manneke

22 december 2010

Hallo pc-helpers

ik heb problemen bij het afspelen van filmmatriaal via internetexplorer wanneer deze adope flash player wil gebruiken dit is meestal het geval bij één wanneer ik naar nieuws uitzendingen wil kijken

met window mediaplayer is er geen probleem

de hardware van geluid geeft geen problemen

Kan hier iemand mij mee verder helpen

alvast bedankt

Grts Peter

30 november 2010

veilige modus dat is latijn voor mij hoor Kweezie

daar zul je een beetje uitleg moeten bij geven

grts Peter

29 november 2010

Hallo Kape,

bij het verwijderen van Qoobox krijg ik volgende melding

"kan backEnv niet verwijderen de toegang is geweigerd"

dat kan toch niet de bedoeling zijn hé

grts Peter

---------- Post toegevoegd om 20:11 ---------- Vorige post was om 20:10 ----------

P.S.Voor de rest is alles gelukt

29 november 2010

Hallo Kape

het ziet er goed uit ik denk dat we dit topic kunnen afsluiten als opgelost

waarvoor dank

groetjes peter

28 november 2010

Hallo Kape,

hier het eset logje

grts peter

ESETSmartInstaller@High as CAB hook log:

OnlineScanner.ocx - registred OK

# version=7

# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)

# OnlineScanner.ocx=1.0.0.6211

# api_version=3.0.2

# EOSSerial=664fa2ba89201645a6e13e58a3bbf473

# end=finished

# remove_checked=true

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2010-11-28 08:39:06

# local_time=2010-11-28 09:39:06 (+0100, Romance (standaardtijd))

# country="Belgium"

# lang=1033

# osver=5.1.2600 NT Service Pack 3

# compatibility_mode=512 16777215 100 0 9003847 9003847 0 0

# compatibility_mode=1024 16777175 100 0 12863 12863 0 0

# compatibility_mode=8192 67108863 100 0 3838 3838 0 0

# scanned=71894

# found=8

# cleaned=8

# scan_time=9687

C:\Documents and Settings\All Users\Application Data\ReviverSoft\Registry Reviver\InstallCache\{05B64610-ED45-40AC-89A3-507F6B6A25B9}\Registry Reviver.msi a variant of Win32/SlowPCfighter application (deleted - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\All Users\Application Data\ReviverSoft\Registry Reviver\InstallCache\{C310A779-31CF-427F-9703-42808FAC30D8}\Registry Reviver.msi a variant of Win32/SlowPCfighter application (deleted - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\peter.PC103131904424\Application Data\Uniblue\RegistryBooster\_temp\ub.exe Win32/RegistryBooster application (deleted - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Fighters\SLOW-PCfighter\SLOW-PCfighter.exe a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{6DD67A3D-B07F-4376-B7D0-72D7A6198C4E}\RP4\A0000197.msi a variant of Win32/SlowPCfighter application (deleted - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{6DD67A3D-B07F-4376-B7D0-72D7A6198C4E}\RP4\A0000198.msi a variant of Win32/SlowPCfighter application (deleted - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{6DD67A3D-B07F-4376-B7D0-72D7A6198C4E}\RP4\A0000199.exe Win32/RegistryBooster application (deleted - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{6DD67A3D-B07F-4376-B7D0-72D7A6198C4E}\RP4\A0000200.exe a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

28 november 2010

het is eindelijk gelukt

avg verwijderd met AVG remove .exe ging niet anders ik kreeg hem niet uitgeschakeld

we zullen sebiet den 2011 free wel downloaden

hier het combifix logje

grts Peter

ComboFix 10-11-27.01 - kristel 28/11/2010 15:55:17.2.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1014.695 [GMT 1:00]

Gestart vanuit: c:\documents and settings\kristel.PC103131904424\Bureaublad\ComboFix.exe

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\peter.PC103131904424\Application Data\VAP

c:\documents and settings\peter.PC103131904424\Application Data\VAP\filrewall.log

.

