JaleesaJ

19 augustus 2012

Nog steeds sloom wel wat verbeterd maar nog niet terug gevallen in zn oude gewoontes

19 augustus 2012

Sorry dat het zolang duurde maar ik heb het;)

ComboFix 12-08-04.02 - jaleesa jaggoo 16-08-2012 1:47.2.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1982.1061 [GMT 2:00]

Gestart vanuit: c:\documents and settings\jaleesa jaggoo\Mijn documenten\Downloads\ComboFix.exe

gebruikte Opdracht switches :: c:\documents and settings\jaleesa jaggoo\Bureaublad\CFScript.txt

AV: ESET NOD32 Antivirus 3.0 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

* Aanwezig AV is actief

.

FILE ::

"c:\windows\system32\tmpD10FB.FOT"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\btn-green.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\corners-btn.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\corners1.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\corners2.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\corners3.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\corners4.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\ie6-7.css

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\jquery.main.js

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\main.html

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\McAfee.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\nl-flag.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\nl-image.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\pay7.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\pay8.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\pay9.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\steps-en.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\steps-nl.png

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\style.css

c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd\tabs.png

c:\windows\system32\SET5CD.tmp

c:\windows\system32\SET5CE.tmp

c:\windows\system32\SET5CF.tmp

c:\windows\system32\SET5D3.tmp

c:\windows\system32\SET5D4.tmp

c:\windows\system32\SET5D5.tmp

c:\windows\system32\SET5D9.tmp

c:\windows\system32\SET5DB.tmp

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-07-16 to 2012-08-16 ))))))))))))))))))))))))))))))

.

2012-08-15 23:27 . 2012-08-15 23:49 -------- d-----w- c:\windows\LastGood

2012-08-04 14:43 . 2012-08-15 23:35 -------- d--h--r- c:\documents and settings\jaleesa jaggoo\Onlangs geopend

2012-07-31 13:11 . 2012-07-31 13:11 -------- d-----w- c:\program files\PC Unleashed Online

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-08-15 23:25 . 2012-03-31 14:41 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-08-15 23:25 . 2011-08-09 11:32 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-07-15 13:56 . 2012-07-15 13:56 1409 ----a-w- c:\windows\system32\tmpD10FB.FOT

2012-07-02 17:38 . 2005-12-13 09:46 43520 ------w- c:\windows\system32\licmgr10.dll

2012-07-02 17:38 . 2005-12-13 09:46 1469440 ------w- c:\windows\system32\inetcpl.cpl

2012-07-02 12:05 . 2005-12-13 09:46 385024 ------w- c:\windows\system32\html.iec

2012-06-13 13:55 . 2005-12-13 09:46 1866240 ----a-w- c:\windows\system32\win32k.sys

2012-06-05 15:49 . 2008-04-14 17:02 1372672 ----a-w- c:\windows\system32\msxml6.dll

2012-06-05 15:49 . 2005-12-13 09:46 1172480 ----a-w- c:\windows\system32\msxml3.dll

2012-06-04 04:32 . 2005-12-13 09:46 152576 ----a-w- c:\windows\system32\schannel.dll

2012-06-02 13:19 . 2007-07-30 17:18 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui

2012-06-02 13:19 . 2005-12-13 09:58 329240 ----a-w- c:\windows\system32\wucltui.dll

2012-06-02 13:19 . 2005-12-13 09:58 219160 ----a-w- c:\windows\system32\wuaucpl.cpl

2012-06-02 13:19 . 2005-12-13 09:58 210968 ----a-w- c:\windows\system32\wuweb.dll

2012-06-02 13:19 . 2007-07-30 17:19 45080 ----a-w- c:\windows\system32\wups2.dll

2012-06-02 13:19 . 2005-12-13 09:58 53784 ----a-w- c:\windows\system32\wuauclt.exe

2012-06-02 13:19 . 2005-12-13 09:58 35864 ----a-w- c:\windows\system32\wups.dll

2012-06-02 13:19 . 2005-12-13 09:46 97304 ----a-w- c:\windows\system32\cdm.dll

2012-06-02 13:19 . 2007-07-30 17:20 15896 ----a-w- c:\windows\system32\wuapi.dll.mui

2012-06-02 13:19 . 2007-07-30 17:20 15896 ----a-w- c:\windows\system32\wuaucpl.cpl.mui

2012-06-02 13:19 . 2005-12-13 09:58 577048 ----a-w- c:\windows\system32\wuapi.dll

2012-06-02 13:19 . 2007-07-30 17:19 24088 ----a-w- c:\windows\system32\wucltui.dll.mui

2012-06-02 13:19 . 2005-12-13 09:58 1933848 ----a-w- c:\windows\system32\wuaueng.dll

2012-06-02 13:19 . 2008-05-02 17:47 18160 ----a-w- c:\windows\system32\mucltui.dll.mui

2012-06-02 13:18 . 2008-05-02 17:47 214256 ----a-w- c:\windows\system32\muweb.dll

2012-06-02 13:18 . 2008-05-02 17:47 275696 ----a-w- c:\windows\system32\mucltui.dll

2012-05-31 13:22 . 2005-12-13 09:46 602624 ----a-w- c:\windows\system32\crypt32.dll

.

