Crolvax

Dit heb ik gedaan zoals eerder vermeld, geen effect gehad.

Ik gebruik chrome niet al te vaak. Maar heb het de komende tijd nodig omdat ik bepaalde scripts moet gaan gebruiken. Kan niet zeggen sinds wanneer het probleem zich voor doet eerlijk gezegd. Een herstelpunt lijkt mij dus niet de juiste oplossing, het zal meer kapot maken dan dat het verbeterd in mijn ogen.

Die tip heeft geen enkel effect gehad. Na herinstallatie wederom de melding.

Beste allemaal, Ik heb een probleem met mijn Google Chrome. Bij het opstarten van de browser krijg ik een melding: Je voorkeuren kunnen niet worden gelezen. Sommige functies zijn wellicht niet beschikbaar en wijzigingen in voorkeuren worden niet opgeslagen. Nu is het zo dat ik al zelf naar de oplossing heb gezocht, het komt er op neer dat ik een ander profiel moet maken, werkt dit niet dan moet ik de browser her installeren. Ik heb beide opties gedaan, dit is alleen geen oplossing geweest. Hopelijk kunnen jullie mij verder helpen!

Ik moet zeggen dat het installeren al een stuk beter gaat. En hij loopt al veel minder vast. Ik heb alleen geen idee wat er precies aan veranderd is! Het enige is nog wel dat hij in windows verkenner vaak ontzettend traag de schijven bekijkt.

Beste Kape, Mijn excuses, ik heb de afgelopen twee dagen niet op de computer gezeten. Bij deze het logje! Zoek.exe Version 4.0.0.2 Updated 15-May-2013 Tool run by Mike on zo 19-05-2013 at 15:00:04,30. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected ==== Running Processes ====================== C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\atieclxx.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe C:\Program Files\Intel\iCLS Client\HeciServer.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\System32\WUDFHost.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\Windows\system32\csrss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\atieclxx.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\klwtblfs.exe C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe C:\Windows\System32\MsSpellCheckingFacility.exe C:\Program Files (x86)\IncrediMail\Bin\ImNotfy.exe C:\Windows\system32\csrss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\atieclxx.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\Windows\system32\wuauclt.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Users\Mike\Desktop\zoek.exe C:\Windows\system32\conhost.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\wbem\wmiprvse.exe ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Installed Programs ====================== æTorrent Adobe AIR Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Reader X (10.1.3) MUI Adobe Shockwave Player 11.6 AMD Accelerated Video Transcoding AMD APP SDK Runtime AMD AVIVO64 Codecs AMD Catalyst Install Manager AMD Drag and Drop Transcoding AMD Media Foundation Decoders Ashampoo Burning Studio Ashampoo Photo Commander Ashampoo Photo Optimizer Ashampoo Snap Catalyst Control Center Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-utility64 CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Italian CCC Help Japanese CCC Help Norwegian CCC Help Spanish CCC Help Swedish Compatibiliteitspakket voor het 2007 Microsoft Office system Control ActiveX de Windows Live Mesh para conexiones remotas Contr“le ActiveX Windows Live Mesh pour connexions … distance Controlo ActiveX do Windows Live Mesh para Liga‡äes Remotas CyberLink LabelPrint CyberLink MediaEspresso CyberLink PhotoDirector 2011 CyberLink Power2Go CyberLink PowerDVD 10 CyberLink PowerDVD Copy CyberLink PowerRecover CyberLink WaveEditor D3DX10 Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsluge polaczen zdalnych Fotogalerija Windows Live Galeria de Fotografias do Windows Live Galer¡a fotogr fica de Windows Live Galeria fotografii uslugi Windows Live Galerie de photos Windows Live Google Chrome Google Toolbar for Internet Explorer Google Update Helper HiJackThis IncrediMail IncrediMail 2.0 Intel® Manageability Engine Firmware Recovery Agent Intel® Management Engine Components Intel® OpenCL CPU Runtime Intel® Processor Graphics Intel® USB 3.0 eXtensible Host Controller Driver Intel© Trusted Connect Service Client Java 7 Update 21 Java Auto Updater Java 7 Update 3 (64-bit) Junk Mail filter update Kaspersky Anti-Virus 2013 Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave LogMeIn Hamachi Medion Home Cinema Memeo Instant Backup Mesh Runtime Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Client Profile NLD Language Pack Microsoft .NET Framework 4 Extended Microsoft .NET Framework 4 Extended NLD Language Pack Microsoft Application Error Reporting Microsoft Office 2010 Microsoft Office Word Viewer 2003 Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Mouse Recorder Pro 2.0.7.4 MSVCRT MSVCRT_amd64 PCSUITE SHREDDER Poczta uslugi Windows Live Podstawowe programy Windows Live Posta Windows Live Raccolta foto di Windows Live Realtek High Definition Audio Driver S?????? f?t???af??? t?? Windows Live Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft .NET Framework 4 Extended (KB2736428) Security Update for Microsoft .NET Framework 4 Extended (KB2742595) SkypeT 6.3 Spelling Dictionaries Support For Adobe Reader X St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?æa???sæ??e? s??d?se?? swMSM Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD Taalpakket voor Microsoft .NET Framework 4 Extended - NLD Tunngle beta Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) Uzak BaglantÕlar I‡in Windows Live Mesh ActiveX Denetimi Windows Live Communications Platform Windows Live Essentials Windows Live Fotogalerie Windows Live Fotograf Galerisi Windows Live Fot¢t r Windows Live ID Sign-in Assistant Windows Live Installer Windows Live Language Selector Windows Live Mail Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen Windows Live Mesh Windows Live Mesh ActiveX-objekt til fjernforbindelser Windows Live Mesh ActiveX-vez‚rlo t voli kapcsolatokhoz Windows Live Mesh ActiveX Control for Remote Connections Windows Live Mesh ActiveX control for remote connections Windows Live Messenger Windows Live MIME IFilter Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live Remote Client Windows Live Remote Client Resources Windows Live Remote Service Windows Live Remote Service Resources Windows Live SOXE Windows Live SOXE Definitions Windows Live Temel Par‡alar Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources WinRAR 4.20 (64-bit) ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2013-05-16 06:18:18 E52F83C204D7355DEB8CD0ED3E0D1E4C 621883545 ----a-w- C:\Windows\MEMORY.DMP 2013-05-14 01:37:14 127AA81343A7C6F665C22CB1293B0A90 67072 ----a-w- C:\Windows\splwow64.exe ====== C:\Users\Mike\AppData\Local\Temp ==== ====== C:\Windows\SysWOW64 ===== 2013-05-16 21:00:44 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Windows\SysWOW64\Access.dat 2013-05-16 20:27:15 AB705ED0F974927212C4952C45E2EE0C 1641200 ----a-w- C:\Windows\SysWOW64\PerfStringBackup.INI 2013-05-16 04:33:41 E32230F4135D507E79509C998F4D8C92 34304 ----a-w- C:\Windows\SysWOW64\atmlib.dll 2013-05-16 04:33:41 5DAF8A6B7F127C4E70A5C1F707347859 295424 ----a-w- C:\Windows\SysWOW64\atmfd.dll 2013-05-16 04:21:38 565D78187494FB5F08B5A52DEB2AEA7A 12872704 ----a-w- C:\Windows\SysWOW64\shell32.dll 2013-05-16 04:21:37 E904178851A6A44BFA97E064EF779E9D 1796096 ----a-w- C:\Windows\SysWOW64\authui.dll 2013-05-16 04:21:37 1F05F5A16881CD928C82D53CEFCF4477 180224 ----a-w- C:\Windows\SysWOW64\shdocvw.dll 2013-05-14 23:39:34 F59A16A9418044C1D505C53DA370B099 2046976 ----a-w- C:\Windows\SysWOW64\iertutil.dll 2013-05-14 23:39:34 F0D4AE074D9BC0741DC6E91C741F2F8C 23040 ----a-w- C:\Windows\SysWOW64\licmgr10.dll 2013-05-14 23:39:34 E14A07B768EC49D382CABCE2F078D576 232960 ----a-w- C:\Windows\SysWOW64\url.dll 2013-05-14 23:39:34 DFDBC397D0DDBD1AFA3CB400D4C003A9 61440 ----a-w- C:\Windows\SysWOW64\iesetup.dll 2013-05-14 23:39:34 DEFB55D4FF094673DF31FA89A8A8A2F0 226816 ----a-w- C:\Windows\SysWOW64\dxtrans.dll 2013-05-14 23:39:34 D5E5A86F49ACC11768D8339094C3AFD8 13760512 ----a-w- C:\Windows\SysWOW64\ieframe.dll 2013-05-14 23:39:34 C9A062F32FF600C96795B43CD9A53151 2877440 ----a-w- C:\Windows\SysWOW64\jscript9.dll 2013-05-14 23:39:34 C68FBBF01E86CB6CF0B797748FBD6C1A 357888 ----a-w- C:\Windows\SysWOW64\dxtmsft.dll 2013-05-14 23:39:34 C28A634CF127DA67D566B5E14D0A0170 719360 ----a-w- C:\Windows\SysWOW64\mshtmlmedia.dll 2013-05-14 23:39:34 C225E5307D8D4982A1687F2702C37C78 158720 ----a-w- C:\Windows\SysWOW64\msls31.dll 2013-05-14 23:39:34 B96C13B5C85AC4240FE95DE115945D59 38400 ----a-w- C:\Windows\SysWOW64\imgutil.dll 2013-05-14 23:39:34 AF0332E09DDBE0172237D1958A7DADB8 79872 ----a-w- C:\Windows\SysWOW64\mshtmled.dll 2013-05-14 23:39:34 A7E8E3A9F92D9B0D495F636A1D282883 48640 ----a-w- C:\Windows\SysWOW64\mshtmler.dll 2013-05-14 23:39:34 9DF7A7C74D8632CB5EBD37E3A374825E 204800 ----a-w- C:\Windows\SysWOW64\webcheck.dll 2013-05-14 23:39:34 9D9AC6CE9A9D951AC40DE91CD6F0A620 1441280 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl 2013-05-14 23:39:34 9D6BD7D1EE59B6D0FD65F1A6DF5706F9 137216 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe 2013-05-14 23:39:34 96E0F0BED5D9EBABB899D8CA83C36A7E 523264 ----a-w- C:\Windows\SysWOW64\vbscript.dll 2013-05-14 23:39:34 932571EFF79B93F94E84ADF4989A277F 69120 ----a-w- C:\Windows\SysWOW64\icardie.dll 2013-05-14 23:39:34 8C3D32A4A46326031309A43C52539D7F 1400416 ----a-w- C:\Windows\SysWOW64\ieapfltr.dat 2013-05-14 23:39:34 8A45166CD9874463AB76B552C9C2D3AD 110592 ----a-w- C:\Windows\SysWOW64\IEAdvpack.dll 2013-05-14 23:39:34 87E71F2A83681F41B796CA685818EF2D 163840 ----a-w- C:\Windows\SysWOW64\msrating.dll 2013-05-14 23:39:34 828B4A41BE891A7AEC07E693422B4A3A 117248 ----a-w- C:\Windows\SysWOW64\iepeers.dll 2013-05-14 23:39:34 81C4D657D37C3A5418B54BFECE821B84 57344 ----a-w- C:\Windows\SysWOW64\pngfilt.dll 2013-05-14 23:39:34 80B47F0F45C3EBF41C30E0BA367D25D3 125440 ----a-w- C:\Windows\SysWOW64\occache.dll 2013-05-14 23:39:34 7A468BC721C1D34E60389D3F2F87BBEA 14323712 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2013-05-14 23:39:34 6DF2C6438CFF6EFCBBB88AEE01795501 73728 ----a-w- C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-05-14 23:39:34 65C95886E1B17001ADDF163AC18C5525 1130496 ----a-w- C:\Windows\SysWOW64\urlmon.dll 2013-05-14 23:39:34 5ABB3F36AF17007F33FA275E96A2C95E 1767424 ----a-w- C:\Windows\SysWOW64\wininet.dll 2013-05-14 23:39:34 5915AA67DECA289F7B4AFB686CDB09E9 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-05-14 23:39:34 56E51C26745FF7413514EA4DDF33BC6C 11776 ----a-w- C:\Windows\SysWOW64\msfeedssync.exe 2013-05-14 23:39:34 52AA8A8DA4175580F365D275EB53DBE3 493056 ----a-w- C:\Windows\SysWOW64\msfeeds.dll 2013-05-14 23:39:34 52A7D73D5570F757D865DDECD087FB41 138752 ----a-w- C:\Windows\SysWOW64\wextract.exe 2013-05-14 23:39:34 4A47CAEA8D3B82DE439A79771ECED4B1 361984 ----a-w- C:\Windows\SysWOW64\html.iec 2013-05-14 23:39:34 49834B94A8E8383B700EDDEF46C2AE6A 2706432 ----a-w- C:\Windows\SysWOW64\mshtml.tlb 2013-05-14 23:39:34 414A3D9AAE072CDEFE0B64C2EBEE18D2 61952 ----a-w- C:\Windows\SysWOW64\tdc.ocx 2013-05-14 23:39:34 404FAD93ABFBD86D1AAAB47D5DFA6505 242200 ----a-w- C:\Windows\SysWOW64\iedkcs32.dll 2013-05-14 23:39:34 3CC9825BFFE7B7429C8B79B0395ACDA8 33280 ----a-w- C:\Windows\SysWOW64\iernonce.dll 2013-05-14 23:39:34 3AB2A38F7EA9E62D176A78FB58761E24 12800 ----a-w- C:\Windows\SysWOW64\mshta.exe 2013-05-14 23:39:34 366D8EA2ADCBA228C9487BC6D2427DDC 109056 ----a-w- C:\Windows\SysWOW64\iesysprep.dll 2013-05-14 23:39:34 338520304B99471BD0ED121954FE7863 82432 ----a-w- C:\Windows\SysWOW64\inseng.dll 2013-05-14 23:39:34 2D7A29C35D0894481A69FA3AC45F18F0 41984 ----a-w- C:\Windows\SysWOW64\msfeedsbs.dll 2013-05-14 23:39:34 28AEB03752D716BF149DBC93A9ACC17E 391168 ----a-w- C:\Windows\SysWOW64\ieui.dll 2013-05-14 23:39:34 1FF56AC32B38A94C3C88497BD6E00C96 25185 ----a-w- C:\Windows\SysWOW64\ieuinit.inf 2013-05-14 23:39:34 0F44172A5B34E8F208CD0F209EDD4A73 629248 ----a-w- C:\Windows\SysWOW64\ieapfltr.dll 2013-05-14 23:39:34 0402BFC25AB49E02256BC24E32829773 185344 ----a-w- C:\Windows\SysWOW64\elshyph.dll 2013-05-14 23:39:34 038F76279EC64878A072D988DE13C7B2 150528 ----a-w- C:\Windows\SysWOW64\iexpress.exe 2013-05-14 23:39:34 03180AFD271BFD88813F428421BC4A1A 39424 ----a-w- C:\Windows\SysWOW64\jsproxy.dll 2013-05-14 23:39:34 0142341520F0A0F2B0E312335B96705B 690688 ----a-w- C:\Windows\SysWOW64\jscript.dll 2013-05-14 23:38:09 FB3F036EF6A467F7AF46C821FF5D198D 220160 ----a-w- C:\Windows\SysWOW64\d3d10core.dll 2013-05-14 23:38:09 D4F264FE23F8953D840904418220C15E 293376 ----a-w- C:\Windows\SysWOW64\dxgi.dll 2013-05-14 23:38:09 D4212AB475A3B25EC4DF574536C3EDC5 249856 ----a-w- C:\Windows\SysWOW64\d3d10_1core.dll 2013-05-14 23:38:09 C7A730AFB80B11F93EFC81B1D6F920D7 364544 ----a-w- C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-05-14 23:38:09 B3170CCC779B682C3341873EA60CF084 1988096 ----a-w- C:\Windows\SysWOW64\d3d10warp.dll 2013-05-14 23:38:09 9FF8F684BACF326082E5562F7C104A79 3419136 ----a-w- C:\Windows\SysWOW64\d2d1.dll 2013-05-14 23:38:09 8B285BDAB7735FDFB18E6F7122923B77 187392 ----a-w- C:\Windows\SysWOW64\UIAnimation.dll 2013-05-14 23:38:09 8504944851DF6175CC489A8F3328459E 1080832 ----a-w- C:\Windows\SysWOW64\d3d10.dll 2013-05-14 23:38:09 7ACDFB4CC67F4993DF0E0731576309B2 1504768 ----a-w- C:\Windows\SysWOW64\d3d11.dll 2013-05-14 23:38:09 6A7B5A3EFCCDB53DA41CF6838056990F 1158144 ----a-w- C:\Windows\SysWOW64\XpsPrint.dll 2013-05-14 23:38:09 6A13B4F3B3F575F1E24B877B9359AABA 10752 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-05-14 23:38:09 6951562DC4625EEFC6EACD52AD165866 9728 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-05-14 23:38:09 62A6EB5771580CAE445804389F3F7432 207872 ----a-w- C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-05-14 23:38:09 60F4AEFA103D421EA4A40E31409B4756 3072 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-05-14 23:38:09 600A65F922CCDCBB2D11467914241556 2284544 ----a-w- C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-05-14 23:38:09 589CBC4989F750E1DA35625AB481CF43 4096 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-05-14 23:38:09 545F1BAAADD0BF1F4FE4586293FCA07D 417792 ----a-w- C:\Windows\SysWOW64\WMPhoto.dll 2013-05-14 23:38:09 4FF3EC04CD47DD62181894B71B004E40 604160 ----a-w- C:\Windows\SysWOW64\d3d10level9.dll 2013-05-14 23:38:09 49ACA548B2423F1C67898E6AC719A9A6 3584 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-05-14 23:38:09 4277F5164DE9B7C665BB928B9145BEE0 1247744 ----a-w- C:\Windows\SysWOW64\DWrite.dll 2013-05-14 23:38:09 3C1936A12C62254F914A01BBC6A8DC69 161792 ----a-w- C:\Windows\SysWOW64\d3d10_1.dll 2013-05-14 23:38:09 3BE0D923AA45A4DBE091C2D84F0B4FE7 3072 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-05-14 23:38:09 3BCECD87AB4E6743BFB45B352AD1A529 1230336 ----a-w- C:\Windows\SysWOW64\WindowsCodecs.dll 2013-05-14 23:38:09 2E33DFD10F28F86C3FC40EE123CC3904 2560 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-05-14 23:38:09 1C60E09CA1C3A045BC4D367F67C915B7 5632 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-05-14 23:38:09 007863E45F25AA47A4C30D0930BBFD85 5632 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-05-14 18:17:53 8255AD29A44B2E14B2DD99319F92A0AB 95648 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-05-14 01:40:01 52CCA2E9FFD0653CACED1E808AADE4B6 492032 ----a-w- C:\Windows\SysWOW64\win32spl.dll 2013-05-14 01:39:57 EF71BA5DF59034962B0C62314A71351A 193536 ----a-w- C:\Windows\SysWOW64\dhcpcore6.dll 2013-05-14 01:39:57 81F6C1AE23B1C493D9E996C3103915D7 44032 ----a-w- C:\Windows\SysWOW64\dhcpcsvc6.dll 2013-05-14 01:39:56 F5562EFA9E4867D30EC2330B80FCB25C 131584 ----a-w- C:\Windows\SysWOW64\aaclient.dll 2013-05-14 01:39:56 52D33A22DE04BD9F40E1B1A28B46A95C 3217408 ----a-w- C:\Windows\SysWOW64\mstscax.dll 2013-05-14 01:39:56 2A6BFDEDF2C57923E78F970BB15D7E7D 36864 ----a-w- C:\Windows\SysWOW64\tsgqec.dll 2013-05-14 01:39:53 B39B8CC163C41B12FE83E777199F3378 2048 ----a-w- C:\Windows\SysWOW64\tzres.dll 2013-05-14 01:39:46 F93674263F6B07C77956E966953242D9 22016 ----a-w- C:\Windows\SysWOW64\secur32.dll 2013-05-14 01:39:46 EDA7AD21DF8945528F01F0A86D69E524 96768 ----a-w- C:\Windows\SysWOW64\sspicli.dll 2013-05-14 01:39:46 3D3CBD1847F980FB03343A63671E7886 225280 ----a-w- C:\Windows\SysWOW64\schannel.dll 2013-05-14 01:39:45 EAADD6E47ED2A7003ACE1793B98CF63F 1389568 ----a-w- C:\Windows\SysWOW64\msxml6.dll 2013-05-14 01:39:45 A45CB10FC8C4DCA23F96FE4D334F64FE 2048 ----a-w- C:\Windows\SysWOW64\msxml3r.dll 2013-05-14 01:39:45 21D3A18769EC2C4E56756D04E989A221 1236992 ----a-w- C:\Windows\SysWOW64\msxml3.dll 2013-05-14 01:39:44 5078492B9CAC9CB721698DB51F039035 175104 ----a-w- C:\Windows\SysWOW64\netcorehc.dll 2013-05-14 01:39:44 140D9F911182357626165EA0BEB98C4F 156672 ----a-w- C:\Windows\SysWOW64\ncsi.dll 2013-05-14 01:39:44 0BA65122FFA7E37564EE86422DBF7AE8 52224 ----a-w- C:\Windows\SysWOW64\nlaapi.dll 2013-05-14 01:39:43 23FC8068953C9BE2D63AE4EF1129112A 18944 ----a-w- C:\Windows\SysWOW64\netevent.dll 2013-05-14 01:39:37 BF6D6ED5FADCEEE885BD0144ECF1BA27 220160 ----a-w- C:\Windows\SysWOW64\ncrypt.dll 2013-05-14 01:39:37 310F6F492A3B4B1020ED9BF9CCBBE6B6 376832 ----a-w- C:\Windows\SysWOW64\dpnet.dll 2013-05-14 01:39:36 17448AF0BBA9E7AB5EC955AF93F271BD 172544 ----a-w- C:\Windows\SysWOW64\wintrust.dll 2013-05-14 01:39:35 E7A4DE9232E097829F62755BC0ABE0F2 7680 ----a-w- C:\Windows\SysWOW64\instnm.exe 2013-05-14 01:39:35 990702DB35E3698AFB298D8743DACF53 2048 ----a-w- C:\Windows\SysWOW64\user.exe 2013-05-14 01:39:35 79FCCC6662CA3DB6E6D2F1FCF3060FB5 14336 ----a-w- C:\Windows\SysWOW64\ntvdm64.dll 2013-05-14 01:39:35 61386FEAEFAD1AF971578602130A22B6 5120 ----a-w- C:\Windows\SysWOW64\wow32.dll 2013-05-14 01:39:35 4F0C624E8E2BE4A8DB0820337B15395D 25600 ----a-w- C:\Windows\SysWOW64\setup16.exe 2013-05-14 01:39:30 B7230010D97787AF3D25E4C82F2B06B9 626688 ----a-w- C:\Windows\SysWOW64\usp10.dll 2013-05-14 01:39:27 ED59143843560B5EDB543C2A48CB9E4B 45568 ----a-w- C:\Windows\SysWOW64\oflc-nz.rs 2013-05-14 01:39:27 A704E750245D5D4EE4A23E99A00F27D5 46592 ----a-w- C:\Windows\SysWOW64\fpb.rs 2013-05-14 01:39:27 A067A19A91C2AA0198F9BD01A5CEF5C6 21504 ----a-w- C:\Windows\SysWOW64\grb.rs 2013-05-14 01:39:27 9EDCFA23CC081E38C86CA309D0F7E3DC 30720 ----a-w- C:\Windows\SysWOW64\usk.rs 2013-05-14 01:39:27 9B7D7F4D1F79E8B7D727BE94B1630D59 44544 ----a-w- C:\Windows\SysWOW64\pegibbfc.rs 2013-05-14 01:39:27 6EC618588447B82EA8D88719EE46F725 43520 ----a-w- C:\Windows\SysWOW64\csrr.rs 2013-05-14 01:39:27 5109C45498BC709C8A7E016D5FFCCAC2 20480 ----a-w- C:\Windows\SysWOW64\pegi.rs 2013-05-14 01:39:27 4F5C56DBF076D5BBB1D22B37BF281396 20480 ----a-w- C:\Windows\SysWOW64\pegi-pt.rs 2013-05-14 01:39:27 41CE7975CAD7BCF92538D2C452239523 40960 ----a-w- C:\Windows\SysWOW64\cob-au.rs 2013-05-14 01:39:27 27828AAA24AA46F11036954ADE355C1C 15360 ----a-w- C:\Windows\SysWOW64\djctq.rs 2013-05-14 01:39:26 64E211E0FDFCE4D186DF58BB7D0503BC 2576384 ----a-w- C:\Windows\SysWOW64\gameux.dll 2013-05-14 01:39:26 43C9CF6825CEA58F1815B7C3DBBB385C 308736 ----a-w- C:\Windows\SysWOW64\Wpc.dll 2013-05-14 01:39:25 DDD1C4AB9A9DAE6D4092C4C95E714650 51712 ----a-w- C:\Windows\SysWOW64\esrb.rs 2013-05-14 01:39:25 CBC69A055EF410CBD65593E4808B6DB4 23552 ----a-w- C:\Windows\SysWOW64\oflc.rs 2013-05-14 01:39:25 7752619457598CF057C4CC02A0867029 55296 ----a-w- C:\Windows\SysWOW64\cero.rs 2013-05-14 01:39:25 72035C97983745E742D71E9A8EF70BBB 20480 ----a-w- C:\Windows\SysWOW64\pegi-fi.rs 2013-05-14 01:39:14 BDA0B954A30498B5A7EDC6204CBA07ED 542208 ----a-w- C:\Windows\SysWOW64\kerberos.dll 2013-05-14 01:39:14 A6C29DB53ECA94FA8591C5388D604B82 2342400 ----a-w- C:\Windows\SysWOW64\msi.dll 2013-05-14 01:39:12 E954A79D6A754A5475582CACED1565E6 274944 ----a-w- C:\Windows\SysWOW64\KernelBase.dll 2013-05-14 01:39:12 AC0B6F41882FC6ED186962D770EBF1D2 1114112 ----a-w- C:\Windows\SysWOW64\kernel32.dll 2013-05-14 01:39:12 1153AC6E133AA849853DFD407B086B80 420064 ----a-w- C:\Windows\SysWOW64\locale.nls 2013-05-14 01:39:08 D23E615E0969AECC1134E372B0B295D1 78336 ----a-w- C:\Windows\SysWOW64\synceng.dll 2013-05-14 01:39:06 72910F1DEB838E6E08A9017BFB7D4F0B 41984 ----a-w- C:\Windows\SysWOW64\browcli.dll 2013-05-14 01:39:06 2FCA0D2C59A855C54BAFA22AA329DF0F 57344 ----a-w- C:\Windows\SysWOW64\netapi32.dll 2013-05-14 01:39:05 A81331D7EB6C5D1F7B1E4E4FC15F3EC0 43008 ----a-w- C:\Windows\SysWOW64\srclient.dll 2013-05-14 01:38:58 88355CFE81D381F93C74716DAA803587 3968856 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe 2013-05-14 01:38:58 7F21DA4760CE9B4B1B12CBC58C2A642A 6656 ----a-w- C:\Windows\SysWOW64\apisetschema.dll 2013-05-14 01:38:58 2DFAB8C3C394E95D262E1325BDA5DFE4 3913560 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe 2013-05-14 01:38:57 3B7C1A53047FF6ACEFD9BA6E281DEBB7 805376 ----a-w- C:\Windows\SysWOW64\cdosys.dll 2013-05-14 01:37:00 CA79539D3D4C0BA66F0F051A5EE5E923 103936 ----a-w- C:\Windows\SysWOW64\cryptnet.dll 2013-05-14 01:37:00 96C0E38905CFD788313BE8E11DAE3F2F 140288 ----a-w- C:\Windows\SysWOW64\cryptsvc.dll 2013-05-14 01:37:00 60D21799A4AF4EDCE65FB98830E4B0C8 1159680 ----a-w- C:\Windows\SysWOW64\crypt32.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2013-05-16 04:45:39 51DFBD18A435BAEC1F71A692373ECE4F 9728 ----a-w- C:\Windows\Sysnative\Wdfres.dll 2013-05-16 04:43:33 85D6E8F735865B502D65D1D91A79E3F3 294912 ----a-w- C:\Windows\Sysnative\browserchoice.exe 2013-05-16 04:33:41 CB2ABB2DA1E9C977302A78D86D4AE3B0 367616 ----a-w- C:\Windows\Sysnative\atmfd.dll 2013-05-16 04:33:41 2ED72B3F76C9368ABC01464DA64DB7AE 46080 ----a-w- C:\Windows\Sysnative\atmlib.dll 2013-05-16 04:33:23 F1617F1014D51987D517A4C37A7C733B 45056 ----a-w- C:\Windows\Sysnative\WUDFCoinstaller.dll 2013-05-16 04:33:23 B20F051B03A966392364C83F009F7D17 84992 ----a-w- C:\Windows\Sysnative\WUDFSvc.dll 2013-05-16 04:33:23 B1DF2D87DC8BF6072699AC8301B37796 194048 ----a-w- C:\Windows\Sysnative\WUDFPlatform.dll 2013-05-16 04:33:23 8ABFE00F213F2571498F1B8FD7939A98 229888 ----a-w- C:\Windows\Sysnative\WUDFHost.exe 2013-05-16 04:33:23 25AE683DCB4AE7E6F1B193A0CB9DB35F 744448 ----a-w- C:\Windows\Sysnative\WUDFx.dll 2013-05-16 04:21:44 943F527DF79E6B400104341AA7023C75 144384 ----a-w- C:\Windows\Sysnative\cdd.dll 2013-05-16 04:21:38 1BFC94665BCA35F9001ADC7BFB167C63 14172672 ----a-w- C:\Windows\Sysnative\shell32.dll 2013-05-16 04:21:37 E948D1D42DC68923ABD75EEB5BCCD1D3 111448 ----a-w- C:\Windows\Sysnative\consent.exe 2013-05-16 04:21:37 9D2A2369AB4B08A4905FE72DB104498F 70144 ----a-w- C:\Windows\Sysnative\appinfo.dll 2013-05-16 04:21:37 3EF480BFED1B5947A32585E30A58D4ED 1930752 ----a-w- C:\Windows\Sysnative\authui.dll 2013-05-16 04:21:37 22A0AE97360C1B146FDD9AA55AC0E989 197120 ----a-w- C:\Windows\Sysnative\shdocvw.dll 2013-05-16 04:21:35 FE90B750AB808FB9DD8FBB428B5FF83B 230400 ----a-w- C:\Windows\Sysnative\wwansvc.dll 2013-05-16 04:21:35 A11523523B31086DD760C0189C763359 3153920 ----a-w- C:\Windows\Sysnative\win32k.sys 2013-05-16 04:21:35 30B1489F2DCD8DC1AB6BB60CA6093615 48640 ----a-w- C:\Windows\Sysnative\wwanprotdim.dll 2013-05-14 23:39:34 FE6CB2001A8C2A85B617CD3FC85D8242 526336 ----a-w- C:\Windows\Sysnative\ieui.dll 2013-05-14 23:39:34 FC6B4D5450871A4D5CB344AFF6C090EF 281600 ----a-w- C:\Windows\Sysnative\dxtrans.dll 2013-05-14 23:39:34 F651D95B5043EFC20A6108A853553984 92160 ----a-w- C:\Windows\Sysnative\SetIEInstalledDate.exe 2013-05-14 23:39:34 EC6E8273B6CB79CA5B7B00CA82D1FCEE 136704 ----a-w- C:\Windows\Sysnative\iesysprep.dll 2013-05-14 23:39:34 EC08E38751854C5B8899139B7DD29FF9 197120 ----a-w- C:\Windows\Sysnative\msrating.dll 2013-05-14 23:39:34 E965529C43D25F2BDA77D705098BF777 135680 ----a-w- C:\Windows\Sysnative\IEAdvpack.dll 2013-05-14 23:39:34 E34F0440799F9A0F9DC4265F4ADA75C1 1365504 ----a-w- C:\Windows\Sysnative\urlmon.dll 2013-05-14 23:39:34 E1055A7FAD39F1F7C44F6152044056EA 905728 ----a-w- C:\Windows\Sysnative\mshtmlmedia.dll 2013-05-14 23:39:34 D9C10A4A0B3411146E6FC8936B079934 167424 ----a-w- C:\Windows\Sysnative\iexpress.exe 2013-05-14 23:39:34 D8DD5CBB9668EEE98915EA49C72F78FA 441856 ----a-w- C:\Windows\Sysnative\html.iec 2013-05-14 23:39:34 D8076F8A3C34064582035AE6696DC34A 27648 ----a-w- C:\Windows\Sysnative\licmgr10.dll 2013-05-14 23:39:34 D0F66CFAED5B85543216EF526D380B8B 270848 ----a-w- C:\Windows\Sysnative\iedkcs32.dll 2013-05-14 23:39:34 D0D4CE6C6CE87269A34A184356475D17 149504 ----a-w- C:\Windows\Sysnative\occache.dll 2013-05-14 23:39:34 C56EF4C50A1FEED0CC9B7AE068CBBBBB 19231232 ----a-w- C:\Windows\Sysnative\mshtml.dll 2013-05-14 23:39:34 C2F21E3059AFF5E616F3E361D9FA10CD 62976 ----a-w- C:\Windows\Sysnative\pngfilt.dll 2013-05-14 23:39:34 BC0D4AFBE94D8E1F81C8926D805C3366 247296 ----a-w- C:\Windows\Sysnative\webcheck.dll 2013-05-14 23:39:34 ADE73A865A5F136E84F49BB6B1627C6E 1509376 ----a-w- C:\Windows\Sysnative\inetcpl.cpl 2013-05-14 23:39:34 A197763AA7487807279AB61CD6835CEF 89600 ----a-w- C:\Windows\Sysnative\RegisterIEPKEYs.exe 2013-05-14 23:39:34 9D6B9124B582F0FBF275B434CE5A672C 2647552 ----a-w- C:\Windows\Sysnative\iertutil.dll 2013-05-14 23:39:34 9B2BB51ED6D28860A48CFF46FD6D3DC1 2706432 ----a-w- C:\Windows\Sysnative\mshtml.tlb 2013-05-14 23:39:34 97588F2871E1FE8E3EB57B17B98DF03B 67072 ----a-w- C:\Windows\Sysnative\iesetup.dll 2013-05-14 23:39:34 942E110384668EEFF44751A02EDDF5E4 48640 ----a-w- C:\Windows\Sysnative\mshtmler.dll 2013-05-14 23:39:34 8C3D32A4A46326031309A43C52539D7F 1400416 ----a-w- C:\Windows\Sysnative\ieapfltr.dat 2013-05-14 23:39:34 82D602EBBBA6D08E4691F32269FD3494 12800 ----a-w- C:\Windows\Sysnative\msfeedssync.exe 2013-05-14 23:39:34 7F4F74880E0B586EB7A9E225C34B1296 15404032 ----a-w- C:\Windows\Sysnative\ieframe.dll 2013-05-14 23:39:34 7EC25F7ABF7CE6B0FE93787524EE537B 452096 ----a-w- C:\Windows\Sysnative\dxtmsft.dll 2013-05-14 23:39:34 7DAA72F6C30D81EE31EC2BDC90054326 603136 ----a-w- C:\Windows\Sysnative\msfeeds.dll 2013-05-14 23:39:34 772EC073332D1BA2DBEC32C6D063811A 855552 ----a-w- C:\Windows\Sysnative\jscript.dll 2013-05-14 23:39:34 658E8FEC79A4AB5BFDE032627B5C9667 13824 ----a-w- C:\Windows\Sysnative\mshta.exe 2013-05-14 23:39:34 63CAE56FE4215F98FEB0188748A99378 52224 ----a-w- C:\Windows\Sysnative\msfeedsbs.dll 2013-05-14 23:39:34 5B15164486C66B76699E1CD2CD2F3A2A 51200 ----a-w- C:\Windows\Sysnative\imgutil.dll 2013-05-14 23:39:34 5051BB40FFB2BA4870C0A059CA03294F 1054720 ----a-w- C:\Windows\Sysnative\MsSpellCheckingFacility.exe 2013-05-14 23:39:34 4E426A67C46379B75A5E671B46FC07F6 102912 ----a-w- C:\Windows\Sysnative\inseng.dll 2013-05-14 23:39:34 4CFBEC37E4FAD530E623E1541E1EA958 599552 ----a-w- C:\Windows\Sysnative\vbscript.dll 2013-05-14 23:39:34 440104AEB9DAF8AC9842080AE59740FA 77312 ----a-w- C:\Windows\Sysnative\tdc.ocx 2013-05-14 23:39:34 42758AF68D3C4912C8D8A18088AD2555 51712 ----a-w- C:\Windows\Sysnative\ie4uinit.exe 2013-05-14 23:39:34 40738329209CBE2C9B48F7E30F7C1414 144896 ----a-w- C:\Windows\Sysnative\wextract.exe 2013-05-14 23:39:34 402D797A7905DC3C6FE11E75CD5252EB 235008 ----a-w- C:\Windows\Sysnative\url.dll 2013-05-14 23:39:34 3531FA12A76A32ECECD972196775DF7C 226304 ----a-w- C:\Windows\Sysnative\elshyph.dll 2013-05-14 23:39:34 31E219322B8D765F9F84B80D1D92A07F 173568 ----a-w- C:\Windows\Sysnative\ieUnatt.exe 2013-05-14 23:39:34 2C96C695B6015042AC867EA419A45C20 3958784 ----a-w- C:\Windows\Sysnative\jscript9.dll 2013-05-14 23:39:34 2AAE2B8FED8390879C2369FC63F7001F 97280 ----a-w- C:\Windows\Sysnative\mshtmled.dll 2013-05-14 23:39:34 27A9000C534AA9BADC9EE74940F50C6D 2242048 ----a-w- C:\Windows\Sysnative\wininet.dll 2013-05-14 23:39:34 254502230F2259D255D4149C235173B1 53248 ----a-w- C:\Windows\Sysnative\jsproxy.dll 2013-05-14 23:39:34 23556D116D5FB93395B2A648EEB24251 81408 ----a-w- C:\Windows\Sysnative\icardie.dll 2013-05-14 23:39:34 1FF56AC32B38A94C3C88497BD6E00C96 25185 ----a-w- C:\Windows\Sysnative\ieuinit.inf 2013-05-14 23:39:34 18A94D6E9D27D169D38DAB91F6A97518 136192 ----a-w- C:\Windows\Sysnative\iepeers.dll 2013-05-14 23:39:34 168602AB16D30D5D6E091CA609FC7E75 39936 ----a-w- C:\Windows\Sysnative\iernonce.dll 2013-05-14 23:39:34 1456EECCB5CF6B91513200F95D61706E 762368 ----a-w- C:\Windows\Sysnative\ieapfltr.dll 2013-05-14 23:39:34 112183DF91C9BAECB498E4A86ECDE598 216064 ----a-w- C:\Windows\Sysnative\msls31.dll 2013-05-14 23:39:09 639774C9ACD063F028F6084ABF5593AD 68608 ----a-w- C:\Windows\Sysnative\taskhost.exe 2013-05-14 23:38:09 FB4045578F5180BDB1963AB352B78548 5632 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-05-14 23:38:09 FA428BDBCFAB9DC3D58F0BD2CCD50EA2 1682432 ----a-w- C:\Windows\Sysnative\XpsPrint.dll 2013-05-14 23:38:09 F5CEF064C7E6D95DA86B9D064A56A969 3584 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-05-14 23:38:09 F49E92B50CED5C9F1725D3C0329FD933 10752 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-05-14 23:38:09 F1C19F0AA151B90A7416FA1D50DDB582 245248 ----a-w- C:\Windows\Sysnative\WindowsCodecsExt.dll 2013-05-14 23:38:09 E8EEA503870CB6A6DC4E09A2433DF33E 2776576 ----a-w- C:\Windows\Sysnative\msmpeg2vdec.dll 2013-05-14 23:38:09 C4C183E6551084039EC862DA1C945E3D 1175552 ----a-w- C:\Windows\Sysnative\FntCache.dll 2013-05-14 23:38:09 C498EF41B93986BCBD483597573EB96D 2565120 ----a-w- C:\Windows\Sysnative\d3d10warp.dll 2013-05-14 23:38:09 BDDF242A49E7B7DC5CCEC291BCE53ACB 1424384 ----a-w- C:\Windows\Sysnative\WindowsCodecs.dll 2013-05-14 23:38:09 B2CA1AC17E78D986B22FD6C2261CD84F 1238528 ----a-w- C:\Windows\Sysnative\d3d10.dll 2013-05-14 23:38:09 AFC3DB5C6EB8CA8017DDB81D6C0AD02A 9728 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-05-14 23:38:09 AFB73882AE41E1629A63E6713FE30FB9 296960 ----a-w- C:\Windows\Sysnative\d3d10core.dll 2013-05-14 23:38:09 9AE80F6A66B30E3ED8CDF858CF28B11B 194560 ----a-w- C:\Windows\Sysnative\d3d10_1.dll 2013-05-14 23:38:09 9108540E866F75C7AF2B91DD921A8091 3072 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-05-14 23:38:09 9094039A00485F71C4DE64BF51F64C46 3072 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-version-l1-1-0.dll 2013-05-14 23:38:09 8DFB5752FCE145A6B295093C0A8BE131 363008 ----a-w- C:\Windows\Sysnative\dxgi.dll 2013-05-14 23:38:09 893E8C1E4A1263EDDB1A6922D0E32201 465920 ----a-w- C:\Windows\Sysnative\WMPhoto.dll 2013-05-14 23:38:09 7E8A672B7B06A6EB11960C22E0360C59 3928064 ----a-w- C:\Windows\Sysnative\d2d1.dll 2013-05-14 23:38:09 72723D3E4781BADC62C3180C137E7B23 4096 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-user32-l1-1-0.dll 2013-05-14 23:38:09 6F623BD09CBB4C3F97374F12976E5EA5 522752 ----a-w- C:\Windows\Sysnative\XpsGdiConverter.dll 2013-05-14 23:38:09 64A4AB126E24FD3F58EBE64852773DB5 2560 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-05-14 23:38:09 63F72417CA38D8FC8F53709649B589E3 333312 ----a-w- C:\Windows\Sysnative\d3d10_1core.dll 2013-05-14 23:38:09 63BB89DED1E9104E68D33E54DE4D340D 1643520 ----a-w- C:\Windows\Sysnative\DWrite.dll 2013-05-14 23:38:09 448B02AD260EC3E1E892FCE6DFDDEEBD 1887232 ----a-w- C:\Windows\Sysnative\d3d11.dll 2013-05-14 23:38:09 3834316FE8A653227282196525E07DFE 648192 ----a-w- C:\Windows\Sysnative\d3d10level9.dll 2013-05-14 23:38:09 0E6FBF19D9DFBB77316C23DF91F8A101 5632 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-05-14 23:38:09 04CB7C8FDC6D9640DD82A527208F72C4 221184 ----a-w- C:\Windows\Sysnative\UIAnimation.dll 2013-05-14 12:14:39 48DA65F29BB4C5AD21EC67C2D64700D6 64856 ----a-w- C:\Windows\Sysnative\klfphc.dll 2013-05-14 01:40:01 0353B239C28B0E9EBC7FA3D1F6181661 750592 ----a-w- C:\Windows\Sysnative\win32spl.dll 2013-05-14 01:39:57 3CC16A849E6092E43909F48EF0E60306 226816 ----a-w- C:\Windows\Sysnative\dhcpcore6.dll 2013-05-14 01:39:57 3C06D5A929B798D0B13F6481242A0FD2 55296 ----a-w- C:\Windows\Sysnative\dhcpcsvc6.dll 2013-05-14 01:39:56 F4C640E85DB6450CB221E5224AA2AB51 3717632 ----a-w- C:\Windows\Sysnative\mstscax.dll 2013-05-14 01:39:56 CE4157E4B1E5041D252EF38EB61E9F0C 44032 ----a-w- C:\Windows\Sysnative\tsgqec.dll 2013-05-14 01:39:56 9F5C2F0CFEF95B4653E21443CDC0D587 158720 ----a-w- C:\Windows\Sysnative\aaclient.dll 2013-05-14 01:39:53 3D2D108E14AD21889A2621B94C80A3DD 2048 ----a-w- C:\Windows\Sysnative\tzres.dll 2013-05-14 01:39:46 9E5D9177660A76FC8DECDC37A91A5B0D 9216 ----a-w- C:\Windows\Sysnative\rdrmemptylst.exe 2013-05-14 01:39:46 6D5DCC1579B3961D791ABDE286A1CB5E 77312 ----a-w- C:\Windows\Sysnative\rdpwsx.dll 2013-05-14 01:39:46 5B236296E233CAA6BF86BE0C6501A224 149504 ----a-w- C:\Windows\Sysnative\rdpcorekmts.dll 2013-05-14 01:39:46 1573C45E65DE32B1BC3572634F8F1E8E 340992 ----a-w- C:\Windows\Sysnative\schannel.dll 2013-05-14 01:39:45 D0EC440FA8D306E4CEFC8CC4DEFD2AC4 2048 ----a-w- C:\Windows\Sysnative\msxml3r.dll 2013-05-14 01:39:45 99B91C5D2FCEF218CAD3600ECB62A799 2002432 ----a-w- C:\Windows\Sysnative\msxml6.dll 2013-05-14 01:39:45 371948BC5911ABA06168FAC91ED25F06 1882624 ----a-w- C:\Windows\Sysnative\msxml3.dll 2013-05-14 01:39:44 D4FAC263861BAE06971C7F7D0A8EBF15 216576 ----a-w- C:\Windows\Sysnative\ncsi.dll 2013-05-14 01:39:44 8AD77806D336673F270DB31645267293 303104 ----a-w- C:\Windows\Sysnative\nlasvc.dll 2013-05-14 01:39:44 59B3BE37BAFBD40715F45D580783738B 246272 ----a-w- C:\Windows\Sysnative\netcorehc.dll 2013-05-14 01:39:44 08C2957BB30058E663720C5606885653 569344 ----a-w- C:\Windows\Sysnative\iphlpsvc.dll 2013-05-14 01:39:43 DC4382E93770B3BF0774DB7FE46C8239 18944 ----a-w- C:\Windows\Sysnative\netevent.dll 2013-05-14 01:39:43 53E83F1F6CF9D62F32801CF66D8352A8 209920 ----a-w- C:\Windows\Sysnative\profsvc.dll 2013-05-14 01:39:43 46BB91A169B9B31FF44EB04C48EC1D41 70656 ----a-w- C:\Windows\Sysnative\nlaapi.dll 2013-05-14 01:39:37 5F3307352216618221A17CFEF273EEE2 307200 ----a-w- C:\Windows\Sysnative\ncrypt.dll 2013-05-14 01:39:37 374CE9DAB2F0CB173B8FCF3AB8DB5D1B 478208 ----a-w- C:\Windows\Sysnative\dpnet.dll 2013-05-14 01:39:36 AA06902362B1422D7A7DA7061E07C624 220160 ----a-w- C:\Windows\Sysnative\wintrust.dll 2013-05-14 01:39:35 0C27239FEA4DB8A2AAC9E502186B7264 215040 ----a-w- C:\Windows\Sysnative\winsrv.dll 2013-05-14 01:39:34 A236B1646E96AB06BE0F8D592B6D9A0D 245760 ----a-w- C:\Windows\Sysnative\OxpsConverter.exe 2013-05-14 01:39:30 DBF99FD9CAF75CA66D042BD8D050FF71 800768 ----a-w- C:\Windows\Sysnative\usp10.dll 2013-05-14 01:39:27 EBB73E4E8CA01089CF74ECE506EB7607 43520 ----a-w- C:\Windows\Sysnative\csrr.rs 2013-05-14 01:39:27 C4B0793E4B97AA36A2A8C81A7AA1979A 44544 ----a-w- C:\Windows\Sysnative\pegibbfc.rs 2013-05-14 01:39:27 A2E0F1E01A0983E9C94565BBEC862BF7 40960 ----a-w- C:\Windows\Sysnative\cob-au.rs 2013-05-14 01:39:27 997938D423CE830161CB6059434E3C9F 45568 ----a-w- C:\Windows\Sysnative\oflc-nz.rs 2013-05-14 01:39:27 6D540AF9B183FC97DC4CC54369561548 20480 ----a-w- C:\Windows\Sysnative\pegi-pt.rs 2013-05-14 01:39:27 661AE5EAC62C4598DD01795CEB915BAE 20480 ----a-w- C:\Windows\Sysnative\pegi.rs 2013-05-14 01:39:27 65A8302C7551CFE45FAA2BC085C9E7E2 15360 ----a-w- C:\Windows\Sysnative\djctq.rs 2013-05-14 01:39:27 5C48A43FC30FC61ECB1335DC646686BC 30720 ----a-w- C:\Windows\Sysnative\usk.rs 2013-05-14 01:39:27 54B11BB2AFBC3D5EBA9C96F0C1820B9B 46592 ----a-w- C:\Windows\Sysnative\fpb.rs 2013-05-14 01:39:27 4489D5D2CB4BA0799F3FB4625DE181CF 21504 ----a-w- C:\Windows\Sysnative\grb.rs 2013-05-14 01:39:27 027675ED9B34EE1B91505C3B8752649F 441856 ----a-w- C:\Windows\Sysnative\Wpc.dll 2013-05-14 01:39:26 2BCBA6052374959A30BD7948444DBB79 2746368 ----a-w- C:\Windows\Sysnative\gameux.dll 2013-05-14 01:39:25 D0C01412FBF59C1C25630C49F0C1B803 55296 ----a-w- C:\Windows\Sysnative\cero.rs 2013-05-14 01:39:25 9BB05674E013C35F4DAED51F5015355D 20480 ----a-w- C:\Windows\Sysnative\pegi-fi.rs 2013-05-14 01:39:25 51D25C805A01A2C4F930F9720CF51FFE 51712 ----a-w- C:\Windows\Sysnative\esrb.rs 2013-05-14 01:39:25 4773EB5962548068547214A620E9ACC3 23552 ----a-w- C:\Windows\Sysnative\oflc.rs 2013-05-14 01:39:14 5EB6E9C8BE1ACC5830780E0F9A846255 3216384 ----a-w- C:\Windows\Sysnative\msi.dll 2013-05-14 01:39:14 44E1A196DFCB53B01FE4B855C3B56A15 715776 ----a-w- C:\Windows\Sysnative\kerberos.dll 2013-05-14 01:39:12 65C113214F7B05820F6D8A65B1485196 1161216 ----a-w- C:\Windows\Sysnative\kernel32.dll 2013-05-14 01:39:12 1F56F209585F350A5666E3CC7931FD67 424448 ----a-w- C:\Windows\Sysnative\KernelBase.dll 2013-05-14 01:39:12 1BCDB508143B517F21BBDAC10F5777BF 338432 ----a-w- C:\Windows\Sysnative\conhost.exe 2013-05-14 01:39:12 1153AC6E133AA849853DFD407B086B80 420064 ----a-w- C:\Windows\Sysnative\locale.nls 2013-05-14 01:39:11 BA69FBB4BFC88BA6AA8EB5A285393A72 16384 ----a-w- C:\Windows\Sysnative\ntvdm64.dll 2013-05-14 01:39:11 5674E21E82CFBEA36DDAD5DB285D6DBC 362496 ----a-w- C:\Windows\Sysnative\wow64win.dll 2013-05-14 01:39:11 3EE3AA76D8AB6D5644C4C8F34471CEB3 13312 ----a-w- C:\Windows\Sysnative\wow64cpu.dll 2013-05-14 01:39:11 259EB5F7D95A29842B476C5B3EB6E186 243200 ----a-w- C:\Windows\Sysnative\wow64.dll 2013-05-14 01:39:08 8699D17DFCFCD327784034DB6BD3A422 95744 ----a-w- C:\Windows\Sysnative\synceng.dll 2013-05-14 01:39:06 EEEA40F0EDB0A6E5359E539E15D0BC77 73216 ----a-w- C:\Windows\Sysnative\netapi32.dll 2013-05-14 01:39:06 05F5A0D14A2EE1D8255C2AA0E9E8E694 136704 ----a-w- C:\Windows\Sysnative\browser.dll 2013-05-14 01:39:06 012787CEB35505EB78DF82E0A0072888 59392 ----a-w- C:\Windows\Sysnative\browcli.dll 2013-05-14 01:39:05 D5164131D596A070FF9C82BC4A488F1F 503808 ----a-w- C:\Windows\Sysnative\srcore.dll 2013-05-14 01:38:59 45CFBFA8EDC3DF4E2B7FB0D0260FE051 956928 ----a-w- C:\Windows\Sysnative\localspl.dll 2013-05-14 01:38:58 F0371DE302FFFF8F086661611BE60848 112640 ----a-w- C:\Windows\Sysnative\smss.exe 2013-05-14 01:38:58 CEC1EDF4022DC4DCA40384DCEC672B0E 43520 ----a-w- C:\Windows\Sysnative\csrsrv.dll 2013-05-14 01:38:58 AC3232ED772403D38D64C18CD5A66FBD 5550424 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe 2013-05-14 01:38:57 1FEB1694B13247A451B274E114AFAC45 1133568 ----a-w- C:\Windows\Sysnative\cdosys.dll 2013-05-14 01:37:14 85DAA09A98C9286D4EA2BA8D0E644377 559104 ----a-w- C:\Windows\Sysnative\spoolsv.exe 2013-05-14 01:37:00 9C01375BE382E834CC26D1B7EAF2C4FE 184320 ----a-w- C:\Windows\Sysnative\cryptsvc.dll 2013-05-14 01:37:00 8792BAB371B4B1589E015B6FD1ED3B15 140288 ----a-w- C:\Windows\Sysnative\cryptnet.dll 2013-05-14 01:37:00 12EE6FE9268CEE6D90FDCCBF89236C65 1464320 ----a-w- C:\Windows\Sysnative\crypt32.dll 2013-05-14 01:26:00 C1C03EA437EDDA8A7D4D8786E5AE6751 57880 ----a-w- C:\Windows\Sysnative\wuauclt.exe 2013-05-14 01:26:00 7FE0D0C8F53735EA17C9AE93EFE7AD5A 44056 ----a-w- C:\Windows\Sysnative\wups2.dll 2013-05-14 01:26:00 50EBD31C3527366FAFA468BD609F7352 2622464 ----a-w- C:\Windows\Sysnative\wucltux.dll 2013-05-14 01:25:59 D9EF901DCA379CFE914E9FA13B73B4C4 2428952 ----a-w- C:\Windows\Sysnative\wuaueng.dll 2013-05-14 01:17:42 E746ED90132C6B6313CE9179F56BD31D 38424 ----a-w- C:\Windows\Sysnative\wups.dll 2013-05-14 01:17:42 C47F35CC6FA4F1BDBEF8F87AC1A46537 701976 ----a-w- C:\Windows\Sysnative\wuapi.dll 2013-05-14 01:17:42 4AA6AA52A16EED6481E83D73EED4C8D5 99840 ----a-w- C:\Windows\Sysnative\wudriver.dll 2013-05-14 01:10:35 FF0729002E081668620A681182D63FE6 36864 ----a-w- C:\Windows\Sysnative\wuapp.exe 2013-05-14 01:10:35 3E38C20AC83B01C45723B63B0F7A8FDC 186752 ----a-w- C:\Windows\Sysnative\wuwebv.dll ====== C:\Windows\Sysnative\drivers ===== 2013-05-16 20:59:29 B08740047145B9BCE15BF75CA0F9718A 31232 ----a-w- C:\Windows\Sysnative\drivers\tap0901t.sys 2013-05-16 04:45:41 933222B19FF3E7EA5F65517EA1F7D57E 3 ----a-w- C:\Windows\Sysnative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-05-16 04:45:39 AEA0A67275CFBA0E463E00C6E9A1DDAE 54376 ----a-w- C:\Windows\Sysnative\drivers\WdfLdr.sys 2013-05-16 04:45:39 442783E2CB0DA19873B7A63833FF4CB4 785512 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys 2013-05-16 04:33:23 DDA4CAF29D8C0A297F886BFE561E6659 198656 ----a-w- C:\Windows\Sysnative\drivers\WUDFRd.sys 2013-05-16 04:33:23 AB886378EEB55C6C75B4F2D14B6C869F 87040 ----a-w- C:\Windows\Sysnative\drivers\WUDFPf.sys 2013-05-16 04:33:23 933222B19FF3E7EA5F65517EA1F7D57E 3 ----a-w- C:\Windows\Sysnative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-05-16 04:21:44 AF2E16242AA723F68F461B6EAE2EAD3D 983400 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys 2013-05-16 04:21:44 1F04CFB79DD5FB7694468CE3FB3DCC31 265064 ----a-w- C:\Windows\Sysnative\drivers\dxgmms1.sys 2013-05-14 12:14:06 2CBD248370721DCAD632DB70D09C5A6D 620128 ----a-w- C:\Windows\Sysnative\drivers\klif.sys 2013-05-14 12:14:06 03D8651EAED0D9084A59355A92B7246F 90208 ----a-w- C:\Windows\Sysnative\drivers\klflt.sys 2013-05-14 01:39:50 B98F8C6E31CD07B2E6F71F7F648E38C0 1656680 ----a-w- C:\Windows\Sysnative\drivers\ntfs.sys 2013-05-14 01:39:47 92B3172E8C14C1444682F510843A9988 19968 ----a-w- C:\Windows\Sysnative\drivers\usb8023.sys 2013-05-14 01:39:47 760E38053BF56E501D562B70AD796B88 950128 ----a-w- C:\Windows\Sysnative\drivers\ndis.sys 2013-05-14 01:39:47 0E01641D96889BDEB22DE12D30575B08 41472 ----a-w- C:\Windows\Sysnative\drivers\RNDISMP.sys 2013-05-14 01:39:46 9AC4F97C2D3E93367E2148EA940CD2CD 458704 ----a-w- C:\Windows\Sysnative\drivers\cng.sys 2013-05-14 01:39:46 97A7070AEA4C058B6418519E869A63B4 95600 ----a-w- C:\Windows\Sysnative\drivers\ksecdd.sys 2013-05-14 01:39:46 26C43A7C2862447EC59DEDA188D1DA07 151920 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys 2013-05-14 01:39:43 1B16D0BD9841794A6E0CDE0CEF744ABC 45568 ----a-w- C:\Windows\Sysnative\drivers\tcpipreg.sys 2013-05-14 01:39:28 B62A953F2BF3922C8764A29C34A22899 1913192 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2013-05-14 01:39:28 7942B7AC3FF598F8A1736D51ADAF04E8 376688 ----a-w- C:\Windows\Sysnative\drivers\netio.sys 2013-05-14 01:39:28 41C67E4205C606A103DEC8651D0B6FE6 288088 ----a-w- C:\Windows\Sysnative\drivers\FWPKCLNT.SYS 2013-05-14 01:39:22 E61608AA35E98999AF9AAEEEA6114B0A 210944 ----a-w- C:\Windows\Sysnative\drivers\rdpwd.sys 2013-05-14 01:39:15 E9766131EEADE40A27DC27D2D68FBA9C 75120 ----a-w- C:\Windows\Sysnative\drivers\partmgr.sys 2013-05-14 01:39:06 8F6322049018354F45F05A2FD2D4E5E0 223752 ----a-w- C:\Windows\Sysnative\drivers\fvevol.sys ====== C:\Windows\Tasks ====== 2013-05-14 00:52:08 D863BB88D2F88C0E0F5D880C23353139 1052 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-05-14 00:52:08 441C6AACB099BC2614798E6F10A29A46 1056 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-05-16 19:37:33 -------- d-----w- C:\Program Files\WinRAR 2013-05-16 04:32:24 -------- d-----w- C:\Program Files\Microsoft Silverlight 2013-05-14 01:15:31 -------- d-----w- C:\Program Files\Google ======= C:\Program Files (x86) ===== 2013-05-17 17:06:21 -------- d-----w- C:\Program Files (x86)\Nemex 2013-05-16 20:59:28 -------- d-----w- C:\Program Files (x86)\Tunngle 2013-05-16 04:32:24 -------- d-----w- C:\Program Files (x86)\Microsoft Silverlight 2013-05-15 18:10:10 -------- d-----w- C:\Program Files (x86)\MSECache 2013-05-15 09:15:40 -------- d-----w- C:\Program Files (x86)\Modern Warfare 3 2013-05-14 19:51:27 -------- d-----w- C:\Program Files (x86)\IncrediMail 2013-05-14 17:28:40 -------- d-----w- C:\Program Files (x86)\Common Files\Skype 2013-05-14 17:28:39 -------- d-----r- C:\Program Files (x86)\Skype 2013-05-14 12:14:13 -------- d-----w- C:\Program Files (x86)\Kaspersky Lab 2013-05-14 01:13:49 -------- d-----w- C:\Program Files (x86)\Common Files\Memeo 2013-05-14 01:13:45 -------- d-----w- C:\Program Files (x86)\Memeo 2013-05-14 01:13:13 -------- d-----w- C:\Program Files (x86)\Mediathek 2013-05-14 01:13:13 -------- d-----w- C:\Program Files (x86)\MARKEMENT 2013-05-14 00:52:05 -------- d-----w- C:\Program Files (x86)\Google ======= C: ===== ====== C:\Users\Mike\AppData\Roaming ====== 2013-05-17 17:06:24 -------- d-----w- C:\users\Willem\AppData\Local\Nemex 2013-05-17 17:06:21 -------- d-----w- C:\users\Willem\AppData\Roaming\Mouse Recorder Pro 2013-05-17 17:06:10 -------- d-----w- C:\users\Willem\AppData\Roaming\WinRAR 2013-05-16 20:59:29 -------- d-----w- C:\users\Mike\AppData\Roaming\Tunngle 2013-05-16 20:41:49 -------- d-----w- C:\users\Mike\AppData\Local\TeknoGods 2013-05-16 20:13:38 -------- d-----w- C:\users\Mike\AppData\Local\mpress 2013-05-16 19:37:35 -------- d-----w- C:\users\Mike\AppData\Roaming\WinRAR 2013-05-16 19:37:35 -------- d-----w- C:\users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-05-16 07:10:18 -------- d-----w- C:\users\Mike\AppData\Roaming\uTorrent 2013-05-15 18:02:11 -------- d-----w- C:\users\Mike\AppData\Local\ElevatedDiagnostics 2013-05-15 14:53:32 -------- d-----w- C:\users\Willem\AppData\Local\{1525DD62-B9F9-40FA-A3C9-163C937CA211} 2013-05-15 14:00:42 -------- d-----w- C:\users\Willem\AppData\Locallow\Sun 2013-05-15 09:17:43 -------- d-----w- C:\users\Mike\AppData\Local\Diagnostics 2013-05-15 07:41:00 -------- d-----w- C:\users\Willem\AppData\Local\temp 2013-05-15 07:41:00 -------- d-----w- C:\users\Public\AppData\Local\temp 2013-05-15 07:41:00 -------- d-----w- C:\users\Jolanda\AppData\Local\temp 2013-05-15 07:41:00 -------- d-----w- C:\users\Default\AppData\Local\temp 2013-05-15 07:41:00 -------- d-----w- C:\users\Default User\AppData\Local\temp 2013-05-15 06:19:22 43C3CD91685F390DA50B339C9F609C2C 7680 ----a-w- C:\users\Mike\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-05-15 05:56:07 -------- d-----w- C:\users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2013-05-14 23:02:59 -------- d-----w- C:\users\Jolanda\AppData\Locallow\Sun 2013-05-14 21:26:17 -------- d-----w- C:\users\Willem\AppData\Local\{170A42CD-E11A-4AE8-8D11-7429AB7612BC} 2013-05-14 20:52:12 -------- d-----w- C:\users\Jolanda\AppData\Local\IM 2013-05-14 20:52:05 -------- d-----w- C:\users\Jolanda\AppData\Roaming\Adobe 2013-05-14 20:50:34 -------- d-----w- C:\users\Jolanda\AppData\Roaming\Google 2013-05-14 20:50:33 -------- d-----w- C:\users\Jolanda\AppData\Local\Google 2013-05-14 20:01:28 -------- d-----w- C:\users\Willem\AppData\Local\{64F8F7DB-4F8A-48A2-A0B5-A0B73120E47B} 2013-05-14 20:00:37 -------- d-----w- C:\users\Willem\AppData\Roaming\Adobe 2013-05-14 19:58:21 -------- d-----w- C:\users\Willem\AppData\Roaming\Google 2013-05-14 19:54:53 -------- d-----w- C:\users\Willem\AppData\Local\Google 2013-05-14 19:53:14 -------- d-----w- C:\users\Willem\AppData\Local\IM 2013-05-14 19:51:33 -------- d-----w- C:\users\Mike\AppData\Local\IM 2013-05-14 18:47:20 -------- d-----w- C:\users\Willem\AppData\Roaming\ATI 2013-05-14 18:47:20 -------- d-----w- C:\users\Willem\AppData\Local\ATI 2013-05-14 18:42:20 D4735DB15B15AA338506EB1CC3272F16 61200 ----a-w- C:\users\Willem\AppData\Local\GDIPFONTCACHEV1.DAT 2013-05-14 18:42:20 -------- d-----w- C:\users\Willem\AppData\Local\Power2Go 2013-05-14 18:38:32 -------- d-----r- C:\users\Willem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-05-14 18:38:32 -------- d-----r- C:\users\Willem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-05-14 18:38:25 -------- d-----w- C:\users\Willem\AppData\Roaming\Identities 2013-05-14 17:28:44 -------- d-----w- C:\users\Mike\AppData\Roaming\Skype 2013-05-14 16:51:59 -------- d-----w- C:\users\Mike\AppData\Locallow\Sun 2013-05-14 14:46:32 -------- d-s---w- C:\users\Willem\AppData\Locallow\Microsoft 2013-05-14 14:46:14 -------- d-----w- C:\users\Willem\AppData\Local\VirtualStore 2013-05-14 14:46:07 -------- d-sh--we C:\users\Willem\AppData\Local\Temporary Internet Files 2013-05-14 14:46:07 -------- d-sh--we C:\users\Willem\AppData\Local\Geschiedenis 2013-05-14 14:46:07 -------- d-sh--we C:\users\Willem\AppData\Local\Application Data 2013-05-14 14:46:06 -------- d-s---w- C:\users\Willem\AppData\Roaming\Microsoft 2013-05-14 14:46:06 -------- d-----w- C:\users\Willem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HomeCinema 2013-05-14 14:46:06 -------- d-----w- C:\users\Willem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover 2013-05-14 14:46:06 -------- d-----w- C:\users\Willem\AppData\Roaming\Media Center Programs 2013-05-14 14:46:06 -------- d-----w- C:\users\Willem\AppData\Local\Microsoft 2013-05-14 14:46:06 -------- d-----r- C:\users\Willem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-05-14 14:46:06 -------- d-----r- C:\users\Willem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-05-14 12:10:38 -------- d-----w- C:\users\Jolanda\AppData\Roaming\ATI 2013-05-14 12:10:38 -------- d-----w- C:\users\Jolanda\AppData\Local\ATI 2013-05-14 12:05:38 2E1FE5D655789722AAE66949A0C6F88D 61200 ----a-w- C:\users\Jolanda\AppData\Local\GDIPFONTCACHEV1.DAT 2013-05-14 12:05:38 -------- d-----w- C:\users\Jolanda\AppData\Local\Power2Go 2013-05-14 11:53:30 -------- d-----r- C:\users\Jolanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-05-14 11:53:30 -------- d-----r- C:\users\Jolanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-05-14 11:53:29 -------- d-----w- C:\users\Jolanda\AppData\Roaming\Identities 2013-05-14 11:15:12 -------- d-s---w- C:\users\Jolanda\AppData\Locallow\Microsoft 2013-05-14 11:14:54 -------- d-----w- C:\users\Jolanda\AppData\Local\VirtualStore 2013-05-14 11:14:48 -------- d-sh--we C:\users\Jolanda\AppData\Local\Temporary Internet Files 2013-05-14 11:14:48 -------- d-sh--we C:\users\Jolanda\AppData\Local\Geschiedenis 2013-05-14 11:14:48 -------- d-sh--we C:\users\Jolanda\AppData\Local\Application Data 2013-05-14 11:14:48 -------- d-s---w- C:\users\Jolanda\AppData\Roaming\Microsoft 2013-05-14 11:14:48 -------- d-----w- C:\users\Jolanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HomeCinema 2013-05-14 11:14:48 -------- d-----w- C:\users\Jolanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover 2013-05-14 11:14:48 -------- d-----w- C:\users\Jolanda\AppData\Roaming\Media Center Programs 2013-05-14 11:14:48 -------- d-----w- C:\users\Jolanda\AppData\Local\Microsoft 2013-05-14 11:14:48 -------- d-----r- C:\users\Jolanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-05-14 11:14:48 -------- d-----r- C:\users\Jolanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-05-14 01:48:44 -------- d-----w- C:\users\Mike\AppData\Roaming\ATI 2013-05-14 01:48:44 -------- d-----w- C:\users\Mike\AppData\Local\ATI 2013-05-14 01:43:42 154F3F12B7BFCE252C5D5F7D0D91D037 61200 ----a-w- C:\users\Mike\AppData\Local\GDIPFONTCACHEV1.DAT 2013-05-14 01:43:42 -------- d-----w- C:\users\Mike\AppData\Local\Power2Go 2013-05-14 01:43:34 -------- d-----r- C:\users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-05-14 01:43:34 -------- d-----r- C:\users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-05-14 01:43:28 -------- d-----w- C:\users\Mike\AppData\Roaming\Identities 2013-05-14 01:15:37 -------- d-----w- C:\users\Mike\AppData\Roaming\Adobe 2013-05-14 01:15:36 -------- d-----w- C:\users\Mike\AppData\Roaming\Google 2013-05-14 01:15:36 -------- d-----w- C:\users\Mike\AppData\Local\Google 2013-05-14 01:14:36 -------- d-s---w- C:\users\Mike\AppData\Locallow\Microsoft 2013-05-14 01:14:27 -------- d-----w- C:\users\Mike\AppData\Local\VirtualStore 2013-05-14 01:14:25 -------- d-sh--we C:\users\Mike\AppData\Local\Temporary Internet Files 2013-05-14 01:14:25 -------- d-sh--we C:\users\Mike\AppData\Local\Geschiedenis 2013-05-14 01:14:25 -------- d-sh--we C:\users\Mike\AppData\Local\Application Data 2013-05-14 01:14:25 -------- d-s---w- C:\users\Mike\AppData\Roaming\Microsoft 2013-05-14 01:14:25 -------- d-----w- C:\users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HomeCinema 2013-05-14 01:14:25 -------- d-----w- C:\users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover 2013-05-14 01:14:25 -------- d-----w- C:\users\Mike\AppData\Roaming\Media Center Programs 2013-05-14 01:14:25 -------- d-----w- C:\users\Mike\AppData\Local\Temp 2013-05-14 01:14:25 -------- d-----w- C:\users\Mike\AppData\Local\Microsoft 2013-05-14 01:14:25 -------- d-----r- C:\users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-05-14 01:14:25 -------- d-----r- C:\users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories ====== C:\Users\Mike ====== 2013-05-17 17:06:21 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mouse Recorder Pro 2 2013-05-16 20:59:29 -------- d-----w- C:\ProgramData\Tunngle 2013-05-16 20:59:29 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle 2013-05-16 19:37:35 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-05-16 04:32:56 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2013-05-15 17:59:15 -------- d-----w- C:\ProgramData\Hewlett-Packard 2013-05-15 06:22:32 -------- d-----w- C:\Users\Public\AppData 2013-05-14 19:51:29 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail 2013-05-14 19:51:27 -------- d-----w- C:\ProgramData\IncrediMail 2013-05-14 19:51:27 -------- d-----w- C:\ProgramData\IM 2013-05-14 18:38:32 -------- d-----r- C:\Users\Willem\Searches 2013-05-14 18:38:24 -------- d-----r- C:\Users\Willem\Contacts 2013-05-14 17:28:40 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2013-05-14 16:51:49 -------- d-----w- C:\ProgramData\Skype 2013-05-14 14:46:07 6FC234AD3752E1267B34FB12BCD6718B 20 --sh--w- C:\Users\Willem\ntuser.ini 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\Sjablonen 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\SendTo 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\Recent 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\Netwerkprinteromgeving 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\NetHood 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\Mijn documenten 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\Menu Start 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\Local Settings 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\Cookies 2013-05-14 14:46:07 -------- d-sh--we C:\Users\Willem\Application Data 2013-05-14 14:46:06 -------- d--h--w- C:\Users\Willem\AppData 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Videos 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Saved Games 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Pictures 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Music 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Links 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Favorites 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Downloads 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Documents 2013-05-14 14:46:06 -------- d-----r- C:\Users\Willem\Desktop 2013-05-14 12:14:57 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2013 2013-05-14 12:14:13 -------- d-----w- C:\ProgramData\Kaspersky Lab 2013-05-14 11:53:30 -------- d-----r- C:\Users\Jolanda\Searches 2013-05-14 11:53:27 -------- d-----r- C:\Users\Jolanda\Contacts 2013-05-14 11:14:48 6FC234AD3752E1267B34FB12BCD6718B 20 --sh--w- C:\Users\Jolanda\ntuser.ini 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\Sjablonen 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\SendTo 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\Recent 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\Netwerkprinteromgeving 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\NetHood 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\Mijn documenten 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\Menu Start 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\Local Settings 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\Cookies 2013-05-14 11:14:48 -------- d-sh--we C:\Users\Jolanda\Application Data 2013-05-14 11:14:48 -------- d--h--w- C:\Users\Jolanda\AppData 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Videos 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Saved Games 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Pictures 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Music 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Links 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Favorites 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Downloads 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Documents 2013-05-14 11:14:48 -------- d-----r- C:\Users\Jolanda\Desktop 2013-05-14 01:43:43 -------- d--h--w- C:\ProgramData\Medion Reminder 2013-05-14 01:43:34 -------- d-----r- C:\Users\Mike\Searches 2013-05-14 01:43:26 -------- d-----r- C:\Users\Mike\Contacts 2013-05-14 01:14:25 6FC234AD3752E1267B34FB12BCD6718B 20 --sh--w- C:\Users\Mike\ntuser.ini 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\Sjablonen 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\SendTo 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\Recent 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\Netwerkprinteromgeving 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\NetHood 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\Mijn documenten 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\Menu Start 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\Local Settings 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\Cookies 2013-05-14 01:14:25 -------- d-sh--we C:\Users\Mike\Application Data 2013-05-14 01:14:25 -------- d--h--w- C:\Users\Mike\AppData 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Videos 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Saved Games 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Pictures 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Music 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Links 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Favorites 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Downloads 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Documents 2013-05-14 01:14:25 -------- d-----r- C:\Users\Mike\Desktop 2013-05-14 01:14:16 -------- d-----w- C:\ProgramData\Kaspersky Rescue Disk 10 2013-05-14 01:14:01 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Memeo 2013-05-14 01:13:14 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MARKEMENT 2013-05-14 01:09:59 -------- d-----w- C:\ProgramData\Google ====== C: exe-files == 2013-05-17 17:06:21 DC4DCF729251D4AEC4AFD0F4F06F9E8F 144384 ----a-w- C:\Program Files (x86)\Nemex\Mouse Recorder Pro 2\MRPlay.exe 2013-05-17 17:06:21 714CCAADC5958BA1CF8185568FF0052D 355840 ----a-w- C:\Program Files (x86)\Nemex\Mouse Recorder Pro 2\Mouse Recorder Pro Editor.exe 2013-05-17 17:06:21 31EAF4162AE65D2ED8916F9B7A675BE1 246784 ----a-w- C:\Program Files (x86)\Nemex\Mouse Recorder Pro 2\Mouse Recorder Pro Calendar.exe 2013-05-17 17:06:21 10C736519C53C5C09739771E884C1C8E 2223616 ----a-w- C:\Program Files (x86)\Nemex\Mouse Recorder Pro 2\Mouse Recorder Pro.exe 2013-05-17 17:06:21 0D9C218B0274C2DCC10759FE60F7C76E 715038 ----a-w- C:\Program Files (x86)\Nemex\Mouse Recorder Pro 2\unins000.exe 2013-05-16 23:07:46 3CEC96DE223E49EAAE3651FCF8FAEA6C 1255736 ----a-w- C:\Windows\System32\Wat\WatAdminSvc.exe 2013-05-16 23:07:46 05E9265E2228799B68DC0F58A94E1AB8 249656 ----a-w- C:\Windows\System32\Wat\WatUX.exe 2013-05-16 21:08:50 9148B04A503FD79ABBAC11DDBB79FBAE 4897636 ----a-w- C:\Backup My Data\Mike\Downloads\Call of Duty Modern Warfare 3 full multiplayer + SP ^^nosTEAM^^\Call of Duty Modern Warfare 3\TeknoMW3.exe 2013-05-16 20:59:29 B40FE65431B18A52E6452279B88954AF 77824 ----a-w- C:\Program Files (x86)\Tunngle\Driver\32bit\tapinstall.exe 2013-05-16 20:59:29 441E4CEAAF340780510C5387632BB636 315800 ----a-w- C:\Program Files (x86)\Tunngle\Launcher.exe 2013-05-16 20:59:29 3A73D1E69B3DFCD7F4FAD4D99540E733 474112 ----a-w- C:\Program Files (x86)\Tunngle\Driver\Helper.exe 2013-05-16 20:59:29 3904D0698962E09DA946046020CBCB17 81920 ----a-w- C:\Program Files (x86)\Tunngle\Driver\64bit\tapinstall.exe 2013-05-16 20:59:29 0F744A57BFA0B92AA5A626CF7DD2A667 746392 ----a-w- C:\Program Files (x86)\Tunngle\TnglCtrl.exe 2013-05-16 20:59:28 ECAD6E289BD2CA5D141398856D9F30F6 715038 ----a-w- C:\Program Files (x86)\Tunngle\unins000.exe 2013-05-16 20:59:28 4E229FEC70EB535A11DE5F0303B64E81 3681176 ----a-w- C:\Program Files (x86)\Tunngle\Tunngle.exe 2013-05-16 20:48:55 A94F77B44F95D2F495E9E8C2B55EF150 3915056 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U4OY3Y28\Tunngle_Setup_v4.4.4.1.exe 2013-05-16 20:24:53 53406E9988306CBD4537677C5336ABA4 889416 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W74YFLW6\dotNetFx40_Full_setup.exe 2013-05-16 19:37:33 E1B5CD5FA83D68A113F5E6DC7A025C1B 135168 ----a-w- C:\Program Files\WinRAR\Uninstall.exe 2013-05-16 19:37:33 B7780A54CA2EF7048D2291B1C9856FDB 287744 ----a-w- C:\Program Files\WinRAR\UnRAR.exe 2013-05-16 19:37:33 4C2A76CEEE9BECFEFFE78265166182BA 426496 ----a-w- C:\Program Files\WinRAR\Rar.exe 2013-05-16 19:37:33 27798085262CD1C91824CE283EDE088B 1230848 ----a-w- C:\Program Files\WinRAR\WinRAR.exe 2013-05-16 19:37:33 10FB3DF2521C7F351121A07AD1263FBE 55296 ----a-w- C:\Program Files\WinRAR\Formats\ace32loader.exe 2013-05-16 19:37:21 8B265CCA436DF81B113B9A43A215E4D9 2023116 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U4OY3Y28\winrar-x64-420nl.exe 2013-05-16 19:36:35 AD039BD721859550F23064D42E7DDA44 1045072 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W74YFLW6\utorrent.exe 2013-05-16 07:11:00 AD039BD721859550F23064D42E7DDA44 1045072 ----a-w- C:\Users\Mike\AppData\Roaming\uTorrent\uTorrent.exe 2013-05-16 04:43:33 85D6E8F735865B502D65D1D91A79E3F3 294912 ----a-w- C:\Windows\System32\browserchoice.exe 2013-05-16 04:33:23 8ABFE00F213F2571498F1B8FD7939A98 229888 ----a-w- C:\Windows\System32\WUDFHost.exe 2013-05-16 04:21:37 E948D1D42DC68923ABD75EEB5BCCD1D3 111448 ----a-w- C:\Windows\System32\consent.exe 2013-05-15 18:11:09 F12FE98405679BDAD148C491D98E5166 38824552 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AH9EHGAJ\FileFormatConverters.exe 2013-05-15 18:09:59 F01904FBA9290526EB487210EE4D6988 25730832 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APM6YYJ3\wordview_nl-nl (1).exe 2013-05-15 18:09:57 2CF6AB5D77623BBE24ACC41D056E3404 18686256 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APM6YYJ3\IE9-Windows7-x86-nld.exe 2013-05-15 18:09:51 F01904FBA9290526EB487210EE4D6988 25730832 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APM6YYJ3\wordview_nl-nl.exe 2013-05-15 09:25:16 F9E229434627B6095AE1FF09BE47CEE8 2502933 ----a-w- C:\Program Files (x86)\Modern Warfare 3\Call of Duty Modern Warfare 3\multi-player.exe 2013-05-15 09:25:16 525BCA421988D21EEDB6A4EF4F275F4E 599379 ----a-w- C:\Program Files (x86)\Modern Warfare 3\Call of Duty Modern Warfare 3\single-player.exe 2013-05-15 09:25:13 2DAD69805CB49896D77C42EEBFB9C1FB 169804 ----a-w- C:\Program Files (x86)\Modern Warfare 3\Call of Duty Modern Warfare 3\MW3 Launcher Update.exe 2013-05-15 09:20:29 591EB56791353EFAA437699ADF5914E5 11683328 ----a-w- C:\Program Files (x86)\Modern Warfare 3\Call of Duty Modern Warfare 3\MW3 Launcher.exe 2013-05-15 09:15:41 96371A6F01B1E5465E0DE0E5BC0C911B 4753480 ---ha-w- C:\Program Files (x86)\Modern Warfare 3\Call of Duty Modern Warfare 3\iw5sp.exe 2013-05-15 09:15:41 06297DBD1E4A35190C3045E1EB2186E7 3944960 ---ha-w- C:\Program Files (x86)\Modern Warfare 3\Call of Duty Modern Warfare 3\iw5mp_server.exe 2013-05-15 09:15:40 E0E6AE848563CF36A255A700EEB5AA5F 5155480 ---ha-w- C:\Program Files (x86)\Modern Warfare 3\Call of Duty Modern Warfare 3\iw5mp.exe 2013-05-15 08:18:23 0D34E40EF5455DF12089C042FAE2EF82 580709420 ----a-w- C:\Backup My Data\Mike\Downloads\Call of Duty Modern Warfare 3 full multiplayer + SP ^^nosTEAM^^\Call of Duty Modern Warfare 3\COD-MW3_patch_2.7.0.9_nosTEAM.exe 2013-05-14 23:39:34 F651D95B5043EFC20A6108A853553984 92160 ----a-w- C:\Windows\System32\SetIEInstalledDate.exe 2013-05-14 23:39:34 D9C10A4A0B3411146E6FC8936B079934 167424 ----a-w- C:\Windows\System32\iexpress.exe 2013-05-14 23:39:34 D57BCCD989555B0D6E47AE0F364DD4D3 327680 ----a-w- C:\Program Files\Internet Explorer\iediagcmd.exe 2013-05-14 23:39:34 CEA304830B4770BDA3572B87D0841848 775232 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe 2013-05-14 23:39:34 AAD90795E84E710543C6C7C2F7048E30 770608 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe 2013-05-14 23:39:34 A197763AA7487807279AB61CD6835CEF 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe 2013-05-14 23:39:34 9D6BD7D1EE59B6D0FD65F1A6DF5706F9 137216 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe 2013-05-14 23:39:34 82D602EBBBA6D08E4691F32269FD3494 12800 ----a-w- C:\Windows\System32\msfeedssync.exe 2013-05-14 23:39:34 6DF2C6438CFF6EFCBBB88AEE01795501 73728 ----a-w- C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-05-14 23:39:34 658E8FEC79A4AB5BFDE032627B5C9667 13824 ----a-w- C:\Windows\System32\mshta.exe 2013-05-14 23:39:34 5915AA67DECA289F7B4AFB686CDB09E9 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-05-14 23:39:34 56E51C26745FF7413514EA4DDF33BC6C 11776 ----a-w- C:\Windows\SysWOW64\msfeedssync.exe 2013-05-14 23:39:34 5397E32E882C0148CEC13D9EACFB7157 222208 ----a-w- C:\Program Files (x86)\Internet Explorer\ielowutil.exe 2013-05-14 23:39:34 52A7D73D5570F757D865DDECD087FB41 138752 ----a-w- C:\Windows\SysWOW64\wextract.exe 2013-05-14 23:39:34 5051BB40FFB2BA4870C0A059CA03294F 1054720 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe 2013-05-14 23:39:34 4BA4770D890B320DAB575B07C7DAF59D 481280 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe 2013-05-14 23:39:34 42758AF68D3C4912C8D8A18088AD2555 51712 ----a-w- C:\Windows\System32\ie4uinit.exe 2013-05-14 23:39:34 40738329209CBE2C9B48F7E30F7C1414 144896 ----a-w- C:\Windows\System32\wextract.exe 2013-05-14 23:39:34 3AB2A38F7EA9E62D176A78FB58761E24 12800 ----a-w- C:\Windows\SysWOW64\mshta.exe 2013-05-14 23:39:34 31E219322B8D765F9F84B80D1D92A07F 173568 ----a-w- C:\Windows\System32\ieUnatt.exe 2013-05-14 23:39:34 3090B888E263E56744F8BFEF3A36D67D 467456 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe 2013-05-14 23:39:34 15CCEAC53648FF7C17AE98923BCD3D75 24576 ----a-w- C:\Program Files (x86)\Internet Explorer\ExtExport.exe 2013-05-14 23:39:34 05277EDA27E5A55CA22AC37DAC47DD23 223744 ----a-w- C:\Program Files\Internet Explorer\ielowutil.exe 2013-05-14 23:39:34 038F76279EC64878A072D988DE13C7B2 150528 ----a-w- C:\Windows\SysWOW64\iexpress.exe 2013-05-14 23:39:09 639774C9ACD063F028F6084ABF5593AD 68608 ----a-w- C:\Windows\System32\taskhost.exe 2013-05-14 23:05:17 011003B4971719DAB789AEAAC866637E 491784 ----a-w- C:\Users\Jolanda\Downloads\incredimail_install.exe 2013-05-14 22:21:11 88363B688206D0C89FB1DD926F074C42 33302880 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\26.0.1410.64\26.0.1410.64_chrome_installer.exe 2013-05-14 22:15:42 8F11F0321ED84B1533FC1384AC71AC8D 59784 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleUpdateBroker.exe 2013-05-14 22:15:42 00F714CA28A01FACB709486D6DA306A8 59784 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleUpdateOnDemand.exe 2013-05-14 22:15:41 C26BB2535C1B20DEAFAEB12634BF4DC9 781592 ----a-w- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleUpdateSetup.exe 2013-05-14 22:15:36 C26BB2535C1B20DEAFAEB12634BF4DC9 781592 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.145\GoogleUpdateSetup.exe 2013-05-14 22:15:36 76B35CB0F3A4E69D6DFF27F542B9F856 216968 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe 2013-05-14 22:15:36 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleUpdate.exe 2013-05-14 22:15:36 4E252E85E5DC31BD645E809222AFAF27 287624 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler64.exe 2013-05-14 19:50:57 D9D7FA5367EAAEF892EE70FFB4B3E719 43832 ----a-r- C:\Program Files (x86)\IncrediMail\Bin\ImSc.exe 2013-05-14 19:50:57 D645B082E49F8655F14C61DB4EEBBA1D 367016 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe 2013-05-14 19:50:57 CE9890FC0855C48B7540A3B7872CB45E 113064 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe 2013-05-14 19:50:57 B1EF295CE776B7D56B6BBF9FD9A77CAA 309672 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImLc.exe 2013-05-14 19:50:57 7A383F5395F1AD8F9C079FAF7193419E 121256 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe 2013-05-14 19:50:57 59A409BAB55E72D33409A8A99F50DB17 264616 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe 2013-05-14 19:50:57 53A0EE142B6D218A7723AB32CA6A6EE5 104872 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImPackr.exe 2013-05-14 19:50:57 1EEA442D956D3774DBBC05EA5F90D2BA 129368 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImBpp.exe 2013-05-14 19:50:57 1EAB5B79CA0251B261E8A7C640D10FC4 68008 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImLpp.exe 2013-05-14 19:50:57 18FB2474F327E558748FADB0AB91B3BC 260520 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImNotfy.exe 2013-05-14 19:50:57 0C93718599A68D1E5A0E76A706874833 26960 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\AE\aeldr.exe 2013-05-14 12:28:28 880C0A44C6449BBC0F04DA973E62CECC 41664 ----a-w- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\patch_g.exe 2013-05-14 01:39:46 9E5D9177660A76FC8DECDC37A91A5B0D 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe 2013-05-14 01:39:35 E7A4DE9232E097829F62755BC0ABE0F2 7680 ----a-w- C:\Windows\SysWOW64\instnm.exe 2013-05-14 01:39:35 990702DB35E3698AFB298D8743DACF53 2048 ----a-w- C:\Windows\SysWOW64\user.exe 2013-05-14 01:39:35 4F0C624E8E2BE4A8DB0820337B15395D 25600 ----a-w- C:\Windows\SysWOW64\setup16.exe 2013-05-14 01:39:34 A236B1646E96AB06BE0F8D592B6D9A0D 245760 ----a-w- C:\Windows\System32\OxpsConverter.exe 2013-05-14 01:39:12 1BCDB508143B517F21BBDAC10F5777BF 338432 ----a-w- C:\Windows\System32\conhost.exe 2013-05-14 01:38:58 F0371DE302FFFF8F086661611BE60848 112640 ----a-w- C:\Windows\System32\smss.exe 2013-05-14 01:38:58 AC3232ED772403D38D64C18CD5A66FBD 5550424 ----a-w- C:\Windows\System32\ntoskrnl.exe 2013-05-14 01:38:58 88355CFE81D381F93C74716DAA803587 3968856 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe 2013-05-14 01:38:58 2DFAB8C3C394E95D262E1325BDA5DFE4 3913560 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe 2013-05-14 01:37:14 85DAA09A98C9286D4EA2BA8D0E644377 559104 ----a-w- C:\Windows\System32\spoolsv.exe 2013-05-14 01:37:14 127AA81343A7C6F665C22CB1293B0A90 67072 ----a-w- C:\Windows\splwow64.exe 2013-05-14 01:26:00 C1C03EA437EDDA8A7D4D8786E5AE6751 57880 ----a-w- C:\Windows\System32\wuauclt.exe 2013-05-14 01:15:31 5D61BE7DB55B026A5D61A3EED09D0EAD 39408 ----a-w- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 2013-05-14 01:15:30 5D4BC124FAAE6730AC002CDB67BF1A1C 194032 ----a-w- C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 2013-05-14 01:14:59 BAD663957F682F95B22C4E83AB49CB52 308368 ----a-w- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarUser_32_38F27E698DCE3952.exe 2013-05-14 01:14:59 924173893B3735741B373CA366C37823 398992 ----a-w- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarUser_64_F5CB933C28B61353.exe 2013-05-14 01:14:59 5CA39C1D83B285427FC20044A14F0F4A 1718808 ----a-w- C:\Program Files (x86)\Google\Google Toolbar\Component\SearchWithGoogleUpdate_0BB4946B2EEAC900.exe 2013-05-14 01:14:59 4BEAF576CB43358C4DB9F45AC7C09CDB 194032 ----a-w- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleUpdaterService_B33FC4DD36A473C6.exe 2013-05-14 01:14:59 4A001CFD8565634EC6891B6BFAB04183 1053840 ----a-w- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_94DDE1EDD1CDF6A3.exe 2013-05-14 01:14:58 2F01944AE2AF9593413A59A070B960BE 3606560 ----a-w- C:\Program Files (x86)\Google\Update\Download\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}\0.0.0.0\googletoolbarinstaller_en64_signed.exe 2013-05-14 01:14:01 1EB8C2F0281CD29CE5904948C2D20C7C 154513 ----a-w- C:\Program Files (x86)\Memeo\AutoBackup\uninstall.exe 2013-05-14 01:13:13 DA705907C80813A63021396176C5BA7E 1166992 ----a-w- C:\Program Files (x86)\Mediathek\Medion Mediathek.exe 2013-05-14 01:13:13 A7180FAC431694D9D94156CA26FE2AAE 6618512 ----a-w- C:\Program Files (x86)\MARKEMENT\PCSUITE SHREDDER\PCSUITE_SHREDDER.exe 2013-05-14 01:13:13 492D76C96EDED263EE69CC7770018DB2 265872 ----a-w- C:\Program Files (x86)\Mediathek\Updater.exe 2013-05-14 01:13:13 01B9FD31C6621858AC14205E2B35EF2F 1197635 ----a-w- C:\Program Files (x86)\MARKEMENT\PCSUITE SHREDDER\unins000.exe 2013-05-14 01:10:35 FF0729002E081668620A681182D63FE6 36864 ----a-w- C:\Windows\System32\wuapp.exe 2013-05-14 01:10:17 BAD663957F682F95B22C4E83AB49CB52 308368 ----a-w- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe 2013-05-14 01:10:17 924173893B3735741B373CA366C37823 398992 ----a-w- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_64.exe 2013-05-14 00:52:06 F02A533F517EB38333CB12A9E8963773 136176 ----atw- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe === C: other files == 2013-05-19 08:27:11 A842B48277A2D8645A37B9F596838D2A 1230 ----a-w- C:\Users\Willem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AT9UBMOE\flXHR[1].vbs 2013-05-16 20:59:29 B7AEE68D2E867CBF69B649B18FCEDBBB 27136 ----a-w- C:\Program Files (x86)\Tunngle\Driver\32bit\tap0901t.sys 2013-05-16 20:59:29 B08740047145B9BCE15BF75CA0F9718A 31232 ----a-w- C:\Windows\System32\drivers\tap0901t.sys 2013-05-16 20:59:29 B08740047145B9BCE15BF75CA0F9718A 31232 ----a-w- C:\Program Files (x86)\Tunngle\Driver\64bit\tap0901t.sys 2013-05-16 04:45:39 AEA0A67275CFBA0E463E00C6E9A1DDAE 54376 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys 2013-05-16 04:45:39 442783E2CB0DA19873B7A63833FF4CB4 785512 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys 2013-05-16 04:33:23 DDA4CAF29D8C0A297F886BFE561E6659 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys 2013-05-16 04:33:23 AB886378EEB55C6C75B4F2D14B6C869F 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys 2013-05-16 04:21:44 AF2E16242AA723F68F461B6EAE2EAD3D 983400 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys 2013-05-16 04:21:44 1F04CFB79DD5FB7694468CE3FB3DCC31 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys 2013-05-16 04:21:35 A11523523B31086DD760C0189C763359 3153920 ----a-w- C:\Windows\System32\win32k.sys 2013-05-15 14:03:34 A842B48277A2D8645A37B9F596838D2A 1230 ----a-w- C:\Users\Jolanda\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\D4WQ0RV7\flXHR[1].vbs 2013-05-15 09:24:20 56067EDB9339FBD2AD75846446DE240B 76 ----a-w- C:\Program Files (x86)\Modern Warfare 3\update-mw3.bat 2013-05-15 09:15:40 81C72E002C2CB487DFC997B762EBFD9D 2029241 ----a-w- C:\Program Files (x86)\Modern Warfare 3\Call of Duty Modern Warfare 3\addon.zip 2013-05-15 08:45:59 A842B48277A2D8645A37B9F596838D2A 1230 ----a-w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AH9EHGAJ\flXHR[1].vbs 2013-05-15 08:41:40 250340E5B28015548C075E2F44330F1B 1262347 ----a-r- C:\Users\Mike\AppData\Local\IM\Identities\{E1A50E67-459A-4230-9DD0-908F73841F7A}\Message Store\Attachments\2d bak.zip 2013-05-15 08:36:34 7383F72A8FC33B9743D47259CDCB8BE2 8423836 ----a-r- C:\Users\Mike\AppData\Local\IM\Identities\{E1A50E67-459A-4230-9DD0-908F73841F7A}\Message Store\Attachments\3D tekening.zip 2013-05-15 03:09:10 A842B48277A2D8645A37B9F596838D2A 1230 ----a-w- C:\Users\Willem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RHJP2CKB\flXHR[1].vbs 2013-05-14 20:57:32 A842B48277A2D8645A37B9F596838D2A 1230 ------w- C:\Users\Willem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\JTHIP3FN\flXHR[1].vbs 2013-05-14 18:27:30 A842B48277A2D8645A37B9F596838D2A 1230 ------w- C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W6UFV76O\flXHR[1].vbs 2013-05-14 12:28:28 FE0F2B2F8B0EA185B572BD3082593600 50088 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\p\klwfp.sys 2013-05-14 12:28:28 FE0F2B2F8B0EA185B572BD3082593600 50088 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\p\klwfp.sys 2013-05-14 12:28:28 A8081ED8D48FA611D11DB97F49A5343D 54104 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\p\kltdi.sys 2013-05-14 12:28:28 A8081ED8D48FA611D11DB97F49A5343D 54104 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\kltdi.sys 2013-05-14 12:28:28 A8081ED8D48FA611D11DB97F49A5343D 54104 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\p\kltdi.sys 2013-05-14 12:28:28 A8081ED8D48FA611D11DB97F49A5343D 54104 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\kltdi.sys 2013-05-14 12:28:28 8AD473279C2EBF81F30BF255344BBF79 194107 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\ChExt\virtkbd.crx 2013-05-14 12:28:28 8AD473279C2EBF81F30BF255344BBF79 194107 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\ChExt\virtkbd.crx 2013-05-14 12:28:28 65F3B81FA285EAB641F5E6EF7AEB984D 613720 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\600\p\klif.sys 2013-05-14 12:28:28 65F3B81FA285EAB641F5E6EF7AEB984D 613720 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\600\klif.sys 2013-05-14 12:28:28 65F3B81FA285EAB641F5E6EF7AEB984D 613720 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\600\p\klif.sys 2013-05-14 12:28:28 65F3B81FA285EAB641F5E6EF7AEB984D 613720 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\600\klif.sys 2013-05-14 12:28:28 5D0104D068AA740A4CD75158652EA986 612696 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\602\q\klif.sys 2013-05-14 12:28:28 5D0104D068AA740A4CD75158652EA986 612696 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\602\q\klif.sys 2013-05-14 12:28:28 2CD36524CA680AD042A1706E1BAA7DD1 89944 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\602\q\klflt.sys 2013-05-14 12:28:28 2CD36524CA680AD042A1706E1BAA7DD1 89944 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\602\q\klflt.sys 2013-05-14 12:28:28 2744EB4FEEF8760B908E9EABBBD5A6A7 89432 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\600\p\klflt.sys 2013-05-14 12:28:28 2744EB4FEEF8760B908E9EABBBD5A6A7 89432 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\600\klflt.sys 2013-05-14 12:28:28 2744EB4FEEF8760B908E9EABBBD5A6A7 89432 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\600\p\klflt.sys 2013-05-14 12:28:28 2744EB4FEEF8760B908E9EABBBD5A6A7 89432 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\600\klflt.sys 2013-05-14 12:28:28 185D21CB8F10CFB351FF65DA88C18BC9 178008 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\p\kneps.sys 2013-05-14 12:28:28 185D21CB8F10CFB351FF65DA88C18BC9 178008 ----a-w- C:\ProgramData\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\kneps.sys 2013-05-14 12:28:28 185D21CB8F10CFB351FF65DA88C18BC9 178008 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\p\kneps.sys 2013-05-14 12:28:28 185D21CB8F10CFB351FF65DA88C18BC9 178008 ----a-w- C:\Backup My Data\All Users\Kaspersky Lab\AVP13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav13\13.0.1.4190\drv64\kneps.sys 2013-05-14 12:14:24 5E6B96CAE1C647C13C1815D02CFA1BD8 785 ----a-w- C:\Program Files\Windows Sidebar\Shared Gadgets\Kaspersky13.Gadget\js\alert.vbs 2013-05-14 12:14:06 2CBD248370721DCAD632DB70D09C5A6D 620128 ----a-w- C:\Windows\System32\drivers\klif.sys 2013-05-14 12:14:06 03D8651EAED0D9084A59355A92B7246F 90208 ----a-w- C:\Windows\System32\drivers\klflt.sys 2013-05-14 01:39:50 B98F8C6E31CD07B2E6F71F7F648E38C0 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys 2013-05-14 01:39:47 92B3172E8C14C1444682F510843A9988 19968 ----a-w- C:\Windows\System32\drivers\usb8023.sys 2013-05-14 01:39:47 760E38053BF56E501D562B70AD796B88 950128 ----a-w- C:\Windows\System32\drivers\ndis.sys 2013-05-14 01:39:47 0E01641D96889BDEB22DE12D30575B08 41472 ----a-w- C:\Windows\System32\drivers\RNDISMP.sys 2013-05-14 01:39:46 9AC4F97C2D3E93367E2148EA940CD2CD 458704 ----a-w- C:\Windows\System32\drivers\cng.sys 2013-05-14 01:39:46 97A7070AEA4C058B6418519E869A63B4 95600 ----a-w- C:\Windows\System32\drivers\ksecdd.sys 2013-05-14 01:39:46 26C43A7C2862447EC59DEDA188D1DA07 151920 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys 2013-05-14 01:39:43 1B16D0BD9841794A6E0CDE0CEF744ABC 45568 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys 2013-05-14 01:39:28 B62A953F2BF3922C8764A29C34A22899 1913192 ----a-w- C:\Windows\System32\drivers\tcpip.sys 2013-05-14 01:39:28 7942B7AC3FF598F8A1736D51ADAF04E8 376688 ----a-w- C:\Windows\System32\drivers\netio.sys 2013-05-14 01:39:28 41C67E4205C606A103DEC8651D0B6FE6 288088 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS 2013-05-14 01:39:22 E61608AA35E98999AF9AAEEEA6114B0A 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys 2013-05-14 01:39:15 E9766131EEADE40A27DC27D2D68FBA9C 75120 ----a-w- C:\Windows\System32\drivers\partmgr.sys 2013-05-14 01:39:06 8F6322049018354F45F05A2FD2D4E5E0 223752 ----a-w- C:\Windows\System32\drivers\fvevol.sys 2013-05-13 21:44:28 32B1905C4BD35F9B9BFBB9058E0B7015 46735 ----a-w- C:\Backup My Data\Karels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0ZEOB39Q\5minutentv[1].zip 2013-05-13 20:03:17 A842B48277A2D8645A37B9F596838D2A 1230 ----a-w- C:\Backup My Data\Willem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V26Z2VI8\flXHR[1].vbs ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-1731901901-3558928101-3403057442-1000\Software\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "IncrediMail"="C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c" [HKEY_USERS\S-1-5-21-1731901901-3558928101-3403057442-1001\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "IncrediMail"="C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c" [HKEY_USERS\S-1-5-21-1731901901-3558928101-3403057442-1002\Software\Microsoft\Windows\CurrentVersion\Run] "IncrediMail"="C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c" "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "USB3MON"="C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" "CLMLServer"="C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" "RemoteControl10"="C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "AMD AVT"="Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml" "AVP"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "LogMeIn Hamachi Ui"="C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "IncrediMail"="C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "MedionReminder"="C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "MedionReminder"="C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe /DeleteRunKey" ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [15-05-2013 17:06] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undertermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [14-05-2013 02:52] C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job --a------ [undertermined Task] C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job --a------ C:\Program Files (x86)\Intel\IntelR ME FW Recovery Agent\bin\Bootstrap.exe [] ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions dchlnpcodkpfdpacogkljefecpegganj - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\urladvisor.crx[15-03-2013 02:10] hghkgaeecgjhjkannahfamoehjmkjail - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\content_blocker_chrome.crx[15-03-2013 02:10] jagncdcchgajhfhijbbhecadmaiegcmh - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\virtkbd.crx[14-05-2013 14:21] Kaspersky URL Advisor - Jolanda - Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj Content Blocker - Jolanda - Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail Virtual Keyboard - Jolanda - Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh Docs - Mike - Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Mike - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Mike - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Mike - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Kaspersky URL Advisor - Mike - Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj Content Blocker - Mike - Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail Virtual Keyboard - Mike - Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh Gmail - Mike - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia Kaspersky URL Advisor - Willem - Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj Content Blocker - Willem - Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail Virtual Keyboard - Willem - Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Reset Google Chrome ====================== C:\users\Jolanda\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\users\Mike\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\users\Willem\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\users\Jolanda\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully C:\users\Mike\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully C:\users\Willem\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Reset IE Proxy ====================== Value(s) before fix: "ProxyEnable"=dword:00000000 Value(s) after fix: "ProxyEnable"=dword:00000000 ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jolanda\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Willem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Willem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jolanda\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CNMTWNRH will be deleted at reboot C:\Users\Jolanda\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CU8V6U3D will be deleted at reboot C:\Users\Jolanda\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\M277OA2L will be deleted at reboot C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7DB401PF will be deleted at reboot C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APM6YYJ3 will be deleted at reboot C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S8X7QQ0N will be deleted at reboot C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U4OY3Y28 will be deleted at reboot C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W74YFLW6 will be deleted at reboot C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XZBMXKRU will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\users\Jolanda\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\users\Mike\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\users\Willem\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Mike\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Jolanda\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CNMTWNRH" not found "C:\Users\Jolanda\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CU8V6U3D" not found "C:\Users\Jolanda\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\M277OA2L" not found "C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7DB401PF" not found "C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APM6YYJ3" not found "C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S8X7QQ0N" not found "C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U4OY3Y28" not found "C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W74YFLW6" not found "C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XZBMXKRU" not found ==== EOF on zo 19-05-2013 at 15:11:27,74 ======================

Stappen heb ik gevolgd en internet explorer werkt ook weer. Dus nu zijn we weer bij de originele problemen.

Kape, na het uitvoeren van de laatste stappen kan ik niks meer. Op alle programma's die ik nu aanklik krijg ik de volgende melding: Er is geprobeerd een ongeldiger bewerking uit te voeren op een registersleutel die is gemarkeerd voor verwijdering. Wat nu te doen aangezien ik ook geen internet kan openen en het logje te posten. - - - Updated - - - Bovenstaande is enkel van toepassing op het account waarop ik de fix heb gedaan. Via een subaccount op de computer kan ik nog wel alles doen. Bij deze het logje: ComboFix 13-05-14.01 - Mike 15-05-2013 9:09.2.8 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.8154.6169 [GMT 2:00] Gestart vanuit: c:\users\Mike\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Mike\Desktop\CFScript.txt AV: Kaspersky Anti-Virus *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5} SP: Kaspersky Anti-Virus *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\Partner c:\programdata\Partner\debug.log c:\programdata\Partner\Partner.exe c:\programdata\Partner\Partner64.dll c:\users\Mike\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk c:\users\Mike\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Service_Partner Service . . (((((((((((((((((((( Bestanden Gemaakt van 2013-04-15 to 2013-05-15 )))))))))))))))))))))))))))))) . . 2013-05-14 23:39 . 2013-05-14 23:39 97280 ----a-w- c:\windows\system32\mshtmled.dll 2013-05-14 23:38 . 2013-05-14 23:38 7680 ----a-w- c:\windows\SysWow64\instnm.exe 2013-05-14 19:51 . 2013-05-14 19:52 -------- d-----w- c:\programdata\IM 2013-05-14 19:51 . 2013-05-14 19:51 -------- d-----w- c:\programdata\IncrediMail 2013-05-14 19:51 . 2013-05-14 19:51 -------- d-----w- c:\program files (x86)\IncrediMail 2013-05-14 19:23 . 2013-05-14 19:23 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi 2013-05-14 18:57 . 2013-05-14 18:57 -------- d-----w- c:\program files (x86)\Common Files\Java 2013-05-14 18:17 . 2013-05-14 18:17 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-05-14 18:17 . 2013-05-14 18:17 -------- d-----w- c:\program files (x86)\Java 2013-05-14 17:28 . 2013-05-14 17:28 -------- d-----w- c:\program files (x86)\Common Files\Skype 2013-05-14 17:28 . 2013-05-14 17:28 -------- d-----r- c:\program files (x86)\Skype 2013-05-14 16:51 . 2013-05-14 17:28 -------- d-----w- c:\programdata\Skype 2013-05-14 14:46 . 2013-05-14 18:38 -------- d-----w- c:\users\Willem 2013-05-14 12:14 . 2013-03-15 00:08 64856 ----a-w- c:\windows\system32\klfphc.dll 2013-05-14 12:14 . 2013-05-14 12:14 -------- d-----w- c:\windows\ELAMBKUP 2013-05-14 12:14 . 2013-05-15 07:37 -------- d-----w- c:\programdata\Kaspersky Lab 2013-05-14 12:14 . 2013-05-14 12:14 -------- d-----w- c:\program files (x86)\Kaspersky Lab 2013-05-14 12:14 . 2013-05-14 12:28 620128 ----a-w- c:\windows\system32\drivers\klif.sys 2013-05-14 12:14 . 2013-05-14 12:28 90208 ----a-w- c:\windows\system32\drivers\klflt.sys 2013-05-14 11:14 . 2013-05-14 11:53 -------- d-----w- c:\users\Jolanda 2013-05-14 02:06 . 2013-05-14 02:06 16486616 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2013-05-14 01:43 . 2013-05-14 01:43 -------- d--h--w- c:\programdata\Medion Reminder 2013-05-14 01:26 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe 2013-05-14 01:26 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll 2013-05-14 01:26 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll 2013-05-14 01:25 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll 2013-05-14 01:17 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll 2013-05-14 01:17 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll 2013-05-14 01:17 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll 2013-05-14 01:15 . 2013-05-14 01:15 -------- d-----w- c:\program files\Google 2013-05-14 01:14 . 2013-05-14 02:06 -------- d-----w- c:\users\Mike 2013-05-14 01:14 . 2013-05-14 01:14 -------- d-----w- c:\programdata\Kaspersky Rescue Disk 10 2013-05-14 01:13 . 2013-05-14 01:13 -------- d-----w- c:\program files (x86)\Common Files\Memeo 2013-05-14 01:13 . 2013-05-14 01:13 -------- d-----w- c:\program files (x86)\Memeo 2013-05-14 01:13 . 2013-05-14 01:13 -------- d-----w- c:\program files (x86)\Mediathek 2013-05-14 01:13 . 2013-05-14 01:13 -------- d-----w- c:\program files (x86)\MARKEMENT 2013-05-14 01:10 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll 2013-05-14 01:10 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe 2013-05-14 00:52 . 2013-05-14 01:15 -------- d-----w- c:\program files (x86)\Google 2013-05-14 00:49 . 2013-05-14 00:49 -------- d-sh--we C:\Documents and Settings 2013-05-14 00:49 . 2013-05-14 00:49 -------- d-----w- C:\Recovery . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-05-14 23:38 . 2013-05-14 23:38 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-05-14 18:17 . 2012-01-25 20:13 866720 ----a-w- c:\windows\SysWow64\npdeployJava1.dll 2013-05-14 18:17 . 2011-07-18 21:13 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll 2013-05-14 12:28 . 2013-03-15 00:08 55056 ----a-w- c:\windows\system32\drivers\kltdi.sys 2013-05-14 12:28 . 2012-08-13 14:49 178448 ----a-w- c:\windows\system32\drivers\kneps.sys 2013-05-14 02:06 . 2011-12-01 21:26 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-05-14 02:06 . 2008-01-01 07:31 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-05-14 02:05 . 2011-03-29 01:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-03-15 00:08 . 2013-03-15 00:08 29528 ----a-w- c:\windows\system32\drivers\klmouflt.sys 2013-03-15 00:08 . 2013-03-15 00:08 29016 ----a-w- c:\windows\system32\drivers\klkbdflt.sys . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2013-05-14 39408] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-04-19 18678376] "IncrediMail"="c:\program files (x86)\IncrediMail\bin\IncMail.exe" [2013-05-14 367016] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X] "USB3MON"="c:\program files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-04-10 291608] "CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2012-04-14 111080] "RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2011-03-30 87336] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-03-09 636032] "AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe" [2013-03-15 356376] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-12-14 2255360] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-04-19 161384] R3 asahci64;asahci64;c:\windows\system32\drivers\asahci64.sys [2012-01-06 49760] R3 ICCS;Intel® Integrated Clock Controller Service - Intel® ICCS;c:\program files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [2011-08-30 160256] R3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-05 331264] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [2010-09-23 129008] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184] S0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;c:\windows\system32\drivers\iusb3hcs.sys [2012-04-10 19224] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2012-08-02 28504] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2013-05-14 55056] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [2013-05-14 178448] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-03-08 235520] S2 CyberLink PowerDVD 10 MS Monitor Service;CyberLink PowerDVD 10 MS Monitor Service;c:\program files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [2011-04-13 70952] S2 CyberLink PowerDVD 10 MS Service;CyberLink PowerDVD 10 MS Service;c:\program files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [2011-04-13 312616] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-14 2466304] S2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-03-07 629984] S2 Intel® ME Service;Intel® ME Service;c:\program files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-03-28 128280] S2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2012-03-28 165144] S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [2011-09-28 25824] S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-03-28 363800] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-02-23 95760] S3 iusb3hub;Intel® USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-04-10 356632] S3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-04-10 789272] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2013-03-15 29016] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-03-15 29528] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2012-02-16 676968] S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 694888] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-05-14 22:21 1642448 ----a-w- c:\program files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe . Inhoud van de 'Gedeelde Taken' map . 2013-05-15 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2008-01-01 02:06] . 2013-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-14 00:52] . 2013-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-14 00:52] . 2013-05-15 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job - c:\program files (x86)\Intel\Intel® ME FW Recovery Agent\bin\Bootstrap.exe [2012-03-27 03:24] . 2012-04-17 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job - c:\program files (x86)\Intel\Intel® ME FW Recovery Agent\bin\Bootstrap.exe [2012-03-27 03:24] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-03-30 170264] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-03-30 398616] "Persistence"="c:\windows\system32\igfxpers.exe" [2012-03-30 439064] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-01-16 12445288] "MedionReminder"="c:\program files (x86)\CyberLink\PowerRecover\Reminder.exe" [2011-05-25 443688] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "MedionReminder"="c:\program files (x86)\CyberLink\PowerRecover\Reminder.exe" [2011-05-25 443688] . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService FontCache . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://google.nl/ mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 212.54.40.25 212.54.35.25 . - - - - ORPHANS VERWIJDERD - - - - . AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe . ************************************************************************** . Voltooingstijd: 2013-05-15 09:40:58 - machine werd herstart ComboFix-quarantined-files.txt 2013-05-15 07:40 ComboFix2.txt 2013-05-15 06:22 . Pre-Run: 782.114.295.808 bytes beschikbaar Post-Run: 781.750.824.960 bytes beschikbaar . - - End Of File - - 8667D32A003217087572190A62CA7561 - - - Updated - - - Het allereerste is verholpen na de computer opnieuw te hebben opgestart. Wel is het zo dat internet explorer niet meer goed functioneerd. Na het opstarten er van krijg ik enkel een wit scherm en worden er geen webpagina's geladen. Google Chrome werkt nog wel naar behoren.