(((((((((((((((((((( Bestanden Gemaakt van 2010-10-28 to 2010-11-28 ))))))))))))))))))))))))))))))

.

2010-11-28 10:30 . 2010-11-28 10:30 -------- d-----w- c:\documents and settings\kristel.PC103131904424\Application Data\Uniblue

2010-11-26 20:26 . 2010-11-26 20:26 -------- d-----w- c:\documents and settings\peter.PC103131904424\Local Settings\Application Data\TVU Networks

2010-11-26 20:26 . 2010-11-26 20:26 -------- d-----w- c:\documents and settings\All Users\Application Data\TVU Networks

2010-11-26 20:26 . 2010-11-26 20:26 -------- d-----w- c:\documents and settings\peter.PC103131904424\LocalLow

2010-11-26 20:26 . 2010-11-26 20:26 -------- d-----w- c:\windows\system32\TVUAx

2010-11-17 11:07 . 2010-11-17 11:07 -------- d-----w- c:\documents and settings\kristel.PC103131904424\Local Settings\Application Data\PC_Drivers_Headquarters

2010-11-14 08:40 . 2010-11-14 08:40 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2010-11-14 08:39 . 2010-11-14 08:43 -------- d-----w- c:\program files\SatHunter

2010-11-06 10:37 . 2010-11-06 10:37 103864 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll

2010-11-03 19:11 . 2010-11-03 19:11 -------- d-----w- c:\documents and settings\kristel.PC103131904424\Local Settings\Application Data\Unity

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-09-18 10:23 . 2004-08-04 08:00 974848 ----a-w- c:\windows\system32\mfc42u.dll

2010-09-18 06:53 . 2004-08-04 08:00 974848 ----a-w- c:\windows\system32\mfc42.dll

2010-09-18 06:53 . 2004-08-04 08:00 954368 ----a-w- c:\windows\system32\mfc40.dll

2010-09-18 06:53 . 2004-08-04 08:00 953856 ----a-w- c:\windows\system32\mfc40u.dll

2010-09-15 03:50 . 2010-08-11 04:55 472808 ----a-w- c:\windows\system32\deployJava1.dll

2010-09-15 01:29 . 2010-08-11 04:55 73728 ----a-w- c:\windows\system32\javacpl.cpl

2010-09-13 07:22 . 2010-09-13 07:22 388096 ----a-r- c:\documents and settings\kristel.PC103131904424\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2010-09-10 05:52 . 2004-08-04 08:00 916480 ----a-w- c:\windows\system32\wininet.dll

2010-09-10 05:52 . 2004-08-04 08:00 43520 ----a-w- c:\windows\system32\licmgr10.dll

2010-09-10 05:52 . 2004-08-04 08:00 1469440 ------w- c:\windows\system32\inetcpl.cpl

2010-09-01 11:52 . 2004-08-04 08:00 285824 ----a-w- c:\windows\system32\atmfd.dll

2010-09-01 07:57 . 2004-08-04 08:00 1852928 ----a-w- c:\windows\system32\win32k.sys

2010-07-29 03:21 . 2010-08-27 23:56 979968 ------w- c:\program files\CCcamControl.exe

2009-03-22 18:25 . 2010-08-27 23:56 514 ----a-w- c:\program files\runCCcamInfoPHP.cmd

2009-01-31 13:54 . 2010-08-27 23:56 32768 ----a-w- c:\program files\Uninstall.exe

2004-05-04 08:53 . 2010-08-27 23:56 1645320 ----a-w- c:\program files\gdiplus.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-07-19 94208]

"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-07-19 77824]

"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-07-19 114688]

"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]

"AGRSMMSG"="AGRSMMSG.exe" [2005-04-13 88209]

"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2005-02-08 159744]

"hpWirelessAssistant"="c:\program files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-11-16 503808]

"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]

"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2005-12-12 94208]

"eabconfg.cpl"="c:\program files\HPQ\Quick Launch Buttons\EabServr.exe" [2005-12-07 409600]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

"Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2005-03-29 233534]

"RecGuard"="c:\windows\SMINST\RecGuard.exe" [2005-10-11 1187840]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\peter.PC103131904424\Menu Start\Programma's\Opstarten\

OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

c:\documents and settings\kristel.PC103131904424\Menu Start\Programma's\Opstarten\

OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

HP Digital Imaging Monitor.lnk - c:\program files\Hp\Digital Imaging\bin\hpqtra08.exe [2007-3-11 210520]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [6/08/2010 23:35 100736]

.