((((((((((((((((((((((((((((( SnapShot@2012-08-05_15.03.41 )))))))))))))))))))))))))))))))))))))))))

.

+ 2012-08-15 22:59 . 2012-08-15 22:59 16384 c:\windows\Temp\Perflib_Perfdata_5b4.dat

- 2005-12-13 09:46 . 2012-06-14 14:34 79160 c:\windows\system32\perfc009.dat

+ 2005-12-13 09:46 . 2012-08-05 15:11 79160 c:\windows\system32\perfc009.dat

- 2005-12-13 09:46 . 2012-05-11 14:44 67072 c:\windows\system32\mshtmled.dll

+ 2005-12-13 09:46 . 2012-07-02 17:38 67072 c:\windows\system32\mshtmled.dll

+ 2005-12-13 09:46 . 2012-07-02 17:38 25600 c:\windows\system32\jsproxy.dll

- 2005-12-13 09:46 . 2012-05-11 14:44 25600 c:\windows\system32\jsproxy.dll

- 2009-11-10 20:00 . 2012-05-11 14:44 12800 c:\windows\system32\dllcache\xpshims.dll

+ 2009-11-10 20:00 . 2012-07-02 17:38 12800 c:\windows\system32\dllcache\xpshims.dll

- 2008-02-16 09:05 . 2012-05-11 14:44 67072 c:\windows\system32\dllcache\mshtmled.dll

+ 2008-02-16 09:05 . 2012-07-02 17:38 67072 c:\windows\system32\dllcache\mshtmled.dll

- 2008-11-03 07:50 . 2012-05-11 14:44 55296 c:\windows\system32\dllcache\msfeedsbs.dll

+ 2008-11-03 07:50 . 2012-07-02 17:38 55296 c:\windows\system32\dllcache\msfeedsbs.dll

- 2007-08-13 17:44 . 2012-05-11 14:44 43520 c:\windows\system32\dllcache\licmgr10.dll

+ 2007-08-13 17:44 . 2012-07-02 17:38 43520 c:\windows\system32\dllcache\licmgr10.dll

+ 2008-02-16 09:05 . 2012-07-02 17:38 25600 c:\windows\system32\dllcache\jsproxy.dll

- 2008-02-16 09:05 . 2012-05-11 14:44 25600 c:\windows\system32\dllcache\jsproxy.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 12800 c:\windows\ie8updates\KB2722913-IE8\xpshims.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 67072 c:\windows\ie8updates\KB2722913-IE8\mshtmled.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 55296 c:\windows\ie8updates\KB2722913-IE8\msfeedsbs.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 43520 c:\windows\ie8updates\KB2722913-IE8\licmgr10.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 25600 c:\windows\ie8updates\KB2722913-IE8\jsproxy.dll

- 2005-12-13 09:46 . 2012-06-14 14:34 530888 c:\windows\system32\perfh013.dat

+ 2005-12-13 09:46 . 2012-08-05 15:11 530888 c:\windows\system32\perfh013.dat

+ 2005-12-13 09:46 . 2012-08-05 15:11 460412 c:\windows\system32\perfh009.dat

- 2005-12-13 09:46 . 2012-06-14 14:34 460412 c:\windows\system32\perfh009.dat

+ 2005-12-13 09:46 . 2012-08-05 15:11 100950 c:\windows\system32\perfc013.dat

- 2005-12-13 09:46 . 2012-06-14 14:34 100950 c:\windows\system32\perfc013.dat

- 2005-12-13 09:46 . 2012-05-11 14:44 206848 c:\windows\system32\occache.dll

+ 2005-12-13 09:46 . 2012-07-02 17:38 206848 c:\windows\system32\occache.dll

+ 2005-12-13 09:46 . 2012-07-02 17:38 611840 c:\windows\system32\mstime.dll

- 2005-12-13 09:46 . 2012-05-11 14:44 611840 c:\windows\system32\mstime.dll

+ 2012-08-15 23:25 . 2012-08-15 23:25 686792 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_271_ActiveX.exe

+ 2012-08-15 23:25 . 2012-08-15 23:25 466632 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_271_ActiveX.dll

- 2012-03-31 14:41 . 2012-08-03 10:25 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

+ 2012-03-31 14:41 . 2012-08-15 23:25 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

- 2005-12-13 09:46 . 2012-05-11 14:44 184320 c:\windows\system32\iepeers.dll

+ 2005-12-13 09:46 . 2012-07-02 17:38 184320 c:\windows\system32\iepeers.dll

- 2005-12-13 09:46 . 2012-05-11 14:44 387584 c:\windows\system32\iedkcs32.dll

+ 2005-12-13 09:46 . 2012-07-02 17:38 387584 c:\windows\system32\iedkcs32.dll

- 2005-12-13 09:46 . 2012-05-11 11:38 174080 c:\windows\system32\ie4uinit.exe

+ 2005-12-13 09:46 . 2012-07-02 12:05 174080 c:\windows\system32\ie4uinit.exe

- 2008-02-16 09:05 . 2012-05-16 15:09 916992 c:\windows\system32\dllcache\wininet.dll

