SuperSiem

30 augustus 2012

me pc is idd sneller geworden, alleen youtube filmpjes etc. laden niet echt snel. Maar verder doet de laptop het goed.

30 augustus 2012

ComboFix 12-08-29.03 - Simeon 30-08-2012 12:34:17.2.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3767.2304 [GMT 2:00]

Gestart vanuit: c:\users\Simeon\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Simeon\Desktop\CFScript.txt

AV: UPC Veiligheidspakket 9.13 *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}

FW: UPC Veiligheidspakket 9.13 *Disabled* {2D7AC0A6-6241-D774-E168-461178D9686C}

SP: UPC Veiligheidspakket 9.13 *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

FILE ::

"c:\windows\SysWow64\shoAADF.tmp"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files (x86)\iLivid

c:\program files (x86)\iLivid\fantastic\fantasticInst.exe

c:\program files (x86)\iLivid\fantastic\icon.ico

c:\program files (x86)\iLivid\ftalk.ico

c:\program files (x86)\iLivid\Helper.dll

c:\program files (x86)\iLivid\ilivid.exe

c:\program files (x86)\iLivid\ilivid.ico

c:\program files (x86)\iLivid\imageformats\qgif4.dll

c:\program files (x86)\iLivid\imageformats\qjpeg4.dll

c:\program files (x86)\iLivid\libeay32.dll

c:\program files (x86)\iLivid\libgcc_s_dw2-1.dll

c:\program files (x86)\iLivid\mingwm10.dll

c:\program files (x86)\iLivid\phonon4.dll

c:\program files (x86)\iLivid\QtCore4.dll

c:\program files (x86)\iLivid\QtGui4.dll

c:\program files (x86)\iLivid\QtNetwork4.dll

c:\program files (x86)\iLivid\QtScript4.dll

c:\program files (x86)\iLivid\QtSvg4.dll

c:\program files (x86)\iLivid\QtWebKit4.dll

c:\program files (x86)\iLivid\QtXmlPatterns4.dll

c:\program files (x86)\iLivid\script.qscript

c:\program files (x86)\iLivid\script1.81.qscript

c:\program files (x86)\iLivid\ssleay32.dll

c:\program files (x86)\iLivid\uninstall.exe

c:\windows\SysWow64\shoAADF.tmp

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-07-28 to 2012-08-30 ))))))))))))))))))))))))))))))

.

2012-08-30 10:46 . 2012-08-30 10:46 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-08-29 15:43 . 2012-08-29 15:43 -------- d-----w- c:\program files\Speccy

2012-08-28 16:11 . 2012-08-28 16:11 73696 ----a-w- c:\program files (x86)\Mozilla Firefox\breakpadinjector.dll

2012-08-23 22:57 . 2012-08-23 23:30 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2012-08-23 22:57 . 2012-07-03 11:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-08-16 15:59 . 2012-08-16 15:59 -------- d-----w- c:\program files\Synaptics

2012-08-16 15:59 . 2012-08-16 15:59 27960 ----a-w- c:\windows\system32\drivers\Smb_driver_Intel.sys

2012-08-16 15:59 . 2012-08-16 15:59 19264 ----a-w- c:\windows\system32\drivers\iusb3hcs.sys

2012-08-15 10:06 . 2012-05-05 08:36 503808 ----a-w- c:\windows\system32\srcore.dll

2012-08-15 10:06 . 2012-05-05 07:46 43008 ----a-w- c:\windows\SysWow64\srclient.dll

2012-08-15 10:05 . 2012-02-11 06:43 751104 ----a-w- c:\windows\system32\win32spl.dll

2012-08-15 10:05 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe

2012-08-15 10:05 . 2012-02-11 05:43 492032 ----a-w- c:\windows\SysWow64\win32spl.dll

2012-08-15 10:05 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe

2012-08-15 10:05 . 2012-07-04 22:13 59392 ----a-w- c:\windows\system32\browcli.dll

2012-08-15 10:05 . 2012-07-04 22:13 136704 ----a-w- c:\windows\system32\browser.dll

2012-08-15 10:05 . 2012-07-04 22:16 73216 ----a-w- c:\windows\system32\netapi32.dll

2012-08-15 10:05 . 2012-07-04 21:14 41984 ----a-w- c:\windows\SysWow64\browcli.dll

2012-08-15 10:05 . 2012-07-18 18:15 3148800 ----a-w- c:\windows\system32\win32k.sys

2012-08-15 10:05 . 2012-05-14 05:26 956928 ----a-w- c:\windows\system32\localspl.dll

2012-08-12 12:54 . 2012-08-12 12:54 317440 ----a-w- c:\windows\system32\drivers\IntcDAud.sys

