Ga naar inhoud

My start by incredibar


Aanbevolen berichten

hier de file:

ComboFix 12-07-14.01 - Melanouchii 17/07/2012 11:51:37.2.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.4044.1907 [GMT 2:00]

Gestart vanuit: c:\users\Melanouchii\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Melanouchii\Desktop\CFScript.txt

AV: Lavasoft Ad-Aware *Disabled/Updated* {445B48C3-0FA4-6B16-8F07-6506F305D800}

FW: Lavasoft Ad-Aware *Disabled* {7C60C9E6-45CB-6A4E-A458-CC330DD69F7B}

SP: Lavasoft Ad-Aware *Disabled/Updated* {FF3AA927-299E-6498-B5B7-5E74888292BD}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\MELANO~1\AppData\Local\Temp\1.tmp\F_IN_BOX.dll

c:\users\Melanouchii\AppData\Local\Temp\1.tmp\F_IN_BOX.dll

c:\windows\system32\drivers\etc\lmhosts

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{00178E49-0877-45E8-85F0-4B70C41A63D8}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{16987968-8EA3-4B18-8C62-EE0EA6343DA4}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{206942E3-1EBE-4125-B41B-0CC68B6E3641}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{29BE45A0-72DE-4595-B332-62A66039F144}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{2A88625A-DB7D-4EC4-B3F6-E81C53B9E23A}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{3300649B-65BC-49BA-AC70-49503D6C3F40}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{372450D8-E446-4396-A024-754735BF1FA6}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{3C711991-4AAA-4B18-89C1-C093CA2903E1}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{5063C6F8-0C9B-4DBD-9601-6C260FBC5E83}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{5577B3C8-77A1-4D87-82D9-B848189FDF43}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{65CEB96B-52D3-4648-A6F6-C6DF2CCC63D0}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{65D681D2-A38C-480C-BC40-138D7BE3ED14}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{6EDDC5CB-8A09-47E2-A615-52E13D8F6092}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{701BBA17-7E37-42C8-BAA0-5A9E94BFEE5A}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{75CFD590-20D5-41A7-9110-1042CE01A886}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{86403C45-6DDA-446D-B9CE-6E673A2FF053}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{A5736BD4-8049-4180-B239-0191BF7AA6D4}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{AB7E04CB-D21F-4AAB-AE33-678C946C43F6}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{AED1B021-1E7B-4A37-95D4-F80574B460FD}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{BDB15A4D-8D08-4C9C-BF94-DD0C8C439185}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{BE50A4C6-1642-455B-B68F-328E19680DF7}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{C4E60B79-D12A-4B46-AEC2-E92738BF589E}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{F006FCA4-3FD8-4C7D-AD24-0DEE2F9F6D78}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{F4B0FF68-B966-44B0-8C15-0A5BD4808030}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{F894FE3A-D164-4313-BBF1-0DE814AB69AA}

c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{FC7716F9-BE56-4700-95FE-9287BE0672CA}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{0EF00576-2CC2-4EF6-BAFE-A1AB9E6DFF7A}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{14AE2DED-6188-4BC5-ADDB-41A8180AF5F8}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{14EFB7AA-C9CD-4095-B583-ED272FF4EF63}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{16509ACB-2CED-4C25-9C4E-4D86A5499EF7}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{1D102123-E2BC-4423-B8DD-963E97BA6BF6}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{1E2608C0-6E50-4EA5-9B44-27513F458360}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{285B725A-013B-41FD-BA35-C1C9CECE56FE}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{2D144425-16E8-462F-AAB8-73FAB0CF578E}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{31B501F5-709B-4468-9950-510AC3B83239}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{40C8C19C-3FFF-4E9B-884A-EB65DAB17D80}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{49009819-5D30-4F1A-A325-B8185916F24D}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{581FF369-1154-48DE-AF2D-6AC8B2138452}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{5E187C28-4717-4DBB-93F0-3F84B58EA001}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{664F43AC-2085-4C38-A9EE-CB663C8C8D0F}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{70A570AE-79EC-4C4A-A607-183CD87DDE90}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{7D1A8FFA-A3B1-41E5-B4E8-C6D118B1C852}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{7E4D4EC1-9D4C-4407-BBE4-6642B8605751}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{84A4193C-4376-47C3-ADCD-115D4261D1D7}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{868D3E5B-54DF-4B86-834C-642213062BE6}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{9D694B9B-C212-4B11-BBE4-B4CEBAF69A3D}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{9FBFE876-9C42-4475-8C02-A6EDD9474EE6}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{AD2B10DB-F9BB-4F75-A874-A17E0B00DD5D}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{B86A27CC-6B11-4465-8B4A-4D889E789B2E}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{BBB711F5-8882-4D48-9C4B-CD091B4FDE5C}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{D4D3C6C7-FDF9-4022-A91A-1F855BCFCC3E}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{D61BD7F6-69EC-48F1-BB50-FA4B875F9D59}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{F19C0118-1AC9-4728-9FE4-C3547F90CA5D}

c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{FE38B4E4-17B0-481F-800F-2AB6DE3D9B02}

c:\windows\SysWow64\{63AEB89A-7CA0-4707-A250-8D7752C5EEE9}{275F547B-B079-442C-86EF-A2987B4FE7FF}

c:\windows\SysWow64\{63AEB89A-7CA0-4707-A250-8D7752C5EEE9}{2A0B635D-E8FB-4EC2-A4E8-74493086FA46}

c:\windows\SysWow64\{63AEB89A-7CA0-4707-A250-8D7752C5EEE9}{2B1C7218-D06C-4EFF-8533-B8A27C934069}

c:\windows\SysWow64\{63AEB89A-7CA0-4707-A250-8D7752C5EEE9}{E5DE4455-9076-464F-832D-CB367E117B6B}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{04B9D14F-2DC4-4BF4-8003-3AA45D4B84CF}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{0BC35C56-29A1-4EEC-BE0F-8B65D3F0A7BD}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{3AEE14CC-71C3-483B-89CE-50E6944C3766}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{43DB6A53-EFA6-4A54-B0AA-5943D101E0A1}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{4EDB113E-9078-4D5D-83A9-F8F2A135C13E}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{684E75CC-7EA7-4354-BFC2-D3C31CC26371}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{6DA9FD93-6F6D-47A6-9230-390A6621246B}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{6F613DA9-53FE-4658-A0CC-3527596B201D}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{6F6FB4D7-E936-49A2-A569-7A111D95AB63}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{6F9195C4-726F-4E57-9CC3-239D323306DD}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{7C04B7C6-F8C4-4EE7-8A34-AD4FAF88CB00}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{805886ED-35E0-477B-8E3B-5BDD4035DA0D}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{80D0D2AA-B0C4-4BAC-8691-C01D6ABE1FEE}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{909161BC-7FD7-4860-A970-EDFBC9B5277A}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{9D7BE0F3-6A45-42D9-A21B-557D27EC2FC5}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{9EFDFEDF-921F-417B-89A7-03D67E5F7399}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{A715A925-4845-40B4-81F6-6F24DB88FAB9}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{AF5FADDF-7739-41CB-AB15-A3463EBDA6AE}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{BA0A8C0A-4080-484A-8593-1CF8503017E8}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{C1571D79-A054-4072-90C9-154F6569BC63}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{C2EF42DD-6447-4490-9066-1E7915CA2C92}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{E3F1F5DC-9EBC-433D-BA70-F1ABBD731363}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{E4584ECB-7A82-4B93-8DB1-A86B442AEEC7}

c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{FCF78AAF-FE70-4E55-A78D-2A9DF671BC9A}

c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{06CB74F2-512F-4F33-B7F7-5A916F1844D2}

c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{2C6DD0F2-3687-4F2F-8FEF-388B126B52A1}

c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{6D60ADF7-5736-4D71-92D6-9E6F56291626}

c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{A08EDB72-EE3B-4721-A8FF-DA69466879FE}

c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{A2F9F2ED-1486-4555-9C9D-FD8AEA69D93D}

c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{C0343F0E-E9E2-4C81-9202-AD8A3ECA607F}

c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{D0F31256-1DA4-4A5D-B75D-FE6040A5F228}

c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{E4BEDD39-E8E3-4B41-88F4-9521153D1629}

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-06-17 to 2012-07-17 ))))))))))))))))))))))))))))))

.

.

2012-07-17 10:07 . 2012-07-17 10:07 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-07-17 08:18 . 2012-07-17 08:18 -------- d-----w- c:\users\Melanouchii\AppData\Roaming\pdfforge

2012-07-17 08:18 . 2012-06-15 04:51 95232 ----a-w- c:\windows\system32\pdfcmon.dll

2012-07-17 08:18 . 2012-07-17 08:19 -------- d-----w- c:\program files (x86)\PDFCreator

2012-07-17 07:54 . 2012-07-17 08:12 -------- d-----w- C:\Belast

2012-07-17 07:52 . 2012-07-15 15:41 54728 ----a-w- c:\windows\system32\drivers\Soluto.sys

2012-07-17 07:52 . 2012-07-17 07:52 -------- d-----w- c:\program files\Soluto

2012-07-17 07:51 . 2012-07-17 08:16 -------- d-----w- c:\programdata\Soluto

2012-07-17 06:25 . 2012-07-17 06:25 -------- d-----w- C:\Softwarenetz

2012-07-17 06:25 . 2012-07-13 11:18 181856 ----a-w- c:\windows\snui.exe

2012-07-16 16:23 . 2012-07-16 16:23 -------- d-----w- c:\users\Melanouchii\AppData\Local\Christofer_Persson

2012-07-16 16:18 . 2012-07-16 16:18 -------- d-----w- c:\users\Melanouchii\AppData\Roaming\Christofer Persson

2012-07-16 16:17 . 2012-07-16 16:17 -------- d-----w- c:\program files (x86)\Kantaris

2012-07-16 11:05 . 2012-07-16 11:05 -------- d-----w- c:\programdata\AVG Secure Search

2012-07-16 10:25 . 2012-07-16 10:25 -------- d-----w- c:\users\Melanouchii\AppData\Local\adaware

2012-07-16 10:25 . 2012-07-16 10:25 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection

2012-07-16 10:24 . 2011-12-19 10:44 60536 ----a-w- c:\windows\system32\drivers\sbhips.sys

2012-07-16 10:24 . 2011-12-19 10:44 256632 ----a-w- c:\windows\system32\drivers\SbFw.sys

2012-07-16 10:24 . 2011-09-29 10:16 119416 ----a-w- c:\windows\system32\drivers\SbFwIm.sys

2012-07-16 10:24 . 2011-12-19 11:21 45936 ----a-w- c:\windows\system32\sbbd.exe

2012-07-16 10:24 . 2012-07-16 10:30 -------- d-----w- c:\program files (x86)\Ad-Aware Antivirus

2012-07-16 10:23 . 2012-07-16 10:30 -------- d-----w- c:\users\Melanouchii\AppData\Roaming\Ad-Aware Antivirus

2012-07-15 08:04 . 2012-07-15 08:05 -------- d-----w- c:\program files\CCleaner

2012-07-15 07:56 . 2012-07-03 11:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-07-14 21:55 . 2012-07-14 21:55 -------- d-----w- c:\program files\Symantec

2012-07-14 21:50 . 2012-07-14 21:50 -------- d-----w- c:\programdata\PCSettings

2012-07-14 12:09 . 2012-07-14 12:09 -------- d-----w- c:\users\Melanouchii\AppData\Roaming\Malwarebytes

2012-07-14 12:09 . 2012-07-14 19:47 -------- d-----w- c:\programdata\Malwarebytes

2012-07-14 12:09 . 2012-07-15 07:56 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2012-07-14 10:03 . 2012-07-14 10:03 15712 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fce56b6a1cd61a702\MeshBetaRemover.exe

2012-07-14 10:03 . 2012-07-14 10:03 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fc3ecb171cd61a701\DSETUP.dll

2012-07-14 10:03 . 2012-07-14 10:03 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fc3ecb171cd61a701\DXSETUP.exe

2012-07-14 10:03 . 2012-07-14 10:03 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fc3ecb171cd61a701\dsetup32.dll

2012-07-14 08:16 . 2012-07-14 08:16 -------- d-----w- c:\program files (x86)\Perion

2012-07-14 04:16 . 2012-07-14 04:19 -------- d-----w- c:\users\Melanouchii\AppData\Roaming\YourFileDownloader

2012-07-14 04:08 . 2012-06-12 03:08 3148800 ----a-w- c:\windows\system32\win32k.sys

2012-07-14 03:58 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe

2012-07-14 03:33 . 2012-06-02 12:52 754808 ----a-w- c:\program files\Internet Explorer\iexplore.exe

2012-07-13 20:12 . 2012-07-13 20:12 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{A828CFC4-0698-473B-876A-4FAE62CFD75E}

2012-07-13 20:12 . 2012-07-13 20:12 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{ABD478C0-7603-4043-97ED-0E955239BF9F}

2012-07-13 20:12 . 2012-07-13 20:12 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{5FC21785-DC0A-42F7-B961-304F32706C13}

2012-07-13 20:11 . 2012-07-13 20:11 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{B455DB40-4ACE-4F4E-B48D-800F041984D7}

2012-07-13 20:10 . 2012-07-13 20:10 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{AC893BA5-7750-4CF6-AD5E-8522759CE86E}

2012-07-13 20:10 . 2012-07-13 20:10 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{345B82B4-3DFB-4F85-B316-73C3325E2420}

2012-07-13 20:08 . 2012-07-13 20:08 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{76412A1A-35A3-4B50-AC08-3FB9B0EB9E36}

2012-07-13 20:08 . 2012-07-13 20:08 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{36740C57-0D9D-4CA3-B612-4CEC440853BA}

2012-07-13 20:08 . 2012-07-13 20:08 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{D71DCCAB-C7EC-4F28-AF27-BE400FB3A2BB}

2012-07-12 05:15 . 2012-06-06 06:06 2004480 ----a-w- c:\windows\system32\msxml6.dll

2012-07-12 05:15 . 2012-06-06 06:06 1881600 ----a-w- c:\windows\system32\msxml3.dll

2012-07-12 05:15 . 2012-06-06 05:05 1390080 ----a-w- c:\windows\SysWow64\msxml6.dll

2012-07-12 05:15 . 2012-06-06 05:05 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll

2012-07-12 05:15 . 2010-06-26 03:55 2048 ----a-w- c:\windows\system32\msxml3r.dll

2012-07-12 05:15 . 2010-06-26 03:24 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll

2012-07-07 05:41 . 2012-07-07 05:41 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{F39B3328-05A9-4AD4-8F91-27A839625D09}

2012-07-07 05:41 . 2012-07-07 05:41 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{375BA9F4-6012-40F1-B2BC-7C52ED73A992}

2012-07-03 05:58 . 2012-07-03 05:58 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{DB88E96D-9035-489D-95BC-5854B713AB6D}

2012-07-03 05:57 . 2012-07-03 05:57 -------- d-----w- c:\windows\SysWow64\{F942650C-BE61-4A1B-B36C-7F875D7EB002}{A17ECD02-0CD2-43E1-AD6E-4D9A972C6B98}

2012-07-03 05:56 . 2012-07-03 05:56 -------- d-----w- c:\windows\SysWow64\{63AEB89A-7CA0-4707-A250-8D7752C5EEE9}{932FEFD6-8EEE-4F81-9883-B735B3F2A343}

2012-07-02 09:58 . 2012-07-02 09:58 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{D3448BE4-278B-444F-AD1E-6D495C9BD3EC}

2012-07-02 09:58 . 2012-07-02 09:58 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{24AAEA55-A4E2-47C1-A060-BB24D0FCA339}

2012-07-02 09:58 . 2012-07-02 09:58 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{F8CCD231-DE46-4144-A8A6-9B75D5BC43E2}

2012-07-02 09:58 . 2012-07-02 09:58 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{83F173D5-13EC-4532-81F7-24223BBAAB3F}

2012-07-02 09:58 . 2012-07-02 09:58 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{50894B7D-6755-404D-AF1B-E2AE7D548DBB}

2012-07-02 09:58 . 2012-07-02 09:58 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{391C5BC2-EE5A-48CD-A6FA-E0EE3675CBBC}

2012-07-02 09:56 . 2012-07-02 09:56 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{96C9E7C9-E3C1-4B9F-8C2C-9D856EF6DEA7}

2012-07-02 09:55 . 2012-07-02 09:55 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{44A9BCF1-4DA0-4D46-BB3D-E57D880B3313}

2012-07-02 08:25 . 2012-07-04 05:21 -------- d-----w- c:\users\Melanouchii\AppData\Local\Spotify

2012-07-02 08:23 . 2012-07-14 20:19 -------- d-----w- c:\users\Melanouchii\AppData\Roaming\Spotify

2012-07-01 07:39 . 2012-07-01 07:39 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{C5C8B9A2-1655-4D2B-9E80-A482FDD49675}

2012-07-01 07:38 . 2012-07-01 07:38 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{7DA4B5AE-390C-4B37-93F4-5D6A94224726}

2012-07-01 07:38 . 2012-07-01 07:38 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{E8D183E3-FB65-4BAA-B369-2A6A5F217FBA}

2012-07-01 07:33 . 2012-07-01 07:33 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{CFC2A302-D709-43CC-8C3C-0950A5A32AA7}

2012-07-01 07:32 . 2012-07-01 07:32 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{66EF6B8B-64E3-4AB8-ADE8-A54CE41E3FD2}

2012-07-01 07:32 . 2012-07-01 07:32 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{EDF796F8-C32C-448C-B3B3-D59C71F2A078}

2012-07-01 07:29 . 2012-07-01 07:29 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{DE89FC9D-98D7-4A76-B6D7-A6A69351161D}

2012-07-01 07:28 . 2012-07-01 07:28 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{CD332D43-D3F3-46EC-A0F2-51C9D0E37340}

2012-07-01 07:28 . 2012-07-01 07:28 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{D640B5C5-84F1-4C56-8F4A-26900354AFB5}

2012-06-30 07:43 . 2012-06-30 07:43 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{2FE16117-F27B-48A6-9AAF-430359332D0F}

2012-06-30 07:43 . 2012-06-30 07:43 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{6FA3D35A-B9F8-44E0-AC3A-C07A9B834B30}

2012-06-30 07:43 . 2012-06-30 07:43 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{A32159B8-73C0-49B5-A8F8-E9B7D3BC12CF}

2012-06-30 07:42 . 2012-06-30 07:42 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{24FE3BA9-88B1-4FE3-811B-EB50CB6DA0C4}

2012-06-30 07:42 . 2012-06-30 07:42 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{3B44FD37-202F-40A4-8B97-57E61429858C}

2012-06-30 07:42 . 2012-06-30 07:42 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{1788D740-C6E8-4858-AE92-A508BC8B4299}

2012-06-30 07:42 . 2012-06-30 07:42 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{E1507FCF-E4DA-424B-A189-96A82B8F8AB5}

2012-06-30 07:42 . 2012-06-30 07:42 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{1C7B0303-9AD9-4A34-9FBA-6B583D06F958}

2012-06-30 07:41 . 2012-06-30 07:41 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{E2CC8B1A-E8C4-46EB-9CD7-BBCCFD28D70A}

2012-06-25 14:04 . 2012-06-25 14:04 1394248 ----a-w- c:\windows\SysWow64\msxml4.dll

2012-06-25 11:48 . 2012-06-25 11:48 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{DF98835D-A5C3-45A6-B3A9-4F946B2AA63D}

2012-06-25 11:48 . 2012-06-25 11:48 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{90F8C3BA-531E-4D51-917F-80DEC039F944}

2012-06-25 11:48 . 2012-06-25 11:48 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{74BF5041-1A35-46BE-8BA0-F3ADAC622C51}

2012-06-24 07:54 . 2012-06-24 07:54 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{43CB69FC-5A04-4D48-A47B-6ACEA721895C}

2012-06-24 07:54 . 2012-06-24 07:54 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{210F9619-08DF-4F8B-9B89-88C5F8802A2D}

2012-06-24 07:53 . 2012-06-24 07:53 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{2232A27B-81D7-4317-92FD-8AC2CC7E3296}

2012-06-22 15:30 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe

2012-06-22 15:30 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll

2012-06-22 15:30 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll

2012-06-22 15:30 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll

2012-06-22 15:30 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll

2012-06-22 15:30 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll

2012-06-22 15:30 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll

2012-06-22 15:30 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll

2012-06-22 15:30 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe

2012-06-22 10:53 . 2012-06-22 10:53 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{2F34F36D-7B33-4EE1-A76A-E0C026098A2F}

2012-06-22 10:53 . 2012-06-22 10:53 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{A28EB626-9FE1-4DC9-8F47-B648CB868C0F}

2012-06-22 10:53 . 2012-06-22 10:53 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{7ED1B14F-3F74-4127-BE9B-EDA31F27AE68}

2012-06-22 10:53 . 2012-06-22 10:53 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{2CA9D6E6-4AB8-4963-B6F6-B8953F0A206B}

2012-06-22 10:52 . 2012-06-22 10:52 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{BB382769-7845-4692-9D09-342B7DE794E9}

2012-06-22 10:52 . 2012-06-22 10:52 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{58361302-425C-4B70-9AD3-918229A26449}

2012-06-20 19:37 . 2012-06-20 19:37 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{2956C128-0A7B-4993-9421-858CCBAECB66}

2012-06-20 19:36 . 2012-06-20 19:36 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{F630C9CD-92CD-4012-B77D-2362615CDA57}

2012-06-20 19:36 . 2012-06-20 19:36 -------- d-----w- c:\windows\SysWow64\{0B6B3F7F-4C05-48C4-95C6-6A688CA9F3B0}{DD1D4A27-A59D-437A-AA20-BB23D13ECF5D}

2012-06-18 09:53 . 2012-06-18 09:53 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{D65A08C2-49DE-4784-A4D3-BBD19B677F61}

2012-06-18 09:52 . 2012-06-18 09:52 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{245FCC85-3793-4E4A-97C1-3046796C962F}

2012-06-18 09:52 . 2012-06-18 09:52 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{59AEF73E-CA39-4C89-A67E-14C20F76A4FD}

2012-06-18 09:52 . 2012-06-18 09:52 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{E1DE6817-D076-4519-8F3C-9A1793600F29}

2012-06-18 09:52 . 2012-06-18 09:52 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{89400C5E-21F3-4DDE-9A9A-68B66BD26007}

2012-06-18 09:52 . 2012-06-18 09:52 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{CD899ABE-98AE-435E-AB02-BE1B9CC11294}

2012-06-18 09:51 . 2012-06-18 09:51 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{CDC34F2F-7693-49BB-8000-0B5F9774B880}

2012-06-18 09:51 . 2012-06-18 09:51 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{E4BB4AA2-BDD4-4FC9-9EBF-47A5778A5D8A}

2012-06-18 09:51 . 2012-06-18 09:51 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{494B3451-A273-4D9F-9967-85F25F977F1A}

2012-06-18 09:51 . 2012-06-18 09:51 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{65764E1A-8FE2-4D4E-A37A-8DA9197508AA}

2012-06-18 09:50 . 2012-06-18 09:50 -------- d-----w- c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{48111A02-9E1E-4D01-81E5-8378D684EE16}

2012-06-18 09:50 . 2012-06-18 09:50 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{8AD5B053-03E9-47A8-820B-A5E38C2440A2}

2012-06-18 09:50 . 2012-06-18 09:50 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{406D8264-0D35-4610-857F-5D0013E35345}

2012-06-18 09:50 . 2012-06-18 09:50 -------- d-----w- c:\windows\SysWow64\{9A4521A4-FD3A-4725-9851-9B4A1369BA08}{F8AAFEB9-EB7C-4ACB-A38D-00B87285F950}

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-07-12 09:48 . 2012-04-07 10:54 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2012-07-12 09:48 . 2011-10-01 20:45 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-05-04 11:06 . 2012-06-13 05:31 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-05-04 10:03 . 2012-06-13 05:31 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe

2012-05-04 10:03 . 2012-06-13 05:31 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe

2012-05-01 05:40 . 2012-06-13 05:31 209920 ----a-w- c:\windows\system32\profsvc.dll

2012-04-28 03:55 . 2012-06-13 05:31 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys

2012-04-26 05:41 . 2012-06-13 05:31 77312 ----a-w- c:\windows\system32\rdpwsx.dll

2012-04-26 05:41 . 2012-06-13 05:31 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll

2012-04-26 05:34 . 2012-06-13 05:31 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe

2012-04-24 05:37 . 2012-06-13 05:31 184320 ----a-w- c:\windows\system32\cryptsvc.dll

2012-04-24 05:37 . 2012-06-13 05:31 140288 ----a-w- c:\windows\system32\cryptnet.dll

2012-04-24 05:37 . 2012-06-13 05:31 1462272 ----a-w- c:\windows\system32\crypt32.dll

2012-04-24 04:36 . 2012-06-13 05:31 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll

2012-04-24 04:36 . 2012-06-13 05:31 1158656 ----a-w- c:\windows\SysWow64\crypt32.dll

2012-04-24 04:36 . 2012-06-13 05:31 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll

.

.

((((((((((((((((((((((((((((( SnapShot@2012-07-15_16.49.17 )))))))))))))))))))))))))))))))))))))))))

.

+ 2011-12-19 11:21 . 2011-12-19 11:21 45936 c:\windows\SysWOW64\sbbd.exe

- 2009-07-14 04:54 . 2012-07-15 16:47 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2009-07-14 04:54 . 2012-07-17 10:11 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2009-07-14 04:54 . 2012-07-17 10:11 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-07-14 04:54 . 2012-07-15 16:47 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-07-14 04:54 . 2012-07-15 16:47 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2009-07-14 04:54 . 2012-07-17 10:11 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2010-11-21 03:09 . 2012-07-16 11:07 61288 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2009-07-14 05:10 . 2012-07-16 11:07 38184 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

+ 2011-09-09 12:50 . 2012-07-16 11:07 11890 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1140550822-262787084-1063895807-1000_UserData.bin

+ 2012-07-17 07:52 . 2012-07-15 15:41 54728 c:\windows\system32\DRVSTORE\Soluto_93592E1767B385F5C00F947192FF633934D8A80B\Soluto.sys

- 2009-07-14 05:30 . 2012-04-22 14:03 86016 c:\windows\system32\DriverStore\infpub.dat

+ 2009-07-14 05:30 . 2012-07-16 10:24 86016 c:\windows\system32\DriverStore\infpub.dat

+ 2011-12-19 10:44 . 2011-12-19 10:44 84600 c:\windows\system32\drivers\sbwtis.sys

+ 2012-03-13 06:13 . 2011-10-26 12:23 57976 c:\windows\system32\drivers\sbredrv.sys

+ 2011-11-29 04:59 . 2011-11-29 04:59 74872 c:\windows\system32\drivers\sbapifs.sys

+ 2011-09-08 13:46 . 2012-07-17 08:16 49152 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2011-09-08 13:46 . 2012-07-15 14:20 49152 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2011-09-08 13:46 . 2012-07-15 14:20 49152 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2011-09-08 13:46 . 2012-07-17 08:16 49152 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-07-14 04:54 . 2012-07-15 14:20 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2009-07-14 04:54 . 2012-07-17 08:16 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2012-07-17 07:52 . 2012-07-17 07:52 14534 c:\windows\Installer\{F632FD71-D9EB-45CB-A03D-2DC742695315}\SolutoUninstall.exe

+ 2012-07-17 07:52 . 2012-07-17 07:52 77399 c:\windows\Installer\{F632FD71-D9EB-45CB-A03D-2DC742695315}\Soluto_1.exe

+ 2012-07-17 07:52 . 2012-07-17 07:52 77399 c:\windows\Installer\{F632FD71-D9EB-45CB-A03D-2DC742695315}\Soluto.exe

+ 2012-07-17 07:55 . 2012-07-17 07:55 99328 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGUsersCenter\56e89eee8a5dabc501b3d711bf283856\PCGUsersCenter.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 73216 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGRSPProbe\75233ce2d3dd9f8d86bd1683ce2efb88\PCGRSPProbe.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 95232 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGHIDProbe\7277a94feac278e0204058bb785fb4e6\PCGHIDProbe.ni.dll

+ 2012-07-17 07:56 . 2012-07-17 07:56 73216 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGEntities\6b08e19802436296e727ebd9d66baaf3\PCGEntities.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 92672 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGConfiguration\6d57a35766d54bc77c875e4563f1d9c6\PCGConfiguration.ni.dll

+ 2012-07-17 07:54 . 2012-07-17 07:54 53248 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGAzureEntityFrame#\0f7e875c999ad14b6ed331522e9593db\PCGAzureEntityFramework.ni.dll

+ 2011-09-27 18:29 . 2012-07-17 08:09 7808 c:\windows\system32\wdi\ERCQueuedResolutions.dat

- 2011-09-27 18:29 . 2012-07-15 08:58 7808 c:\windows\system32\wdi\ERCQueuedResolutions.dat

+ 2012-07-16 18:03 . 2012-07-17 07:04 1836 c:\windows\SoftwareDistribution\EventCache\{C4ADD92B-E40F-46BD-B409-848C0E6688CA}.bin

- 2011-09-08 13:08 . 2012-07-15 16:46 2190 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat

+ 2011-09-08 13:08 . 2012-07-17 10:07 2190 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat

- 2012-07-15 16:47 . 2012-07-15 16:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2012-07-17 10:08 . 2012-07-17 10:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2012-07-15 16:47 . 2012-07-15 16:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2012-07-17 10:08 . 2012-07-17 10:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2011-10-26 12:23 . 2011-10-26 12:23 101112 c:\windows\SysWOW64\drivers\SBREDrv.sys

+ 2011-09-09 12:22 . 2012-07-16 11:22 303028 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin

+ 2011-09-08 19:42 . 2012-07-16 09:16 296170 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin

+ 2011-09-08 13:51 . 2012-07-17 08:15 743554 c:\windows\system32\perfh013.dat

- 2011-09-08 13:51 . 2012-07-14 20:31 743554 c:\windows\system32\perfh013.dat

- 2009-07-14 02:36 . 2012-07-14 20:31 652360 c:\windows\system32\perfh009.dat

+ 2009-07-14 02:36 . 2012-07-17 08:15 652360 c:\windows\system32\perfh009.dat

- 2011-09-08 13:51 . 2012-07-14 20:31 152638 c:\windows\system32\perfc013.dat

+ 2011-09-08 13:51 . 2012-07-17 08:15 152638 c:\windows\system32\perfc013.dat

+ 2009-07-14 02:36 . 2012-07-17 08:15 121292 c:\windows\system32\perfc009.dat

- 2009-07-14 02:36 . 2012-07-14 20:31 121292 c:\windows\system32\perfc009.dat

- 2009-07-14 05:30 . 2012-04-22 14:03 143360 c:\windows\system32\DriverStore\infstrng.dat

+ 2009-07-14 05:30 . 2012-07-16 10:24 143360 c:\windows\system32\DriverStore\infstrng.dat

- 2009-07-14 05:30 . 2012-04-22 14:03 143360 c:\windows\system32\DriverStore\infstor.dat

+ 2009-07-14 05:30 . 2012-07-16 10:24 143360 c:\windows\system32\DriverStore\infstor.dat

+ 2011-09-29 10:16 . 2011-09-29 10:16 119416 c:\windows\system32\DriverStore\FileRepository\sbfwim.inf_amd64_neutral_09abe461a7fb864d\amd64\wnet\SBFWIM.sys

+ 2012-07-17 08:09 . 2012-07-17 10:07 281344 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat

- 2009-07-14 05:01 . 2012-07-15 16:46 513100 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2009-07-14 05:01 . 2012-07-17 10:07 513100 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2012-07-14 21:51 . 2012-07-16 10:45 763656 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1140550822-262787084-1063895807-1000-12288.dat

- 2012-07-14 21:51 . 2012-07-14 22:00 763656 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1140550822-262787084-1063895807-1000-12288.dat

+ 2012-07-16 10:24 . 2012-07-16 10:24 128856 c:\windows\Installer\{fc8208f2-b1c1-4253-9e89-d518e983b7bb}\UNINST_Uninstall_A_DE08FD120270402B91CB0B6B59AB5AF9.exe

+ 2012-07-16 10:24 . 2012-07-16 10:24 399192 c:\windows\Installer\{fc8208f2-b1c1-4253-9e89-d518e983b7bb}\NewShortcut4_2C44B39324B94969A0B2A3EFCFBC4594.exe

+ 2012-07-16 10:24 . 2012-07-16 10:24 399192 c:\windows\Installer\{fc8208f2-b1c1-4253-9e89-d518e983b7bb}\NewShortcut1_FE807111CB594AE5B9A38430EB516D75.exe

+ 2012-07-16 10:24 . 2012-07-16 10:24 399192 c:\windows\Installer\{fc8208f2-b1c1-4253-9e89-d518e983b7bb}\ARPPRODUCTICON.exe

+ 2012-07-17 07:56 . 2012-07-17 07:56 185856 c:\windows\assembly\NativeImages_v2.0.50727_64\SolutoUpdateService\eb70d587c06756ed8f445cbbac019cf9\SolutoUpdateService.ni.dll

+ 2012-07-17 07:57 . 2012-07-17 07:57 867328 c:\windows\assembly\NativeImages_v2.0.50727_64\SolutoCleanup\ca69fd2229beac5613cc38335bfb7767\SolutoCleanup.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 660992 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGWuInfo\9597d7d835df036644b4a717c1c9f0b3\PCGWuInfo.ni.dll

+ 2012-07-17 07:56 . 2012-07-17 07:56 206848 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGUpgrader\c0e0e2c7eaa86dca194dc4d7e36b63fb\PCGUpgrader.ni.dll

+ 2012-07-17 07:56 . 2012-07-17 07:56 517120 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGSAProbe\0747ac101272b77f2603fd7f21dd1ee0\PCGSAProbe.ni.dll

+ 2012-07-17 07:54 . 2012-07-17 07:54 635904 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGPrestoSerializer\453e6fd9c0fd1969f7d56bcf8d8e46b0\PCGPrestoSerializer.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 668672 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGPostBootResources\85b0fcd33b4c558192b3406d1db479e7\PCGPostBootResources.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 414720 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGDriverProbe\fadadf4530a99e96e4a797e43fcb2c57\PCGDriverProbe.ni.dll

+ 2012-07-17 07:57 . 2012-07-17 07:57 501760 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGCatalogItemFootp#\6d66256b82ed11db7ae6c4b354efb086\PCGCatalogItemFootprint.ni.dll

+ 2012-07-17 07:56 . 2012-07-17 07:56 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGCatalogItemCache\96fda2e8df23c70f8414b99717483b37\PCGCatalogItemCache.ni.dll

+ 2012-07-17 07:57 . 2012-07-17 07:57 474112 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGBootVisualizingC#\caa1f7dee84a876612d8dd683fa4aeac\PCGBootVisualizingCore.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 274944 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGBootVisualizingC#\716f438a0f6263389eafe39fa8e56f15\PCGBootVisualizingCommon.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 264704 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGAppControlPlugin#\f60cd81de80e70c48bfbe46002fabfc9\PCGAppControlPluginLoader.ni.dll

+ 2012-07-17 07:54 . 2012-07-17 07:54 236544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.ServiceHo#\b4aaf6b56bcb05d71453c31d229dd7f9\Microsoft.ServiceHosting.ServiceRuntime.ni.dll

+ 2012-07-17 07:54 . 2012-07-17 07:54 754176 c:\windows\assembly\NativeImages_v2.0.50727_64\Ionic.Zip.Reduced\a5f0a272a289283b9a44216a56fea4bf\Ionic.Zip.Reduced.ni.dll

+ 2012-07-17 07:57 . 2012-07-17 07:57 165376 c:\windows\assembly\NativeImages_v2.0.50727_64\Interop.NetFwTypeLib\263ea2503c016920db068997b4d88da3\Interop.NetFwTypeLib.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 405504 c:\windows\assembly\NativeImages_v2.0.50727_64\Interop.IWshRuntime#\ed8e32718971d38dad8676ced2618645\Interop.IWshRuntimeLibrary.ni.dll

+ 2011-09-09 12:45 . 2012-07-17 10:07 8642580 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1140550822-262787084-1063895807-1000-8192.dat