+ 2008-02-16 09:05 . 2012-07-02 17:38 916992 c:\windows\system32\dllcache\wininet.dll

+ 2007-08-13 17:44 . 2012-07-02 17:38 105984 c:\windows\system32\dllcache\url.dll

- 2007-08-13 17:44 . 2012-05-11 14:44 105984 c:\windows\system32\dllcache\url.dll

- 2007-08-13 17:44 . 2012-05-11 14:44 206848 c:\windows\system32\dllcache\occache.dll

+ 2007-08-13 17:44 . 2012-07-02 17:38 206848 c:\windows\system32\dllcache\occache.dll

+ 2008-02-16 09:05 . 2012-07-02 17:38 611840 c:\windows\system32\dllcache\mstime.dll

- 2008-02-16 09:05 . 2012-05-11 14:44 611840 c:\windows\system32\dllcache\mstime.dll

- 2008-11-03 07:50 . 2012-05-11 14:44 629760 c:\windows\system32\dllcache\msfeeds.dll

+ 2008-11-03 07:50 . 2012-07-02 17:38 629760 c:\windows\system32\dllcache\msfeeds.dll

- 2012-06-13 21:46 . 2012-05-11 14:44 521728 c:\windows\system32\dllcache\jsdbgui.dll

+ 2012-06-13 21:46 . 2012-07-02 17:38 521728 c:\windows\system32\dllcache\jsdbgui.dll

+ 2009-11-10 20:00 . 2012-07-02 17:38 247808 c:\windows\system32\dllcache\ieproxy.dll

- 2009-11-10 20:00 . 2012-05-11 14:44 247808 c:\windows\system32\dllcache\ieproxy.dll

- 2008-02-16 09:05 . 2012-05-11 14:44 184320 c:\windows\system32\dllcache\iepeers.dll

+ 2008-02-16 09:05 . 2012-07-02 17:38 184320 c:\windows\system32\dllcache\iepeers.dll

- 2010-06-08 21:11 . 2012-05-11 14:44 743424 c:\windows\system32\dllcache\iedvtool.dll

+ 2010-06-08 21:11 . 2012-07-02 17:38 743424 c:\windows\system32\dllcache\iedvtool.dll

+ 2007-08-13 17:39 . 2012-07-02 17:38 387584 c:\windows\system32\dllcache\iedkcs32.dll

- 2007-08-13 17:39 . 2012-05-11 14:44 387584 c:\windows\system32\dllcache\iedkcs32.dll

- 2007-08-13 17:39 . 2012-05-11 11:38 174080 c:\windows\system32\dllcache\ie4uinit.exe

+ 2007-08-13 17:39 . 2012-07-02 12:05 174080 c:\windows\system32\dllcache\ie4uinit.exe

+ 2012-08-15 23:51 . 2012-05-16 15:09 916992 c:\windows\ie8updates\KB2722913-IE8\wininet.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 105984 c:\windows\ie8updates\KB2722913-IE8\url.dll

+ 2012-08-15 23:51 . 2010-07-05 13:21 401272 c:\windows\ie8updates\KB2722913-IE8\spuninst\updspapi.dll

+ 2012-08-15 23:51 . 2010-07-05 13:21 234872 c:\windows\ie8updates\KB2722913-IE8\spuninst\spuninst.exe

+ 2012-08-15 23:51 . 2012-05-11 14:44 206848 c:\windows\ie8updates\KB2722913-IE8\occache.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 611840 c:\windows\ie8updates\KB2722913-IE8\mstime.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 629760 c:\windows\ie8updates\KB2722913-IE8\msfeeds.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 521728 c:\windows\ie8updates\KB2722913-IE8\jsdbgui.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 247808 c:\windows\ie8updates\KB2722913-IE8\ieproxy.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 184320 c:\windows\ie8updates\KB2722913-IE8\iepeers.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 743424 c:\windows\ie8updates\KB2722913-IE8\iedvtool.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 387584 c:\windows\ie8updates\KB2722913-IE8\iedkcs32.dll

+ 2012-08-15 23:51 . 2012-05-11 11:38 174080 c:\windows\ie8updates\KB2722913-IE8\ie4uinit.exe

- 2008-02-16 09:05 . 2012-05-11 14:44 1212416 c:\windows\system32\dllcache\urlmon.dll

+ 2008-02-16 09:05 . 2012-07-02 17:38 1212416 c:\windows\system32\dllcache\urlmon.dll

+ 2008-02-16 22:35 . 2012-07-02 17:38 6008320 c:\windows\system32\dllcache\mshtml.dll

+ 2008-11-03 07:50 . 2012-07-02 17:38 2000384 c:\windows\system32\dllcache\iertutil.dll

- 2008-11-03 07:50 . 2012-05-11 14:44 2000384 c:\windows\system32\dllcache\iertutil.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 1212416 c:\windows\ie8updates\KB2722913-IE8\urlmon.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 6007808 c:\windows\ie8updates\KB2722913-IE8\mshtml.dll

+ 2012-08-15 23:51 . 2012-05-11 14:44 2000384 c:\windows\ie8updates\KB2722913-IE8\iertutil.dll

+ 2008-11-03 07:50 . 2012-07-02 21:08 11111424 c:\windows\system32\dllcache\ieframe.dll

- 2008-11-03 07:50 . 2012-05-11 18:14 11111424 c:\windows\system32\dllcache\ieframe.dll

+ 2012-08-15 23:51 . 2012-05-11 18:14 11111424 c:\windows\ie8updates\KB2722913-IE8\ieframe.dll

.