2012-08-12 12:54 . 2012-08-12 12:54 14848 ----a-w- c:\windows\system32\IntcDAuC.dll

2012-08-08 14:27 . 2012-08-08 14:27 112504 ----a-w- c:\windows\system32\Vxdif.dll

2012-08-08 14:27 . 2012-08-08 14:27 416592 ----a-w- c:\windows\system32\drivers\Apfiltr.sys

2012-08-08 14:14 . 2012-08-08 14:14 9888360 ----a-w- c:\windows\SysWow64\RtsUStoricon.dll

2012-08-08 14:14 . 2012-08-08 14:14 422504 ----a-w- c:\windows\system32\RtsUStor.dll

2012-08-08 14:14 . 2012-08-08 14:14 250984 ----a-w- c:\windows\system32\drivers\RtsUStor.sys

2012-08-07 21:08 . 2012-08-07 21:08 440360 ----a-w- c:\windows\system32\drivers\k57nd60a.sys

2012-08-07 20:36 . 2012-08-07 20:36 18832 ----a-w- c:\windows\system32\drivers\pmkbdfltr.sys

2012-08-07 20:33 . 2012-08-07 20:33 22800 ----a-w- c:\windows\system32\drivers\Smb_driver.sys

2012-08-07 11:04 . 2012-08-15 13:01 56016 ----a-w- c:\windows\system32\drivers\fsbts.sys

2012-08-07 10:58 . 2012-08-07 10:58 33408 ----a-w- c:\windows\SysWow64\drivers\fsbts.sys

2012-08-07 10:57 . 2012-08-07 11:12 50384 ----a-w- c:\windows\system32\drivers\fses.sys

2012-08-07 10:57 . 2010-04-07 15:38 92240 ----a-w- c:\windows\system32\drivers\fsdfw.sys

2012-08-07 10:57 . 2010-04-07 15:40 572592 ----a-w- c:\windows\SysWow64\msvcp50.dll

2012-08-07 10:56 . 2012-08-07 11:14 -------- d-----w- c:\program files (x86)\UPC Veiligheidspakket

2012-08-07 10:46 . 2012-08-07 10:54 -------- d-----w- c:\programdata\fssg

2012-08-07 10:42 . 2012-08-07 10:57 -------- d-----w- c:\programdata\f-secure

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-08-15 18:04 . 2011-05-29 13:26 62134624 ----a-w- c:\windows\system32\MRT.exe

2012-08-15 15:45 . 2012-04-01 11:05 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2012-08-15 15:45 . 2011-06-03 07:45 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-07-29 18:41 . 2012-07-29 18:41 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll

2012-07-29 17:40 . 2012-07-29 17:40 856712 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll

2012-07-15 13:02 . 2012-07-15 13:03 19736 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2012-06-09 05:43 . 2012-07-11 12:30 14172672 ----a-w- c:\windows\system32\shell32.dll

2012-06-06 06:06 . 2012-07-11 12:30 2004480 ----a-w- c:\windows\system32\msxml6.dll

2012-06-06 06:06 . 2012-07-11 12:30 1881600 ----a-w- c:\windows\system32\msxml3.dll

2012-06-06 06:02 . 2012-07-11 12:30 1133568 ----a-w- c:\windows\system32\cdosys.dll

2012-06-06 05:05 . 2012-07-11 12:30 1390080 ----a-w- c:\windows\SysWow64\msxml6.dll

2012-06-06 05:05 . 2012-07-11 12:30 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll

2012-06-06 05:03 . 2012-07-11 12:30 805376 ----a-w- c:\windows\SysWow64\cdosys.dll

2012-06-02 22:19 . 2012-06-23 14:38 38424 ----a-w- c:\windows\system32\wups.dll

2012-06-02 22:19 . 2012-06-23 14:38 2428952 ----a-w- c:\windows\system32\wuaueng.dll

2012-06-02 22:19 . 2012-06-23 14:38 44056 ----a-w- c:\windows\system32\wups2.dll

2012-06-02 22:19 . 2012-06-23 14:38 57880 ----a-w- c:\windows\system32\wuauclt.exe

2012-06-02 22:19 . 2012-06-23 14:38 701976 ----a-w- c:\windows\system32\wuapi.dll

2012-06-02 22:15 . 2012-06-23 14:38 2622464 ----a-w- c:\windows\system32\wucltux.dll

2012-06-02 22:15 . 2012-06-23 14:38 99840 ----a-w- c:\windows\system32\wudriver.dll

2012-06-02 13:19 . 2012-06-23 14:37 186752 ----a-w- c:\windows\system32\wuwebv.dll

2012-06-02 13:15 . 2012-06-23 14:37 36864 ----a-w- c:\windows\system32\wuapp.exe

2012-06-02 05:50 . 2012-07-11 12:30 458704 ----a-w- c:\windows\system32\drivers\cng.sys

2012-06-02 05:48 . 2012-07-11 12:30 95600 ----a-w- c:\windows\system32\drivers\ksecdd.sys

2012-06-02 05:48 . 2012-07-11 12:30 151920 ----a-w- c:\windows\system32\drivers\ksecpkg.sys

2012-06-02 05:45 . 2012-07-11 12:30 340992 ----a-w- c:\windows\system32\schannel.dll

2012-06-02 05:44 . 2012-07-11 12:30 307200 ----a-w- c:\windows\system32\ncrypt.dll

2012-06-02 04:40 . 2012-07-11 12:30 22016 ----a-w- c:\windows\SysWow64\secur32.dll

2012-06-02 04:40 . 2012-07-11 12:30 225280 ----a-w- c:\windows\SysWow64\schannel.dll

2012-06-02 04:39 . 2012-07-11 12:30 219136 ----a-w- c:\windows\SysWow64\ncrypt.dll

2012-06-02 04:34 . 2012-07-11 12:30 96768 ----a-w- c:\windows\SysWow64\sspicli.dll

.

((((((((((((((((((((((((((((( SnapShot@2012-08-29_21.52.09 )))))))))))))))))))))))))))))))))))))))))

.

+ 2012-08-29 22:20 . 2012-08-29 22:20 13330 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat

- 2012-08-28 22:04 . 2012-08-28 22:04 13330 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat

+ 2010-08-30 08:59 . 2012-08-30 10:21 85166 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2009-07-14 05:10 . 2012-08-30 10:21 37838 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

- 2009-07-14 05:10 . 2012-08-29 08:47 37838 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

+ 2011-05-26 14:57 . 2012-08-30 10:21 25192 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1922309670-1854083044-1276065431-1001_UserData.bin

+ 2012-08-30 10:19 . 2012-08-30 10:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2012-08-29 08:45 . 2012-08-29 08:45 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2012-08-30 10:19 . 2012-08-30 10:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

- 2012-08-29 08:45 . 2012-08-29 08:45 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2009-07-14 05:01 . 2012-08-30 08:13 313460 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

- 2009-07-14 05:01 . 2012-08-28 22:04 313460 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2009-01-18 23:00 . 2009-01-18 23:00 598016 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB7449A0100000010\9.1.0\AXSLE.dll

+ 2012-01-03 07:37 . 2012-01-03 07:37 320456 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB7449A0100000010\9.1.0\adobearmhelper.exe

+ 2010-11-20 17:15 . 2012-08-29 22:16 6459972 c:\windows\system32\perfh013.dat

+ 2009-07-14 02:36 . 2012-08-29 22:16 2375900 c:\windows\system32\perfh009.dat

+ 2010-11-20 17:15 . 2012-08-29 22:16 2039002 c:\windows\system32\perfc013.dat

+ 2009-07-14 02:36 . 2012-08-29 22:16 1767602 c:\windows\system32\perfc009.dat

+ 2011-06-29 22:45 . 2012-08-29 22:09 2583220 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1922309670-1854083044-1276065431-1001-12288.dat

+ 2012-07-31 16:18 . 2012-07-31 16:18 5018624 c:\windows\Installer\2d7532b.msp

+ 2011-05-28 00:19 . 2012-08-30 08:13 40182136 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1922309670-1854083044-1276065431-1001-8192.dat

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]

"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]

"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]

"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]

"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]

"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"F-Secure Manager"="c:\program files (x86)\UPC Veiligheidspakket\Common\FSM32.EXE" [2010-04-07 199344]

"F-Secure TNB"="c:\program files (x86)\UPC Veiligheidspakket\FSGUI\TNBUtil.exe" [2010-04-07 1653424]

"Powersuite Monitor"="c:\program files (x86)\Uniblue\PowerSuite\powersuite_monitor.exe" [2012-07-30 323936]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

R0 TfFsMon;TfFsMon; [x]

R0 TfSysMon;TfSysMon; [x]

R1 FSES;F-Secure Email Scanning Driver;c:\windows\system32\drivers\fses.sys [2012-08-07 50384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-15 250056]

R3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-08-28 114144]

R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2012-08-08 250984]

R3 SmbDrv;SmbDrv;c:\windows\system32\DRIVERS\Smb_driver.sys [2012-08-07 22800]

R3 TfNetMon;TfNetMon; [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-28 1255736]

R4 F-Secure Filter;F-Secure File System Filter;c:\program files (x86)\UPC Veiligheidspakket\Anti-Virus\Win2K\FSfilter.sys [2010-04-07 39856]

R4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files (x86)\UPC Veiligheidspakket\Anti-Virus\Win2K\FSrec.sys [2010-04-07 25264]

S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys [2012-08-15 56016]

S0 iusb3hcs;Intel® USB 3.0 hostcontrollerswitch-stuurprogramma;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-08-16 19264]

S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\UPC Veiligheidspakket\HIPS\drivers\fshs.sys [2010-04-07 58000]

S1 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [2010-04-07 92240]

S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\UPC Veiligheidspakket\Anti-Virus\minifilter\fsvista.sys [2010-04-07 14904]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]

S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]

S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]

S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]

S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]

S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]

S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784]

S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]

S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]

S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\UPC Veiligheidspakket\Anti-Virus\minifilter\fsgk.sys [2012-08-07 199848]

S3 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\UPC Veiligheidspakket\ORSP Client\fsorsp.exe [2012-08-07 61088]

S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]

S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]

S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2012-08-12 317440]

S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2012-08-07 440360]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]

S3 pmkbdfltr;PenMount Keyboard Device Filter Driver;c:\windows\system32\DRIVERS\pmkbdfltr.sys [2012-08-07 18832]

S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]

S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]

S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]

S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]

S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]

S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-16 27960]

.

Inhoud van de 'Gedeelde Taken' map

.

2012-08-30 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 15:45]

.

--------- X64 Entries -----------

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-13 13374568]

"Apoint"="c:\program files\DellTPad\Apoint.exe" [2012-08-08 626552]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.nl/

mStart Page = hxxp://acer.msn.com

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = <local>

LSP: c:\program files (x86)\UPC Veiligheidspakket\FSPS\program\FSLSP.DLL

TCP: DhcpNameServer = 62.179.104.196 213.46.228.196

FF - ProfilePath - c:\users\Simeon\AppData\Roaming\Mozilla\Firefox\Profiles\z5blufs6.default\

FF - prefs.js: browser.search.selectedEngine - Marktplaats.nl

FF - prefs.js: browser.startup.homepage - Google

FF - prefs.js: keyword.URL - hxxp://www.google.com/cse?cx=partner-pub-5528014799800033:cevktqnfrvl&ie=ISO-8859-1&q=

FF - prefs.js: network.proxy.type - 0

FF - user.js: general.useragent.extra.brc -

.

- - - - ORPHANS VERWIJDERD - - - -

.

Toolbar-Locked - (no file)

AddRemove-iLivid - c:\program files (x86)\iLivid\uninstall.exe

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-1922309670-1854083044-1276065431-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.Email.1"

.

[HKEY_USERS\S-1-5-21-1922309670-1854083044-1276065431-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.VCard.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_271_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_271_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2012-08-30 13:01:35

ComboFix-quarantined-files.txt 2012-08-30 11:01

ComboFix2.txt 2012-08-29 21:55

.

Pre-Run: 547.382.104.064 bytes beschikbaar

Post-Run: 547.343.990.784 bytes beschikbaar

.

- - End Of File - - 4F95E28F728A0594D624793D453762FE

29 augustus 2012

ComboFix 12-08-29.03 - Simeon 29-08-2012 23:44:11.1.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3767.2149 [GMT 2:00]

Gestart vanuit: c:\users\Simeon\Desktop\ComboFix.exe

AV: UPC Veiligheidspakket 9.13 *Enabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}

FW: UPC Veiligheidspakket 9.13 *Enabled* {2D7AC0A6-6241-D774-E168-461178D9686C}

SP: UPC Veiligheidspakket 9.13 *Enabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Nieuw herstelpunt werd aangemaakt

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\install.exe

c:\program files (x86)\facemoods.com

c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsApp.dll

c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\facemoodsEng.dll

c:\program files (x86)\facemoods.com\facemoods\1.4.17.3\faCEmoodstlbr.dll

c:\programdata\FullRemove.exe

c:\programdata\ism_0_llatsni.pad

c:\users\Public\Documents\NTIMMV9Acer.dll

c:\users\Simeon\Documents\~WRL0005.tmp

c:\windows\iun6002.exe

c:\windows\SwSys1.bmp

c:\windows\SwSys2.bmp

c:\windows\XSxS

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-07-28 to 2012-08-29 ))))))))))))))))))))))))))))))

.

2012-08-29 21:51 . 2012-08-29 21:51 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-08-29 15:43 . 2012-08-29 15:43 -------- d-----w- c:\program files\Speccy

2012-08-28 16:11 . 2012-08-28 16:11 73696 ----a-w- c:\program files (x86)\Mozilla Firefox\breakpadinjector.dll

2012-08-25 04:29 . 2012-08-25 04:29 0 ----a-w- c:\windows\SysWow64\shoAADF.tmp