[OPGELOST] Java JDK6.14 Probleem

kape · 24 juli 2009

Ga naar start -> uitvoeren

typ cmd druk op enter

typ ipconfig /flushdns en klik enter

Herstart de computer.

rapid · 24 juli 2009

ComboFix 09-07-23.04 - Judith 2009-07-24 23:22.3.1 - NTFSx86

Gestart vanuit: f:\documents and settings\Judith\Mijn documenten\ComboFix.exe

AV: 0.-1.2089877597 *On-access scanning disabled* (Outdated) {41564737-3200-1071-989B-0000E87B4FB1}

.

(((((((((((((((((((( Bestanden Gemaakt van 2009-06-24 to 2009-07-24 ))))))))))))))))))))))))))))))

.

2013-05-04 18:41 . 2013-05-04 18:41 775680 ----a-w- f:\windows\system32\drivers\avg7core.sys

2013-05-03 22:00 . 2013-05-03 22:00 -------- d-----w- f:\documents and settings\Judith\Application Data\Leadertech

2013-04-22 11:37 . 2013-04-22 11:37 -------- d-----w- f:\program files\Devious Codeworks

2013-04-22 11:29 . 2013-04-22 11:29 -------- d-----w- f:\documents and settings\Judith\Application Data\pdf995

2013-04-22 11:28 . 2009-07-17 13:21 -------- d-----w- f:\documents and settings\All Users\Application Data\pdf995

2013-04-22 11:28 . 2013-04-22 11:28 51716 ----a-w- f:\windows\system32\pdf995mon.dll

2013-04-22 11:28 . 2013-04-22 11:28 118784 ----a-w- f:\windows\system32\pdfmona.dll

2009-07-24 00:16 . 2009-07-24 00:16 -------- d-----w- f:\windows\Driver Cache

2009-07-24 00:15 . 2009-07-24 00:15 -------- d-----w- f:\windows\l2schemas

2009-07-24 00:15 . 2009-07-24 00:15 -------- d-----w- f:\windows\system32\nl

2009-07-24 00:13 . 2009-07-24 00:16 -------- d-----w- f:\windows\ServicePackFiles

2009-07-23 23:55 . 2009-04-29 04:49 52224 -c----w- f:\windows\system32\dllcache\msfeedsbs.dll

2009-07-23 23:55 . 2009-04-29 04:49 459264 -c----w- f:\windows\system32\dllcache\msfeeds.dll

2009-07-23 23:55 . 2009-04-29 04:49 6066176 -c----w- f:\windows\system32\dllcache\ieframe.dll

2009-07-23 23:55 . 2009-04-29 04:49 268288 -c----w- f:\windows\system32\dllcache\iertutil.dll

2009-07-23 23:55 . 2009-04-29 04:49 383488 -c----w- f:\windows\system32\dllcache\ieapfltr.dll

2009-07-23 23:55 . 2009-04-28 09:05 13824 -c----w- f:\windows\system32\dllcache\ieudinit.exe

2009-07-23 23:55 . 2009-04-29 04:49 63488 -c----w- f:\windows\system32\dllcache\icardie.dll

2009-07-23 23:55 . 2008-07-09 14:25 2455488 -c----w- f:\windows\system32\dllcache\ieapfltr.dat

2009-07-23 23:54 . 2009-07-24 00:16 -------- d-----w- f:\windows\system32\nl-nl

2009-07-23 23:47 . 2007-08-13 16:54 33792 -c--a-w- f:\windows\system32\dllcache\custsat.dll

2009-07-23 23:34 . 2009-07-23 23:34 -------- d-----w- f:\windows\system32\URTTEMP

2009-07-23 23:28 . 2008-04-14 17:03 176640 ------w- f:\windows\system32\napstat.exe

2009-07-23 23:27 . 2008-04-14 17:02 48640 ------w- f:\windows\system32\dhcpqec.dll

2009-07-23 23:27 . 2008-04-14 17:02 39936 ------w- f:\windows\system32\dimsroam.dll

2009-07-23 23:27 . 2008-04-14 17:02 19456 ------w- f:\windows\system32\dimsntfy.dll

2009-07-23 23:27 . 2008-04-14 17:02 12800 ------w- f:\windows\system32\credssp.dll

2009-07-23 23:27 . 2008-04-14 17:02 7168 ------w- f:\windows\system32\bitsprx4.dll

2009-07-23 23:27 . 2008-04-14 17:02 233472 ------w- f:\windows\system32\azroles.dll

2009-07-23 23:27 . 2008-04-14 17:02 136192 ------w- f:\windows\system32\aaclient.dll

2009-07-22 22:00 . 2009-07-22 22:00 -------- d-----w- f:\documents and settings\All Users\Application Data\Office Genuine Advantage

2009-07-22 11:58 . 2009-07-22 11:58 -------- d-----w- f:\program files\Common Files\Java

2009-07-22 00:09 . 2009-07-22 00:12 -------- d-----w- f:\documents and settings\Judith\Application Data\updatetool

2009-07-21 20:55 . 2009-07-23 20:50 -------- d-----w- f:\program files\Java

2009-07-21 18:08 . 2009-07-21 18:08 28672 ----a-w- f:\temp\sp.exe

2009-07-21 18:08 . 2009-07-21 18:09 -------- d-----w- f:\temp\Uninstall Data

2009-07-21 18:08 . 2009-07-21 18:08 -------- d-----w- F:\Temp

2009-07-21 15:58 . 2009-07-24 21:17 -------- d-----w- f:\documents and settings\Judith\Application Data\Reg Tool

2009-07-21 15:57 . 2009-07-24 21:17 -------- d-----w- f:\program files\Reg Tool

2009-07-17 21:06 . 2009-07-17 21:07 -------- d-----w- f:\documents and settings\Judith\Local Settings\Application Data\Temp

2009-07-17 17:42 . 2009-07-22 13:18 -------- d-----w- f:\program files\Windows Live Safety Center

2009-06-28 12:38 . 2009-06-28 12:39 -------- d-----w- f:\documents and settings\Judith\Application Data\mIRC

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-05-12 19:00 . 2005-12-12 19:12 -------- d-----w- f:\documents and settings\All Users\Application Data\avg7

2009-07-24 21:17 . 2007-11-06 10:06 -------- d-----w- f:\program files\UltimateZip 2007

2009-07-24 11:12 . 2004-12-06 19:09 -------- d-----w- f:\program files\MSN Messenger

2009-07-24 11:09 . 2002-09-11 12:00 468656 ----a-w- f:\windows\system32\perfh013.dat

2009-07-24 11:09 . 2002-09-11 12:00 82408 ----a-w- f:\windows\system32\perfc013.dat

2009-07-24 00:20 . 2004-10-14 15:25 76487 ----a-w- f:\windows\PCHealth\HelpCtr\OfflineCache\index.dat

2009-07-21 18:00 . 2009-07-21 18:00 0 ----a-w- f:\windows\system32\REN1A.tmp

2009-07-21 18:00 . 2009-07-21 18:00 0 ----a-w- f:\windows\system32\REN19.tmp

2009-07-21 18:00 . 2009-07-21 18:00 0 ----a-w- f:\windows\system32\REN18.tmp

2009-07-21 17:56 . 2009-07-21 17:56 0 ----a-w- f:\windows\system32\RENE.tmp

2009-07-21 17:56 . 2009-07-21 17:56 0 ----a-w- f:\windows\system32\REND.tmp

2009-07-21 17:56 . 2009-07-21 17:56 0 ----a-w- f:\windows\system32\RENC.tmp

2009-07-21 17:24 . 2009-07-21 17:24 0 ----a-w- f:\windows\system32\REN95.tmp

2009-07-21 17:24 . 2009-07-21 17:24 0 ----a-w- f:\windows\system32\REN94.tmp

2009-07-21 17:24 . 2009-07-21 17:24 0 ----a-w- f:\windows\system32\REN93.tmp

2009-07-21 17:21 . 2009-07-21 17:21 0 ----a-w- f:\windows\system32\REN68.tmp

2009-07-21 17:21 . 2009-07-21 17:21 0 ----a-w- f:\windows\system32\REN67.tmp

2009-07-21 17:21 . 2009-07-21 17:21 0 ----a-w- f:\windows\system32\REN66.tmp

2009-07-21 17:19 . 2009-07-21 17:19 0 ----a-w- f:\windows\system32\REN5C.tmp

2009-07-21 17:19 . 2009-07-21 17:19 0 ----a-w- f:\windows\system32\REN5B.tmp

2009-07-21 17:19 . 2009-07-21 17:19 0 ----a-w- f:\windows\system32\REN5A.tmp

2009-07-21 16:48 . 2009-07-21 16:48 0 ----a-w- f:\windows\system32\REN25.tmp

2009-07-21 16:48 . 2009-07-21 16:48 0 ----a-w- f:\windows\system32\REN24.tmp

2009-07-21 16:48 . 2009-07-21 16:48 0 ----a-w- f:\windows\system32\REN23.tmp

2009-07-21 15:35 . 2009-05-31 10:27 -------- d-----w- f:\program files\Utilities

2009-07-21 15:30 . 2009-07-21 15:30 0 ----a-w- f:\windows\system32\REN12.tmp

2009-07-21 15:30 . 2009-07-21 15:30 0 ----a-w- f:\windows\system32\REN11.tmp

2009-07-21 15:30 . 2009-07-21 15:30 0 ----a-w- f:\windows\system32\REN10.tmp

2009-07-18 16:23 . 2009-07-18 16:23 0 ----a-w- f:\windows\system32\REN6E.tmp

2009-07-18 16:23 . 2009-07-18 16:23 0 ----a-w- f:\windows\system32\REN6D.tmp

2009-07-18 16:23 . 2009-07-18 16:23 0 ----a-w- f:\windows\system32\REN6C.tmp

2009-07-18 10:45 . 2005-12-12 18:56 -------- d-----w- f:\program files\Spybot - Search & Destroy