-- Snapshot teruggezet naar huidige datum --

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-12 65536]

"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2009-05-19 3561720]

"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-08-03 4777856]

"Akamai NetSession Interface"="c:\documents and settings\jaleesa jaggoo\Local Settings\Application Data\Akamai\netsession_win.exe" [2012-05-26 4327744]

"Spotify"="c:\documents and settings\jaleesa jaggoo\Application Data\Spotify\Spotify.exe" [2012-07-30 7601880]

"Spotify Web Helper"="c:\documents and settings\jaleesa jaggoo\Application Data\Spotify\Data\SpotifyWebHelper.exe" [2012-07-30 1193176]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CFSServ.exe"="CFSServ.exe -NoClient" [X]

"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 344064]

"RTHDCPL"="RTHDCPL.EXE" [2005-11-10 15473664]

"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-10-14 98394]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-10-14 688218]

"AGRSMMSG"="AGRSMMSG.exe" [2005-10-15 88203]

"THotkey"="c:\program files\Toshiba\Toshiba Applet\thotkey.exe" [2005-12-08 352256]

"Tvs"="c:\program files\TOSHIBA\Tvs\TvsTray.exe" [2005-11-30 73728]

"TPSMain"="TPSMain.exe" [2005-08-03 266240]

"NDSTray.exe"="NDSTray.exe" [bU]

"SmoothView"="c:\program files\TOSHIBA\TOSHIBA-zoomutility\SmoothView.exe" [2005-05-12 118784]

"PadTouch"="c:\program files\TOSHIBA\Touch and Launch\PadExe.exe" [2005-08-30 1077327]

"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-08-01 122940]

"LVCOMS"="c:\program files\Common Files\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 135214]

"RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2008-05-01 20480]

"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-10-24 1451264]

"DRPU PC Management - Basic"="c:\program files\DRPU PC Management - Basic\Basic Manage.exe" [2011-05-06 2738624]

"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-01-07 429392]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]

"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-06-07 421776]

.

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

Adobe Reader Snelle start.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-24 29696]

.

c:\documents and settings\Default User\Menu Start\Programma's\Opstarten\

IconPackager.lnk - c:\program files\Stardock\MyColors\IconPackager.exe [N/A]

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]

"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files\Stardock\ObjectDockPlus2\ODMenu.dll" [2010-03-24 511344]

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=

"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"=

"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

"c:\\Documents and Settings\\jaleesa jaggoo\\Application Data\\Spotify\\spotify.exe"=

"c:\\Documents and Settings\\jaleesa jaggoo\\Local Settings\\Application Data\\Akamai\\netsession_win.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"86:TCP"= 86:TCP:BroadCam Video Streaming Server Web Server

"1935:TCP"= 1935:TCP:BroadCam Video Streaming Server Flash Video Server

"2059:TCP"= 2059:TCP:Akamai NetSession Interface

"5000:UDP"= 5000:UDP:Akamai NetSession Interface

.

R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [24-10-2008 20:53 34824]

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22-7-2011 18:27 12880]

R1 SAS***IL;SAS***IL;c:\program files\SUPERAntiSpyware\SAS***IL.SYS [12-7-2011 23:55 67664]

R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [12-8-2011 1:38 116608]

R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [13-12-2005 11:46 14336]

R2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [4-1-2012 14:22 822624]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [28-9-2009 12:08 19160]

R3 Sftfs;Sftfs;c:\windows\system32\drivers\Sftfsxp.sys [2-12-2009 22:23 584680]

R3 Sftplay;Sftplay;c:\windows\system32\drivers\Sftplayxp.sys [2-12-2009 22:23 209512]

R3 Sftredir;Sftredir;c:\windows\system32\drivers\Sftredirxp.sys [2-12-2009 22:23 20584]

R3 Sftvol;Sftvol;c:\windows\system32\drivers\Sftvolxp.sys [2-12-2009 22:23 18280]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [31-3-2012 16:41 250056]

S3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\drivers\netaapl.sys [18-6-2011 18:27 18432]

S3 PID_0920;Logitech QuickCam Express(PID_0920);c:\windows\system32\drivers\LV532AV.SYS [1-5-2008 19:30 152576]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

Akamai REG_MULTI_SZ Akamai

.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

UxTuneUp

.

Inhoud van de 'Gedeelde Taken' map

.

2012-08-15 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 23:25]

.

2012-07-31 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 16:57]

.

2012-06-22 c:\windows\Tasks\Easy Onderhoud.job

- c:\program files\TuneUp Utilities 2008\OneClick.exe [2008-02-04 08:39]

.

2012-08-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-15 17:06]

.

2012-08-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-15 17:06]

.

2012-08-04 c:\windows\Tasks\Norton Security Scan for jaleesa jaggoo.job

- c:\progra~1\NORTON~2\Engine\372~1.5\Nss.exe [2012-06-07 09:45]

.