+ 2011-10-21 13:28 . 2011-10-21 13:28 4771840 c:\windows\Installer\3e4960f.msi

+ 2012-07-17 07:55 . 2012-07-17 07:55 1032704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlServ#\9c57c36eae6202314e189d02c92cf893\System.Data.SqlServerCe.ni.dll

+ 2012-07-17 07:56 . 2012-07-17 07:56 2936832 c:\windows\assembly\NativeImages_v2.0.50727_64\SolutoService\a3bb7fcef2878ad8727db0fae1c68e2b\SolutoService.ni.exe

+ 2012-07-17 07:56 . 2012-07-17 07:56 8542720 c:\windows\assembly\NativeImages_v2.0.50727_64\SolutoConsole\1c98196abc9b55b8dac1f6b503309a97\SolutoConsole.ni.exe

+ 2012-07-17 07:54 . 2012-07-17 07:54 2370048 c:\windows\assembly\NativeImages_v2.0.50727_64\Soluto\df0c18d63399a05f77cf44283f4fa4b1\Soluto.ni.exe

+ 2012-07-17 07:54 . 2012-07-17 07:54 3676160 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGPreCompiled\38e9e29906bd4b5cacb262b07b782fb2\PCGPreCompiled.ni.dll

+ 2012-07-17 07:54 . 2012-07-17 07:54 3594240 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGFramework\ff12fa76688f28469947215229b21440\PCGFramework.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 5017088 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGDatabase\ab1961cfd29b07883dd58266f5f865f6\PCGDatabase.ni.dll

+ 2012-07-17 07:57 . 2012-07-17 07:57 1086976 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGDataAggregation\c737d20586ddd8e4b8d349a80da2bdf1\PCGDataAggregation.ni.dll

+ 2012-07-17 07:54 . 2012-07-17 07:54 1821696 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGCommunication\edfd0819df12ccd8f091db620d187ab4\PCGCommunication.ni.dll

+ 2012-07-17 07:56 . 2012-07-17 07:56 1326080 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGClientCommunicat#\c3b7f38bcb8addbb8590805b4c6e5e49\PCGClientCommunication.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 5971456 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGClientCommon\d8e8d7a85f9c1617aacf61ffd1098069\PCGClientCommon.ni.dll

+ 2012-07-17 07:56 . 2012-07-17 07:56 1302016 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGBrowsersProbe\556680498518f5159c5b52b6e9178cad\PCGBrowsersProbe.ni.dll

+ 2012-07-17 07:54 . 2012-07-17 07:54 1979392 c:\windows\assembly\NativeImages_v2.0.50727_64\PCGAzureShared\9eb937516eb75c8b3b29a938d3a7a46e\PCGAzureShared.ni.dll

+ 2012-07-17 07:54 . 2012-07-17 07:54 3001856 c:\windows\assembly\NativeImages_v2.0.50727_64\Newtonsoft.Json.Net#\6be64df67cba3765c5c046d4753013c6\Newtonsoft.Json.Net35.ni.dll

+ 2012-07-17 07:55 . 2012-07-17 07:55 3431424 c:\windows\assembly\NativeImages_v2.0.50727_64\Community.CsharpSql#\86169aa5ff9b8f085965f91384c7cc52\Community.CsharpSqlite.ni.dll

+ 2012-07-17 07:56 . 2012-07-17 07:56 1473024 c:\windows\assembly\NativeImages_v2.0.50727_64\AmCharts.Windows\87ab5a7cf255850eca718f06c2440579\AmCharts.Windows.ni.dll

+ 2012-07-17 07:52 . 2012-07-17 07:52 17970176 c:\windows\Installer\46aeb14.msi

+ 2012-07-16 10:23 . 2012-07-16 10:23 20366336 c:\windows\Installer\2a1885.msi

.

-- Snapshot teruggezet naar huidige datum --

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Elbserver"="c:\program files (x86)\Sony\Media Gallery\ElbServer.exe" [2011-04-02 83344]

"Facebook Update"="c:\users\Melanouchii\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-07-12 138096]

"ToolwizCareFree"="c:\program files\ToolwizCareFree\ToolwizCares.exe" [2012-04-08 5221656]

"TomTomHOME.exe"="c:\program files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" [2012-01-23 247728]

"AdobeBridge"="" [bU]

"Spotify Web Helper"="c:\users\Melanouchii\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-07-02 1192664]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Ad-Aware Antivirus"="c:\program files (x86)\Ad-Aware Antivirus\AdAwareLauncher --windows-run" [X]

"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-09-13 283160]

"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2011-02-15 2757312]

"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]

"InstaLAN"="c:\program files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe" [2010-07-28 1485208]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]

"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]

"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032]

.

c:\users\Melanouchii\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

EvernoteClipper.lnk - c:\program files (x86)\Evernote\Evernote\EvernoteClipper.exe [2012-6-13 1014112]

OneNote 2010 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 245120]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-23 270336]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ad-Aware Service]

@="Ad-Aware Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]

@="Service"

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-12 250056]

R3 cpuz135;cpuz135;c:\windows\TEMP\cpuz135\cpuz135_x64.sys [x]

R3 e1yexpress;Intel® Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y60x64.sys [2009-06-10 281088]

R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [x]

R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 51740536]

R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 SBFWIMCL;GFI Software Firewall NDIS IM Filter Service;c:\windows\system32\DRIVERS\sbfwim.sys [2011-09-29 119416]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2011-02-18 99104]

R3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]

R3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update Common\VUAgent.exe [2012-01-13 1256040]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-09-10 1255736]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 BTOWSVF;BTOWSVF;c:\windows\System32\Drivers\BTOWSVF.sys [2012-04-08 50456]

S0 KSafeDISK;KSafeDISK;c:\windows\System32\Drivers\KSafeDISK.sys [2012-04-08 52504]

S0 Soluto;Soluto;c:\windows\system32\DRIVERS\Soluto.sys [2012-07-15 54728]

S1 appdrv01;Application Driver (01);c:\windows\system32\Drivers\appdrv01.sys [2012-04-09 3852976]

S1 BTOWSFF;BTOWSFF;c:\windows\System32\Drivers\BTOWSFF.sys [2012-04-08 33048]

S1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2011-12-19 256632]

S1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [2011-10-26 57976]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 Ad-Aware Service;Ad-Aware Service;c:\program files (x86)\Ad-Aware Antivirus\AdAwareService.exe [2012-05-03 1226096]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-03-31 146592]

S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-03-31 75936]

S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]

S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-13 13336]

S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-03-29 2361344]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]

S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-11-26 398176]

S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]

S2 SBAMSvc;Ad-Aware;c:\program files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [2011-12-19 3289032]

S2 sbapifs;sbapifs;c:\windows\system32\DRIVERS\sbapifs.sys [2011-11-29 74872]

S2 SOHCImp;VAIO Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2011-02-21 113824]

S2 SolutoService;Soluto PCGenome Core Service;c:\program files\Soluto\SolutoService.exe [2012-07-15 590912]

S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2011-12-14 2984832]

S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-01-23 92592]

S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2011-02-23 105024]

S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]

S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2011-01-20 887000]

S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2011-02-18 546608]

S2 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2011-02-18 385336]

S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2011-02-28 852160]

S2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [2012-07-11 935008]

S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968]

S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2011-03-31 36000]

S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2011-03-31 259232]

S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2011-03-31 109216]

S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-03-31 29344]

S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2011-03-31 166048]

S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2011-03-31 59040]

S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2011-03-31 283296]

S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2011-03-31 287392]

S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-03-29 317440]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]

S3 MEIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]

S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-03-29 335464]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-03-29 425064]

S3 SBFWIMCLMP;GFI Software Firewall NDIS IM Filter Miniport;c:\windows\system32\DRIVERS\SBFWIM.sys [2011-09-29 119416]

S3 sbhips;sbhips;c:\windows\system32\drivers\sbhips.sys [2011-12-19 60536]

S3 sbwtis;sbwtis;c:\windows\system32\DRIVERS\sbwtis.sys [2011-12-19 84600]

S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2010-04-26 12032]

S3 SOHDs;VAIO Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2011-02-21 67232]

S3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2011-01-20 286936]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

.

Inhoud van de 'Gedeelde Taken' map

.

2012-07-17 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-07 09:48]

.

2012-07-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1140550822-262787084-1063895807-1000Core.job

- c:\users\Melanouchii\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-25 05:15]

.

2012-07-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1140550822-262787084-1063895807-1000UA.job

- c:\users\Melanouchii\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-25 05:15]

.

2012-07-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1140550822-262787084-1063895807-1000Core.job

- c:\users\Melanouchii\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-16 09:26]

.

2012-07-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1140550822-262787084-1063895807-1000UA.job

- c:\users\Melanouchii\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-16 09:26]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2011-03-29 518784]

"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-03-31 790176]

"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-03-31 657056]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-29 167960]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-29 391704]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-29 418328]

"Apoint"="c:\program files (x86)\Apoint\Apoint.exe" [bU]

"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]

"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]

.

------- Bijkomende Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uDefault_Search_URL = hxxp://www.google.com/ie

mStart Page = hxxp://www.google.com

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = <local>;*.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: &Download by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/201

IE: &Grab video by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/204

IE: &Verzenden naar OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105

IE: Add to Evernote 4.0 - c:\program files (x86)\Evernote\Evernote\EvernoteIE.dll/204

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Do&wnload selected by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/203

IE: Down&load all by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/202

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000

IE: Free YouTube Download - c:\users\Melanouchii\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm

IE: Free YouTube to MP3 Converter - c:\users\Melanouchii\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

TCP: DhcpNameServer = 195.130.131.3 195.130.130.131

.

- - - - ORPHANS VERWIJDERD - - - -

.

ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)

ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)

ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)

ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]

"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files (x86)\Sony\VAIO Event Service\VESMgr.exe

c:\program files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

c:\program files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

c:\windows\SysWOW64\DllHost.exe

c:\windows\SysWOW64\DllHost.exe

c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

c:\program files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe

.

**************************************************************************

.

Voltooingstijd: 2012-07-17 12:26:02 - machine werd herstart

ComboFix-quarantined-files.txt 2012-07-17 10:26

ComboFix2.txt 2012-07-15 16:55

ComboFix3.txt 2012-07-15 00:23

ComboFix4.txt 2012-07-14 23:39

.

Pre-Run: 283.093.331.968 bytes beschikbaar

Post-Run: 283.920.601.088 bytes beschikbaar

.

- - End Of File - - 0F2FAE5F282E152849D5BC7C807C8166

Link naar reactie
Delen op andere sites

  • Reacties 29
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Beste reacties in dit topic

Oeps ... er blijken nog heel wat bestanden van deze soort c:\windows\SysWow64\{36C7D2EC-06C2-4796-A89F-93AD16CB453C}{2F34F36D-7B33-4EE1-A76A-E0C026098A2F} op de PC te zitten. Ga eens naar deze map c:\windows\SysWow64 en verwijder daar ALLE mappen met zo'n dubbele cijfercombinatie (zoals hierboven {36C7D2EC-06C2-4796-A89F-93AD16CB453C}{2F34F36D-7B33-4EE1-A76A-E0C026098A2F}).

Link naar reactie
Delen op andere sites

Verwijder Combofix: Start -> Uitvoeren/Zoekopdracht en typ: ComboFix /Uninstall

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Indien aanwezig mag je de map C:\Qoobox manueel verwijderen.

Download CCleaner.

Klik op “Download Latest Version” en dan start de download van CCleaner automatisch en gratis op.

Installeer het en start CCleaner op. Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Schoonmaken'. Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”. Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Het is aangewezen om de bestaande herstelpunten te verwijderen (daar zitten besmette herstelpunten tussen die je eventueel zou kunnen terugzetten). In Windows 7

  • via Start -> Configuratiescherm -> Systeem & Beveiliging -> Systeem -> Systeembeveiliging -> schakel nu systeemherstel uit door de gewenste schijf te selecteren en op "configureren" te klikken.
  • Klik nu op "verwijderen" om alle herstelpunten te verwijderen.
  • Klik op "Toepassen" en "OK".
  • Herstart nu de PC.

Link naar reactie
Delen op andere sites

Gast
Dit topic is nu gesloten voor nieuwe reacties.

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.