Bedankt voor de snelle reactie Kape Bij deze het logje: ComboFix 13-05-14.01 - Mike 15-05-2013 8:15.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.8154.6302 [GMT 2:00] Gestart vanuit: c:\users\Mike\Desktop\ComboFix.exe AV: Kaspersky Anti-Virus *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5} SP: Kaspersky Anti-Virus *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Jolanda\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk c:\users\Jolanda\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk c:\users\Mike\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk c:\users\Mike\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk c:\users\Willem\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk c:\users\Willem\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk c:\windows\SysWow64\pt c:\windows\SysWow64\pt\AuthFWSnapIn.Resources.dll c:\windows\SysWow64\pt\AuthFWWizFwk.Resources.dll . . (((((((((((((((((((( Bestanden Gemaakt van 2013-04-15 to 2013-05-15 )))))))))))))))))))))))))))))) . . 2013-05-15 06:19 . 2013-05-15 06:19 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-05-14 23:38 . 2013-05-14 23:38 7680 ----a-w- c:\windows\SysWow64\instnm.exe 2013-05-14 19:51 . 2013-05-14 19:52 -------- d-----w- c:\programdata\IM 2013-05-14 19:51 . 2013-05-14 19:51 -------- d-----w- c:\programdata\IncrediMail 2013-05-14 19:51 . 2013-05-14 19:51 -------- d-----w- c:\program files (x86)\IncrediMail 2013-05-14 19:23 . 2013-05-14 19:23 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi 2013-05-14 18:57 . 2013-05-14 18:57 -------- d-----w- c:\program files (x86)\Common Files\Java 2013-05-14 18:17 . 2013-05-14 18:17 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-05-14 18:17 . 2013-05-14 18:17 -------- d-----w- c:\program files (x86)\Java 2013-05-14 17:28 . 2013-05-14 17:28 -------- d-----w- c:\program files (x86)\Common Files\Skype 2013-05-14 17:28 . 2013-05-14 17:28 -------- d-----r- c:\program files (x86)\Skype 2013-05-14 16:51 . 2013-05-14 17:28 -------- d-----w- c:\programdata\Skype 2013-05-14 14:46 . 2013-05-14 18:38 -------- d-----w- c:\users\Willem 2013-05-14 12:14 . 2013-03-15 00:08 64856 ----a-w- c:\windows\system32\klfphc.dll 2013-05-14 12:14 . 2013-05-14 12:14 -------- d-----w- c:\windows\ELAMBKUP 2013-05-14 12:14 . 2013-05-15 05:57 -------- d-----w- c:\programdata\Kaspersky Lab 2013-05-14 12:14 . 2013-05-14 12:14 -------- d-----w- c:\program files (x86)\Kaspersky Lab 2013-05-14 12:14 . 2013-05-14 12:28 620128 ----a-w- c:\windows\system32\drivers\klif.sys 2013-05-14 12:14 . 2013-05-14 12:28 90208 ----a-w- c:\windows\system32\drivers\klflt.sys 2013-05-14 11:14 . 2013-05-14 11:53 -------- d-----w- c:\users\Jolanda 2013-05-14 02:06 . 2013-05-14 02:06 16486616 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2013-05-14 01:43 . 2013-05-14 01:43 -------- d--h--w- c:\programdata\Medion Reminder 2013-05-14 01:26 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe 2013-05-14 01:26 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll 2013-05-14 01:26 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll 2013-05-14 01:25 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll 2013-05-14 01:17 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll 2013-05-14 01:17 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll 2013-05-14 01:17 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll 2013-05-14 01:15 . 2013-05-14 01:15 -------- d-----w- c:\program files\Google 2013-05-14 01:14 . 2013-05-14 02:06 -------- d-----w- c:\users\Mike 2013-05-14 01:14 . 2013-05-14 01:14 -------- d-----w- c:\programdata\Kaspersky Rescue Disk 10 2013-05-14 01:13 . 2013-05-14 01:13 -------- d-----w- c:\program files (x86)\Common Files\Memeo 2013-05-14 01:13 . 2013-05-14 01:13 -------- d-----w- c:\program files (x86)\Memeo 2013-05-14 01:13 . 2013-05-14 01:13 -------- d-----w- c:\program files (x86)\Mediathek 2013-05-14 01:13 . 2013-05-14 01:13 -------- d-----w- c:\program files (x86)\MARKEMENT 2013-05-14 01:13 . 2013-05-15 06:07 -------- d-----w- c:\programdata\Partner 2013-05-14 01:10 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll 2013-05-14 01:10 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe 2013-05-14 00:52 . 2013-05-14 01:15 -------- d-----w- c:\program files (x86)\Google 2013-05-14 00:49 . 2013-05-14 00:49 -------- d-sh--we C:\Documents and Settings 2013-05-14 00:49 . 2013-05-14 00:49 -------- d-----w- C:\Recovery . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-05-14 23:38 . 2013-05-14 23:38 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-05-14 18:17 . 2012-01-25 20:13 866720 ----a-w- c:\windows\SysWow64\npdeployJava1.dll 2013-05-14 18:17 . 2011-07-18 21:13 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll 2013-05-14 12:28 . 2013-03-15 00:08 55056 ----a-w- c:\windows\system32\drivers\kltdi.sys 2013-05-14 12:28 . 2012-08-13 14:49 178448 ----a-w- c:\windows\system32\drivers\kneps.sys 2013-05-14 02:06 . 2011-12-01 21:26 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-05-14 02:06 . 2008-01-01 07:31 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-05-14 02:05 . 2011-03-29 01:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-03-15 00:08 . 2013-03-15 00:08 29528 ----a-w- c:\windows\system32\drivers\klmouflt.sys 2013-03-15 00:08 . 2013-03-15 00:08 29016 ----a-w- c:\windows\system32\drivers\klkbdflt.sys . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2013-05-14 39408] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-04-19 18678376] "IncrediMail"="c:\program files (x86)\IncrediMail\bin\IncMail.exe" [2013-05-14 367016] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X] "USB3MON"="c:\program files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-04-10 291608] "CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2012-04-14 111080] "RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2011-03-30 87336] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-03-09 636032] "AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe" [2013-03-15 356376] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-12-14 2255360] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-04-19 161384] R3 asahci64;asahci64;c:\windows\system32\drivers\asahci64.sys [2012-01-06 49760] R3 ICCS;Intel® Integrated Clock Controller Service - Intel® ICCS;c:\program files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [2011-08-30 160256] R3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-05 331264] R3 Partner Service;Partner Service;c:\programdata\Partner\Partner.exe [2013-05-14 332272] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [2010-09-23 129008] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184] S0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;c:\windows\system32\drivers\iusb3hcs.sys [2012-04-10 19224] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2012-08-02 28504] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2013-05-14 55056] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [2013-05-14 178448] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-03-08 235520] S2 CyberLink PowerDVD 10 MS Monitor Service;CyberLink PowerDVD 10 MS Monitor Service;c:\program files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [2011-04-13 70952] S2 CyberLink PowerDVD 10 MS Service;CyberLink PowerDVD 10 MS Service;c:\program files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [2011-04-13 312616] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-14 2466304] S2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-03-07 629984] S2 Intel® ME Service;Intel® ME Service;c:\program files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-03-28 128280] S2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2012-03-28 165144] S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [2011-09-28 25824] S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-03-28 363800] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-02-23 95760] S3 iusb3hub;Intel® USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-04-10 356632] S3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-04-10 789272] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2013-03-15 29016] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-03-15 29528] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2012-02-16 676968] S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 694888] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-05-14 22:21 1642448 ----a-w- c:\program files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe . Inhoud van de 'Gedeelde Taken' map . 2013-05-15 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2008-01-01 02:06] . 2013-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-14 00:52] . 2013-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-14 00:52] . 2013-05-15 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job - c:\program files (x86)\Intel\Intel® ME FW Recovery Agent\bin\Bootstrap.exe [2012-03-27 03:24] . 2012-04-17 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job - c:\program files (x86)\Intel\Intel® ME FW Recovery Agent\bin\Bootstrap.exe [2012-03-27 03:24] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}] 2013-05-14 01:13 750064 ----a-w- c:\programdata\Partner\Partner64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-03-30 170264] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-03-30 398616] "Persistence"="c:\windows\system32\igfxpers.exe" [2012-03-30 439064] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-01-16 12445288] "MedionReminder"="c:\program files (x86)\CyberLink\PowerRecover\Reminder.exe" [2011-05-25 443688] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "MedionReminder"="c:\program files (x86)\CyberLink\PowerRecover\Reminder.exe" [2011-05-25 443688] . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService FontCache . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://google.nl/ mLocal Page = c:\windows\SysWOW64\blank.htm . - - - - ORPHANS VERWIJDERD - - - - . HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2013-05-15 08:22:30 ComboFix-quarantined-files.txt 2013-05-15 06:22 . Pre-Run: 782.388.273.152 bytes beschikbaar Post-Run: 782.381.957.120 bytes beschikbaar . - - End Of File - - DF1B5F1BDF9EF24BEE74E5431CD45896

Precies zoals je het omschreven hebt. De problemen die ik heb zijn zowel voor als na de recovery van kracht. Bij deze het logje: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:38:10, on 14-5-2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_6_602_180_ActiveX.exe C:\Program Files (x86)\HiJackThis\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.nl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [uSB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-1731901901-3558928101-3403057442-1002\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Willem') O9 - Extra button: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (file missing) O9 - Extra 'Tools' menuitem: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (file missing) O9 - Extra button: Virtueel Toetsenbord - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Controle van URL's - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll O9 - Extra button: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (file missing) (HKCU) O9 - Extra 'Tools' menuitem: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (file missing) (HKCU) O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: Kaspersky Anti-Virus-service (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: CyberLink PowerDVD 10 MS Monitor Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe O23 - Service: CyberLink PowerDVD 10 MS Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Intel® Integrated Clock Controller Service - Intel® ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel® ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: MemeoBackgroundService - Memeo - C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12633 bytes

Excuses voor dubbelpost... kan mijn bericht op een of andere manier niet bewerken. Even een kleine update: Het blijkt dat de computer wel installeerd.. Het duurt echter heel erg lang (30 min tot 1 uur) voordat de setup doorlaad. Het is dus zo dat de computer plots heel erg traag blijkt te zijn. Ik heb de computer ook al in zijn geheel gescand met Kaspersky 2013. (22 dreigingen maar in mijn ogen niks bijzonders) Hopelijk zijn er mensen die mij hiermee kunnen helpen! Edit @post hierboven: Dat was nagenoeg gelijk. ik ga er mee aan de slag

Bij het opstarten heb ik de recovery gedaan, wat in mijn ogen het opschonen van de computer is. Hierbij heeft hij de backup gebruikt die gemaakt is toen wij de computer hebben aangeschafd. Mijn excuses, ik ben nogal slecht in het verwoorden van bepaalde termen. Zo veel verstand heb ik ook niet van computers namelijk. De volgende problemen doen zich voor: - Het vastlopen van de webbrowser - Het niet kunnen installeren van programma's die winstaller gebruiken (Skype lukte namelijk wel en heb hier geen winstaller bij gehad) - Het vastlopen van windows verkenner (C schijf of externe schijf) - Het volledig bevriezen van de explorer - Het afsluiten of afmelden duurt ontzettend lang. (meer dan 10min) - En wellicht nog niet boven water gekomen fouten

Beste allemaal, Na al veelal proberen zoeken en oplossingen proberen te vinden kom ik er toch echt niet meer uit. Het is namelijk zo... Toen ik een tijdje terug Hamachi probeerde te installeren is hij na het open van de winstaller direct weer uitgegaan. Ik heb het idee dat hij de installatie niet doorstart. Hierna ben ik het meerdere malen gaan proberen en telkes na dit voorval loopt de computer vast, en moet ik deze met de power knop uitzetten. Mijn bureaublad bevriest zichzelf helemaal, en ik kan alleen nog met de muis werken. Alleen klikken werkt niet meer. Nu is het zover dat de computer is schoongemaakt en er een backup overheen is gegaan. Na te hebben verwacht dat alle ellende weg zou zijn is het helaas nog steeds aanwezig. Hopelijk kunnen jullie mij helpen met dit probleem, en ik zal zo spoedig mogelijk de dingen doen die jullie mij adviseren.