2012-08-05 c:\windows\Tasks\PC Unleashed Online Registration3.job

- c:\program files\Common Files\PC Unleashed Online\UUS3\UUS3.dll [2012-06-25 20:52]

.

2012-07-31 c:\windows\Tasks\PC Unleashed Online Update3.job

- c:\program files\Common Files\PC Unleashed Online\UUS3\Update3.exe [2012-06-25 20:52]

.

2012-07-31 c:\windows\Tasks\PC Unleashed.job

- c:\program files\PC Unleashed Online\PC Unleashed\pcu.exe [2012-07-19 21:57]

.

2012-08-05 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task 1d33ac69-ade7-45cc-a014-084812ce1cf7.job

- c:\program files\SUPERAntiSpyware\SASTask.exe [2011-05-04 17:52]

.

2012-08-15 c:\windows\Tasks\User_Feed_Synchronization-{F34884A8-E52E-42EB-86C4-5FB00637C3D7}.job

- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]

.

------- Bijkomende Scan -------

.

uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

uStart Page = hxxp://bb.rocmn.nl/webapps/portal/frameset.jsp

uDefault_Search_URL = hxxp://www.google.com/ie

uInternet Settings,ProxyOverride = <local>

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.0.1

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-08-16 02:19

Windows 5.1.2600 Service Pack 3 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Akamai]

"ServiceDll"="c:\program files\common files\akamai/netsession_win_4f7fccd.dll"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-823361176-16431640-2854894277-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID]

@Denied: (Full) (LocalSystem)

@SACL=

.

[HKEY_USERS\S-1-5-21-823361176-16431640-2854894277-1006\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7FF0298D-423F-D083-8975-7D434F250BA7}*]

@Allowed: (Read) (RestrictedCode)

"lanckdpkbammamegomkkodin"=hex:64,62,67,61,61,6c,6a,65,6b,6f,6a,64,67,64,61,6f,

6d,6b,6f,6e,62,6a,6a,64,69,62,6d,6b,66,69,65,6f,61,69,67,63,66,66,66,6e,00,\

"lapbpikenaifcbgpbffeceea"=hex:62,62,67,61,6c,6b,61,68,64,68,6f,69,70,66,64,61,

69,6d,62,6b,70,65,66,70,67,63,70,61,66,6d,65,65,61,70,63,66,00,02

.

[HKEY_USERS\S-1-5-21-823361176-16431640-2854894277-1006\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{B183F520-3874-22F2-48F9-6B6B43D5921D}*]

@Allowed: (Read) (RestrictedCode)

"jaepdhlelcmkikekmifc"=hex:62,61,69,6e,00,00

"jaepdhlelcmkikekmijc"=hex:62,61,62,6d,00,00

"iaeeignooakpedjbcf"=hex:6b,61,6a,6e,6e,70,6b,62,6e,6f,6b,65,6d,6d,68,61,6e,6a,

61,61,6e,69,00,00

"hacpokaickhmbghb"=hex:6b,61,6a,6e,6e,70,69,62,62,62,65,64,67,6a,6e,6e,66,61,

68,67,63,6e,00,00

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

.

- - - - - - - > 'winlogon.exe'(596)

c:\program files\SUPERAntiSpyware\SASWINLO.DLL

c:\windows\system32\Ati2evxx.dll

.

Voltooingstijd: 2012-08-16 02:25:42

ComboFix-quarantined-files.txt 2012-08-16 00:25

ComboFix2.txt 2012-08-05 15:35

.

Pre-Run: 12.407.316.480 bytes beschikbaar

Post-Run: 12.287.586.304 bytes beschikbaar

.

- - End Of File - - 4B94CA7C001A2ED933037CC41BD516AB

5 augustus 2012

ComboFix 12-08-04.02 - jaleesa jaggoo 05-08-2012 16:39:59.1.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1982.1124 [GMT 2:00]

Gestart vanuit: c:\documents and settings\jaleesa jaggoo\Mijn documenten\Downloads\ComboFix.exe

AV: ESET NOD32 Antivirus 3.0 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

* Aanwezig AV is actief

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\All Users\Application Data\idczkqis.exe

c:\documents and settings\All Users\Application Data\kisyliofvvqhkdl

c:\documents and settings\All Users\Application Data\QuestDns

c:\documents and settings\All Users\Application Data\sysReserve.ini

c:\documents and settings\All Users\Application Data\TEMP

c:\documents and settings\All Users\Application Data\wpfrqykh.exe

c:\documents and settings\Default User\WINDOWS

c:\documents and settings\jaleesa jaggoo\Application Data\AntiVirus System 2011

c:\documents and settings\jaleesa jaggoo\Application Data\AntiVirus System 2011\IcoActivate.ico

c:\documents and settings\jaleesa jaggoo\Application Data\AntiVirus System 2011\IcoHelp.ico

c:\documents and settings\jaleesa jaggoo\Application Data\AntiVirus System 2011\IcoUninstall.ico

c:\documents and settings\jaleesa jaggoo\Menu Start\Programma's\AntiVirus System 2011