------- Bijkomende Scan -------

.

DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.2.0/GarminAxControl.CAB

.

- - - - ORPHANS VERWIJDERD - - - -

Toolbar-Locked - (no file)

WebBrowser-{7B13EC3E-999A-4B70-B9CB-2617B8323822} - (no file)

HKCU-Run-RegistryBooster - c:\program files\Uniblue\RegistryBooster\launcher.exe

HKLM-RunOnce-AvgRemover - c:\documents and settings\kristel.PC103131904424\Local Settings\Temporary Internet Files\Content.IE5\K2OYRVL6\avgremover[1].exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2010-11-28 16:03

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe????????????n??|?????? ???B?????????????hLC? ??????

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

Voltooingstijd: 2010-11-28 16:05:40

ComboFix-quarantined-files.txt 2010-11-28 15:05

ComboFix2.txt 2010-09-14 08:29

Pre-Run: 71.707.533.312 bytes beschikbaar

Post-Run: 72.690.663.424 bytes beschikbaar

- - End Of File - - 3CB1B6A529336307D77B68AA44716D31

28 november 2010

ik krijg combi fix niet opgestert

ik heb geprobeerd om avg uit te schakelen en zels te verwijderen maar ik krijg volgende meldin wanneer ik dit wil doen

Lokale computer: installatie mislukt

Installatie:

Fout: Actie is mislukt voor registersleutel HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows: registersleutel maken….

Toegang geweigerd.

wat nu?

grts Peter

---------- Post toegevoegd om 15:00 ---------- Vorige post was om 14:58 ----------

ammaai de stress speelt mij parten ik slik mijn woorden half in

sorry hiervoor

grts Peter

28 november 2010

Hallo Kape,

Mijnvirusscanner AVG reageert hier ook op

Maar hoe komt het dat ik net vandaag toch problemen heb?

ik heb net een topic opgestart hieromtrent

Grts Peter

28 november 2010

Hoy PC-Forumhelpers,

mijn account geeft steeds een virusinfektie aan

deze wil mij steeds naar een antivirusprogramma sturen op het I-net

ik heb avg reeds virusscan laten uitvoeren maar geen resultaat

ik kan op mijn account niets meer doen

ik stuur even dit hijackthis logje mee

eveneens een malware logje

alvast bedankt voor eventuele oplossingen

GRTS Peter

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 12:42:02, on 28/11/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\AVG\AVG9\avgwdsvc.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

C:\Program Files\AVG\AVG9\avgemc.exe

C:\Program Files\AVG\AVG9\avgnsx.exe

C:\Program Files\AVG\AVG9\avgcsrvx.exe

C:\Program Files\AVG\AVG9\avgchsvx.exe

C:\Program Files\AVG\AVG9\avgrsx.exe

C:\Program Files\AVG\AVG9\avgcsrvx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\Apoint2K\Apoint.exe

C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\PROGRA~1\AVG\AVG9\avgtray.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Program Files\Apoint2K\Apntex.exe

C:\PROGRA~1\HPQ\SHARED\HPQTOA~1.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"

O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe

O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe

O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [RegistryBooster] "C:\Program Files\Uniblue\RegistryBooster\launcher.exe" delay 20000

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/2.9.2.0/GarminAxControl.CAB

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe

O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe

O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--

End of file - 8689 bytes

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4513

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

28/11/2010 9:27:47

mbam-log-2010-11-28 (09-27-47).txt

Scan type: Quick scan

Objects scanned: 190763

Time elapsed: 26 minute(s), 19 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

21 september 2010

hoy pc-helpers

hier zijn twee foto's wat ik eigenlijk wil doen.

er moet bij de tweede foto een tekst in elke lijn ingevuld worden.

ik moet dit doen door in het scherm van de eerste foto naar elke lette te gaan en daarop klikken

zou er geen progje zijn waar ik de tekst reeds op voorhand maak met de pc en daarna met een usb stick overbreng

dit is eigenlijk mijn vraag

alvast bedankt

grts Peter

19 september 2010

bestaat er dan misschien een ander progje voor Kweezie?

---------- Post toegevoegd om 15:16 ---------- Vorige post was om 15:02 ----------

Kweezie,

ik zal morgen proberen een foto mee door te sturen zodat jij weet wat ik eigenlijk wil kunnen doen

maar het lukt niet vandaag pillen en reserve pillen van fototoestel zijn plat (dom hé)

grts Peter

19 september 2010

hoy Kweezie Wabbit,

Een sateliet ontvanger

deze kan ook een server of client zijn wanneer deze aan een netwerk (huub) hangt

hij heeft zelfs een eigen ip-adress in dit geval 192.168.enz...

Grts Peter

19 september 2010

beste pc-helpers

ik weet niet of dit een topic is voor julie?

maar ik probeer maar hé

ik heb volgende vraag

ik wil mijn laptop en mijn satontvanger die samen aan de router hangen te laten communiceren met elkaar met het programma filezilla maar ik krijg het niet gefikst

is er iemand hier op dit forum die mij daarmee kan verder helpen

alvast bedankt

grts peter

19 september 2010

Beste pc-helpers

Nadat mijn vrouw haar pasw. veranderd heeft,heefft ze nu reeds na bijna 3 weken geen probs. meer gehad met haar hotmail adres

dus wij kunnen dit topic als opgelost beschouwen

bedankt aan allen die hier raad gegeven hebben om dit op te lossen

grts Kristel & Peter

14 september 2010

ok kape,

alles uitgevoerd zoals in het laatste bericht beschreven

hartelijk bedankt voor het hele pc-helpteam

doe zo verder topforum

we gaan dit topic als opgelost beschouwen

grts Peter

14 september 2010

hoy Kape,

het is gelukt alles werkt terug bij mijn account

ff een vraagje wat doe ik met combofix?

hier volgd het logje

grts Peter

ComboFix 10-09-13.02 - kristel 14/09/2010 10:18:19.1.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1014.529 [GMT 2:00]

Gestart vanuit: c:\documents and settings\kristel.PC103131904424\Bureaublad\ComboFix.exe

AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\peter.PC103131904424\Local Settings\Application Data\rhrlbdrnw

c:\documents and settings\peter.PC103131904424\Local Settings\Application Data\rhrlbdrnw\drqohbwuqiw.exe

c:\program files\autorun.inf

c:\windows\Logs\logg.dat

D:\Autorun.inf

.

(((((((((((((((((((( Bestanden Gemaakt van 2010-08-14 to 2010-09-14 ))))))))))))))))))))))))))))))

.

2010-09-14 08:13 . 2010-09-14 08:13 -------- d-----w- c:\documents and settings\kristel.PC103131904424\Application Data\AVG9

2010-09-13 07:22 . 2010-09-13 07:22 388096 ----a-r- c:\documents and settings\kristel.PC103131904424\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2010-09-13 06:39 . 2010-09-13 06:39 -------- d-----w- c:\documents and settings\kristel.PC103131904424\Application Data\Malwarebytes

2010-09-03 06:31 . 2010-09-08 17:41 -------- d--h--r- c:\documents and settings\peter.PC103131904424\Onlangs geopend

2010-08-31 14:31 . 2010-08-31 14:31 -------- d-----w- c:\documents and settings\peter.PC103131904424\Application Data\Malwarebytes

2010-08-31 14:30 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-08-31 14:30 . 2010-08-31 14:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2010-08-31 14:30 . 2010-08-31 14:31 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-08-31 14:30 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-08-31 05:59 . 2010-08-31 05:59 664 ----a-w- c:\windows\system32\d3d9caps.dat

2010-08-30 09:32 . 2010-08-30 09:41 -------- d-----w- c:\documents and settings\peter.PC103131904424\Application Data\VAP

2010-08-29 12:57 . 2010-08-29 12:57 -------- d-----w- c:\program files\server

2010-08-29 12:57 . 2010-08-29 12:57 -------- d-----w- c:\program files\htdocs

2010-08-29 12:57 . 2010-08-29 12:57 -------- d-----w- c:\program files\dlls

2010-08-29 09:23 . 2010-08-29 09:23 -------- d-----w- c:\documents and settings\peter.PC103131904424\Application Data\gtopala

2010-08-27 23:56 . 2010-08-29 13:06 65613 ----a-w- c:\program files\uninstall.dat

2010-08-27 23:56 . 2010-07-29 03:21 979968 ------w- c:\program files\CCcamControl.exe

2010-08-27 23:56 . 2009-03-22 18:25 514 ----a-w- c:\program files\runCCcamInfoPHP.cmd

2010-08-27 23:56 . 2009-01-31 13:54 32768 ----a-w- c:\program files\Uninstall.exe

2010-08-27 23:56 . 2004-05-04 08:53 1645320 ----a-w- c:\program files\gdiplus.dll

2010-08-26 02:08 . 2010-08-26 02:08 -------- d-sh--w- c:\documents and settings\kristel.PC103131904424\IECompatCache

2010-08-24 14:58 . 2010-08-31 08:40 -------- d-----w- c:\program files\SetEditVenton

2010-08-18 06:33 . 2010-08-18 06:33 -------- d-----w- c:\windows\system32\XPSViewer

2010-08-18 06:33 . 2010-08-18 06:33 -------- d-----w- c:\program files\Reference Assemblies

2010-08-18 06:33 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll

2010-08-18 06:32 . 2008-07-06 12:06 89088 ------w- c:\windows\system32\dllcache\filterpipelineprintproc.dll

2010-08-18 06:32 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll

2010-08-18 06:32 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\dllcache\xpsshhdr.dll

2010-08-18 06:32 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll

2010-08-18 06:32 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe

2010-08-18 06:32 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe

2010-08-18 06:32 . 2010-08-18 06:33 -------- d-----w- C:\ca8d73f111abec1ab0c133

2010-08-18 06:32 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll

2010-08-18 06:32 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\dllcache\xpssvcs.dll

2010-08-16 18:13 . 2010-08-24 14:56 -------- d-----w- c:\documents and settings\peter.PC103131904424\Application Data\mIRC

2010-08-16 17:29 . 2010-08-16 17:29 -------- d-----w- c:\program files\Uniblue

2010-08-16 12:53 . 2010-08-16 12:53 388096 ----a-r- c:\documents and settings\peter.PC103131904424\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2010-08-16 12:53 . 2010-08-16 12:53 -------- d-----w- c:\program files\Trend Micro

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-08-28 00:01 . 2010-08-27 23:52 6019 ------w- c:\program files\cardshare-forum-logo.jpg

2010-08-20 15:24 . 2010-08-06 22:12 83816 ----a-w- c:\documents and settings\peter.PC103131904424\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2010-08-18 14:35 . 2004-09-08 11:27 92034 ----a-w- c:\windows\system32\perfc013.dat

2010-08-18 14:35 . 2004-09-08 11:27 512434 ----a-w- c:\windows\system32\perfh013.dat

2010-08-18 06:33 . 2009-09-17 19:20 -------- d-----w- c:\program files\MSBuild

2010-08-14 19:20 . 2010-08-14 19:20 -------- d-----w- c:\documents and settings\All Users\Application Data\UAB

2010-08-14 19:17 . 2010-08-14 19:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Driver Whiz

2010-08-14 19:14 . 2010-08-14 19:14 -------- d-----w- c:\program files\Driver Whiz

2010-08-14 14:40 . 2010-08-14 14:40 -------- d-----w- c:\documents and settings\peter.PC103131904424\Application Data\Uniblue

2010-08-13 03:42 . 2010-08-13 03:42 61440 ----a-w- c:\documents and settings\kristel.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2b7234a9-n\decora-sse.dll

2010-08-13 03:42 . 2010-08-13 03:42 12800 ----a-w- c:\documents and settings\kristel.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2b7234a9-n\decora-d3d.dll

2010-08-13 03:42 . 2010-08-13 03:42 503808 ----a-w- c:\documents and settings\kristel.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-6f2bcd9f-n\msvcp71.dll

2010-08-13 03:42 . 2010-08-13 03:42 499712 ----a-w- c:\documents and settings\kristel.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-6f2bcd9f-n\jmc.dll

2010-08-13 03:42 . 2010-08-13 03:42 348160 ----a-w- c:\documents and settings\kristel.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-6f2bcd9f-n\msvcr71.dll

2010-08-12 19:15 . 2010-08-12 19:15 -------- d-----w- c:\program files\CCleaner

2010-08-12 19:00 . 2010-08-12 19:00 -------- d-----w- c:\program files\7-Zip

2010-08-12 05:36 . 2006-08-11 10:38 -------- d-----w- c:\program files\Google

2010-08-11 16:52 . 2009-09-17 19:13 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help

2010-08-11 04:55 . 2010-08-11 04:55 503808 ----a-w- c:\documents and settings\peter.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-3eaa7a3a-n\msvcp71.dll

2010-08-11 04:55 . 2010-08-11 04:55 499712 ----a-w- c:\documents and settings\peter.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-3eaa7a3a-n\jmc.dll

2010-08-11 04:55 . 2010-08-11 04:55 348160 ----a-w- c:\documents and settings\peter.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-3eaa7a3a-n\msvcr71.dll

2010-08-11 04:55 . 2010-08-11 04:55 61440 ----a-w- c:\documents and settings\peter.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-1e868ecc-n\decora-sse.dll

2010-08-11 04:55 . 2010-08-11 04:55 12800 ----a-w- c:\documents and settings\peter.PC103131904424\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-1e868ecc-n\decora-d3d.dll

2010-08-11 04:55 . 2006-08-11 10:38 -------- d-----w- c:\program files\Common Files\Java

2010-08-11 04:55 . 2010-08-11 04:55 423656 ----a-w- c:\windows\system32\deployJava1.dll

2010-08-09 18:35 . 2010-08-09 18:35 -------- d-----w- c:\documents and settings\kristel.PC103131904424\Application Data\HP

2010-08-09 18:16 . 2009-09-17 18:50 -------- d-----w- c:\program files\Windows Live

2010-08-09 18:15 . 2010-08-09 18:15 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition

2010-08-09 18:09 . 2010-08-08 14:30 83816 ----a-w- c:\documents and settings\kristel.PC103131904424\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2010-08-09 15:36 . 2006-08-11 10:38 -------- d-----w- c:\program files\Microsoft Works

2010-08-09 15:23 . 2010-08-09 15:23 -------- d-----w- c:\documents and settings\peter.PC103131904424\Application Data\HP

2010-08-07 18:23 . 2009-09-17 16:59 -------- d-----w- c:\program files\Windows Media Connect 2

2010-08-07 16:52 . 2004-09-08 11:25 77315 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat

2010-08-07 08:26 . 2009-09-17 19:39 -------- d-----w- c:\program files\Eset

2010-08-07 08:08 . 2010-08-07 08:08 12536 ----a-w- c:\windows\system32\avgrsstx.dll

2010-08-07 08:08 . 2010-08-07 08:08 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys

2010-08-07 08:08 . 2010-08-07 08:08 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys

2010-08-07 08:08 . 2010-08-07 08:08 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys

2010-08-07 08:02 . 2010-08-07 08:02 -------- d-----w- c:\program files\AVG

2010-08-07 08:02 . 2010-08-07 08:02 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9

2010-08-07 07:50 . 2006-08-11 10:38 -------- d-----w- c:\program files\Common Files\Symantec Shared

2010-08-07 07:49 . 2006-08-11 10:38 -------- d-----w- c:\program files\Symantec

2010-08-07 07:48 . 2006-08-11 10:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec

2010-08-07 04:56 . 2006-08-11 10:38 -------- d-----w- c:\program files\Hewlett-Packard

2010-08-07 04:56 . 2006-08-11 10:38 -------- d-----w- c:\program files\Easy Internet signup

2010-08-07 04:56 . 2006-08-11 10:38 -------- d-----w- c:\program files\Common Files\SureThing Shared

2010-08-07 04:56 . 2006-08-11 10:38 -------- d-----w- c:\program files\Common Files\Sonic Shared

2010-08-07 04:55 . 2006-08-11 10:38 -------- d-----w- c:\program files\Common Files\LightScribe

2010-08-07 04:55 . 2006-08-11 10:38 -------- d-----w- c:\program files\Common Files\HP

2010-08-07 04:55 . 2006-08-11 10:38 -------- d-----w- c:\program files\Apoint2K

2010-08-07 04:52 . 2010-08-08 14:30 -------- d-----w- c:\documents and settings\kristel.PC103131904424\Application Data\Symantec

2010-08-07 04:52 . 2006-08-11 10:38 -------- d-----w- c:\documents and settings\All Users\Application Data\hpqwmi

2010-08-06 22:35 . 2010-05-23 05:52 -------- d-----w- c:\program files\Mobistar Internet Everywhere

2010-08-06 22:15 . 2010-08-06 22:12 143 ----a-w- c:\documents and settings\peter.PC103131904424\Local Settings\Application Data\fusioncache.dat

2010-08-06 22:14 . 2010-08-06 22:12 1721 --sha-r- c:\windows\system32\drivers\103C_HP_NTBK_Pavilion dv4000 (EW878EA#UUG)_YN_0Pavi_Q2CE6140CQ4_E410235A42_46_I309D_SHP_V52.24_BF.12_T060120_WXH2_L413_M1015_J100_7Intel_8Pentium M_91.8_#060218_N10EC8139_(EW878EA#UUG)_XMOBILE_CN10_Z8086266D_2.MRK

2010-08-06 21:48 . 2006-08-11 10:38 -------- d-----w- c:\program files\HPQ

2010-08-04 09:20 . 2010-08-04 09:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Fighters

2010-08-04 09:19 . 2010-08-04 09:19 -------- d-----w- c:\program files\Fighters

2010-08-03 11:26 . 2010-08-03 11:26 -------- d-----w- c:\documents and settings\All Users\Application Data\ReviverSoft

2010-07-30 03:49 . 2010-08-27 23:56 4286 ----a-w- c:\program files\logo.ico

2010-06-30 12:33 . 2004-08-04 08:00 149504 ----a-w- c:\windows\system32\schannel.dll

2010-06-24 12:27 . 2004-08-04 08:00 916480 ----a-w- c:\windows\system32\wininet.dll

2010-06-24 09:02 . 2004-08-04 08:00 1852032 ----a-w- c:\windows\system32\win32k.sys

2010-06-24 03:01 . 2010-08-27 23:56 6646 ----a-w- c:\program files\pms_config.ini

2010-06-21 15:27 . 2004-08-04 08:00 354304 ----a-w- c:\windows\system32\drivers\srv.sys

2010-06-17 14:03 . 2004-08-04 08:00 80384 ----a-w- c:\windows\system32\iccvid.dll

2006-08-11 05:05 . 2009-09-18 01:38 0 --sha-w- c:\windows\SMINST\HPCD.SYS