2009-07-17 22:15 . 2005-12-12 18:56 -------- d-----w- f:\documents and settings\All Users\Application Data\Spybot - Search & Destroy

2009-07-17 19:25 . 2009-07-17 19:25 0 ----a-w- f:\windows\system32\RENB6.tmp

2009-07-17 19:25 . 2009-07-17 19:25 0 ----a-w- f:\windows\system32\RENB5.tmp

2009-07-17 19:25 . 2009-07-17 19:25 0 ----a-w- f:\windows\system32\RENB4.tmp

2009-07-17 15:54 . 2005-04-28 19:32 -------- d-----w- f:\program files\Google

2009-07-17 15:14 . 2009-07-17 15:14 0 ----a-w- f:\windows\system32\REN1F.tmp

2009-07-17 15:14 . 2009-07-17 15:14 0 ----a-w- f:\windows\system32\REN1E.tmp

2009-07-17 15:14 . 2009-07-17 15:14 0 ----a-w- f:\windows\system32\REN1D.tmp

2009-07-17 15:13 . 2009-07-17 15:13 0 ----a-w- f:\windows\system32\REN17.tmp

2009-07-17 15:13 . 2009-07-17 15:13 0 ----a-w- f:\windows\system32\REN16.tmp

2009-07-17 15:13 . 2009-07-17 15:13 0 ----a-w- f:\windows\system32\REN15.tmp

2009-07-17 14:06 . 2009-01-07 15:05 410984 ----a-w- f:\windows\system32\deploytk.dll

2009-07-17 14:05 . 2009-07-17 14:05 0 ----a-w- f:\windows\system32\REN6B.tmp

2009-07-17 14:05 . 2009-07-17 14:05 0 ----a-w- f:\windows\system32\REN6A.tmp

2009-07-17 14:05 . 2009-07-17 14:05 0 ----a-w- f:\windows\system32\REN69.tmp

2009-07-17 12:42 . 2009-07-17 12:42 0 ----a-w- f:\windows\system32\REN2E.tmp

2009-07-17 12:42 . 2009-07-17 12:42 0 ----a-w- f:\windows\system32\REN2D.tmp

2009-07-17 12:42 . 2009-07-17 12:42 0 ----a-w- f:\windows\system32\REN2C.tmp

2009-07-17 12:31 . 2004-10-14 15:26 -------- d-----w- f:\program files\microsoft frontpage

2009-07-17 10:55 . 2009-02-25 12:22 -------- d-----w- f:\program files\SwiftKit

2009-07-04 22:15 . 2009-07-04 22:15 0 ----a-w- f:\windows\system32\REN77.tmp

2009-07-04 22:15 . 2009-07-04 22:15 0 ----a-w- f:\windows\system32\REN76.tmp

2009-07-04 22:15 . 2009-07-04 22:15 0 ----a-w- f:\windows\system32\REN75.tmp

2009-06-24 20:11 . 2009-06-24 20:11 -------- d-----w- f:\program files\Microsoft Games

2009-06-16 14:40 . 2002-09-11 12:00 81920 ----a-w- f:\windows\system32\fontsub.dll

2009-06-16 14:40 . 2002-09-11 12:00 119808 ----a-w- f:\windows\system32\t2embed.dll

2009-06-15 11:38 . 2004-10-30 10:20 68256 ----a-w- f:\documents and settings\Judith\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-06-03 19:11 . 2002-09-11 12:00 1295360 ----a-w- f:\windows\system32\quartz.dll

2009-05-31 17:07 . 2008-08-20 10:25 664 ----a-w- f:\windows\system32\d3d9caps.dat

2009-05-31 14:23 . 2006-03-15 17:53 -------- d-----w- f:\program files\Common Files\Ahead

2009-05-31 13:16 . 2009-05-31 13:16 -------- d-----w- f:\program files\Common Files\INCA Shared

2009-05-31 12:59 . 2006-09-21 17:35 -------- d-----w- f:\documents and settings\All Users\Application Data\Microsoft Help

2009-05-31 12:58 . 2009-05-31 12:58 -------- d-----w- f:\program files\Common Files\aliaswavefront shared

2009-05-31 12:58 . 2009-05-31 12:58 -------- d-----w- f:\program files\Common Files\Alias Shared

2009-05-31 12:57 . 2009-05-31 12:51 -------- d-----w- f:\program files\Microsoft DirectX SDK (February 2007)

2009-05-31 11:23 . 2004-10-30 10:15 -------- d-----w- f:\documents and settings\Judith\Application Data\Lavasoft

2009-05-31 11:14 . 2009-05-31 11:09 -------- d-----w- f:\program files\Samples

2009-05-31 10:21 . 2009-05-31 10:21 -------- d-----w- f:\program files\Include

2009-05-31 10:21 . 2009-05-31 10:21 -------- d-----w- f:\program files\Extras

2009-05-31 01:50 . 2005-09-25 12:31 -------- d-----w- f:\program files\QuickTime

2009-05-07 15:34 . 2002-09-11 12:00 347136 ----a-w- f:\windows\system32\localspl.dll

2009-04-29 04:49 . 2005-10-21 15:51 827392 ----a-w- f:\windows\system32\wininet.dll

2009-04-29 04:49 . 2004-08-04 08:03 78336 ------w- f:\windows\system32\ieencode.dll

2007-01-24 13:47 . 2007-01-24 13:47 1718272 ----a-w- f:\program files\Microsoft_DirectX_SDK.msi

.

------- Sigcheck -------

[-] 2004-08-04 08:03 14336 AB8C6D89A897BACBA4657FDF00E344A6 f:\windows\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 17:03 14336 E410EC73E2BE2A41D923B006F51C8427 f:\windows\ServicePackFiles\i386\svchost.exe

[-] 2008-04-14 17:03 14336 E410EC73E2BE2A41D923B006F51C8427 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\svchost.exe

[-] 2008-04-14 17:03 14336 E410EC73E2BE2A41D923B006F51C8427 f:\windows\system32\svchost.exe

[-] 2005-03-02 18:19 578560 A9F2EBFC6EF9C1FB38CEDCF747162B6C f:\windows\$hf_mig$\KB890859\SP2GDR\user32.dll

[-] 2005-03-02 18:21 578560 0B62745CE93E8C6F56547F70269DBABC f:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll

[-] 2007-03-08 15:51 579584 FA35431E333943F4B2A6D33FA4EE3CE9 f:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll

[-] 2007-03-08 15:39 579072 CB18F701A5D55A6308FAB8D18322C060 f:\windows\$NtServicePackUninstall$\user32.dll

[-] 2004-08-04 08:03 578560 8E5D344FD717D35EE7ED1C8E0AD0CBE6 f:\windows\$NtUninstallKB890859$\user32.dll

[-] 2002-09-11 12:00 561664 2E8CEC28BE4D9B830BA0AFF73C9279F7 f:\windows\$NtUninstallKB890859_0$\user32.dll

[-] 2005-03-02 18:19 578560 A9F2EBFC6EF9C1FB38CEDCF747162B6C f:\windows\$NtUninstallKB925902$\user32.dll

[-] 2008-04-14 17:02 580096 4CF588D2F2363B73EB4AF57967D46DFF f:\windows\ServicePackFiles\i386\user32.dll

[-] 2008-04-14 17:02 580096 4CF588D2F2363B73EB4AF57967D46DFF f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\user32.dll

[-] 2008-04-14 17:02 580096 4CF588D2F2363B73EB4AF57967D46DFF f:\windows\system32\user32.dll

[-] 2004-08-04 08:03 82944 06EBCBE58321E924980148B7E3DBD753 f:\windows\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 17:02 82432 520391367546218929749612ABFE840C f:\windows\ServicePackFiles\i386\ws2_32.dll

[-] 2008-04-14 17:02 82432 520391367546218929749612ABFE840C f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\ws2_32.dll

[-] 2008-04-14 17:02 82432 520391367546218929749612ABFE840C f:\windows\system32\ws2_32.dll

[-] 2005-10-21 03:40 664576 06AE5BD6363190E622F1AA91591F41C4 f:\windows\$hf_mig$\KB905915\SP2QFE\wininet.dll

[-] 2006-03-04 04:01 666624 B81CF479B43ED1CA2DF12C878B596B2E f:\windows\$hf_mig$\KB912812\SP2QFE\wininet.dll

[-] 2006-05-10 05:27 666624 79C938AB59D5FDB3A4297C117A6858D5 f:\windows\$hf_mig$\KB916281\SP2QFE\wininet.dll

[-] 2006-06-23 11:27 667648 0960FA973421FF4630D024843341509E f:\windows\$hf_mig$\KB918899\SP2QFE\wininet.dll

[-] 2006-09-14 08:37 667648 0D3A915A798CD9568ABDBBE55489DD51 f:\windows\$hf_mig$\KB922760\SP2QFE\wininet.dll

[-] 2006-10-23 15:36 667648 7693CCDD13B082985CA0AC2862CBCAF7 f:\windows\$hf_mig$\KB925454\SP2QFE\wininet.dll

[-] 2007-01-04 14:05 668160 243988BB76262D72A48E8312BF8A0231 f:\windows\$hf_mig$\KB928090\SP2QFE\wininet.dll

[-] 2007-02-19 15:23 668672 48E1C53BA8C6267BB97925EF729BDE90 f:\windows\$hf_mig$\KB931768\SP2QFE\wininet.dll

[-] 2007-04-18 12:46 668672 B2219D7AF938DE9372EB159C68FF83B5 f:\windows\$hf_mig$\KB933566\SP2QFE\wininet.dll

[-] 2007-06-26 14:53 668672 7A0C9A702ED8F8695AC925C5B1850A07 f:\windows\$hf_mig$\KB937143\SP2QFE\wininet.dll

[-] 2007-08-22 12:58 668672 1577844C62558C9838526B3CC114695B f:\windows\$hf_mig$\KB939653\SP2QFE\wininet.dll

[-] 2007-10-11 06:10 669184 9142B3C4732F906E45529F29B0546390 f:\windows\$hf_mig$\KB942615\SP2QFE\wininet.dll

[-] 2007-12-07 00:47 669184 29DB45091E96459C99F5863B9B0E70FC f:\windows\$hf_mig$\KB944533\SP2QFE\wininet.dll

[-] 2008-02-16 09:33 669184 C683F6CF71EDFCB8708BDF2C5DD1BA13 f:\windows\$hf_mig$\KB947864\SP2QFE\wininet.dll

[-] 2008-06-23 16:16 670208 745795941F497E1CB3918A4AD3BEDEEE f:\windows\$hf_mig$\KB953838\SP2QFE\wininet.dll

[-] 2008-06-23 15:12 669184 8ADFF2F029A90FED04A322CBF084F3EA f:\windows\$hf_mig$\KB953838\SP3GDR\wininet.dll

[-] 2008-06-23 14:57 669696 AE1A6AEA7F65F452C0916FB1399D832E f:\windows\$hf_mig$\KB953838\SP3QFE\wininet.dll

[-] 2008-08-20 05:34 670720 8946330281D6C1C6C9DAC56AE64D8A4D f:\windows\$hf_mig$\KB956390\SP2QFE\wininet.dll

[-] 2008-08-20 05:30 669184 BC9059433D2F0889A71E3CDFF5AB2F71 f:\windows\$hf_mig$\KB956390\SP3GDR\wininet.dll

[-] 2008-08-20 05:08 669696 F77FD23458C5C4C16C37667FDDDCECBA f:\windows\$hf_mig$\KB956390\SP3QFE\wininet.dll

[-] 2008-10-16 10:35 670720 887C460C59F09262887CD50D4DEA1ABE f:\windows\$hf_mig$\KB958215\SP2QFE\wininet.dll

[-] 2008-10-16 01:02 669184 FD8DC8F2FA8C3F3CC00C99018AF1530C f:\windows\$hf_mig$\KB958215\SP3GDR\wininet.dll

[-] 2008-10-16 01:06 670208 A9CB7C8F4FB538DCAA26FFF76C2F8F14 f:\windows\$hf_mig$\KB958215\SP3QFE\wininet.dll

[-] 2009-02-20 08:16 671232 82422EAA400263B073CBA5C1FD800644 f:\windows\$hf_mig$\KB963027\SP2QFE\wininet.dll

[-] 2009-02-20 08:12 669184 61920ED8DAA8CEB90450A3C54563EB9A f:\windows\$hf_mig$\KB963027\SP3GDR\wininet.dll

[-] 2009-02-20 07:59 670720 65EA1865F761726955258B650037CF2F f:\windows\$hf_mig$\KB963027\SP3QFE\wininet.dll

[-] 2009-04-29 04:32 671232 A91F6696BE1850F7AB97AC942EDFE2F6 f:\windows\$hf_mig$\KB969897\SP2QFE\wininet.dll

[-] 2009-04-29 04:46 669696 CBB2C7EBD98F1CC84B6EF105547657BD f:\windows\$hf_mig$\KB969897\SP3GDR\wininet.dll

[-] 2009-04-29 04:30 671232 482D2FD463A02A9E65CBC8045DA052FE f:\windows\$hf_mig$\KB969897\SP3QFE\wininet.dll

[-] 2009-04-29 04:40 828928 478A5E95C6121A98673EE33DFCBE3400 f:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll

[-] 2004-08-04 08:03 659456 6C7E1322898378C30BCD9F779A2621EE f:\windows\$NtUninstallKB905915$\wininet.dll

[-] 2002-09-11 12:00 602112 87DF44F9B70BBF94D4143C21A5CB42BA f:\windows\$NtUninstallKB905915-IE6SP1-20051122.175908$\wininet.dll

[-] 2005-10-21 03:41 661504 24059DA5B7131CB82C2B8A39701D93F9 f:\windows\$NtUninstallKB912812$\wininet.dll

[-] 2006-03-04 03:35 661504 7DCC79C2DE609F74AA67E16E8E77AF4C f:\windows\$NtUninstallKB916281$\wininet.dll

[-] 2006-05-10 05:25 661504 FE03AAC620CDFCD835F18760D71F6E6E f:\windows\$NtUninstallKB918899$\wininet.dll

[-] 2006-06-23 11:17 662016 91A1532762382C31DA0103946B4A20D3 f:\windows\$NtUninstallKB922760$\wininet.dll

[-] 2006-09-14 08:40 662016 75C38DD0613B2F170F8F6B2DCBDD6343 f:\windows\$NtUninstallKB925454$\wininet.dll

[-] 2006-10-23 15:19 662016 E30AD3B3927B33D894486EFACCD48014 f:\windows\$NtUninstallKB928090$\wininet.dll

[-] 2007-01-04 13:57 662016 366EC67E75F81D891ADFCC9941F1DE45 f:\windows\$NtUninstallKB931768$\wininet.dll

[-] 2007-02-19 15:05 662016 55BE69A43120FDA4CFB7C0C1F305DB1A f:\windows\$NtUninstallKB933566$\wininet.dll

[-] 2007-04-18 12:33 662016 6B755E9D272AF1DAA6FA618329D2AB18 f:\windows\$NtUninstallKB937143$\wininet.dll

[-] 2007-06-26 14:15 662016 514AD1D91EE71CF2D93E6DD5423F5C13 f:\windows\$NtUninstallKB939653$\wininet.dll

[-] 2007-08-22 13:19 662016 476470C5E47F78455399CB3E5C298021 f:\windows\$NtUninstallKB942615$\wininet.dll

[-] 2007-10-11 06:14 662528 23BBECA3DEFF67EE5B4C444A143E45A6 f:\windows\$NtUninstallKB944533$\wininet.dll

[-] 2007-12-07 01:08 662528 5D5186CBF1E73BB62FCC5A02BE72506C f:\windows\$NtUninstallKB947864$\wininet.dll

[-] 2008-02-16 09:05 662528 1D77F302BBFE2D407DD67C5CB098EA95 f:\windows\$NtUninstallKB953838$\wininet.dll

[-] 2008-06-23 15:41 662528 B6BF5FB5CCAFD118EDEBDF38E82DEE41 f:\windows\$NtUninstallKB956390$\wininet.dll

[-] 2008-08-20 05:38 662528 11BA6F1984705DDC1DD9FF6BDD4DAECE f:\windows\$NtUninstallKB958215$\wininet.dll

[-] 2008-10-16 10:40 662528 639777A27F06974017C05206AFC47BFB f:\windows\$NtUninstallKB963027$\wininet.dll