c:\documents and settings\jaleesa jaggoo\Menu Start\Programma's\AntiVirus System 2011\Help AntiVirus System 2011.lnk

c:\documents and settings\jaleesa jaggoo\Menu Start\Programma's\AntiVirus System 2011\How to Activate AntiVirus System 2011.lnk

c:\documents and settings\jaleesa jaggoo\Mijn documenten\~WRL0003.tmp

c:\documents and settings\jaleesa jaggoo\ms.exe

c:\documents and settings\jaleesa jaggoo\WINDOWS

C:\msminer

c:\msminer\miner.exe

c:\msminer\msminer.exe

c:\program files\QuestDns

c:\program files\QuestDns\uninstall.exe

C:\Recycle.Bin

c:\windows\IsUn0413.exe

c:\windows\SET470.tmp

c:\windows\system32\_002983_.tmp.dll

c:\windows\system32\_002984_.tmp.dll

c:\windows\system32\_002985_.tmp.dll

c:\windows\system32\_002986_.tmp.dll

c:\windows\system32\_002993_.tmp.dll

c:\windows\system32\_002994_.tmp.dll

c:\windows\system32\_002995_.tmp.dll

c:\windows\system32\_002996_.tmp.dll

c:\windows\system32\_002998_.tmp.dll

c:\windows\system32\_002999_.tmp.dll

c:\windows\system32\_003002_.tmp.dll

c:\windows\system32\_003003_.tmp.dll

c:\windows\system32\_003005_.tmp.dll

c:\windows\system32\_003006_.tmp.dll

c:\windows\system32\_003007_.tmp.dll

c:\windows\system32\_003009_.tmp.dll

c:\windows\system32\_003012_.tmp.dll

c:\windows\system32\_003013_.tmp.dll

c:\windows\system32\_003017_.tmp.dll

c:\windows\system32\_003018_.tmp.dll

c:\windows\system32\_003020_.tmp.dll

c:\windows\system32\_003023_.tmp.dll

c:\windows\system32\_003025_.tmp.dll

c:\windows\system32\_003026_.tmp.dll

c:\windows\system32\_003027_.tmp.dll

c:\windows\system32\_003028_.tmp.dll

c:\windows\system32\_003029_.tmp.dll

c:\windows\system32\_003032_.tmp.dll

c:\windows\system32\_003033_.tmp.dll

c:\windows\system32\_003034_.tmp.dll

c:\windows\system32\_003035_.tmp.dll

c:\windows\system32\_003036_.tmp.dll

c:\windows\system32\_003041_.tmp.dll

c:\windows\system32\~GLH0001.TMP

c:\windows\system32\~GLH0002.TMP

c:\windows\system32\config\systemprofile\WINDOWS

c:\windows\system32\SET100C.tmp

c:\windows\system32\SET10F8.tmp

c:\windows\system32\SET1116.tmp

c:\windows\system32\SET1117.tmp

c:\windows\system32\SET1125.tmp

c:\windows\system32\SET1134.tmp

c:\windows\system32\SET1139.tmp

c:\windows\system32\SET115B.tmp

c:\windows\system32\SET17E.tmp

c:\windows\system32\SET17F.tmp

c:\windows\system32\SET180.tmp

c:\windows\system32\SET181.tmp

c:\windows\system32\SET183.tmp

c:\windows\system32\SET185.tmp

c:\windows\system32\SET18C.tmp

c:\windows\system32\SET18D.tmp

c:\windows\system32\SET190.tmp

c:\windows\system32\SET195.tmp

c:\windows\system32\SET196.tmp

c:\windows\system32\SET197.tmp

c:\windows\system32\SET199.tmp

c:\windows\system32\SET19A.tmp

c:\windows\system32\SET19B.tmp

c:\windows\system32\SET19C.tmp

c:\windows\system32\SET19D.tmp

c:\windows\system32\SET19F.tmp

c:\windows\system32\SET1A0.tmp

c:\windows\system32\SET1A1.tmp

c:\windows\system32\SET1A3.tmp

c:\windows\system32\SET1A4.tmp

c:\windows\system32\SET1AB.tmp

c:\windows\system32\SET1AC.tmp

c:\windows\system32\SET1AD.tmp

c:\windows\system32\SET1B0.tmp

c:\windows\system32\SET1B2.tmp

c:\windows\system32\SET1B4.tmp

c:\windows\system32\SET1B8.tmp

c:\windows\system32\SET1BB.tmp

c:\windows\system32\SET1BE.tmp

c:\windows\system32\SET1BF.tmp

c:\windows\system32\SET1C1.tmp

c:\windows\system32\SET1C7.tmp

c:\windows\system32\SET1C8.tmp

c:\windows\system32\SET1C9.tmp

c:\windows\system32\SET1CA.tmp

c:\windows\system32\SET1D0.tmp

c:\windows\system32\SET1D5.tmp

c:\windows\system32\SET1D6.tmp

c:\windows\system32\SET1D9.tmp

c:\windows\system32\SET1DC.tmp

c:\windows\system32\SET1DD.tmp

c:\windows\system32\SET1E4.tmp

c:\windows\system32\SET1E5.tmp

c:\windows\system32\SET1E7.tmp

c:\windows\system32\SET1EA.tmp

c:\windows\system32\SET1EB.tmp

c:\windows\system32\SET1F8.tmp

c:\windows\system32\SET1FA.tmp

c:\windows\system32\SET1FB.tmp

c:\windows\system32\SET1FC.tmp

c:\windows\system32\SET1FD.tmp

c:\windows\system32\SET1FE.tmp

c:\windows\system32\SET20E.tmp

c:\windows\system32\SET213.tmp

c:\windows\system32\SET215.tmp

c:\windows\system32\SET216.tmp

c:\windows\system32\SET217.tmp

c:\windows\system32\SET218.tmp

c:\windows\system32\SET219.tmp

c:\windows\system32\SET21C.tmp

c:\windows\system32\SET21D.tmp

c:\windows\system32\SET221.tmp

c:\windows\system32\SET222.tmp

c:\windows\system32\SET226.tmp

c:\windows\system32\SET227.tmp

c:\windows\system32\SET22D.tmp

c:\windows\system32\SET22E.tmp

c:\windows\system32\SET22F.tmp

c:\windows\system32\SET237.tmp

c:\windows\system32\SET23D.tmp

c:\windows\system32\SET23E.tmp

c:\windows\system32\SET23F.tmp

c:\windows\system32\SET240.tmp

c:\windows\system32\SET242.tmp

c:\windows\system32\SET248.tmp

c:\windows\system32\SET24E.tmp

c:\windows\system32\SET254.tmp

c:\windows\system32\SET256.tmp

c:\windows\system32\SET258.tmp

c:\windows\system32\SET259.tmp

c:\windows\system32\SET25A.tmp

c:\windows\system32\SET265.tmp

c:\windows\system32\SET267.tmp

c:\windows\system32\SET268.tmp

c:\windows\system32\SET26B.tmp

c:\windows\system32\SET26D.tmp

c:\windows\system32\SET270.tmp

c:\windows\system32\SET282.tmp

c:\windows\system32\SET283.tmp

c:\windows\system32\SET28A.tmp

c:\windows\system32\SET28B.tmp

c:\windows\system32\SET28E.tmp

c:\windows\system32\SET28F.tmp

c:\windows\system32\SET290.tmp

c:\windows\system32\SET291.tmp

c:\windows\system32\SET292.tmp

c:\windows\system32\SET294.tmp

c:\windows\system32\SET295.tmp

c:\windows\system32\SET296.tmp

c:\windows\system32\SET298.tmp

c:\windows\system32\SET299.tmp

c:\windows\system32\SET29A.tmp

c:\windows\system32\SET29C.tmp

c:\windows\system32\SET29F.tmp

c:\windows\system32\SET2A4.tmp

c:\windows\system32\SET2A5.tmp

c:\windows\system32\SET2A6.tmp

c:\windows\system32\SET2AB.tmp

c:\windows\system32\SET2AC.tmp

c:\windows\system32\SET2AD.tmp

c:\windows\system32\SET2AF.tmp

c:\windows\system32\SET2B2.tmp

c:\windows\system32\SET2B4.tmp

c:\windows\system32\SET2B5.tmp

c:\windows\system32\SET2B8.tmp

c:\windows\system32\SET2BC.tmp

c:\windows\system32\SET2BF.tmp

c:\windows\system32\SET2C0.tmp

c:\windows\system32\SET2C2.tmp

c:\windows\system32\SET2C7.tmp

c:\windows\system32\SET2D1.tmp

c:\windows\system32\SET2D2.tmp

c:\windows\system32\SET2D3.tmp

c:\windows\system32\SET2D5.tmp

c:\windows\system32\SET2D6.tmp

c:\windows\system32\SET2DC.tmp

c:\windows\system32\SET2DD.tmp

c:\windows\system32\SET2DF.tmp

c:\windows\system32\SET2E0.tmp

c:\windows\system32\SET2E5.tmp

c:\windows\system32\SET2E6.tmp

c:\windows\system32\SET2E7.tmp

c:\windows\system32\SET2E8.tmp

c:\windows\system32\SET2E9.tmp

c:\windows\system32\SET2EA.tmp

c:\windows\system32\SET2EC.tmp

c:\windows\system32\SET2EE.tmp

c:\windows\system32\SET2F1.tmp

c:\windows\system32\SET2FB.tmp

c:\windows\system32\SET2FD.tmp

c:\windows\system32\SET2FE.tmp

c:\windows\system32\SET2FF.tmp

c:\windows\system32\SET303.tmp

c:\windows\system32\SET308.tmp

c:\windows\system32\SET30A.tmp

c:\windows\system32\SET30B.tmp

c:\windows\system32\SET311.tmp

c:\windows\system32\SET31C.tmp

c:\windows\system32\SET31F.tmp

c:\windows\system32\SET320.tmp

c:\windows\system32\SET321.tmp

c:\windows\system32\SET324.tmp

c:\windows\system32\SET32C.tmp

c:\windows\system32\SET333.tmp

c:\windows\system32\SET335.tmp

c:\windows\system32\SET33E.tmp

c:\windows\system32\SET340.tmp

c:\windows\system32\SET343.tmp

c:\windows\system32\SET353.tmp

c:\windows\system32\SET357.tmp

c:\windows\system32\SET359.tmp

c:\windows\system32\SET35B.tmp

c:\windows\system32\SET361.tmp

c:\windows\system32\SET365.tmp

c:\windows\system32\SET373.tmp

c:\windows\system32\SET379.tmp

c:\windows\system32\SET37B.tmp

c:\windows\system32\SET37C.tmp

c:\windows\system32\SET382.tmp

c:\windows\system32\SET394.tmp

c:\windows\system32\SET396.tmp

c:\windows\system32\SET398.tmp

c:\windows\system32\SET3A0.tmp

c:\windows\system32\SET3A4.tmp

c:\windows\system32\SET3AF.tmp

c:\windows\system32\SET3BF.tmp

c:\windows\system32\SET3E1.tmp

c:\windows\system32\SET3E2.tmp

c:\windows\system32\SET3E5.tmp

c:\windows\system32\SET3EA.tmp

c:\windows\system32\SET3EC.tmp

c:\windows\system32\SET3F3.tmp

c:\windows\system32\SET3F4.tmp

c:\windows\system32\SET3F5.tmp

c:\windows\system32\SET3F7.tmp

c:\windows\system32\SET3F8.tmp

c:\windows\system32\SET3F9.tmp

c:\windows\system32\SET3FA.tmp

c:\windows\system32\SET3FC.tmp

c:\windows\system32\SET3FE.tmp

c:\windows\system32\SET3FF.tmp

c:\windows\system32\SET401.tmp

c:\windows\system32\SET404.tmp

c:\windows\system32\SET406.tmp

c:\windows\system32\SET40B.tmp

c:\windows\system32\SET40C.tmp

c:\windows\system32\SET414.tmp

c:\windows\system32\SET41A.tmp

c:\windows\system32\SET41F.tmp

c:\windows\system32\SET422.tmp

c:\windows\system32\SET425.tmp

c:\windows\system32\SET427.tmp

c:\windows\system32\SET42B.tmp

c:\windows\system32\SET42D.tmp

c:\windows\system32\SET42E.tmp

c:\windows\system32\SET42F.tmp

c:\windows\system32\SET432.tmp

c:\windows\system32\SET433.tmp

c:\windows\system32\SET437.tmp

c:\windows\system32\SET438.tmp

c:\windows\system32\SET43D.tmp

c:\windows\system32\SET442.tmp

c:\windows\system32\SET445.tmp

c:\windows\system32\SET449.tmp

c:\windows\system32\SET44B.tmp

c:\windows\system32\SET44D.tmp

c:\windows\system32\SET64.tmp

c:\windows\system32\SET66.tmp

c:\windows\system32\SET72.tmp

c:\windows\system32\SET7B.tmp

c:\windows\system32\SET7C.tmp

c:\windows\system32\SET7D.tmp

c:\windows\system32\SET7F.tmp

c:\windows\system32\SET80.tmp

c:\windows\system32\SETAF.tmp

c:\windows\system32\SETFC8.tmp

c:\windows\system32\SETFCB.tmp

c:\windows\system32\SETFD0.tmp

c:\windows\system32\SETFD5.tmp

c:\windows\system32\SETFE3.tmp

c:\windows\system32\URTTemp

c:\windows\system32\URTTemp\fusion.dll

c:\windows\system32\URTTemp\mscoree.dll

c:\windows\system32\URTTemp\mscoree.dll.local

c:\windows\system32\URTTemp\mscorsn.dll

c:\windows\system32\URTTemp\mscorwks.dll

c:\windows\system32\URTTemp\msvcr71.dll

c:\windows\system32\URTTemp\regtlib.exe

c:\windows\WINDOWS

c:\windows\WINDOWS\Fonts\Dungeon.TTF

c:\windows\WINDOWS\Resources\Themes\Genesis\Genesis.msstyles

c:\windows\WINDOWS\Resources\Themes\Genesis\Shell\NormalColor\Background.BMP

c:\windows\WINDOWS\Resources\Themes\Genesis\Shell\NormalColor\Logo.BMP

c:\windows\WINDOWS\Resources\Themes\Genesis\Shell\NormalColor\Shellstyle.dll

c:\windows\windows\Resources\Themes\Genesis\Wallpaper\Genesis.jpg

c:\windows\XSxS

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-07-05 to 2012-08-05 ))))))))))))))))))))))))))))))

.

2012-08-04 14:43 . 2012-08-04 14:43 -------- d--h--r- c:\documents and settings\jaleesa jaggoo\Onlangs geopend

2012-08-01 21:47 . 2012-08-01 21:47 -------- d-----w- c:\documents and settings\All Users\Application Data\dqwhsdqadelgpgd

2012-07-31 13:11 . 2012-07-31 13:11 -------- d-----w- c:\program files\PC Unleashed Online

2012-07-15 13:56 . 2012-07-15 13:56 1409 ----a-w- c:\windows\system32\tmpD10FB.FOT

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-08-03 10:25 . 2012-03-31 14:41 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-08-03 10:25 . 2011-08-09 11:32 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl