E7B7C0F3685A441A37A93C5D1 7680 ----a-w- C:\Windows\SysWOW64\instnm.exe 2013-10-10 05:22:34 5244D544B022E70881794563D657B5EF 2048 ----a-w- C:\Windows\SysWOW64\user.exe 2013-10-10 05:22:25 2A01B40C8334A8124001CFAC256FCA83 102608 ----a-w- C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2013-10-11 13:36:05 990235D752A40F5F8243ED537FAB2035 2706432 ----a-w- C:\Windows\Sysnative\mshtml.tlb 2013-10-11 13:36:03 991A9D6B797B4D7E9EB29BE1FB4B1D28 526336 ----a-w- C:\Windows\Sysnative\ieui.dll 2013-10-11 13:36:01 C4DDAC3F3062739C4C2BB759B36E005D 51712 ----a-w- C:\Windows\Sysnative\ie4uinit.exe 2013-10-11 13:36:01 A80B91A93EDFFDE3DD2646D6E4CDDC44 67072 ----a-w- C:\Windows\Sysnative\iesetup.dll 2013-10-11 13:36:01 742B2C69643527763E162C0BA923D086 136704 ----a-w- C:\Windows\Sysnative\iesysprep.dll 2013-10-11 13:36:01 4163195B6D07D3434BDEA78C293B7E0E 89600 ----a-w- C:\Windows\Sysnative\RegisterIEPKEYs.exe 2013-10-11 13:36:01 38CFAC1BAFEBC8B0AF8A22093803D38E 39936 ----a-w- C:\Windows\Sysnative\iernonce.dll 2013-10-11 13:35:59 199BD40B1890E1EEFF7438B59787534F 2647552 ----a-w- C:\Windows\Sysnative\iertutil.dll 2013-10-11 13:35:57 214E39F0A8E382F1889B26B46DE0AF81 603136 ----a-w- C:\Windows\Sysnative\msfeeds.dll 2013-10-11 13:35:56 7B4E06047031B2AAA4AE10F00C59BFC7 855552 ----a-w- C:\Windows\Sysnative\jscript.dll 2013-10-11 13:35:54 D383602755758FA81166B0FD8AFE6D40 3959296 ----a-w- C:\Windows\Sysnative\jscript9.dll 2013-10-11 13:35:51 882AC0DD997CFC90FBB468D698BD55C6 1365504 ----a-w- C:\Windows\Sysnative\urlmon.dll 2013-10-11 13:35:48 16A3E229F60FA4B05573A0937AB3C3CB 53248 ----a-w- C:\Windows\Sysnative\jsproxy.dll 2013-10-11 13:35:47 D28B35DE88D27EFB27DF4B1E8319E3C0 2241024 ----a-w- C:\Windows\Sysnative\wininet.dll 2013-10-11 13:35:44 CCDB8FDC289AA9AFA5F8827A2ADB21AD 15404544 ----a-w- C:\Windows\Sysnative\ieframe.dll 2013-10-11 13:35:40 F026C6F104758D0EB215B017016FAE27 19252224 ----a-w- C:\Windows\Sysnative\mshtml.dll 2013-10-10 05:23:02 9028D1621C43DF8DFBD1C76860412A11 633856 ----a-w- C:\Windows\Sysnative\comctl32.dll 2013-10-10 05:22:59 E1BB958681BE311E7CFF06CFEC5F1F2B 368128 ----a-w- C:\Windows\Sysnative\atmfd.dll 2013-10-10 05:22:59 D6BAE9B4B210D71CDDADC224CEFCDB5F 100864 ----a-w- C:\Windows\Sysnative\fontsub.dll 2013-10-10 05:22:59 A5ED9421B8D09ED4F57CDA386307713E 14336 ----a-w- C:\Windows\Sysnative\dciman32.dll 2013-10-10 05:22:59 796B47A4B82EF1C39F13435B88834C48 41472 ----a-w- C:\Windows\Sysnative\lpk.dll 2013-10-10 05:22:59 142671F462619CB64BA74F5B70136CB4 46080 ----a-w- C:\Windows\Sysnative\atmlib.dll 2013-10-10 05:22:55 9A9F9F1A77D6A80EE28B57664F00013E 327168 ----a-w- C:\Windows\Sysnative\mswsock.dll 2013-10-10 05:22:53 B32AB94A432289AC2DF77A3DCAD32EED 102400 ----a-w- C:\Windows\Sysnative\davclnt.dll 2013-10-10 05:22:53 0EB0E5D22B1760F2DBCE632F2DD7A54D 259584 ----a-w- C:\Windows\Sysnative\WebClnt.dll 2013-10-10 05:22:50 19320B121BFE7462EADD50A42C81AFD0 3155968 ----a-w- C:\Windows\Sysnative\win32k.sys 2013-10-10 05:22:44 5B9A6A310326D9C438F2C19FBBE97C97 5549504 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe 2013-10-10 05:22:39 63A580C88CFAF72A92550940054569EF 878080 ----a-w- C:\Windows\Sysnative\advapi32.dll 2013-10-10 05:22:37 A3FCC4F97551087D65F8FEE879FEF736 859648 ----a-w- C:\Windows\Sysnative\tdh.dll 2013-10-10 05:22:35 CAAAC014C5C56A69F710B5F1B836DE22 1732032 ----a-w- C:\Windows\Sysnative\ntdll.dll 2013-10-10 05:22:35 70833F5A59F65908698093889C34BCA2 243712 ----a-w- C:\Windows\Sysnative\wow64.dll 2013-10-10 05:22:25 764DF431D13537A575752009E7740F18 124112 ----a-w- C:\Windows\Sysnative\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 05:22:23 56661BB55AE4633677F846FFCD080ECA 461312 ----a-w- C:\Windows\Sysnative\scavengeui.dll ====== C:\Windows\Sysnative\drivers ===== 2013-10-10 05:22:58 E2C933EDBC389386EBE6D2BA953F43D8 785624 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys 2013-10-10 05:22:57 B0435098C81D04CAFFF80DDB746CD3A2 109824 ----a-w- C:\Windows\Sysnative\drivers\USBAUDIO.sys 2013-10-10 05:22:57 80B0F7D5CCF86CEB5D402EAAF61FEC31 100864 ----a-w- C:\Windows\Sysnative\drivers\usbcir.sys 2013-10-10 05:22:57 1F775DA4CF1A3A1834207E975A72E9D7 185344 ----a-w- C:\Windows\Sysnative\drivers\usbvideo.sys 2013-10-10 05:22:55 40AF23633D197905F03AB5628C558C51 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2013-10-10 05:22:55 314C17917AC8523EC77A710215012A65 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys 2013-10-10 05:22:53 1A4F75E63C9FB84B85DFFC6B63FD5404 140800 ----a-w- C:\Windows\Sysnative\drivers\mrxdav.sys 2013-10-10 05:22:52 856E76B3641746ABBC2946BED1372098 32896 ----a-w- C:\Windows\Sysnative\drivers\hidparse.sys 2013-10-10 05:22:52 597C3699384E53CC59587ED50CCE5CA2 76800 ----a-w- C:\Windows\Sysnative\drivers\hidclass.sys 2013-10-10 05:22:24 88612F1CE3BF42256913BF6E61C70D52 983488 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys ====== C:\Windows\Tasks ====== 2013-10-15 14:18:14 B2F9E6CAFE98A5A40DC51763495EBB3A 2986 ----a-w- C:\Windows\Sysnative\Tasks\{DE3254F7-47A8-4820-963C-79B6F919DB55} ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-10-17 06:53:39 -------- d-----w- C:\Program Files\trend micro ======= C:\Program Files (x86) ===== ======= C: ===== ====== C:\Users\Pascal\AppData\Roaming ====== 2013-10-17 08:11:35 -------- d-----w- C:\Users\Pascal\AppData\Local\Temp 2013-10-16 20:57:53 -------- d-----w- C:\Users\Pascal\AppData\Locallow\Sun ====== C:\Users\Pascal ====== 2013-10-17 09:09:10 7EB3E41C63197A171EE45948F1575AA5 60512 ----atw- C:\ProgramData\4rjlf7t7t.pzz 2013-10-17 06:50:40 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Gast\Desktop\RSITx64.exe 2013-10-16 20:58:05 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\ProgramData\4rjlf7t7t.ctrl 2013-10-16 20:58:03 8174CBFF4E1AA527412A1455834B8A42 95025368 ----atw- C:\ProgramData\4rjlf7t7t.pff 2013-10-16 20:58:01 542D588ED65F580E61A25A96AF7E34C7 130048 ----a-w- C:\ProgramData\t7t7fljr4.plz ====== C: exe-files == 2013-10-17 06:53:40 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Pascal.exe 2013-10-17 06:50:40 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Gast\Desktop\RSITx64.exe 2013-10-11 13:36:01 C4DDAC3F3062739C4C2BB759B36E005D 51712 ----a-w- C:\Windows\System32\ie4uinit.exe 2013-10-11 13:36:01 58A43D9DFFF91C1457EC47BDCF969B59 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 13:36:01 4163195B6D07D3434BDEA78C293B7E0E 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe 2013-10-11 13:35:58 D6B7DDB68436F13C3CAE2B92524F1FEC 770648 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe 2013-10-11 13:35:57 F6A7D9C0BC326F695526069C1DA1E8B7 775256 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe === C: other files == 2013-10-17 08:58:34 90A594537C3731C9A3AB3B540868B60B 346 ----a-w- C:\Users\Pascal\AppData\Local\Temp\drives.vbs 2013-10-17 08:19:27 B549E11226E166FD22D0F49ED528F7D0 3633 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\a18ff007-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:16:35 0E0EB82DB972AE44C8D7E7901B430BAA 3640 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\8b8c94bb-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:58 DD407EB308B865C4221E7DF6D2591E6F 3668 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\9449e78e-691f-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:15:09 AE12ACBAACA13FE853E3F07E7B02A6DF 410032 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\5f667ba1-691e-47d3-921a-69c1a5f7a540.zip 2013-10-17 08:13:37 D217CC5D517C02104D219A3A9FFC4C55 97761 ----a-w- C:\ProgramData\AVG2013\IDS\quarantine\340e5980-68f1-47d3-921a-9524118e269f.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-2457209422-596169401-3258411151-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"="C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NBAgent"="c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe /WinStart" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "SVPWUTIL"="C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL" "HWSetup"="C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP" "KeNotify"="C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe LPCM" "ToshibaServiceStation"="C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60" "AVG_UI"="C:\Program Files (x86)\AVG\AVG2013\avgui.exe /TRAYONLY" "Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "TWebCamera"=""C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"="C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Toshiba TEMPRO"="C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe" "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 " "TosVolRegulator"="C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" "Toshiba Registration"="C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe" "Cm106Sound"="C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd" "TosNC"="%ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe " "TosReelTimeMonitor"="%ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe " "TPwrMain"="%ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE" "SmoothView"="%ProgramFiles%\Toshiba\SmoothView\SmoothView.exe " "00TCrdMain"="%ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe " "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " "TosSENotify"="C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" "SmartFaceVWatcher"="%ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe " ==== Startup Folders ====================== 2011-08-22 16:45:29 1254 ----a-w- C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2011-08-22 16:45:29 1254 ----a-w- C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2013-05-18 14:21:29 2042 ----a-w- C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2013-10-16 20:58:05 1042 ----a-w- C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4rjlf7t7t.lnk 2012-06-21 12:49:01 2042 ----a-w- C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2012-11-02 18:46:34 2005 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk 2011-08-22 17:27:49 773 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [08/10/2013 21:16] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000Core.job --a------ C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe [23/01/2013 21:49] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000UA.job --a------ C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe [23/01/2013 21:49] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\ConfigFree Startup Programs" [C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000Core" [C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000UA" [C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\SysNative\tasks\{AD721C1A-4B42-4095-8BFC-FFD1250303E9}" ["C:\Program Files (x86)\Internet Explorer\iexplore.exe" Download Skype op uw computer ? Mac, Windows, Linux ? Skype] "C:\Windows\SysNative\tasks\{DE3254F7-47A8-4820-963C-79B6F919DB55}" [C:\Program Files (x86)\Microsoft Office\Office\EXCEL.EXE] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "speedanalysis02@SpeedAnalysis.com"="C:\Users\Pascal\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com" [17/06/2013 18:52] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Reset Google Chrome ====================== Nothing found to reset ==== HijackThis Entries ====================== R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [NBAgent] "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP O4 - HKLM\..\Run: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun O4 - HKLM\..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60 O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?') O4 - HKUS\S-1-5-21-2457209422-596169401-3258411151-1000\..\Run: [Facebook Update] "C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-1000 Startup: 4rjlf7t7t.lnk = C:\Windows\System32\rundll32.exe (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-1000 Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-501 Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User '?') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user') O4 - Startup: 4rjlf7t7t.lnk = C:\Windows\System32\rundll32.exe O4 - Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Toshiba Places Icon Utility.lnk = ? O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm O8 - Extra context menu item: Toevoegen aan TOSHIBA Bulletin Board - res://C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll/1000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-229 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-228 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (file missing) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: McAfee SiteAdvisor Service - Unknown owner - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @c:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - c:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing) O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Pascal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome Cache found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Pascal\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on do 17/10/2013 at 11:46:19,58 ======================
  24. pas
    Beste Kape, Op mijn eigen bureaublad kan ik niet geraken, wel op dat van 'gast'. Is dat ook goed? Logfile of random's system information tool 1.09 (written by random/random) Run by Pascal at 2013-10-17 08:52:48 WIN_7 Service Pack 1 System drive C: has 167 GB (70%) free of 238 GB Total RAM: 3692 MB (60% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 8:59:34, on 17/10/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16720) Boot mode: Normal Running processes: C:\Windows\SysWOW64\rundll32.exe C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files\trend micro\Pascal.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {32b29df0-2237-4370-9a29-37cebb730e9b} - (no file) F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (file missing) O2 - BHO: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O4 - HKLM\..\Run: [NBAgent] "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP O4 - HKLM\..\Run: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun O4 - HKLM\..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60 O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?') O4 - HKUS\S-1-5-21-2457209422-596169401-3258411151-1000\..\Run: [Facebook Update] "C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-1000 Startup: 4rjlf7t7t.lnk = C:\Windows\System32\rundll32.exe (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-1000 Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User '?') O4 - S-1-5-21-2457209422-596169401-3258411151-501 Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User '?') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user') O4 - Startup: 4rjlf7t7t.lnk = C:\Windows\System32\rundll32.exe O4 - Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Toshiba Places Icon Utility.lnk = ? O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm O8 - Extra context menu item: Toevoegen aan TOSHIBA Bulletin Board - res://C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll/1000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-229 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-228 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (file missing) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Updater Service (IBUpdaterService) - Unknown owner - C:\ProgramData\IBUpdaterService\ibsvc.exe O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: McAfee SiteAdvisor Service - Unknown owner - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @c:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - c:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing) O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12727 bytes ======Listing Processes====== ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000Core.job C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2457209422-596169401-3258411151-1000UA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5FF49FE8-B332-4CB9-B102-FB6951629E55}] Virtual Storage Mount Notification - C:\Windows\system32\CbFsMntNtf3.dll [2011-01-17 188696] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] DVDVideoSoft WebPageAdjuster Class - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2013-01-30 342176] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 77576] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5FF49FE8-B332-4CB9-B102-FB6951629E55}] Virtual Storage Mount Notification - C:\Windows\SysWOW64\CbFsMntNtf3.dll [2011-01-17 155416] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-08-22 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] DVDVideoSoft WebPageAdjuster Class - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2013-01-30 281760] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "TosNC"=C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [2011-03-03 597928] "TosReelTimeMonitor"=C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [2010-12-14 38304] "Toshiba TEMPRO"=C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [2011-02-10 1546720] "TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2010-09-28 566184] "SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2009-08-13 570680] "00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2010-10-28 915320] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-10 11580520] "RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-11-03 2181224] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-09-30 2387752] "TosSENotify"=C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [2010-02-05 709976] "SmartFaceVWatcher"=C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [2009-10-19 238080] "TosVolRegulator"=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [2009-11-11 24376] "Toshiba Registration"=C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [2011-08-22 150992] "Cm106Sound"=C:\Windows\syswow64\RunDll32.exe [2009-07-14 44544] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"=C:\Users\Pascal\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-23 138096] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "NBAgent"=c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2011-06-29 1409424] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-06-28 336384] "SVPWUTIL"=C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [2010-11-09 532480] "HWSetup"=C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [2010-03-04 423936] "KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2010-08-15 34160] "TWebCamera"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2010-11-02 2475384] "ToshibaServiceStation"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [2010-07-01 1295224] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-08-15 4411440] "Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-12-19 41208] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE Toshiba Places Icon Utility.lnk - C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 4rjlf7t7t.lnk - C:\Windows\System32\rundll32.exe TRDCReminder.lnk - C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll [2011-01-17 188696] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler] Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll [2011-01-17 188696] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLinkedConnections"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2013-10-17 08:53:39 ----D---- C:\Program Files\trend micro 2013-10-17 08:52:48 ----D---- C:\rsit 2013-10-16 23:09:24 ----A---- C:\Windows\ntbtlog.txt 2013-10-11 15:36:04 ----A---- C:\Windows\SYSWOW64\ieui.dll 2013-10-11 15:36:03 ----A---- C:\Windows\system32\ieui.dll 2013-10-11 15:36:01 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe 2013-10-11 15:36:01 ----A---- C:\Windows\SYSWOW64\iesysprep.dll 2013-10-11 15:36:01 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2013-10-11 15:36:01 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2013-10-11 15:36:01 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-11 15:36:01 ----A---- C:\Windows\system32\iesysprep.dll 2013-10-11 15:36:01 ----A---- C:\Windows\system32\iesetup.dll 2013-10-11 15:36:01 ----A---- C:\Windows\system32\iernonce.dll 2013-10-11 15:36:01 ----A---- C:\Windows\system32\ie4uinit.exe 2013-10-11 15:36:00 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2013-10-11 15:35:59 ----A---- C:\Windows\system32\iertutil.dll 2013-10-11 15:35:57 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2013-10-11 15:35:57 ----A---- C:\Windows\system32\msfeeds.dll 2013-10-11 15:35:56 ----A---- C:\Windows\SYSWOW64\jscript.dll 2013-10-11 15:35:56 ----A---- C:\Windows\system32\jscript.dll 2013-10-11 15:35:54 ----A---- C:\Windows\system32\jscript9.dll 2013-10-11 15:35:53 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2013-10-11 15:35:52 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2013-10-11 15:35:51 ----A---- C:\Windows\system32\urlmon.dll 2013-10-11 15:35:48 ----A---- C:\Windows\SYSWOW64\wininet.dll 2013-10-11 15:35:48 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2013-10-11 15:35:48 ----A---- C:\Windows\system32\jsproxy.dll 2013-10-11 15:35:47 ----A---- C:\Windows\system32\wininet.dll 2013-10-11 15:35:46 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2013-10-11 15:35:44 ----A---- C:\Windows\system32\ieframe.dll 2013-10-11 15:35:40 ----A---- C:\Windows\system32\mshtml.dll 2013-10-11 15:35:35 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2013-10-10 07:23:02 ----A---- C:\Windows\SYSWOW64\comctl32.dll 2013-10-10 07:23:02 ----A---- C:\Windows\system32\comctl32.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SYSWOW64\lpk.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2013-10-10 07:22:59 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2013-10-10 07:22:59 ----A---- C:\Windows\system32\lpk.dll 2013-10-10 07:22:59 ----A---- C:\Windows\system32\fontsub.dll 2013-10-10 07:22:59 ----A---- C:\Windows\system32\dciman32.dll 2013-10-10 07:22:59 ----A---- C:\Windows\system32\atmlib.dll 2013-10-10 07:22:59 ----A---- C:\Windows\system32\atmfd.dll 2013-10-10 07:22:58 ----A---- C:\Windows\system32\drivers\Wdf01000.sys 2013-10-10 07:22:57 ----A---- C:\Windows\system32\drivers\usbvideo.sys 2013-10-10 07:22:57 ----A---- C:\Windows\system32\drivers\usbcir.sys 2013-10-10 07:22:57 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys 2013-10-10 07:22:55 ----A---- C:\Windows\SYSWOW64\mswsock.dll 2013-10-10 07:22:55 ----A---- C:\Windows\system32\mswsock.dll 2013-10-10 07:22:55 ----A---- C:\Windows\system32\drivers\tcpip.sys 2013-10-10 07:22:55 ----A---- C:\Windows\system32\drivers\afd.sys 2013-10-10 07:22:53 ----A---- C:\Windows\SYSWOW64\WebClnt.dll 2013-10-10 07:22:53 ----A---- C:\Windows\SYSWOW64\davclnt.dll 2013-10-10 07:22:53 ----A---- C:\Windows\system32\WebClnt.dll 2013-10-10 07:22:53 ----A---- C:\Windows\system32\drivers\mrxdav.sys 2013-10-10 07:22:53 ----A---- C:\Windows\system32\davclnt.dll 2013-10-10 07:22:52 ----A---- C:\Windows\system32\drivers\hidparse.sys 2013-10-10 07:22:52 ----A---- C:\Windows\system32\drivers\hidclass.sys 2013-10-10 07:22:50 ----A---- C:\Windows\system32\win32k.sys 2013-10-10 07:22:44 ----A---- C:\Windows\system32\ntoskrnl.exe 2013-10-10 07:22:39 ----A---- C:\Windows\system32\advapi32.dll 2013-10-10 07:22:38 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2013-10-10 07:22:37 ----A---- C:\Windows\system32\tdh.dll 2013-10-10 07:22:36 ----A---- C:\Windows\SYSWOW64\tdh.dll 2013-10-10 07:22:36 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2013-10-10 07:22:35 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2013-10-10 07:22:35 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2013-10-10 07:22:35 ----A---- C:\Windows\system32\wow64.dll 2013-10-10 07:22:35 ----A---- C:\Windows\system32\ntdll.dll 2013-10-10 07:22:34 ----A---- C:\Windows\SYSWOW64\wow32.dll 2013-10-10 07:22:34 ----A---- C:\Windows\SYSWOW64\user.exe 2013-10-10 07:22:34 ----A---- C:\Windows\SYSWOW64\setup16.exe 2013-10-10 07:22:34 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2013-10-10 07:22:34 ----A---- C:\Windows\SYSWOW64\instnm.exe 2013-10-10 07:22:25 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 07:22:25 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 07:22:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys 2013-10-10 07:22:23 ----A---- C:\Windows\system32\scavengeui.dll ======List of files/folders modified in the last 1 month====== 2013-10-17 08:59:29 ----HD---- C:\ProgramData 2013-10-17 08:56:04 ----D---- C:\Windows\Temp 2013-10-17 08:53:39 ----RD---- C:\Program Files 2013-10-17 08:44:05 ----D---- C:\Windows\system32\config 2013-10-17 00:22:19 ----D---- C:\Windows\Prefetch 2013-10-16 23:55:27 ----SHD---- C:\System Volume Information 2013-10-16 23:09:24 ----D---- C:\Windows 2013-10-16 21:08:35 ----D---- C:\Windows\System32 2013-10-16 21:08:35 ----D---- C:\Windows\inf 2013-10-16 21:08:35 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-10-16 21:07:48 ----D---- C:\Users\Pascal\AppData\Roaming\Audacity 2013-10-16 18:35:41 ----D---- C:\ProgramData\MFAData 2013-10-15 16:18:14 ----D---- C:\Windows\system32\Tasks 2013-10-12 14:58:41 ----D---- C:\Windows\Microsoft.NET 2013-10-12 14:57:51 ----RSD---- C:\Windows\assembly 2013-10-11 20:02:40 ----D---- C:\Windows\winsxs 2013-10-11 20:01:45 ----D---- C:\Program Files\Microsoft Silverlight 2013-10-11 20:01:43 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2013-10-11 19:58:46 ----D---- C:\Windows\SysWOW64 2013-10-11 19:58:45 ----D---- C:\Program Files (x86)\Internet Explorer 2013-10-11 19:58:44 ----D---- C:\Program Files\Internet Explorer 2013-10-11 19:58:43 ----D---- C:\Windows\system32\drivers 2013-10-11 19:58:42 ----D---- C:\Windows\AppPatch 2013-10-11 19:58:37 ----D---- C:\Windows\system32\DriverStore 2013-10-11 19:58:36 ----D---- C:\Windows\SYSWOW64\drivers 2013-10-11 15:36:50 ----D---- C:\Windows\system32\catroot 2013-10-11 15:36:48 ----D---- C:\Windows\system32\catroot2 2013-10-11 15:35:23 ----SHD---- C:\Windows\Installer 2013-10-11 15:19:56 ----D---- C:\Windows\system32\MRT 2013-10-11 15:16:47 ----A---- C:\Windows\system32\MRT.exe 2013-10-11 15:08:35 ----D---- C:\Windows\system32\nl-NL 2013-10-10 20:22:32 ----D---- C:\Users\Pascal\AppData\Roaming\Skype 2013-10-09 14:20:07 ----RD---- C:\Program Files (x86) 2013-10-08 21:16:51 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2013-10-08 15:58:44 ----D---- C:\Program Files (x86)\Common Files 2013-10-08 15:56:51 ----SD---- C:\ProgramData\Microsoft 2013-10-08 15:56:50 ----D---- C:\Program Files\Common Files\Microsoft Shared 2013-10-08 15:56:50 ----D---- C:\Program Files (x86)\Microsoft Office 2013-10-08 15:56:04 ----D---- C:\Users\Pascal\AppData\Roaming\SoftGrid Client 2013-09-20 22:57:00 ----D---- C:\ProgramData\Skype 2013-09-20 22:56:55 ----RD---- C:\Program Files (x86)\Skype ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2010-08-14 75904] R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2010-08-14 38016] R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2013-07-20 71480] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2013-07-20 311608] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2013-07-01 116536] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2013-09-05 45880] R0 LPCFilter;LPC Lower Filter Driver; C:\Windows\system32\DRIVERS\LPCFilter.sys [2010-03-22 46192] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2013-07-20 246072] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2013-07-20 206648] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952] R1 cbfs3;cbfs3; \??\C:\Windows\system32\drivers\cbfs3.sys [2011-01-17 323472] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-06-29 9371136] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-06-28 309760] R3 CeKbFilter;CeKbFilter; C:\Windows\system32\DRIVERS\CeKbFilter.sys [2012-05-10 20592] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-10 2544232] R3 PGEffect;Pangu effect driver; C:\Windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-10-19 406632] R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver; C:\Windows\system32\DRIVERS\rtl8192Ce.sys [2011-02-23 1142376] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-09-30 1393712] R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2009-07-30 27784] S3 athr;Stuurprogramma Atheros Extensible draadloze LAN-apparaat; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-07-20 247400] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] S3 USBMULCD;Aureon 7.1 USB Interface; C:\Windows\system32\drivers\CM10664.sys [2010-08-12 1310720] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-06-28 204288] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-07-04 4939312] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-07-23 283136] R2 cfWiMAXService;ConfigFree WiMAX Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-01-28 249200] R2 ConfigFree Service;ConfigFree Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448] R2 IBUpdaterService;Updater Service; C:\ProgramData\IBUpdaterService\ibsvc.exe [2013-03-16 639864] R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2010-08-04 1809920] R2 NAUpdate;@c:\Program Files (x86)\Nero\Update\NASvc.exe,-200; c:\Program Files (x86)\Nero\Update\NASvc.exe [2011-03-29 598312] R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2010-10-20 138656] R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2010-09-28 489384] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480] R3 TMachInfo;TMachInfo; C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2010-07-01 51576] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-07-25 162672] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08 257416] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448] S3 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO); C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2011-02-10 112080] S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-02-05 137560] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-06-26 1255736] -----------------EOF----------------- info.txt logfile of random's system information tool 1.09 2013-10-17 08:59:39 ======Uninstall list====== -->C:\Program Files\TOSHIBA\TVAP\setup.exe Adobe Flash Player 11 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -maintain activex Adobe Reader 9.5.3 - Nederlands-->MsiExec.exe /I{AC76BA86-7AD7-1043-7B44-A95000000001} AMD Media Foundation Decoders-->MsiExec.exe /X{B0CF6A06-8D6E-3C49-1B5E-75027D2AB2FB} ATI Catalyst Install Manager-->msiexec /q/x{6167672A-758D-9960-C32C-47A15E180A70} REBOOT=ReallySuppress Audacity 2.0.2-->"C:\Program Files (x86)\Audacity\unins000.exe" Aureon 7.1 USB-->C:\Windows\System32\Cmeau106.exe /rm /pusb106 AVG 2013-->"C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe" /AppMode=SETUP /Uninstall AVG 2013-->MsiExec.exe /I{6B02D047-A56D-4994-B1F1-53DA6B9885AB} AVG 2013-->MsiExec.exe /I{BC20D4CC-C409-42A9-A783-B3ACBD5ABE91} Catalyst Control Center - Branding-->MsiExec.exe /I{8064A378-46F4-4A4E-8AF5-153D0D4018DD} D3DX10-->MsiExec.exe /X{E09C4DB7-630C-4F06-A631-8EA7239923AF} ExtractNow-->"C:\Program Files (x86)\ExtractNow\uninstall.exe" Facebook Video Calling 1.2.0.287-->MsiExec.exe /X{B92C5909-1D37-4C51-8397-A28BB28E5DC3} Free Audio Converter version 5.0.22.128-->C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe Free YouTube to MP3 Converter version 3.12.0.128-->C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe High-Definition Video Playback-->MsiExec.exe /X{58CB9A9A-1EFB-4EA8-B50C-3097E754AC21} Java 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216020FF} Junk Mail filter update-->MsiExec.exe /I{400C31E4-796F-4E86-8FDC-C3C4FACC6847} LAME v3.99.3 (for Windows)-->"C:\Program Files (x86)\Lame For Audacity\unins000.exe" Manillen The Game-->"C:\Program Files (x86)\R&R Software\Manillen The Game\uninstall.exe" Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} Microsoft Office 2000 Premium-->MsiExec.exe /I{00000413-78E1-11D2-B60F-006097C998E7} Microsoft Primary Interoperability Assemblies 2005-->MsiExec.exe /X{2C303EE0-A595-3543-A71A-931C7AC40EDE} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2} Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE} Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F} Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-->MsiExec.exe /X{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E} Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} Movie Maker-->MsiExec.exe /X{AE8044B5-FCA3-4EBE-AC78-0FB3A6E8DC76} Movie Maker-->MsiExec.exe /X{ED6C77F9-4D7E-447C-9EC0-9A212D075535} MSVCRT_amd64-->MsiExec.exe /I{D0B44725-3666-492D-BEF6-587A14BD9BD9} MSVCRT-->MsiExec.exe /I{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} MSVCRT110_amd64-->MsiExec.exe /I{E9FA781F-3E80-4399-825A-AD3E11C28C77} MSVCRT110-->MsiExec.exe /I{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} Nero 10 Movie ThemePack Basic-->MsiExec.exe /X{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7} Nero BackItUp 10 Help (CHM)-->MsiExec.exe /X{08C8666B-C502-4AB3-B4CB-D74AC42D14FE} Nero BackItUp 10-->MsiExec.exe /X{68AB6930-5BFF-4FF6-923B-516A91984FE6} Nero BurnRights 10 Help (CHM)-->MsiExec.exe /X{555868C6-49FB-484F-BB43-8980651A1B00} Nero BurnRights 10-->MsiExec.exe /X{943CFD7D-5336-47AF-9418-E02473A5A517} Nero Control Center 10-->MsiExec.exe /X{6DFB899F-17A2-48F0-A533-ED8D6866CF38} Nero ControlCenter 10 Help (CHM)-->MsiExec.exe /X{523B2B1B-D8DB-4B41-90FF-C4D799E2758A} Nero Core Components 10-->MsiExec.exe /X{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F} Nero Express 10 Help (CHM)-->MsiExec.exe /X{33643918-7957-4839-92C7-EA96CB621A98} Nero Express 10-->MsiExec.exe /X{70550193-1C22-445C-8FA4-564E155DB1A7} Nero InfoTool 10 Help (CHM)-->MsiExec.exe /X{66049135-9659-4AAD-9169-9CCA269EBB3E} Nero InfoTool 10-->MsiExec.exe /X{F412B4AF-388C-4FF5-9B2F-33DB1C536953} Nero Kwik Media-->MsiExec.exe /X{1F7D9F37-C39C-486C-BDF8-8F440FFB3352} Nero Multimedia Suite 10 Essentials-->MsiExec.exe /X{2063D199-D79F-471A-9019-9E647296394D} Nero RescueAgent 10 Help (CHM)-->MsiExec.exe /X{92E25238-61A3-4ACD-A407-3C480EEF47A7} Nero RescueAgent 10-->MsiExec.exe /X{E337E787-CF61-4B7B-B84F-509202A54023} Nero StartSmart 10 Help (CHM)-->MsiExec.exe /X{F6117F9C-ADB5-4590-9BE4-12C7BEC28702} Nero StartSmart 10-->MsiExec.exe /X{F61D489E-6C44-49AC-AD02-7DA8ACA73A65} Nero Update-->MsiExec.exe /X{65BB0407-4CC8-4DC7-952E-3EEFDF05602A} NeroKwikMedia Help (CHM)-->MsiExec.exe /X{02FCAA8F-59D3-4198-822E-135C61EE4F0B} Numark Cue (Atomix Productions)-->C:\PROGRA~2\NUMARK~1\UNWISE.EXE C:\PROGRA~2\NUMARK~1\INSTALL.LOG Photo Common-->MsiExec.exe /X{743FD554-A73F-4FE8-BE7B-C283D16297F9} Photo Gallery-->MsiExec.exe /X{30F99474-EBE3-4134-A02B-F6CD38CFE243} Photo Gallery-->MsiExec.exe /X{F67CA22C-C11F-4573-8406-57F75BA06B51} PlayReady PC Runtime amd64-->MsiExec.exe /X{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04} Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.exe -runfromtemp -removeonly Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly Realtek USB 2.0 Card Reader-->"C:\Program Files (x86)\InstallShield Installation Information\{96AE7E41-E34E-47D0-AC07-1091A8127911}\Setup.exe" -runfromtemp -removeonly Realtek WLAN Driver-->C:\Program Files (x86)\InstallShield Installation Information\{9D3D8C60-A55F-4fed-B2B9-173001290E16}\Install.exe -uninst -l0x13 Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {6AF6C62E-4E3D-33BF-A591-9E4D53BDF22F} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DA36C2E5-6B34-3A6A-9C0A-7D1CC1C5A768} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7B82A51A-768B-3A7B-ADFA-F777097A8079} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E40184A4-4A61-3D2E-9035-CB6E1E610E07} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4736E989-32D9-3B91-90D7-C68848E118CA} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {F1696E2F-4803-362F-A756-65B363483FE6} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C8B8456C-6A12-3725-95A8-1C9FBE1E3141} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8E6848A1-B790-34FE-921A-A5319258E254} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E7F6B64E-E11F-3D1C-868D-3F1443DA5A15} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {08BB8EA1-3BA7-3AD5-8A07-22A5EC1F704E} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {880A0A36-244B-3C7A-8D6B-56E694CE7883} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {9D8496AE-4030-3E92-B44E-4F81051E6C85} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {43B6E5D3-56A9-36C1-BD8B-9E1D6920FF11} /parameterfolder Client Skype™ 6.7-->MsiExec.exe /X{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} Synaptics Pointing Device Driver-->rundll32.exe "%ProgramFiles%\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall TOSHIBA Bulletin Board-->"C:\Program Files (x86)\InstallShield Installation Information\{43DBC64B-3DD1-47E2-8788-D3C3B110C574}\setup.exe" -runfromtemp -l0x0413 -removeonly TOSHIBA Bulletin Board-->MsiExec.exe /X{43DBC64B-3DD1-47E2-8788-D3C3B110C574} TOSHIBA ConfigFree-->MsiExec.exe /X{F52618B2-A995-4F8D-A6C8-9E235A470C68} TOSHIBA Disc Creator-->MsiExec.exe /X{5DA0E02F-970B-424B-BF41-513A5018E4C0} TOSHIBA Face Recognition-->"C:\Program Files (x86)\InstallShield Installation Information\{F67FA545-D8E5-4209-86B1-AEE045D1003F}\setup.exe" -runfromtemp -l0x0413 -removeonly TOSHIBA Face Recognition-->MsiExec.exe /X{F67FA545-D8E5-4209-86B1-AEE045D1003F} TOSHIBA Flash Cards Support Utility-->"C:\Program Files (x86)\InstallShield Installation Information\{620BBA5E-F848-4D56-8BDA-584E44584C5E}\setup.exe" -runfromtemp -l0x0413 TOSHIBA Flash Cards Support Utility-->"C:\Program Files (x86)\InstallShield Installation Information\{620BBA5E-F848-4D56-8BDA-584E44584C5E}\setup.exe" -runfromtemp -l0x0413 -removeonly TOSHIBA Hardware Setup-->"C:\Program Files (x86)\InstallShield Installation Information\{5279374D-87FE-4879-9385-F17278EBB9D3}\setup.exe" -runfromtemp -l0x0413 -removeonly TOSHIBA Hardware Setup-->MsiExec.exe /I{5279374D-87FE-4879-9385-F17278EBB9D3} TOSHIBA HDD/SSD-waarschuwing-->C:\Program Files (x86)\InstallShield Installation Information\{D4322448-B6AF-4316-B859-D8A0E84DCB38}\setup.exe -runfromtemp -l0x0413 TOSHIBA HDD/SSD-waarschuwing-->C:\Program Files (x86)\InstallShield Installation Information\{D4322448-B6AF-4316-B859-D8A0E84DCB38}\setup.exe -runfromtemp -l0x0413 Toshiba Manuals-->"C:\Program Files (x86)\InstallShield Installation Information\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}\setup.exe" -runfromtemp -l0x0013 -removeonly TOSHIBA Media Controller-->C:\Program Files (x86)\InstallShield Installation Information\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}\setup.exe -runfromtemp -l0x0013 -removeonly TOSHIBA Places Icon Utility-->"C:\Program Files (x86)\InstallShield Installation Information\{461F6F0D-7173-4902-9604-AB1A29108AF2}\setup.exe" -runfromtemp -l0x0413 -removeonly TOSHIBA Recovery Media Creator Reminder-->C:\Program Files (x86)\InstallShield Installation Information\{773970F1-5EBA-4474-ADEE-1EA3B0A59492}\setup.exe -runfromtemp -l0x0413 TOSHIBA Recovery Media Creator-->MsiExec.exe /X{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF} TOSHIBA ReelTime-->"C:\Program Files (x86)\InstallShield Installation Information\{24811C12-F4A9-4D0F-8494-A7B8FE46123C}\setup.exe" -runfromtemp -l0x0413 -removeonly TOSHIBA ReelTime-->MsiExec.exe /X{24811C12-F4A9-4D0F-8494-A7B8FE46123C} TOSHIBA Service Station-->C:\Program Files (x86)\InstallShield Installation Information\{AC6569FA-6919-442A-8552-073BE69E247A}\setup.exe -runfromtemp -l0x0013 -removeonly TOSHIBA Supervisor Password-->"C:\Program Files (x86)\InstallShield Installation Information\{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}\setup.exe" -runfromtemp -l0x0413 TOSHIBA Supervisorwachtwoord-->"C:\Program Files (x86)\InstallShield Installation Information\{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}\setup.exe" -runfromtemp -l0x0413 -removeonly TOSHIBA TEMPRO-->MsiExec.exe /X{F082CB11-4794-4259-99A1-D91BA762AD15} TOSHIBA Value Added Package-->C:\Program Files\TOSHIBA\TVAP\Setup.exe TOSHIBA Web Camera Application-->"C:\Program Files (x86)\InstallShield Installation Information\{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}\setup.exe" -runfromtemp -l0x0413 -removeonly TOSHIBA Web Camera Application-->MsiExec.exe /I{6F3C8901-EBD3-470D-87F8-AC210F6E5E02} TOSHIBA Wireless LAN Indicator-->MsiExec.exe /X{5BA99779-6E12-49EF-BE49-F35B1EDB4DF9} TRORMCLauncher-->C:\Program Files (x86)\InstallShield Installation Information\{E65C7D8E-186D-484B-BEA8-DEF0331CE600}\setup.exe -runfromtemp -l0x0413 Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Client Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Client Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Client Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {EFD73366-C059-3D04-9848-59072A15DB53} /parameterfolder Client Updater Service-->"C:\ProgramData\IBUpdaterService\ibsvc.exe" /UNINSTALL Utility Common Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}\setup.exe" -runfromtemp -l0x0409 -removeonly Utility Common Driver-->MsiExec.exe /I{12688FD7-CB92-4A5B-BEE4-5C8E0574434F} Ver 1.2.0-->"C:\Program Files (x86)\USB Audio\unins000.exe" Visual Studio 2008 x64 Redistributables-->MsiExec.exe /I{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49} Visual Studio 2010 x64 Redistributables-->MsiExec.exe /I{21B133D6-5979-47F0-BE1C-F6A6B304693F} Windows Live Communications Platform-->MsiExec.exe /I{0454BB9A-2A7A-4214-BDFF-937F7A711A44} Windows Live Essentials-->C:\Program Files (x86)\Windows Live\Installer\wlarp.exe Windows Live Essentials-->MsiExec.exe /I{B7F31B9C-8775-4500-8E9D-6ABE9AE17CF4} Windows Live Family Safety-->MsiExec.exe /I{3D44D783-D027-4135-AC39-81E320ED2D3A} Windows Live Family Safety-->MsiExec.exe /X{5F611ADA-B98C-4DBB-ADDE-414F08457ECF} Windows Live ID Sign-in Assistant-->MsiExec.exe /I{CE52672C-A0E9-4450-8875-88A221D5CD50} Windows Live Installer-->MsiExec.exe /I{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC} Windows Live Mail-->MsiExec.exe /I{70854FE6-3BF1-4C69-94D0-BEB821102E34} Windows Live Mail-->MsiExec.exe /I{FA75723A-BF4A-40A2-BFCB-BBC320C27DC9} Windows Live Messenger-->MsiExec.exe /X{83C9377F-5ED1-4AD8-B113-7C876AEAF3AB} Windows Live Messenger-->MsiExec.exe /X{F2235E5E-7881-4293-9B6F-04B2609FBFF0} Windows Live MIME IFilter-->MsiExec.exe /I{F6822EFD-3F7D-4B35-8845-757A26AEC8E2} Windows Live Photo Common-->MsiExec.exe /X{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72} Windows Live PIMT Platform-->MsiExec.exe /I{6A8DB215-7BCD-4377-B015-2E4541A3E7C6} Windows Live SOXE Definitions-->MsiExec.exe /I{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214} Windows Live SOXE-->MsiExec.exe /I{FE7C0B3D-50B9-4951-BE78-A321CBF86552} Windows Live UX Platform Language Pack-->MsiExec.exe /I{4AA2A466-8031-403A-8236-5301B4E391FB} Windows Live UX Platform-->MsiExec.exe /I{4CCBD1F4-CEEC-452A-9CB8-46564B501315} Windows Live Writer Resources-->MsiExec.exe /X{FEFD91C5-A25D-48D9-89DA-0FB7BB8B3EF7} Windows Live Writer-->MsiExec.exe /X{06EED60F-7FFC-43A7-936E-AA4A8BD948B4} Windows Live Writer-->MsiExec.exe /X{97C79BEC-43F7-4BD8-A6A7-85C0257E488A} Windows Live Writer-->MsiExec.exe /X{D2C146B1-948D-47EF-8387-5D1C6B980F7C} ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=2 "PROCESSOR_LEVEL"=20 "PROCESSOR_IDENTIFIER"=AMD64 Family 20 Model 2 Stepping 0, AuthenticAMD "PROCESSOR_REVISION"=0200 "windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log "windows_tracing_flags"=3 -----------------EOF-----------------
  25. pas
    Beste, Ik heb het weer aan mijn been. Kan iemand van jullie me stap voor stap uiteenzetten hoe ik er van af kom? Alvast bedankt.
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.