[-] 2009-02-20 08:33 662528 88DDBB8A44814C499E7B5F10079BA287 f:\windows\$NtUninstallKB969897$\wininet.dll

[-] 2009-04-29 04:53 662528 BDB52F8671C14D7812C6E91B54A9580D f:\windows\ie7\wininet.dll

[-] 2007-08-13 16:54 818688 A4A0FC92358F39538A6494C42EF99FE9 f:\windows\ie7updates\KB969897-IE7\wininet.dll

[-] 2008-04-14 17:02 669184 80CA4DCDD3DAD65CB8800508076712E7 f:\windows\ServicePackFiles\i386\wininet.dll

[-] 2008-04-14 17:02 669184 80CA4DCDD3DAD65CB8800508076712E7 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\wininet.dll

[-] 2009-04-29 04:49 827392 D5E276ADDE1400549B5678873A804E6F f:\windows\SoftwareDistribution\Download\d808f18e189320d8152fa11e3fbaab20\SP3GDR\wininet.dll

[-] 2009-04-29 04:40 828928 478A5E95C6121A98673EE33DFCBE3400 f:\windows\SoftwareDistribution\Download\d808f18e189320d8152fa11e3fbaab20\SP3QFE\wininet.dll

[-] 2009-04-29 04:49 827392 D5E276ADDE1400549B5678873A804E6F f:\windows\system32\wininet.dll

[-] 2009-04-29 04:49 827392 D5E276ADDE1400549B5678873A804E6F f:\windows\system32\dllcache\wininet.dll

[-] 2006-01-13 02:28 359808 583E063FDC888CA30D05C2724B0D7EF4 f:\windows\$hf_mig$\KB913446\SP2GDR\tcpip.sys

[-] 2006-01-13 17:07 360448 5562CC0A47B2AEF06D3417B733F3C195 f:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys

[-] 2006-04-20 12:18 360576 B2220C618B42A2212A59D91EBD6FC4B4 f:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys

[-] 2007-10-30 16:53 360832 64798ECFA43D78C7178375FCDD16D8C8 f:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys

[-] 2008-06-20 10:44 360960 744E57C99232201AE98C49168B918F48 f:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys

[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D f:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys

[-] 2008-06-20 11:59 361600 AD978A1B783B5719720CFF204B666C8E f:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys

[-] 2008-06-20 10:45 360320 2A5554FC5B1E04E131230E3CE035C3F9 f:\windows\$NtServicePackUninstall$\tcpip.sys

[-] 2004-08-04 06:14 359040 9F4B36614A0FC234525BA224957DE55C f:\windows\$NtUninstallKB913446$\tcpip.sys

[-] 2002-09-11 12:00 332928 244A2F9816BC9B593957281EF577D976 f:\windows\$NtUninstallKB913446_0$\tcpip.sys

[-] 2006-01-13 02:28 359808 583E063FDC888CA30D05C2724B0D7EF4 f:\windows\$NtUninstallKB917953$\tcpip.sys

[-] 2006-04-20 11:51 359808 1DBF125862891817F374F407626967F4 f:\windows\$NtUninstallKB941644$\tcpip.sys

[-] 2008-04-13 19:20 361344 93EA8D04EC73A85DB02EB8805988F733 f:\windows\$NtUninstallKB951748$\tcpip.sys

[-] 2007-10-30 17:20 360064 90CAFF4B094573449A0872A0F919B178 f:\windows\$NtUninstallKB951748_0$\tcpip.sys

[-] 2008-04-13 19:20 361344 93EA8D04EC73A85DB02EB8805988F733 f:\windows\ServicePackFiles\i386\tcpip.sys

[-] 2008-04-13 19:20 361344 93EA8D04EC73A85DB02EB8805988F733 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\tcpip.sys

[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D f:\windows\system32\dllcache\tcpip.sys

[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D f:\windows\system32\drivers\tcpip.sys

[-] 2004-08-04 08:03 504832 732ED791711DF9C9DD15E5515BC681B8 f:\windows\$NtServicePackUninstall$\winlogon.exe

[-] 2008-04-14 17:03 510464 1247D4D5444E28519BBE31BE8AB4C029 f:\windows\ServicePackFiles\i386\winlogon.exe

[-] 2008-04-14 17:03 510464 1247D4D5444E28519BBE31BE8AB4C029 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\winlogon.exe

[-] 2008-04-14 17:03 510464 1247D4D5444E28519BBE31BE8AB4C029 f:\windows\system32\winlogon.exe

[-] 2004-08-04 06:14 182912 558635D3AF1C7546D26067D5D9B6959E f:\windows\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 19:20 182656 1DF7F42665C94B825322FAE71721130D f:\windows\ServicePackFiles\i386\ndis.sys

[-] 2008-04-13 19:20 182656 1DF7F42665C94B825322FAE71721130D f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\ndis.sys

[-] 2008-04-13 19:20 182656 1DF7F42665C94B825322FAE71721130D f:\windows\system32\drivers\ndis.sys

[-] 2004-08-04 06:00 29056 4448006B6BC60E6C027932CFC38D6855 f:\windows\$NtServicePackUninstall$\ip6fw.sys

[-] 2008-04-13 18:53 36608 3BB22519A194418D5FEC05D800A19AD0 f:\windows\ServicePackFiles\i386\ip6fw.sys

[-] 2008-04-13 18:53 36608 3BB22519A194418D5FEC05D800A19AD0 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\ip6fw.sys

[-] 2008-04-13 18:53 36608 3BB22519A194418D5FEC05D800A19AD0 f:\windows\system32\drivers\ip6fw.sys

[-] 2005-03-02 18:09 2061184 C6CF1974ACDB8329DAF9D001C0937CB0 f:\windows\$hf_mig$\KB890859\SP2GDR\ntkrnlpa.exe

[-] 2005-03-02 18:14 2061312 C26D84B802567E629D42861A11C7EC04 f:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe

[-] 2006-12-19 18:47 2063744 4BF54C0431A9BB0BCE6C821CD4018F7D f:\windows\$hf_mig$\KB929338\SP2QFE\ntkrnlpa.exe

[-] 2007-02-28 16:09 2063744 F51B8D8B0703518349096604E788B83E f:\windows\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe

[-] 2009-02-09 11:45 2067328 E03AE5E3171A627D58957B0437DEE4F9 f:\windows\$hf_mig$\KB956572\SP2QFE\ntkrnlpa.exe

[-] 2009-02-10 17:10 2070400 6A94A7317E28B6543D94174F9016BB68 f:\windows\$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe

[-] 2009-02-09 11:19 2070528 07EE73D79A7CA142463470AEF230082B f:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe

[-] 2008-08-14 13:41 2067328 3D9893723A1AEBF96A11E7E7514FF021 f:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe

[-] 2008-08-14 13:27 2070400 C92E65CBB38161373319BB11340DE919 f:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe

[-] 2008-08-14 17:28 2070400 DE961B54D30C7DD6AA6C3BD27D584E30 f:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe

[-] 2009-02-09 11:53 2062080 06A467DC3FF07102B058B2B41104662F f:\windows\$NtServicePackUninstall$\ntkrnlpa.exe

[-] 2002-09-11 12:00 1952128 13C45289C0E4F23CF129417DCA1F2F6E f:\windows\$NtUninstallKB885835_0$\ntkrnlpa.exe

[-] 2004-08-04 07:58 2061184 E0399688D466B7C3AFDFFB5A2ED9F351 f:\windows\$NtUninstallKB890859$\ntkrnlpa.exe

[-] 2004-10-28 01:29 1960064 D345DCF163BDE4E2AE74026077B657F0 f:\windows\$NtUninstallKB890859_0$\ntkrnlpa.exe

[-] 2005-03-02 18:09 2061184 C6CF1974ACDB8329DAF9D001C0937CB0 f:\windows\$NtUninstallKB929338$\ntkrnlpa.exe

[-] 2006-12-19 18:25 2061952 6D080DDC482E83A69C9A862C247FA50D f:\windows\$NtUninstallKB931784$\ntkrnlpa.exe

[-] 2008-04-14 16:41 2070272 6129DA5C68C13DCA12E77580730FD770 f:\windows\$NtUninstallKB956572$\ntkrnlpa.exe

[-] 2008-08-14 13:48 2062080 423B3DB6D565D24C1D4C97136AE6F42D f:\windows\$NtUninstallKB956572_0$\ntkrnlpa.exe

[-] 2007-02-28 16:05 2061952 57B09AD681C1D8DB77CCC3E92D8F5D14 f:\windows\$NtUninstallKB956841_0$\ntkrnlpa.exe

[-] 2009-02-10 17:10 2070400 6A94A7317E28B6543D94174F9016BB68 f:\windows\Driver Cache\i386\ntkrnlpa.exe

[-] 2008-04-14 16:41 2070272 6129DA5C68C13DCA12E77580730FD770 f:\windows\ServicePackFiles\i386\ntkrnlpa.exe

[-] 2008-04-14 16:41 2070272 6129DA5C68C13DCA12E77580730FD770 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\ntkrnlpa.exe

[-] 2009-02-10 17:10 2070400 6A94A7317E28B6543D94174F9016BB68 f:\windows\system32\ntkrnlpa.exe

[-] 2009-02-10 17:10 2070400 6A94A7317E28B6543D94174F9016BB68 f:\windows\system32\dllcache\ntkrnlpa.exe

[-] 2005-03-02 18:09 2183680 281A1E82F5F8FC0B2F4B57EF296A4240 f:\windows\$hf_mig$\KB890859\SP2GDR\ntoskrnl.exe

[-] 2005-03-02 18:15 2183936 5DB3E8DEC987B5D350E4A105DCEAEE6A f:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe

[-] 2006-12-19 18:47 2186368 4CB6C3B16587971C56AAA8A9B0511BC7 f:\windows\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe

[-] 2007-02-28 16:09 2186496 59DCA97DC201792C1CCF9FE621EE5ED7 f:\windows\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe

[-] 2009-02-09 11:45 2190464 35BEF358DAB3E53ADF93AAE4D64F4852 f:\windows\$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe

[-] 2009-02-09 11:27 2193408 27380B877348030B0662A39C47AAEC11 f:\windows\$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe

[-] 2009-02-10 17:19 2193536 7625D5BAFD2A4A8458468B139C893BB7 f:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe

[-] 2008-08-14 13:41 2190336 ACA664BEAF80F85C4BB4A4D86F3DF519 f:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe

[-] 2008-08-14 13:27 2193536 3E5E63D926C5E9F81045F3646815D2A1 f:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe

[-] 2008-08-14 17:28 2193536 E332B6DE826D4222A758E3264AD8D520 f:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe

[-] 2009-02-09 11:53 2184832 0F1A4A14A22DC4B839052DE174B57A33 f:\windows\$NtServicePackUninstall$\ntoskrnl.exe

[-] 2002-09-11 12:00 2046464 ED3086CF7C835D8A3FD0E6FBD95C0F53 f:\windows\$NtUninstallKB885835_0$\ntoskrnl.exe

[-] 2004-08-04 07:58 2185344 87AAEA3908E069FB1BE37380C895DFB8 f:\windows\$NtUninstallKB890859$\ntoskrnl.exe

[-] 2004-10-28 01:29 2092672 A49D4E759C43334350BBDFCF83194502 f:\windows\$NtUninstallKB890859_0$\ntoskrnl.exe

[-] 2005-03-02 18:09 2183680 281A1E82F5F8FC0B2F4B57EF296A4240 f:\windows\$NtUninstallKB929338$\ntoskrnl.exe

[-] 2006-12-19 18:25 2184704 F609063BAE4D058A4019C4D99A1FD8DD f:\windows\$NtUninstallKB931784$\ntoskrnl.exe

[-] 2008-04-14 16:42 2193408 140A1BAD8A6642C1386BB5B388EB447F f:\windows\$NtUninstallKB956572$\ntoskrnl.exe

[-] 2008-08-14 13:48 2184704 8A22E65D66B3AB7E7F07C290F435629F f:\windows\$NtUninstallKB956572_0$\ntoskrnl.exe

[-] 2007-02-28 16:05 2184704 CAAA8FD3C034A227691A43B60873F097 f:\windows\$NtUninstallKB956841_0$\ntoskrnl.exe

[-] 2009-02-09 11:27 2193408 27380B877348030B0662A39C47AAEC11 f:\windows\Driver Cache\i386\ntoskrnl.exe

[-] 2008-04-14 16:42 2193408 140A1BAD8A6642C1386BB5B388EB447F f:\windows\ServicePackFiles\i386\ntoskrnl.exe

[-] 2008-04-14 16:42 2193408 140A1BAD8A6642C1386BB5B388EB447F f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\ntoskrnl.exe

[-] 2009-02-09 11:27 2193408 27380B877348030B0662A39C47AAEC11 f:\windows\system32\ntoskrnl.exe

[-] 2009-02-09 11:27 2193408 27380B877348030B0662A39C47AAEC11 f:\windows\system32\dllcache\ntoskrnl.exe

[-] 2008-04-14 17:02 1037312 AA04F042A820BF1868E643575887E1A6 f:\windows\explorer.exe

[-] 2007-06-13 13:12 1036800 1D6245AFBD3FAABC16A885116BE1874D f:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe

[-] 2007-06-13 13:24 1036800 147E95A42A58CE99E403F7F57656BBEB f:\windows\$NtServicePackUninstall$\explorer.exe

[-] 2004-08-04 08:03 1035776 A1D7304A87FC3093150F5E3CC7B0F338 f:\windows\$NtUninstallKB938828$\explorer.exe

[-] 2008-04-14 17:02 1037312 AA04F042A820BF1868E643575887E1A6 f:\windows\ServicePackFiles\i386\explorer.exe

[-] 2008-04-14 17:02 1037312 AA04F042A820BF1868E643575887E1A6 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\explorer.exe

[-] 2009-02-09 09:56 111104 CE06E39F34BBF6B0ADA70F37F70CF0D8 f:\windows\$hf_mig$\KB956572\SP2QFE\services.exe

[-] 2009-02-09 11:27 111104 657B69389B893F440B07590C9E963F23 f:\windows\$hf_mig$\KB956572\SP3GDR\services.exe

[-] 2009-02-09 11:19 111104 D98A222A707FFE40043E533FE7A6BA24 f:\windows\$hf_mig$\KB956572\SP3QFE\services.exe

[-] 2009-02-09 10:11 111104 1A00FCECA4E29A6B4B33A9D0B3E7CBA0 f:\windows\$NtServicePackUninstall$\services.exe

[-] 2008-04-14 17:03 109056 B77BC5CD88EB96D4352AF5202EC4AEC2 f:\windows\$NtUninstallKB956572$\services.exe

[-] 2004-08-04 08:03 108544 39991CD3C17B7529D039151A88E84499 f:\windows\$NtUninstallKB956572_0$\services.exe

[-] 2008-04-14 17:03 109056 B77BC5CD88EB96D4352AF5202EC4AEC2 f:\windows\ServicePackFiles\i386\services.exe

[-] 2008-04-14 17:03 109056 B77BC5CD88EB96D4352AF5202EC4AEC2 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\services.exe

[-] 2009-02-09 11:27 111104 657B69389B893F440B07590C9E963F23 f:\windows\system32\services.exe

[-] 2009-02-09 11:27 111104 657B69389B893F440B07590C9E963F23 f:\windows\system32\dllcache\services.exe

[-] 2004-08-04 08:03 13312 34A82DEBEFB057FCCCBE15F619FC98A7 f:\windows\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 17:03 13312 8754210A3399D19610CE2D71E0C3E5D9 f:\windows\ServicePackFiles\i386\lsass.exe

[-] 2008-04-14 17:03 13312 8754210A3399D19610CE2D71E0C3E5D9 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\lsass.exe

[-] 2008-04-14 17:03 13312 8754210A3399D19610CE2D71E0C3E5D9 f:\windows\system32\lsass.exe

[-] 2004-08-04 08:03 15360 7DE46C9C40ABB58C8FDFE0212A3BF2B4 f:\windows\$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 17:02 15360 E98A8C802CDB31FCF4121D9DFBEA3677 f:\windows\ServicePackFiles\i386\ctfmon.exe

[-] 2008-04-14 17:02 15360 E98A8C802CDB31FCF4121D9DFBEA3677 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\ctfmon.exe

[-] 2008-04-14 17:02 15360 E98A8C802CDB31FCF4121D9DFBEA3677 f:\windows\system32\ctfmon.exe

[-] 2005-06-10 23:53 57856 DA81EC57ACD4CDC3D4C51CF3D409AF9F f:\windows\$hf_mig$\KB896423\SP2GDR\spoolsv.exe

[-] 2005-06-11 00:17 57856 AD3D9D191AEA7B5445FE1D82FFBB4788 f:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe

[-] 2005-06-10 23:53 57856 DA81EC57ACD4CDC3D4C51CF3D409AF9F f:\windows\$NtServicePackUninstall$\spoolsv.exe

[-] 2004-08-04 08:03 57856 CCCB8B94B17466EFB9DC27F42625B0E5 f:\windows\$NtUninstallKB896423$\spoolsv.exe

[-] 2002-09-11 12:00 51200 8E7A297C95DC2F21099AF213500359DE f:\windows\$NtUninstallKB896423_0$\spoolsv.exe

[-] 2008-04-14 17:03 57856 DB454135DE1A09FE7FEDA7B554B5CCA2 f:\windows\ServicePackFiles\i386\spoolsv.exe

[-] 2008-04-14 17:03 57856 DB454135DE1A09FE7FEDA7B554B5CCA2 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\spoolsv.exe

[-] 2008-04-14 17:03 57856 DB454135DE1A09FE7FEDA7B554B5CCA2 f:\windows\system32\spoolsv.exe

[-] 2004-08-04 08:03 24576 DE7A0EE4A6A28E6DFE3118EB22468DA6 f:\windows\$NtServicePackUninstall$\userinit.exe

[-] 2008-04-14 17:03 26112 6818A533ED3B2FA9936DF3DAF45352DF f:\windows\ServicePackFiles\i386\userinit.exe

[-] 2008-04-14 17:03 26112 6818A533ED3B2FA9936DF3DAF45352DF f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\userinit.exe

[-] 2008-04-14 17:03 26112 6818A533ED3B2FA9936DF3DAF45352DF f:\windows\system32\userinit.exe

[-] 2004-08-04 08:03 297472 E2CE999886A4636026F157DEB886AA94 f:\windows\$NtServicePackUninstall$\termsrv.dll

[-] 2008-04-14 17:02 297472 E0AEF86A594C9990D6321C5CA239C5B7 f:\windows\ServicePackFiles\i386\termsrv.dll

[-] 2008-04-14 17:02 297472 E0AEF86A594C9990D6321C5CA239C5B7 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\termsrv.dll

[-] 2008-04-14 17:02 297472 E0AEF86A594C9990D6321C5CA239C5B7 f:\windows\system32\termsrv.dll

[-] 2006-07-05 10:58 1026048 8672CE1E9BAF84EC0665D73DB8849EDB f:\windows\$hf_mig$\KB917422\SP2QFE\kernel32.dll

[-] 2007-04-16 16:11 1027072 68757F5935D6D76DD10975B7B7A9751D f:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll

[-] 2009-03-21 13:59 1030144 67A29642EC9A1ADA0768605B21AA4552 f:\windows\$hf_mig$\KB959426\SP2QFE\kernel32.dll

[-] 2009-03-21 14:09 1030656 CE7EFE07C7119C8CD09D953AD9ECA7CD f:\windows\$hf_mig$\KB959426\SP3GDR\kernel32.dll

[-] 2009-03-21 14:04 1032704 93E2307273AE7B2D5418E132902373A7 f:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll

[-] 2009-03-21 14:21 1027072 B30975B6B1B08A5A18AAC7E3577C7C53 f:\windows\$NtServicePackUninstall$\kernel32.dll

[-] 2004-08-04 08:03 1024512 54379BD67780FDBBE1590EEC142A659C f:\windows\$NtUninstallKB917422$\kernel32.dll

[-] 2006-07-05 10:56 1025024 F2352FB7D9E5C70374568724A32B5CB7 f:\windows\$NtUninstallKB935839$\kernel32.dll

[-] 2008-04-14 17:02 1030656 09BCB7171F8172C2BA0189FE1F9C25CB f:\windows\$NtUninstallKB959426$\kernel32.dll

[-] 2007-04-16 15:54 1025536 6557EA471552BB9AF16B66902D572BD5 f:\windows\$NtUninstallKB959426_0$\kernel32.dll

[-] 2008-04-14 17:02 1030656 09BCB7171F8172C2BA0189FE1F9C25CB f:\windows\ServicePackFiles\i386\kernel32.dll

[-] 2008-04-14 17:02 1030656 09BCB7171F8172C2BA0189FE1F9C25CB f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\kernel32.dll

[-] 2009-03-21 14:09 1030656 CE7EFE07C7119C8CD09D953AD9ECA7CD f:\windows\system32\kernel32.dll

[-] 2009-03-21 14:09 1030656 CE7EFE07C7119C8CD09D953AD9ECA7CD f:\windows\system32\dllcache\kernel32.dll

[-] 2004-08-04 08:03 17408 D5A792DB732622A393A0469FE6EAA728 f:\windows\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 17:02 17408 32167CE0150DC2A269D99689A143FB67 f:\windows\ServicePackFiles\i386\powrprof.dll

[-] 2008-04-14 17:02 17408 32167CE0150DC2A269D99689A143FB67 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\powrprof.dll

[-] 2008-04-14 17:02 17408 32167CE0150DC2A269D99689A143FB67 f:\windows\system32\powrprof.dll

[-] 2004-08-04 08:03 110080 7ADE4584ED6657CAE3D523CF101992BD f:\windows\$NtServicePackUninstall$\imm32.dll

[-] 2008-04-14 17:02 110080 58211BB9D2F5C761BFB504C2BBBA8D99 f:\windows\ServicePackFiles\i386\imm32.dll

[-] 2008-04-14 17:02 110080 58211BB9D2F5C761BFB504C2BBBA8D99 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\imm32.dll

[-] 2008-04-14 17:02 110080 58211BB9D2F5C761BFB504C2BBBA8D99 f:\windows\system32\imm32.dll

[-] 2004-08-04 07:57 25216 59549E9180CE29D832289E1A1D9E3C60 f:\windows\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-14 16:39 25088 380397621E94B32C744E7B2CC1330390 f:\windows\ServicePackFiles\i386\kbdclass.sys

[-] 2008-04-14 16:39 25088 380397621E94B32C744E7B2CC1330390 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\kbdclass.sys

[-] 2008-04-14 16:39 25088 380397621E94B32C744E7B2CC1330390 f:\windows\system32\drivers\kbdclass.sys

[-] 2004-08-04 08:03 822784 F0BAE7D75B268BA326D9323DD7C73D8F f:\windows\$NtServicePackUninstall$\comres.dll

[-] 2008-04-14 17:02 822784 49DEEDAED168FD4723934755BF55CCFE f:\windows\ServicePackFiles\i386\comres.dll

[-] 2008-04-14 17:02 822784 49DEEDAED168FD4723934755BF55CCFE f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\comres.dll

[-] 2008-04-14 17:02 822784 49DEEDAED168FD4723934755BF55CCFE f:\windows\system32\comres.dll

[-] 2004-08-04 08:03 22016 8DF7AC820F9B3FD5E713E9A74827931C f:\windows\$NtServicePackUninstall$\lpk.dll

[-] 2008-04-14 17:02 22016 FE6417AB01E9A5B124A58BE2B5DB663B f:\windows\ServicePackFiles\i386\lpk.dll

[-] 2008-04-14 17:02 22016 FE6417AB01E9A5B124A58BE2B5DB663B f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\lpk.dll

[-] 2008-04-14 17:02 22016 FE6417AB01E9A5B124A58BE2B5DB663B f:\windows\system32\lpk.dll

[-] 2002-09-11 12:00 4224 DA1F27D85E0D1525F6621372E7B685E9 f:\windows\system32\dllcache\beep.sys

[-] 2002-09-11 12:00 4224 DA1F27D85E0D1525F6621372E7B685E9 f:\windows\system32\drivers\beep.sys

[-] 2002-09-11 12:00 2944 73C1E1F395918BC2C6DD67AF7591A3AD f:\windows\system32\dllcache\null.sys

[-] 2002-09-11 12:00 2944 73C1E1F395918BC2C6DD67AF7591A3AD f:\windows\system32\drivers\null.sys

[-] 2006-02-15 00:30 142464 1EE7B434BA961EF845DE136224C30FEC f:\windows\$hf_mig$\KB900485\SP2QFE\aec.sys

[-] 2006-02-15 00:22 142464 1EE7B434BA961EF845DE136224C30FEC f:\windows\$NtServicePackUninstall$\aec.sys

[-] 2004-08-04 05:39 142464 841F385C6CFAF66B58FBD898722BB4F0 f:\windows\$NtUninstallKB900485$\aec.sys

[-] 2008-04-13 16:39 142592 8BED39E3C35D6A489438B8141717A557 f:\windows\ServicePackFiles\i386\aec.sys

[-] 2008-04-13 16:39 142592 8BED39E3C35D6A489438B8141717A557 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\aec.sys

[-] 2008-04-13 16:39 142592 8BED39E3C35D6A489438B8141717A557 f:\windows\system32\drivers\aec.sys

[-] 2006-11-01 19:19 927504 13E52326F0F19A1A8D34681E3444E8D1 f:\windows\$NtServicePackUninstall$\mfc40u.dll

[-] 2002-09-11 12:00 924432 8EED1D71C14C356684E586B0A7DB6BCE f:\windows\$NtUninstallKB924667$\mfc40u.dll

[-] 2008-04-14 17:02 927504 2407EADA5E2E146AB51E925F151DDAA5 f:\windows\ServicePackFiles\i386\mfc40u.dll

[-] 2008-04-14 17:02 927504 2407EADA5E2E146AB51E925F151DDAA5 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\mfc40u.dll

[-] 2008-04-14 17:02 927504 2407EADA5E2E146AB51E925F151DDAA5 f:\windows\system32\mfc40u.dll

[-] 2005-07-26 04:42 397824 B52BD9DB0BD6D01BDB01B0DBFBB804CD f:\windows\$hf_mig$\KB902400\SP2GDR\rpcss.dll

[-] 2005-07-26 04:36 398336 23B465FD2354D83218AC091D0EE6D91B f:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll

[-] 2009-02-09 10:03 401408 72C2074FFA3B38078173A11008198019 f:\windows\$hf_mig$\KB956572\SP2QFE\rpcss.dll

[-] 2009-02-09 10:56 401408 D9883335CC1C17AFC3A09C8AC3E4DBE4 f:\windows\$hf_mig$\KB956572\SP3GDR\rpcss.dll

[-] 2009-02-09 11:00 401408 D8D28F6CABEC7D42B8E487E290563B9A f:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll

[-] 2009-02-09 10:22 399360 75A47F738E7DB78000A55D743BDEE275 f:\windows\$NtServicePackUninstall$\rpcss.dll

[-] 2004-08-04 08:03 395776 DDE0457B7706C3AD4E5AFDD502698A06 f:\windows\$NtUninstallKB902400$\rpcss.dll

[-] 2002-09-11 12:00 260608 18CC35AADF5D21F564246FC580A43378 f:\windows\$NtUninstallKB902400_0$\rpcss.dll

[-] 2008-04-14 17:02 399360 70357A0F411DF464F9FF434F2DDCB68F f:\windows\$NtUninstallKB956572$\rpcss.dll

[-] 2005-07-26 04:42 397824 B52BD9DB0BD6D01BDB01B0DBFBB804CD f:\windows\$NtUninstallKB956572_0$\rpcss.dll

[-] 2008-04-14 17:02 399360 70357A0F411DF464F9FF434F2DDCB68F f:\windows\ServicePackFiles\i386\rpcss.dll

[-] 2008-04-14 17:02 399360 70357A0F411DF464F9FF434F2DDCB68F f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\rpcss.dll

[-] 2009-02-09 10:56 401408 D9883335CC1C17AFC3A09C8AC3E4DBE4 f:\windows\system32\rpcss.dll

[-] 2009-02-09 10:56 401408 D9883335CC1C17AFC3A09C8AC3E4DBE4 f:\windows\system32\dllcache\rpcss.dll

[-] 2004-08-04 08:03 33792 1405B1431F51CAB25FE9B2ECF13CB198 f:\windows\$NtServicePackUninstall$\msgsvc.dll

[-] 2008-04-14 17:02 33792 C56A45A03DCA11712DE9FDF98224230B f:\windows\ServicePackFiles\i386\msgsvc.dll

[-] 2008-04-14 17:02 33792 C56A45A03DCA11712DE9FDF98224230B f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\msgsvc.dll

[-] 2008-04-14 17:02 33792 C56A45A03DCA11712DE9FDF98224230B f:\windows\system32\msgsvc.dll

[-] 2006-08-25 15:51 617472 F67AE54BCA3873D48A1AC722A9CA70BF f:\windows\$NtServicePackUninstall$\comctl32.dll

[-] 2004-08-04 08:03 611328 8A473F553E9E45DB4EF6FF11AB54E4E1 f:\windows\$NtUninstallKB923191$\comctl32.dll

[-] 2008-04-14 17:02 617472 EFD9660AF9177D90018AC9A9AA42310F f:\windows\ServicePackFiles\i386\comctl32.dll

[-] 2008-04-14 17:02 617472 EFD9660AF9177D90018AC9A9AA42310F f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\comctl32.dll

[-] 2008-04-14 17:00 1054208 1EAA8CD46BFB33307ACAF10EFF80E8BD f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\asms\60\msft\windows\common\controls\comctl32.dll

[-] 2008-04-14 17:02 617472 EFD9660AF9177D90018AC9A9AA42310F f:\windows\system32\comctl32.dll

[-] 2002-09-11 12:00 921088 AEF3D788DBF40C7C4D204EA45EB0C505 f:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll

[-] 2002-09-11 12:00 921600 1B5D729AFC4B6FE3EC397B74DB7A1BAF f:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll

[-] 2005-08-31 18:32 925184 34DE34A04542617FB84C1E501F5E9D4B f:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1740_x-ww_7cb8ab44\comctl32.dll

[-] 2004-08-04 08:01 1050624 FBCF5EF8A261632D1CB45B20ACEDE4B1 f:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

[-] 2006-08-25 15:51 1054208 F567148940C1F5D93070822C0F3C0C34 f:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll

[-] 2008-04-14 17:00 1054208 1EAA8CD46BFB33307ACAF10EFF80E8BD f:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll

[-] 2002-09-11 12:00 12032 63F517B1A87DABF3F5ACB8A7952FC1D1 f:\windows\system32\drivers\acpiec.sys

[-] 2004-08-04 08:03 5120 0B10A3122527910CE60D23A7F29C28B1 f:\windows\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 17:02 5120 E6DCF5DD55AC2655971A478718307D18 f:\windows\ServicePackFiles\i386\sfc.dll

[-] 2008-04-14 17:02 5120 E6DCF5DD55AC2655971A478718307D18 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\sfc.dll

[-] 2008-04-14 17:02 5120 E6DCF5DD55AC2655971A478718307D18 f:\windows\system32\sfc.dll

[-] 2004-08-04 08:03 407040 B3FDAC7A518B6B684BEFE792DC1DC560 f:\windows\$NtServicePackUninstall$\netlogon.dll

[-] 2008-04-14 17:02 407040 E6A7071DF6855AB7CCCC220AC3AAD087 f:\windows\ServicePackFiles\i386\netlogon.dll

[-] 2008-04-14 17:02 407040 E6A7071DF6855AB7CCCC220AC3AAD087 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\netlogon.dll

[-] 2008-04-14 17:02 407040 E6A7071DF6855AB7CCCC220AC3AAD087 f:\windows\system32\netlogon.dll

[-] 2004-08-04 08:03 170496 0B96A1E4252F663222C9C3BAC89F596C f:\windows\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 17:02 171008 81CBF363C414620CAA61BD6843D8FDB9 f:\windows\ServicePackFiles\i386\srsvc.dll

[-] 2008-04-14 17:02 171008 81CBF363C414620CAA61BD6843D8FDB9 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\srsvc.dll

[-] 2008-04-14 17:02 171008 81CBF363C414620CAA61BD6843D8FDB9 f:\windows\system32\srsvc.dll

[-] 2004-08-04 08:03 437248 AC75E028773CBBD7D8B1313F382E7C05 f:\windows\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 17:02 437248 AC1A78237B53044735693633F8235468 f:\windows\ServicePackFiles\i386\ntmssvc.dll

[-] 2008-04-14 17:02 437248 AC1A78237B53044735693633F8235468 f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\ntmssvc.dll

[-] 2008-04-14 17:02 437248 AC1A78237B53044735693633F8235468 f:\windows\system32\ntmssvc.dll

[-] 2004-08-04 08:03 89088 8E033B9D88FCDD9FCBD1ED74A2E4CEC7 f:\windows\$NtServicePackUninstall$\rasauto.dll

[-] 2008-04-14 17:02 88576 0575D034B1292CA3A9BB9F67A8EE289C f:\windows\ServicePackFiles\i386\rasauto.dll

[-] 2008-04-14 17:02 88576 0575D034B1292CA3A9BB9F67A8EE289C f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\rasauto.dll

[-] 2008-04-14 17:02 88576 0575D034B1292CA3A9BB9F67A8EE289C f:\windows\system32\rasauto.dll

[-] 2004-08-04 08:03 1548288 486594A19F7AEDEBEA600855FFD5E914 f:\windows\$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-04-14 17:02 1571840 328CBDD2445F5B3A047644567EEB557F f:\windows\ServicePackFiles\i386\sfcfiles.dll

[-] 2008-04-14 17:02 1571840 328CBDD2445F5B3A047644567EEB557F f:\windows\SoftwareDistribution\Download\52e37a490e891c02ec3dfa4c57672666\sfcfiles.dll

[-] 2008-04-14 17:02 1571840 328CBDD2445F5B3A047644567EEB557F f:\windows\system32\sfcfiles.dll

[-] 2008-04-14 17:02 1571840 328CBDD2445F5B3A047644567EEB557F f:\windows\system32\dllcache\sfcfiles.dll

.

((((((((((((((((((((((((((((( SnapShot@2009-07-24_20.29.13 )))))))))))))))))))))))))))))))))))))))))

.

+ 2006-03-12 18:46 . 2006-03-12 18:46 262144 f:\windows\system32\config\systemprofile\ntuser.dat

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="f:\windows\system32\ctfmon.exe" [2008-04-14 15360]

"msnmsgr"="f:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]

"H/PC Connection Agent"="f:\program files\Microsoft ActiveSync\wcescomm.exe" [2005-11-15 1204224]

"Google Update"="f:\documents and settings\Judith\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-05-03 133104]

"Reg Tool"="f:\program files\Reg Tool\Reg Tool.exe" [2009-07-14 37455112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NeroFilterCheck"="f:\windows\system32\NeroCheck.exe" [2001-07-09 155648]

"BluetoothAuthenticationAgent"="bthprops.cpl" - f:\windows\system32\bthprops.cpl [2008-04-14 110592]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="f:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

f:\documents and settings\Judith\Menu Start\Programma's\Opstarten\

UltimateZip Quick Start.lnk - f:\program files\UltimateZip 2007\uzqkst.exe [2007-11-6 834048]

f:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

Exif Launcher.lnk - f:\program files\FinePixViewer\QuickDCF.exe [2002-1-9 200704]

Microsoft Office.lnk - f:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoThumbnailCache"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"f:\\Program Files\\Messenger\\msmsgs.exe"=

"f:\program files\Microsoft ActiveSync\rapimgr.exe"= f:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager

"f:\program files\Microsoft ActiveSync\wcescomm.exe"= f:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager

"f:\program files\Microsoft ActiveSync\WCESMgr.exe"= f:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"f:\\Program Files\\MSN Messenger\\msnmsgr.exe"=

"f:\\Program Files\\MSN Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

S3 alcan5ln;SpeedTouch USB ADSL RFC1483 Networking Driver (NDIS);f:\windows\system32\drivers\alcan5ln.sys [7-4-2005 17:51 36256]

.

Inhoud van de 'Gedeelde Taken' map

2009-07-24 f:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1123561945-813497703-1957994488-1004Core.job

- f:\documents and settings\Judith\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-05-03 08:49]

2009-07-24 f:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1123561945-813497703-1957994488-1004UA.job

- f:\documents and settings\Judith\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-05-03 08:49]

2009-07-23 f:\windows\Tasks\OGADaily.job

- f:\windows\system32\OGAVerify.exe [2008-12-31 15:04]

2009-07-24 f:\windows\Tasks\OGALogon.job

- f:\windows\system32\OGAVerify.exe [2008-12-31 15:04]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

mSearch Bar = hxxp://www.easywebsearch.nl

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCman000

IE: &Windows Live Search - f:\program files\Windows Live Toolbar\msntb.dll/search.htm

IE: Add to Windows &Live Favorites - Sign In

IE: E&xporteren naar Microsoft Excel - f:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

IE: Openen in een nieuwe achtergrondtab - f:\program files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/229?6b0038e72f4c49a18790888e418073c4

IE: Openen in een nieuwe voorgrondtab - f:\program files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/230?6b0038e72f4c49a18790888e418073c4

DPF: DirectAnimation Java Classes - file://f:\windows\Java\classes\dajava.cab

DPF: Microsoft XML Parser for Java - file://f:\windows\Java\classes\xmldso.cab

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2009-07-24 23:30

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]

"3140710900063D11C8EF10054038389C"="F?\\WINDOWS\\System32\\FM20ENU.DLL"

"3140110900063D11C8EF10054038389C"="F?\\WINDOWS\\System32\\FM20ENU.DLL"

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'explorer.exe'(1716)

f:\windows\system32\WPDShServiceObj.dll

f:\windows\system32\PortableDeviceTypes.dll

f:\windows\system32\PortableDeviceApi.dll

.

Voltooingstijd: 2009-07-24 23:36

ComboFix-quarantined-files.txt 2009-07-24 21:36

ComboFix2.txt 2009-07-24 21:04

ComboFix3.txt 2009-07-24 20:38

Pre-Run: 5 759 938 560 bytes beschikbaar

Post-Run: 5 747 986 432 bytes beschikbaar

523 --- E O F --- 2009-07-22 11:19

niet op het stuk "\Judith\" letten ; deze pc was ooit van mijn zus maar die is nu het huis uit

kape · 25 juli 2009

Download HiJackThis

Dubbelklik op HJTInstall.exe

Hijackthis wordt nu op je PC geïnstalleerd, een snelkoppeling wordt op je bureaublad geplaatst. Klik op "Do a systemscan and save a logfile". en hang dit logje aan je volgende bericht.

NB. Ben je een gebruiker van Windows Vista dan moet je eerst rechtsklikken op HijackThis.exe en dan kiezen voor "Run as Administrator".

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

f:\temp\sp.exe

f:\windows\system32\REN1A.tmp

f:\windows\system32\REN19.tmp

f:\windows\system32\REN18.tmp

f:\windows\system32\RENE.tmp

f:\windows\system32\REND.tmp

f:\windows\system32\RENC.tmp

f:\windows\system32\REN95.tmp

f:\windows\system32\REN94.tmp

f:\windows\system32\REN93.tmp

f:\windows\system32\REN68.tmp

f:\windows\system32\REN67.tmp

f:\windows\system32\REN66.tmp

f:\windows\system32\REN5C.tmp

f:\windows\system32\REN5B.tmp

f:\windows\system32\REN5A.tmp

f:\windows\system32\REN25.tmp

f:\windows\system32\REN24.tmp

f:\windows\system32\REN23.tmp

f:\windows\system32\REN12.tmp

f:\windows\system32\REN11.tmp

f:\windows\system32\REN10.tmp

f:\windows\system32\REN6E.tmp

f:\windows\system32\REN6D.tmp

f:\windows\system32\REN6C.tmp

f:\windows\system32\RENB6.tmp

f:\windows\system32\RENB5.tmp

f:\windows\system32\RENB4.tmp

f:\windows\system32\REN1F.tmp

f:\windows\system32\REN1E.tmp

f:\windows\system32\REN1D.tmp

f:\windows\system32\REN17.tmp

f:\windows\system32\REN16.tmp

f:\windows\system32\REN15.tmp

f:\windows\system32\REN6B.tmp

f:\windows\system32\REN6A.tmp

f:\windows\system32\REN69.tmp

f:\windows\system32\REN2E.tmp

f:\windows\system32\REN2D.tmp

f:\windows\system32\REN2C.tmp

f:\windows\system32\REN77.tmp

f:\windows\system32\REN76.tmp

f:\windows\system32\REN75.tmp

Folder::

f:\program files\Common Files\Java

f:\program files\Java

f:\documents and settings\Judith\Application Data\Reg Tool

f:\program files\Reg Tool

Registry::

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Reg Tool"=-

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht samen met het logje van HijackThis.

rapid · 25 juli 2009

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:47:21, on 2009-07-25

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16850)

Boot mode: Normal

Running processes:

F:\WINDOWS\System32\smss.exe

F:\WINDOWS\system32\winlogon.exe

F:\WINDOWS\system32\services.exe

F:\WINDOWS\system32\lsass.exe

F:\WINDOWS\system32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\system32\spoolsv.exe

F:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

F:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\system32\WgaTray.exe

F:\WINDOWS\Explorer.EXE

F:\WINDOWS\system32\rundll32.exe

F:\WINDOWS\system32\ctfmon.exe

F:\Program Files\MSN Messenger\msnmsgr.exe

F:\Program Files\Microsoft ActiveSync\wcescomm.exe

F:\Program Files\Reg Tool\Reg Tool.exe

F:\PROGRA~1\MI3AA1~1\rapimgr.exe

F:\Program Files\FinePixViewer\QuickDCF.exe

F:\Program Files\UltimateZip 2007\uzqkst.exe

F:\Documents and Settings\Judith\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

F:\Documents and Settings\Judith\Bureaublad\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = Easywebsearch

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - (no file)

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)

O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "F:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [H/PC Connection Agent] "F:\Program Files\Microsoft ActiveSync\wcescomm.exe"

O4 - HKCU\..\Run: [Google Update] "F:\Documents and Settings\Judith\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [Reg Tool] F:\Program Files\Reg Tool\Reg Tool.exe -boot

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Startup: UltimateZip Quick Start.lnk = F:\Program Files\UltimateZip 2007\uzqkst.exe

O4 - Global Startup: Exif Launcher.lnk = F:\Program Files\FinePixViewer\QuickDCF.exe

O4 - Global Startup: Microsoft Office.lnk = F:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCman000

O8 - Extra context menu item: &Windows Live Search - res://F:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: Add to Windows &Live Favorites - Sign In

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Openen in een nieuwe achtergrondtab - res://F:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/229?6b0038e72f4c49a18790888e418073c4

O8 - Extra context menu item: Openen in een nieuwe voorgrondtab - res://F:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/230?6b0038e72f4c49a18790888e418073c4

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - F:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - F:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra 'Tools' menuitem: Mobiele favorieten maken - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - F:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d

kape · 25 juli 2009

Dit is slechts een deeltje van het log van HiJackThis. Zou je aub het volledige log van HJT willen posten ? En dan ook nog een nieuw logje van Combofix ?

rapid · 25 juli 2009

sorry, hier komt het:

HiJackThis: