anoniem Geplaatst: 22 december 2012 Delen Geplaatst: 22 december 2012 Hallo iedereen, Haal regelmatig wat tips, tricks en tutorials van de site. Vind het leuk om zo wat dingen bij te leren, maar nu toch maar eens een account aangemaakt omdat ik me hier toch maar niet aan waag! :wink: Ik heb in mijn processen/opstart venster een programma waarvan ik niet goed weet wat het is, namelijk: tcbhn.exe Opstart venster: tcbhn onbenkend C:\Users\Marlo\AppData\RoamingBROWSE~1\tcbhn.exe -interval=10 -IEhome=0 -IEsearch=0 enz.. Ik vroeg me af of iemand weet wat het is en hoe ik het kan verwijderen? Las wel iets over "browser companion".. misschien dat het daar iets mee te maken heeft? Heb alvast een logje met hijackthis gemaakt, aangezien jullie daar vaak naar vragen. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:33:12, on 22-12-2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16457) Boot mode: Normal Running processes: C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe C:\Users\Marlo\AppData\Roaming\BrowserCompanion\tcbhn.exe C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe C:\Program Files\ASUS\TurboV\TurboV.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\BitTorrent\BitTorrent.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Marlo\Downloads\HijackThis.exe C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [TurboV] "C:\Program Files\ASUS\TurboV\TurboV.exe" -b O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [ROC_roc_ssl_v12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKCU\..\Run: [Google Update] "C:\Users\Marlo\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (file missing) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: DVM Meta Data Export Service (MDES) - DeviceVM - C:\ASUS.SYS\CONFIG\DVMExportService.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater13.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9053 bytes [/img] Quote Link naar reactie
0 anoniem Geplaatst: 22 december 2012 Auteur Delen Geplaatst: 22 december 2012 Volgens google is het een trojan. Wacht het advies van abraham54 even af. https://www.google.com/search?q=tcbhn.exe Quote Link naar reactie
0 anoniem Geplaatst: 22 december 2012 Auteur Delen Geplaatst: 22 december 2012 ah.. dus toch. Zal ik doen, bedankt voor het snelle antwoord alvast Quote Link naar reactie
0 anoniem Geplaatst: 22 december 2012 Auteur Delen Geplaatst: 22 december 2012 We gaan jouw Windows reinigen. [color=#FF0000:32af51845f][b:32af51845f]Stap •1•[/b:32af51845f][/color:32af51845f] Download de [url=http://thisisudax.org/downloads/JRT.exe][b:32af51845f][color=blue:32af51845f]Junkware Removal Tool by Thisisu[/color:32af51845f][/b:32af51845f][/url] naar je bureaublad[list:32af51845f][*:32af51845f]Het is aanbevolen om beveiligingssoftware tijdelijk uit te schakelen, deze kan namelijk conflicteren met JRT.exe [*:32af51845f]Windows XP: Start de tool doormiddel van dubbelklik. [*:32af51845f]Windows Vista/7/8: Rechtsklik JRT.exe en kies voor "Uitvoeren als administrator". [*:32af51845f]De tool zal daarna je systeem scannen. [*:32af51845f]De scan kan afhankelijk van je systeemspecificaties soms vrij lang duren, wacht geduldig af. [*:32af51845f]Als de scan voltooid is zal een logje (JRT.txt) op je bureaublad opgeslagen worden en automatisch openen. [*:32af51845f]Post de inhoud van deze log in je volgende bericht.[/list:u:32af51845f] [color=#FF0000:32af51845f][b:32af51845f]Stap •2•[/b:32af51845f][/color:32af51845f] [b:32af51845f]Welk programma[/b:32af51845f]: [color=#008000:32af51845f][b:32af51845f]Malwarebytes MBAM[/b:32af51845f][/color:32af51845f] [b:32af51845f]Waarvoor/waarom[/b:32af51845f]: gratis specialistische ondemandscanner om Windows snel te onderzoeken op- en te ontdoen van spy- & malware. [b:32af51845f]Moeilijkheidsgraad[/b:32af51845f]: geen. [b:32af51845f]Download [color=#008000:32af51845f]Malwarebytes MBAM[/color:32af51845f] via één van deze locaties[/b:32af51845f]: [list:32af51845f][*:32af51845f][url=http://www.softpedia.com/result.php?sid=&pid=1-423&r=Z2V0L0FudGl2aXJ1cy9NYWx3YXJlYnl0ZXMtQW50aS1NYWx3YXJlLnNodG1s][color=#FF0000:32af51845f][b:32af51845f]Softpedia.com[/b:32af51845f][/color:32af51845f][/url][*:32af51845f][url=http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html][color=#FF0000:32af51845f][b:32af51845f]Majorgeeks.com[/b:32af51845f][/color:32af51845f][/url][/list:u:32af51845f] [b:32af51845f]Allereerst[/b:32af51845f]:[list:32af51845f][*:32af51845f] Al meteen na de installatie wil 'MBAM' zijn database opwaarderen – toestaan dus. [*:32af51845f] Ook bij herhaald gebruik: eerst [color=#008000:32af51845f][b:32af51845f]Malwarebytes MBAM[/b:32af51845f][/color:32af51845f] updaten via de tab 'Update'![/list:u:32af51845f] [b:32af51845f][color=#008000:32af51845f]Malwarebytes MBAM[/color:32af51845f] opstarten[/b:32af51845f]: [list:32af51845f][*:32af51845f] [b:32af51845f][color=#0000FF:32af51845f]Sluit nu eerst alle nog openstaande programmavensters![/color:32af51845f][/b:32af51845f] [list:32af51845f][*:32af51845f][b:32af51845f][color=#0000FF:32af51845f]Windows 2000[/color:32af51845f][/b:32af51845f] en [color=#0000FF:32af51845f][b:32af51845f]Windows XP[/b:32af51845f][/color:32af51845f]: dubbelklik op de MBAM -snelkoppeling. [*:32af51845f][color=#0000FF:32af51845f][b:32af51845f]Windows Vista[/b:32af51845f][/color:32af51845f], [color=#0000FF:32af51845f][b:32af51845f]Windows 7[/b:32af51845f][/color:32af51845f] en [color=#0000FF:32af51845f][b:32af51845f]Windows 8[/b:32af51845f][/color:32af51845f]: rechtsklik op de MBAM-snelkoppeling en dan kiezen voor Als Administrator uitvoeren.[/list:u:32af51845f][/list:u:32af51845f] [list:32af51845f][*:32af51845f][b:32af51845f]Let op:[/b:32af51845f] [list:32af51845f][*:32af51845f][color=#008000:32af51845f][b:32af51845f]Malwarebytes MBAM[/b:32af51845f][/color:32af51845f] verstrekt nu de volledige versie van MBAM. [*:32af51845f]Bij de eerste start kijg je de mogelijkheid de gratis probeerversie van Malwarebytes AntiMalware tijdelijk te gebruiken. [*:32af51845f]Onafhankelijk van welke antivirusprogramma in jouw Windows adviseer ik dan voor de gratis versie te gaan en dus het vinkje bij de probeerversie te verwijderen. [*:32af51845f]Zodoende zal [color=#008000:32af51845f][b:32af51845f]Malwarebytes MBAM[/b:32af51845f][/color:32af51845f] als gratis versie verder te gebruiken zijn[/list:u:32af51845f] [img:32af51845f]http://www.imgdumper.nl/uploads5/5006440296e1a/5006440291bd9-MBAM_4.jpg[/img:32af51845f] [*:32af51845f][b:32af51845f]Doe ook nog het volgende:[/b:32af51845f] [list:32af51845f][*:32af51845f]Zodra het programma gestart is, ga dan naar het tabblad "[b:32af51845f]Instellingen[/b:32af51845f]". [*:32af51845f]Vink hier aan: "[b:32af51845f]Sluit Internet Explorer tijdens verwijdering van malware[/b:32af51845f]".[/list:u:32af51845f][/list:u:32af51845f] [b:32af51845f]Scannen[/b:32af51845f]: [list:32af51845f][*:32af51845f] Bij het starten [color=#008000:32af51845f][b:32af51845f]Malwarebytes MBAM[/b:32af51845f][/color:32af51845f] kies je voor 'Snelle Scan'. [*:32af51845f]Het scannen kan een tijdje duren, dus wees geduldig. Indien de scan voltooid is, klik dan op de knop 'OK'. [*:32af51845f]Klik daarna op de knop 'Bekijk Resultaten' om de resultaten te zien.[/list:u:32af51845f] [b:32af51845f]Infecties gevonden[/b:32af51845f]: [list:32af51845f][*:32af51845f]Klik nu eerst op OK om de melding weg te klikken [*:32af51845f]Klik vervolgens rechtsonder op de knop Bekijk resultaten. [*:32af51845f]Zorg er nu voor dat alle gevonden infecties aangevinkt zijn, en klik linksonder op Verwijder geselecteerde. [*:32af51845f]Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten. [*:32af51845f]Indien 'MBAM' moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven – dan telkens op 'OK' klikken! [*:32af51845f]Daarna zal [color=#008000:32af51845f][b:32af51845f]Malwarebytes MBAM[/b:32af51845f][/color:32af51845f] vragen om de Computer opnieuw op te starten - dus sta toe dat de computer opnieuw opgestart wordt.[/list:u:32af51845f] [b:32af51845f]MBAM-Log[/b:32af51845f]: [list:32af51845f][*:32af51845f] Het log wordt automatisch bewaard door [color=#008000:32af51845f][b:32af51845f]Malwarebytes MBAM[/b:32af51845f][/color:32af51845f] en dat kan je terugvinden door in het hoofdmenu van 'MBAM' op de tab 'Logbestanden' te klikken.[/list:u:32af51845f] [color=#008000:32af51845f][b:32af51845f]Post aansluitend in je volgende bericht de inhoud van het MBAM-log.[/b:32af51845f][/color:32af51845f] Quote Link naar reactie
0 anoniem Geplaatst: 23 december 2012 Auteur Delen Geplaatst: 23 december 2012 Hoi Abraham54, Allereerst bedankt voor je hulp. Hierbij die logs: JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.2.4 (12.21.2012:3) OS: Windows 7 Home Premium x64 Ran by Marlo on zo 23-12-2012 at 14:06:58,02 Blog: http://thisisudax.blogspot.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully deleted: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\toolbar\\{95b7759c-8c7f-4bf1-b163-73684a933233} Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\searchscopes\\DefaultScope Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\\DefaultScope Successfully repaired: [Registry Value] hkey_users\.default\software\microsoft\internet explorer\searchscopes\\DefaultScope Successfully repaired: [Registry Value] hkey_users\s-1-5-18\software\microsoft\internet explorer\searchscopes\\DefaultScope Successfully repaired: [Registry Value] hkey_users\s-1-5-19\software\microsoft\internet explorer\searchscopes\\DefaultScope Successfully repaired: [Registry Value] hkey_users\s-1-5-20\software\microsoft\internet explorer\searchscopes\\DefaultScope Successfully repaired: [Registry Value] hkey_users\S-1-5-21-500485560-426588622-2746000316-1000\software\microsoft\internet explorer\searchscopes\\DefaultScope ~~~ Registry Keys Successfully deleted: [Registry Key] hkey_local_machine\software\browsercompanion Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\scripthelper.exe Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\tdataprotocol.dll Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\updatebho.dll Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\viprotocol.dll Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\wit4ie.dll Successfully deleted: [Registry Key] hkey_local_machine\software\classes\protocols\handler\viprotocol Successfully deleted: [Registry Key] hkey_local_machine\software\classes\s Successfully deleted: [Registry Key] hkey_local_machine\software\classes\scripthelper.scripthelperapi Successfully deleted: [Registry Key] hkey_local_machine\software\classes\scripthelper.scripthelperapi.1 Successfully deleted: [Registry Key] hkey_local_machine\software\classes\viprotocol.viprotocolole Successfully deleted: [Registry Key] hkey_local_machine\software\classes\viprotocol.viprotocolole.1 Successfully deleted: [Registry Key] hkey_classes_root\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233} Successfully deleted: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{95b7759c-8c7f-4bf1-b163-73684a933233} Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{95b7759c-8c7f-4bf1-b163-73684a933233} ~~~ Files Successfully deleted: [File] C:\eula.1028.txt Successfully deleted: [File] C:\eula.1031.txt Successfully deleted: [File] C:\eula.1033.txt Successfully deleted: [File] C:\eula.1036.txt Successfully deleted: [File] C:\eula.1040.txt Successfully deleted: [File] C:\eula.1041.txt Successfully deleted: [File] C:\eula.1042.txt Successfully deleted: [File] C:\eula.1049.txt Successfully deleted: [File] C:\eula.2052.txt Successfully deleted: [File] C:\install.res.1028.dll Successfully deleted: [File] C:\install.res.1031.dll Successfully deleted: [File] C:\install.res.1033.dll Successfully deleted: [File] C:\install.res.1036.dll Successfully deleted: [File] C:\install.res.1040.dll Successfully deleted: [File] C:\install.res.1041.dll Successfully deleted: [File] C:\install.res.1042.dll Successfully deleted: [File] C:\install.res.1049.dll Successfully deleted: [File] C:\install.res.2052.dll Successfully deleted: [File] C:\install.res.3082.dll ~~~ Folders Successfully deleted: [Folder] "C:\Users\Marlo\AppData\Roaming\browsercompanion" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on zo 23-12-2012 at 14:10:47,96 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ MBAM log Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Databaseversie: v2012.12.23.03 Windows 7 x64 NTFS Internet Explorer 9.0.8112.16421 Marlo :: M-PC [administrator] 23-12-2012 14:31:48 mbam-log-2012-12-23 (14-31-48).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 223543 Verstreken tijd: 1 minuut/minuten, 16 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) (einde) Quote Link naar reactie
0 anoniem Geplaatst: 23 december 2012 Auteur Delen Geplaatst: 23 december 2012 Je mag met het volgende verder gaan: [b:5411ce277a]Welk programma[/b:5411ce277a]: [color=#008000:5411ce277a][b:5411ce277a]ComboFix[/b:5411ce277a][/color:5411ce277a] [b:5411ce277a]Waarvoor/waarom[/b:5411ce277a]: Zeer specialistische scanner om Windows diepgaand te onderzoeken en op te schonen. [b:5411ce277a]Moeilijkheidsgraad[/b:5411ce277a]: Min of meer lastige voorbereidingsfase, dus lees alles eerst goed. [b:5411ce277a]Downloadlokatie[/b:5411ce277a]: Dit programma absoluut naar het bureaublad downloaden! [b:5411ce277a]Download ComboFix via één van deze locaties[/b:5411ce277a]: [list:5411ce277a][*:5411ce277a][url=http://download.bleepingcomputer.com/sUBs/ComboFix.exe][b:5411ce277a]Bleepingcomputer[/b:5411ce277a][/url] [*:5411ce277a][url=http://www.forospyware.com/sUBs/ComboFix.exe][b:5411ce277a]ForoSpyware[/b:5411ce277a][/url] [*:5411ce277a][url=http://subs.geekstogo.com/ComboFix.exe][b:5411ce277a]Geekstogo[/b:5411ce277a][/url][/list:u:5411ce277a] [url=http://www.bleepingcomputer.com/combofix/nl/hoe-dient-combofix-gebruikt-te-worden][b:5411ce277a][color=#0000FF:5411ce277a]Hier[/color:5411ce277a][/b:5411ce277a][/url] zie je hoe je ComboFix moet gebruiken. Antivirusprogramma en actieve malwarescanners dienen al voor je ComboFix start gedeaktiveert zijn! [url=http://www.hijackthis.nl/forum/viewtopic.php?f=86&t=32608][b:5411ce277a][color=#0000FF:5411ce277a]Hier[/color:5411ce277a][/b:5411ce277a][/url] en [url=http://www.hijackthis.nl/forum/viewtopic.php?f=86&t=32607][b:5411ce277a][color=#0000FF:5411ce277a]hier[/color:5411ce277a][/b:5411ce277a][/url] vindt je gegevens hoe antivirusprogramma's en spywarescanners te deaktiveren. [b:5411ce277a]Opmerkingen[/b:5411ce277a]: [list:5411ce277a][*:5411ce277a] Bij gebruik van Windows XP zal er mogelijk gevraagd worden, om de "Recovery Console" te installeren! Sta dit dan toe (hiervoor is een actieve internet verbinding vereist). [*:5411ce277a]Alle openstaande programma's en webpagina's dienen afgesloten te zijn.[/list:u:5411ce277a] [b:5411ce277a]ComboFix opstarten[/b:5411ce277a]: [list:5411ce277a][*:5411ce277a][b:5411ce277a][color=#0000FF:5411ce277a]Windows 2000[/color:5411ce277a][/b:5411ce277a] en [color=#0000FF:5411ce277a][b:5411ce277a]Windows XP[/b:5411ce277a][/color:5411ce277a]: dubbelklik op ComboFix.exe. [*:5411ce277a][color=#0000FF:5411ce277a][b:5411ce277a]Windows Vista[/b:5411ce277a][/color:5411ce277a] en [color=#0000FF:5411ce277a][b:5411ce277a]Windows 7[/b:5411ce277a][/color:5411ce277a]: via rechtsklik op ComboFix.exe en kies voor "Als Administrator uitvoeren".[/list:u:5411ce277a] [b:5411ce277a]ComboFix is opgestart[/b:5411ce277a]: [list:5411ce277a][*:5411ce277a]Niet in het zwarte venster klikken, hierdoor kan ComboFix of zelfs Windows geheel "bevriezen"! [*:5411ce277a]Combofix sluit tijdens de scan de internet verbinding – probeer deze tussentijds niet te herstellen! [*:5411ce277a]Het kan voorkomen dat de computer meerdere malen opnieuw opgestart moet worden, dit is normaal. [*:5411ce277a]Wanneer ComboFix gereed is, zal het het een logbestand voor je maken. [*:5411ce277a]Post de inhoud van dit logbestand in je volgende bericht. [*:5411ce277a]Indien het log niet opstart, is dit terug tevinden in C:\ComboFix.txt[/list:u:5411ce277a] [b:5411ce277a]Belangrijke opmerking[/b:5411ce277a]: [list:5411ce277a][*:5411ce277a][b:5411ce277a][color=#0000FF:5411ce277a]Indien na de scan bij het opstarten van programma's er een error wordt getoond met de melding:[/color:5411ce277a][/b:5411ce277a] [*:5411ce277a][b:5411ce277a][color=#FF0000:5411ce277a]Er is geprobeerd een ongeldige bewerking uit te voeren op een registersleutel die is gemarkeerd voor verwijdering.[/color:5411ce277a][/b:5411ce277a] [*:5411ce277a][b:5411ce277a][color=#008000:5411ce277a]Start dan de computer opnieuw op.[/color:5411ce277a][/b:5411ce277a][/list:u:5411ce277a] Quote Link naar reactie
0 anoniem Geplaatst: 23 december 2012 Auteur Delen Geplaatst: 23 december 2012 De scan ging snel, hierbij weer de log ComboFix 12-12-22.02 - Marlo 23-12-2012 16:00:34.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.12279.10238 [GMT 1:00] Gestart vanuit: c:\users\Marlo\Desktop\ComboFix.exe AV: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Nieuw herstelpunt werd aangemaakt . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . C:\Install.exe . . (((((((((((((((((((( Bestanden Gemaakt van 2012-11-23 to 2012-12-23 )))))))))))))))))))))))))))))) . . 2012-12-23 15:03 . 2012-12-23 15:03 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-12-23 13:18 . 2012-12-23 13:18 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-12-23 13:18 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-12-23 13:06 . 2012-12-23 13:06 -------- d-----w- c:\windows\ERUNT 2012-12-23 13:06 . 2012-12-23 13:06 -------- d-----w- C:\JRT 2012-12-20 22:58 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll 2012-12-20 22:58 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll 2012-12-20 22:58 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll 2012-12-20 22:58 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll 2012-12-16 19:06 . 2012-12-16 19:06 -------- d-----w- C:\NVIDIA 2012-12-16 14:32 . 2012-12-16 14:32 -------- d-----w- c:\program files (x86)\Phyxion.net 2012-12-15 18:19 . 2012-12-15 18:22 -------- d-----w- c:\users\Marlo\AppData\Local\Darksiders2 2012-12-15 18:13 . 2012-12-15 18:13 -------- d-----w- c:\program files (x86)\THQ 2012-12-12 17:43 . 2012-12-03 15:47 60776 ----a-w- c:\windows\system32\OpenCL.dll 2012-12-12 17:43 . 2012-12-03 15:47 52584 ----a-w- c:\windows\SysWow64\OpenCL.dll 2012-12-12 17:43 . 2012-07-03 15:25 31080 ----a-w- c:\windows\system32\nvhdap64.dll 2012-12-12 17:43 . 2012-07-03 15:25 189288 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2012-12-11 20:13 . 2012-12-17 20:54 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2012-12-11 20:13 . 2012-12-11 20:13 -------- d-----w- c:\users\Marlo\AppData\Local\PunkBuster 2012-12-11 20:13 . 2012-12-11 20:13 -------- d-----w- c:\programdata\Orbit 2012-12-11 20:12 . 2012-12-19 20:30 -------- d-----w- c:\users\Marlo\AppData\Local\Ubisoft Game Launcher 2012-12-11 20:07 . 2012-12-17 20:53 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2012-12-11 20:02 . 2012-12-19 20:31 -------- d-----w- c:\program files (x86)\Ubisoft 2012-12-11 16:32 . 2012-12-11 16:32 -------- d-----w- c:\users\Marlo\AppData\Roaming\Malwarebytes 2012-12-11 16:32 . 2012-12-11 16:32 -------- d-----w- c:\programdata\Malwarebytes 2012-12-09 20:13 . 2012-12-09 20:13 -------- d-----w- c:\program files (x86)\FTL 2012-12-05 19:33 . 2012-12-05 19:33 -------- d-----w- C:\My Works 2012-12-05 16:00 . 2012-12-05 16:00 -------- d-----w- c:\program files (x86)\Cyberlink 2012-12-05 16:00 . 2012-12-05 16:00 -------- d-----w- c:\program files\CyberLink 2012-12-05 15:59 . 2012-12-05 15:59 -------- d-----w- c:\programdata\CLSK 2012-12-05 14:39 . 2012-12-05 14:39 -------- d-----w- c:\program files\7-Zip 2012-12-05 13:53 . 2012-12-05 16:04 -------- d-----w- c:\users\Public\CyberLink 2012-12-05 13:51 . 2012-12-05 19:33 -------- d-----w- c:\users\Marlo\AppData\Roaming\CyberLink 2012-12-05 13:51 . 2012-12-05 19:27 -------- d-----w- c:\programdata\CyberLink 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll 2012-12-05 13:50 . 2012-12-05 13:50 -------- d-----w- c:\program files (x86)\QuickTime 2012-12-03 22:37 . 2012-12-03 22:37 -------- d-----w- c:\program files (x86)\BRS 2012-12-03 22:37 . 2012-09-19 17:06 19131904 ------w- c:\windows\SysWow64\rapture3d_oal.dll 2012-12-03 22:37 . 2012-12-03 22:37 -------- d-----w- c:\program files (x86)\OpenAL 2012-12-02 23:36 . 2012-12-02 23:36 -------- d-----w- c:\users\Marlo\AppData\Roaming\digipen 2012-12-02 23:36 . 2012-12-02 23:36 -------- d-----w- c:\users\Marlo\AppData\Local\digipen 2012-12-02 23:35 . 2012-12-02 23:35 -------- d-----w- c:\program files (x86)\Digipen 2012-11-30 21:43 . 2012-11-30 21:43 438632 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2012-11-28 20:56 . 2012-12-02 18:35 -------- d-----w- c:\users\Marlo\AppData\Roaming\.minecraft 2012-11-28 00:07 . 2012-11-28 00:06 916456 ----a-w- c:\windows\system32\deployJava1.dll 2012-11-28 00:07 . 2012-11-28 00:06 289768 ----a-w- c:\windows\system32\javaws.exe 2012-11-28 00:07 . 2012-11-28 00:06 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll 2012-11-28 00:06 . 2012-11-28 00:06 189416 ----a-w- c:\windows\system32\javaw.exe 2012-11-28 00:06 . 2012-11-28 00:06 188904 ----a-w- c:\windows\system32\java.exe 2012-11-28 00:06 . 2012-11-28 00:06 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll 2012-11-28 00:06 . 2012-11-28 00:06 -------- d-----w- c:\program files\Java 2012-11-27 19:11 . 2012-11-27 19:11 -------- d-----w- C:\c5a64c1e933e638124b1e77b4c10 2012-11-27 19:11 . 2012-11-27 19:11 -------- d-----w- C:\a2758aaf805c07f9245e95 2012-11-27 19:10 . 2012-11-27 19:10 -------- d-----w- C:\3b02b42c37512709df93cd65 2012-11-27 19:10 . 2012-11-27 19:10 -------- d-----w- C:\23fa4bd987c1932bb79ce32a 2012-11-27 19:09 . 2012-11-27 19:09 -------- d-----w- C:\b9219784f07378efa049 2012-11-27 19:05 . 2012-11-27 19:05 -------- d-----w- C:\6822f21bbaa8a4ff42 2012-11-27 13:00 . 2012-11-27 13:00 -------- d-----w- c:\program files (x86)\Common Files\Skype 2012-11-27 13:00 . 2012-11-27 13:00 -------- d-----r- c:\program files (x86)\Skype 2012-11-26 16:54 . 2012-11-26 16:54 -------- d-----w- c:\users\Marlo\AppData\Roaming\Hive Cluster 2012-11-26 16:15 . 2012-11-26 16:18 -------- d-----w- c:\users\Marlo\AppData\Roaming\Braid . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-12-03 22:37 . 2012-08-29 19:19 466456 ----a-w- c:\windows\system32\wrap_oal.dll 2012-12-03 22:37 . 2012-08-29 19:19 444952 ------w- c:\windows\SysWow64\wrap_oal.dll 2012-12-03 22:37 . 2012-08-29 19:19 122904 ----a-w- c:\windows\system32\OpenAL32.dll 2012-12-03 22:37 . 2012-08-29 19:19 109080 ------w- c:\windows\SysWow64\OpenAL32.dll 2012-11-16 20:50 . 2012-11-16 20:50 821736 ------w- c:\windows\SysWow64\npDeployJava1.dll 2012-11-16 20:50 . 2012-11-16 20:50 746984 ------w- c:\windows\SysWow64\deployJava1.dll 2012-11-08 20:50 . 2012-08-29 19:44 30568 ----a-w- c:\windows\system32\drivers\avgtpx64.sys 2012-10-22 12:02 . 2012-10-22 12:02 154464 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys 2012-10-15 18:01 . 2012-10-15 18:01 7261256 ------w- c:\windows\SysWow64\SpoonUninstall.exe 2012-10-15 02:48 . 2012-10-15 02:48 63328 ----a-w- c:\windows\system32\drivers\avgidsha.sys 2012-10-05 02:32 . 2012-10-05 02:32 111456 ----a-w- c:\windows\system32\drivers\avgmfx64.sys 2012-10-04 16:45 . 2012-12-12 13:30 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2012-10-02 01:30 . 2012-10-02 01:30 185696 ----a-w- c:\windows\system32\drivers\avgldx64.sys 2012-09-25 22:39 . 2012-11-16 01:10 95744 ----a-w- c:\windows\system32\synceng.dll 2012-09-25 21:55 . 2012-11-16 01:10 78336 ----a-w- c:\windows\SysWow64\synceng.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904] "Steam"="c:\program files (x86)\Steam\steam.exe" [2012-12-03 1354736] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2009-06-05 1310720] "TurboV"="c:\program files\ASUS\TurboV\TurboV.exe" [2009-10-20 5516800] "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-11-08 997320] "ROC_roc_ssl_v12"="c:\program files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" [2012-08-29 1020512] "AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-11-06 3143800] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] "Malwarebytes Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-09-29 766536] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-06 5814392] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944] R3 appliand;Applian Network Service;c:\windows\system32\DRIVERS\appliand.sys [2011-06-26 33888] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-04-25 52736] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-08-30 1255736] R3 WSDScan;Ondersteuning voor WSD-scan via UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-10-05 111456] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800] S0 mv61xx;mv61xx;c:\windows\system32\DRIVERS\mv61xx.sys [2009-05-11 178728] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032] S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2012-11-08 30568] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-20 283200] S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-08-19 90112] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664] S2 MDES;DVM Meta Data Export Service;c:\asus.sys\CONFIG\DVMExportService.exe [2009-02-18 315392] S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-11-30 382824] S2 vToolbarUpdater13.2.0;vToolbarUpdater13.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe [2012-11-08 711112] S3 appliandMP;appliandMP;c:\windows\system32\DRIVERS\appliand.sys [2011-06-26 33888] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-05-20 393728] . . Inhoud van de 'Gedeelde Taken' map . 2012-12-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-500485560-426588622-2746000316-1000Core.job - c:\users\Marlo\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-29 20:12] . 2012-12-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-500485560-426588622-2746000316-1000UA.job - c:\users\Marlo\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-29 20:12] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.nl/ mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local TCP: DhcpNameServer = 62.179.104.196 213.46.228.196 . - - - - ORPHANS VERWIJDERD - - - - . WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) . . "ImagePath"="\"c:\program files\CyberLink\Shared files\RichVideo64.exe\"\00Z [\]^_Æ\00\00Æ\00\00\00\00HIJKLMNO\00\00\00\00\00\00\00\00\03\00\00\00|}~Æ\00\00Æ\00\00\00\00`\00\00\00\00\00\00\00\00‘’“" . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2012-12-23 16:04:19 ComboFix-quarantined-files.txt 2012-12-23 15:04 . Pre-Run: 34.503.794.688 bytes beschikbaar Post-Run: 34.392.846.336 bytes beschikbaar . - - End Of File - - 77E945C76AF766F936E070DD51CEAA2F Quote Link naar reactie
0 anoniem Geplaatst: 23 december 2012 Auteur Delen Geplaatst: 23 december 2012 Open een nieuw kladblok (of anders: notepad) bestand, via "Start\Alle programma’s\Bureau-accessoires\[b:10265fb27b]Kladblok (of Notepad)[/b:10265fb27b]". Kopieer en plak de volgende (vetgedrukte, blauwe tekst) in het lege kladblokvenstervenster [b:10265fb27b][color=#0000FF:10265fb27b]ClearJavaCache:: DirLook:: C:\JRT c:\program files (x86)\BRS C:\c5a64c1e933e638124b1e77b4c10 C:\3b02b42c37512709df93cd65 C:\23fa4bd987c1932bb79ce32a C:\b9219784f07378efa049 C:\6822f21bbaa8a4ff42[/color:10265fb27b][/b:10265fb27b] Sla dit kladblokbestand op je bureaublad op als [b:10265fb27b]CFScript.txt[/b:10265fb27b]. [b:10265fb27b][color=#FF0000:10265fb27b]Nu eerst de antivirus en eventuele spywarescanners deaktiveren![/color:10265fb27b][/b:10265fb27b] [color=#008000:10265fb27b][b:10265fb27b]Zorg ook ervoor dat alle andere openstaande vensters gesloten zijn, ook de webbrowser.[/b:10265fb27b][/color:10265fb27b] Sleep CFScript.txt in ComboFix.exe [img:10265fb27b]http://crew.nucia.eu/smeenk/CFScript.gif[/img:10265fb27b] Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt. Post het Combofix-log dat na het opnieuw starten wordt getoond. Ingeval Combofix je computer opnieuw heeft opgestart (of jij dat hebt gedaan), vindt je het log ook in [b:10265fb27b]C:\Combofix.txt[/b:10265fb27b] [b:10265fb27b]Belangrijke opmerking[/b:10265fb27b]: [list:10265fb27b][*:10265fb27b][b:10265fb27b][color=#0000FF:10265fb27b]Indien na de scan bij het opstarten van programma's er een error wordt getoond met de melding:[/color:10265fb27b][/b:10265fb27b] [*:10265fb27b][b:10265fb27b][color=#FF0000:10265fb27b]Er is geprobeerd een ongeldige bewerking uit te voeren op een registersleutel die is gemarkeerd voor verwijdering.[/color:10265fb27b][/b:10265fb27b] [*:10265fb27b][b:10265fb27b][color=#008000:10265fb27b]Start dan de computer opnieuw op.[/color:10265fb27b][/b:10265fb27b][/list:u:10265fb27b] Quote Link naar reactie
0 anoniem Geplaatst: 23 december 2012 Auteur Delen Geplaatst: 23 december 2012 Toen ik het txt bestand erin sleepte zij die na een paar seconden "er is een update beschikbaar voor combofix". Dat gedaan. Hierbij weer de log: ComboFix 12-12-23.01 - Marlo 23-12-2012 17:07:33.2.8 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.12279.10193 [GMT 1:00] Gestart vanuit: c:\users\Marlo\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Marlo\Desktop\CFScript.txt AV: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2012-11-23 to 2012-12-23 )))))))))))))))))))))))))))))) . . 2012-12-23 16:10 . 2012-12-23 16:10 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-12-23 13:18 . 2012-12-23 13:18 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-12-23 13:18 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-12-23 13:06 . 2012-12-23 13:06 -------- d-----w- c:\windows\ERUNT 2012-12-23 13:06 . 2012-12-23 13:06 -------- d-----w- C:\JRT 2012-12-20 22:58 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll 2012-12-20 22:58 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll 2012-12-20 22:58 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll 2012-12-20 22:58 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll 2012-12-16 19:06 . 2012-12-16 19:06 -------- d-----w- C:\NVIDIA 2012-12-16 14:32 . 2012-12-16 14:32 -------- d-----w- c:\program files (x86)\Phyxion.net 2012-12-15 18:19 . 2012-12-15 18:22 -------- d-----w- c:\users\Marlo\AppData\Local\Darksiders2 2012-12-15 18:13 . 2012-12-15 18:13 -------- d-----w- c:\program files (x86)\THQ 2012-12-12 17:43 . 2012-12-03 15:47 60776 ----a-w- c:\windows\system32\OpenCL.dll 2012-12-12 17:43 . 2012-12-03 15:47 52584 ----a-w- c:\windows\SysWow64\OpenCL.dll 2012-12-12 17:43 . 2012-07-03 15:25 31080 ----a-w- c:\windows\system32\nvhdap64.dll 2012-12-12 17:43 . 2012-07-03 15:25 189288 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2012-12-11 20:13 . 2012-12-17 20:54 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2012-12-11 20:13 . 2012-12-11 20:13 -------- d-----w- c:\users\Marlo\AppData\Local\PunkBuster 2012-12-11 20:13 . 2012-12-11 20:13 -------- d-----w- c:\programdata\Orbit 2012-12-11 20:12 . 2012-12-19 20:30 -------- d-----w- c:\users\Marlo\AppData\Local\Ubisoft Game Launcher 2012-12-11 20:07 . 2012-12-17 20:53 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2012-12-11 20:02 . 2012-12-19 20:31 -------- d-----w- c:\program files (x86)\Ubisoft 2012-12-11 16:32 . 2012-12-11 16:32 -------- d-----w- c:\users\Marlo\AppData\Roaming\Malwarebytes 2012-12-11 16:32 . 2012-12-11 16:32 -------- d-----w- c:\programdata\Malwarebytes 2012-12-09 20:13 . 2012-12-09 20:13 -------- d-----w- c:\program files (x86)\FTL 2012-12-05 19:33 . 2012-12-05 19:33 -------- d-----w- C:\My Works 2012-12-05 16:00 . 2012-12-05 16:00 -------- d-----w- c:\program files (x86)\Cyberlink 2012-12-05 16:00 . 2012-12-05 16:00 -------- d-----w- c:\program files\CyberLink 2012-12-05 15:59 . 2012-12-05 15:59 -------- d-----w- c:\programdata\CLSK 2012-12-05 14:39 . 2012-12-05 14:39 -------- d-----w- c:\program files\7-Zip 2012-12-05 13:53 . 2012-12-05 16:04 -------- d-----w- c:\users\Public\CyberLink 2012-12-05 13:51 . 2012-12-05 19:33 -------- d-----w- c:\users\Marlo\AppData\Roaming\CyberLink 2012-12-05 13:51 . 2012-12-05 19:27 -------- d-----w- c:\programdata\CyberLink 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll 2012-12-05 13:50 . 2012-12-05 13:50 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll 2012-12-05 13:50 . 2012-12-05 13:50 -------- d-----w- c:\program files (x86)\QuickTime 2012-12-03 22:37 . 2012-12-03 22:37 -------- d-----w- c:\program files (x86)\BRS 2012-12-03 22:37 . 2012-09-19 17:06 19131904 ------w- c:\windows\SysWow64\rapture3d_oal.dll 2012-12-03 22:37 . 2012-12-03 22:37 -------- d-----w- c:\program files (x86)\OpenAL 2012-12-02 23:36 . 2012-12-02 23:36 -------- d-----w- c:\users\Marlo\AppData\Roaming\digipen 2012-12-02 23:36 . 2012-12-02 23:36 -------- d-----w- c:\users\Marlo\AppData\Local\digipen 2012-12-02 23:35 . 2012-12-02 23:35 -------- d-----w- c:\program files (x86)\Digipen 2012-11-30 21:43 . 2012-11-30 21:43 438632 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2012-11-28 20:56 . 2012-12-02 18:35 -------- d-----w- c:\users\Marlo\AppData\Roaming\.minecraft 2012-11-28 00:07 . 2012-11-28 00:06 916456 ----a-w- c:\windows\system32\deployJava1.dll 2012-11-28 00:07 . 2012-11-28 00:06 289768 ----a-w- c:\windows\system32\javaws.exe 2012-11-28 00:07 . 2012-11-28 00:06 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll 2012-11-28 00:06 . 2012-11-28 00:06 189416 ----a-w- c:\windows\system32\javaw.exe 2012-11-28 00:06 . 2012-11-28 00:06 188904 ----a-w- c:\windows\system32\java.exe 2012-11-28 00:06 . 2012-11-28 00:06 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll 2012-11-28 00:06 . 2012-11-28 00:06 -------- d-----w- c:\program files\Java 2012-11-27 19:11 . 2012-11-27 19:11 -------- d-----w- C:\c5a64c1e933e638124b1e77b4c10 2012-11-27 19:11 . 2012-11-27 19:11 -------- d-----w- C:\a2758aaf805c07f9245e95 2012-11-27 19:10 . 2012-11-27 19:10 -------- d-----w- C:\3b02b42c37512709df93cd65 2012-11-27 19:10 . 2012-11-27 19:10 -------- d-----w- C:\23fa4bd987c1932bb79ce32a 2012-11-27 19:09 . 2012-11-27 19:09 -------- d-----w- C:\b9219784f07378efa049 2012-11-27 19:05 . 2012-11-27 19:05 -------- d-----w- C:\6822f21bbaa8a4ff42 2012-11-27 13:00 . 2012-11-27 13:00 -------- d-----w- c:\program files (x86)\Common Files\Skype 2012-11-27 13:00 . 2012-11-27 13:00 -------- d-----r- c:\program files (x86)\Skype 2012-11-26 16:54 . 2012-11-26 16:54 -------- d-----w- c:\users\Marlo\AppData\Roaming\Hive Cluster 2012-11-26 16:15 . 2012-11-26 16:18 -------- d-----w- c:\users\Marlo\AppData\Roaming\Braid . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-12-03 22:37 . 2012-08-29 19:19 466456 ----a-w- c:\windows\system32\wrap_oal.dll 2012-12-03 22:37 . 2012-08-29 19:19 444952 ------w- c:\windows\SysWow64\wrap_oal.dll 2012-12-03 22:37 . 2012-08-29 19:19 122904 ----a-w- c:\windows\system32\OpenAL32.dll 2012-12-03 22:37 . 2012-08-29 19:19 109080 ------w- c:\windows\SysWow64\OpenAL32.dll 2012-11-16 20:50 . 2012-11-16 20:50 821736 ------w- c:\windows\SysWow64\npDeployJava1.dll 2012-11-16 20:50 . 2012-11-16 20:50 746984 ------w- c:\windows\SysWow64\deployJava1.dll 2012-11-08 20:50 . 2012-08-29 19:44 30568 ----a-w- c:\windows\system32\drivers\avgtpx64.sys 2012-10-22 12:02 . 2012-10-22 12:02 154464 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys 2012-10-15 18:01 . 2012-10-15 18:01 7261256 ------w- c:\windows\SysWow64\SpoonUninstall.exe 2012-10-15 02:48 . 2012-10-15 02:48 63328 ----a-w- c:\windows\system32\drivers\avgidsha.sys 2012-10-05 02:32 . 2012-10-05 02:32 111456 ----a-w- c:\windows\system32\drivers\avgmfx64.sys 2012-10-04 16:45 . 2012-12-12 13:30 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2012-10-02 01:30 . 2012-10-02 01:30 185696 ----a-w- c:\windows\system32\drivers\avgldx64.sys 2012-09-25 22:39 . 2012-11-16 01:10 95744 ----a-w- c:\windows\system32\synceng.dll 2012-09-25 21:55 . 2012-11-16 01:10 78336 ----a-w- c:\windows\SysWow64\synceng.dll . . (((((((((((((((((((((((((((((((((((((((((((( Look ))))))))))))))))))))))))))))))))))))))))))))))))))))))))) . ---- Directory of C:\23fa4bd987c1932bb79ce32a ---- . 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.pl-pl.mui 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.pt-br.mui 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.pt-pt.mui 2008-05-19 19:50 . 2008-05-19 19:50 82432 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ro-ro.mui 2008-05-19 19:50 . 2008-05-19 19:50 78848 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ru-ru.mui 2008-05-19 19:50 . 2008-05-19 19:50 81920 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.sk-sk.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.sl-si.mui 2008-05-19 19:50 . 2008-05-19 19:50 82944 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.sr-latn-cs.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.sv-se.mui 2008-05-19 19:50 . 2008-05-19 19:50 74752 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.th-th.mui 2008-05-19 19:50 . 2008-05-19 19:50 77312 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.tr-tr.mui 2008-05-19 19:50 . 2008-05-19 19:50 79360 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.uk-ua.mui 2008-05-19 19:50 . 2008-05-19 19:50 86528 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.vi-vn.mui 2008-05-19 19:50 . 2008-05-19 19:50 35328 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.zh-cn.mui 2008-05-19 19:50 . 2008-05-19 19:50 34816 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.zh-tw.mui 2008-05-19 19:50 . 2008-05-19 19:50 4445184 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsi.dll 2008-05-19 19:50 . 2008-05-19 19:50 95744 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsiexec.exe 2008-05-19 19:50 . 2008-05-19 19:50 332800 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsihnd.dll 2008-05-19 19:50 . 2008-05-19 19:50 2560 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll 2008-05-19 19:50 . 2008-05-19 19:50 77824 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ar-sa.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.bg-bg.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ca-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.cs-cz.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.da-dk.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.de-de.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.el-gr.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.en-us.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.es-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.et-ee.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.eu-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.fi-fi.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.fr-fr.mui 2008-05-19 19:50 . 2008-05-19 19:50 73728 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.he-il.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.hr-hr.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.hu-hu.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.it-it.mui 2008-05-19 19:50 . 2008-05-19 19:50 61440 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ja-jp.mui 2008-05-19 19:50 . 2008-05-19 19:50 57344 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ko-kr.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.lt-lt.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.lv-lv.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.nb-no.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.nl-nl.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.pl-pl.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.pt-br.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.pt-pt.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ro-ro.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ru-ru.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.sk-sk.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.sl-si.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.sv-se.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.th-th.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.tr-tr.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.uk-ua.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.vi-vn.mui 2008-05-19 19:50 . 2008-05-19 19:50 45056 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.zh-cn.mui 2008-05-19 19:50 . 2008-05-19 19:50 45056 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.zh-tw.mui 2008-05-19 19:50 . 2008-05-19 19:50 18944 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsisip.dll 2008-05-19 19:50 . 2008-05-19 19:50 236032 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msiexec.exe 2008-05-19 19:50 . 2008-05-19 19:50 1084416 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msihnd.dll 2008-05-19 19:50 . 2008-05-19 19:50 2560 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll 2008-05-19 19:50 . 2008-05-19 19:50 77312 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.nb-no.mui 2008-05-19 19:50 . 2008-05-19 19:50 87552 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.nl-nl.mui 2008-05-19 19:50 . 2008-05-19 19:50 62464 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msisip.dll 2008-05-19 19:50 . 2008-05-19 19:50 8109568 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msi.dll 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.bg-bg.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ca-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 80896 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.cs-cz.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.da-dk.mui 2008-05-19 19:50 . 2008-05-19 19:50 93696 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.de-de.mui 2008-05-19 19:50 . 2008-05-19 19:50 93696 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.el-gr.mui 2008-05-19 19:50 . 2008-05-19 19:50 75776 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.en-us.mui 2008-05-19 19:50 . 2008-05-19 19:50 87552 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.es-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 75264 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.et-ee.mui 2008-05-19 19:50 . 2008-05-19 19:50 84992 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.eu-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 77824 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.fi-fi.mui 2008-05-19 19:50 . 2008-05-19 19:50 91136 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.fr-fr.mui 2008-05-19 19:50 . 2008-05-19 19:50 64512 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.he-il.mui 2008-05-19 19:50 . 2008-05-19 19:50 81408 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.hr-hr.mui 2008-05-19 19:50 . 2008-05-19 19:50 82944 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.hu-hu.mui 2008-05-19 19:50 . 2008-05-19 19:50 90624 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.it-it.mui 2008-05-19 19:50 . 2008-05-19 19:50 50688 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ja-jp.mui 2008-05-19 19:50 . 2008-05-19 19:50 48128 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ko-kr.mui 2008-05-19 19:50 . 2008-05-19 19:50 78848 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.lt-lt.mui 2008-05-19 19:50 . 2008-05-19 19:50 80384 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.lv-lv.mui 2008-05-19 19:50 . 2008-05-19 19:50 67584 ----a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ar-sa.mui . ---- Directory of C:\3b02b42c37512709df93cd65 ---- . 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.pl-pl.mui 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.pt-br.mui 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.pt-pt.mui 2008-05-19 19:50 . 2008-05-19 19:50 82432 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ro-ro.mui 2008-05-19 19:50 . 2008-05-19 19:50 78848 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ru-ru.mui 2008-05-19 19:50 . 2008-05-19 19:50 81920 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.sk-sk.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.sl-si.mui 2008-05-19 19:50 . 2008-05-19 19:50 82944 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.sr-latn-cs.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.sv-se.mui 2008-05-19 19:50 . 2008-05-19 19:50 74752 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.th-th.mui 2008-05-19 19:50 . 2008-05-19 19:50 77312 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.tr-tr.mui 2008-05-19 19:50 . 2008-05-19 19:50 79360 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.uk-ua.mui 2008-05-19 19:50 . 2008-05-19 19:50 86528 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.vi-vn.mui 2008-05-19 19:50 . 2008-05-19 19:50 35328 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.zh-cn.mui 2008-05-19 19:50 . 2008-05-19 19:50 34816 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.zh-tw.mui 2008-05-19 19:50 . 2008-05-19 19:50 4445184 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsi.dll 2008-05-19 19:50 . 2008-05-19 19:50 95744 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsiexec.exe 2008-05-19 19:50 . 2008-05-19 19:50 332800 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsihnd.dll 2008-05-19 19:50 . 2008-05-19 19:50 2560 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll 2008-05-19 19:50 . 2008-05-19 19:50 77824 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ar-sa.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.bg-bg.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ca-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.cs-cz.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.da-dk.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.de-de.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.el-gr.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.en-us.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.es-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.et-ee.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.eu-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.fi-fi.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.fr-fr.mui 2008-05-19 19:50 . 2008-05-19 19:50 73728 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.he-il.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.hr-hr.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.hu-hu.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.it-it.mui 2008-05-19 19:50 . 2008-05-19 19:50 61440 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ja-jp.mui 2008-05-19 19:50 . 2008-05-19 19:50 57344 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ko-kr.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.lt-lt.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.lv-lv.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.nb-no.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.nl-nl.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.pl-pl.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.pt-br.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.pt-pt.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ro-ro.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ru-ru.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.sk-sk.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.sl-si.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.sv-se.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.th-th.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.tr-tr.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.uk-ua.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.vi-vn.mui 2008-05-19 19:50 . 2008-05-19 19:50 45056 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.zh-cn.mui 2008-05-19 19:50 . 2008-05-19 19:50 45056 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.zh-tw.mui 2008-05-19 19:50 . 2008-05-19 19:50 18944 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsisip.dll 2008-05-19 19:50 . 2008-05-19 19:50 236032 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msiexec.exe 2008-05-19 19:50 . 2008-05-19 19:50 1084416 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msihnd.dll 2008-05-19 19:50 . 2008-05-19 19:50 2560 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll 2008-05-19 19:50 . 2008-05-19 19:50 77312 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.nb-no.mui 2008-05-19 19:50 . 2008-05-19 19:50 87552 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.nl-nl.mui 2008-05-19 19:50 . 2008-05-19 19:50 62464 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msisip.dll 2008-05-19 19:50 . 2008-05-19 19:50 8109568 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msi.dll 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.bg-bg.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ca-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 80896 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.cs-cz.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.da-dk.mui 2008-05-19 19:50 . 2008-05-19 19:50 93696 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.de-de.mui 2008-05-19 19:50 . 2008-05-19 19:50 93696 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.el-gr.mui 2008-05-19 19:50 . 2008-05-19 19:50 75776 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.en-us.mui 2008-05-19 19:50 . 2008-05-19 19:50 87552 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.es-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 75264 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.et-ee.mui 2008-05-19 19:50 . 2008-05-19 19:50 84992 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.eu-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 77824 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.fi-fi.mui 2008-05-19 19:50 . 2008-05-19 19:50 91136 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.fr-fr.mui 2008-05-19 19:50 . 2008-05-19 19:50 64512 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.he-il.mui 2008-05-19 19:50 . 2008-05-19 19:50 81408 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.hr-hr.mui 2008-05-19 19:50 . 2008-05-19 19:50 82944 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.hu-hu.mui 2008-05-19 19:50 . 2008-05-19 19:50 90624 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.it-it.mui 2008-05-19 19:50 . 2008-05-19 19:50 50688 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ja-jp.mui 2008-05-19 19:50 . 2008-05-19 19:50 48128 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ko-kr.mui 2008-05-19 19:50 . 2008-05-19 19:50 78848 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.lt-lt.mui 2008-05-19 19:50 . 2008-05-19 19:50 80384 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.lv-lv.mui 2008-05-19 19:50 . 2008-05-19 19:50 67584 ----a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ar-sa.mui . ---- Directory of C:\6822f21bbaa8a4ff42 ---- . 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.pl-pl.mui 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.pt-br.mui 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.pt-pt.mui 2008-05-19 19:50 . 2008-05-19 19:50 82432 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ro-ro.mui 2008-05-19 19:50 . 2008-05-19 19:50 78848 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ru-ru.mui 2008-05-19 19:50 . 2008-05-19 19:50 81920 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.sk-sk.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.sl-si.mui 2008-05-19 19:50 . 2008-05-19 19:50 82944 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.sr-latn-cs.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.sv-se.mui 2008-05-19 19:50 . 2008-05-19 19:50 74752 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.th-th.mui 2008-05-19 19:50 . 2008-05-19 19:50 77312 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.tr-tr.mui 2008-05-19 19:50 . 2008-05-19 19:50 79360 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.uk-ua.mui 2008-05-19 19:50 . 2008-05-19 19:50 86528 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.vi-vn.mui 2008-05-19 19:50 . 2008-05-19 19:50 35328 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.zh-cn.mui 2008-05-19 19:50 . 2008-05-19 19:50 34816 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.zh-tw.mui 2008-05-19 19:50 . 2008-05-19 19:50 4445184 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsi.dll 2008-05-19 19:50 . 2008-05-19 19:50 95744 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsiexec.exe 2008-05-19 19:50 . 2008-05-19 19:50 332800 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsihnd.dll 2008-05-19 19:50 . 2008-05-19 19:50 2560 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll 2008-05-19 19:50 . 2008-05-19 19:50 77824 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ar-sa.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.bg-bg.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ca-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.cs-cz.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.da-dk.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.de-de.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.el-gr.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.en-us.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.es-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.et-ee.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.eu-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.fi-fi.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.fr-fr.mui 2008-05-19 19:50 . 2008-05-19 19:50 73728 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.he-il.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.hr-hr.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.hu-hu.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.it-it.mui 2008-05-19 19:50 . 2008-05-19 19:50 61440 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ja-jp.mui 2008-05-19 19:50 . 2008-05-19 19:50 57344 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ko-kr.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.lt-lt.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.lv-lv.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.nb-no.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.nl-nl.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.pl-pl.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.pt-br.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.pt-pt.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ro-ro.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ru-ru.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.sk-sk.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.sl-si.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.sv-se.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.th-th.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.tr-tr.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.uk-ua.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.vi-vn.mui 2008-05-19 19:50 . 2008-05-19 19:50 45056 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.zh-cn.mui 2008-05-19 19:50 . 2008-05-19 19:50 45056 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.zh-tw.mui 2008-05-19 19:50 . 2008-05-19 19:50 18944 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsisip.dll 2008-05-19 19:50 . 2008-05-19 19:50 236032 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msiexec.exe 2008-05-19 19:50 . 2008-05-19 19:50 1084416 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msihnd.dll 2008-05-19 19:50 . 2008-05-19 19:50 2560 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll 2008-05-19 19:50 . 2008-05-19 19:50 77312 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.nb-no.mui 2008-05-19 19:50 . 2008-05-19 19:50 87552 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.nl-nl.mui 2008-05-19 19:50 . 2008-05-19 19:50 62464 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msisip.dll 2008-05-19 19:50 . 2008-05-19 19:50 8109568 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msi.dll 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.bg-bg.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ca-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 80896 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.cs-cz.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.da-dk.mui 2008-05-19 19:50 . 2008-05-19 19:50 93696 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.de-de.mui 2008-05-19 19:50 . 2008-05-19 19:50 93696 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.el-gr.mui 2008-05-19 19:50 . 2008-05-19 19:50 75776 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.en-us.mui 2008-05-19 19:50 . 2008-05-19 19:50 87552 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.es-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 75264 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.et-ee.mui 2008-05-19 19:50 . 2008-05-19 19:50 84992 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.eu-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 77824 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.fi-fi.mui 2008-05-19 19:50 . 2008-05-19 19:50 91136 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.fr-fr.mui 2008-05-19 19:50 . 2008-05-19 19:50 64512 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.he-il.mui 2008-05-19 19:50 . 2008-05-19 19:50 81408 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.hr-hr.mui 2008-05-19 19:50 . 2008-05-19 19:50 82944 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.hu-hu.mui 2008-05-19 19:50 . 2008-05-19 19:50 90624 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.it-it.mui 2008-05-19 19:50 . 2008-05-19 19:50 50688 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ja-jp.mui 2008-05-19 19:50 . 2008-05-19 19:50 48128 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ko-kr.mui 2008-05-19 19:50 . 2008-05-19 19:50 78848 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.lt-lt.mui 2008-05-19 19:50 . 2008-05-19 19:50 80384 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.lv-lv.mui 2008-05-19 19:50 . 2008-05-19 19:50 67584 ----a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ar-sa.mui . ---- Directory of C:\b9219784f07378efa049 ---- . 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.pl-pl.mui 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.pt-br.mui 2008-05-19 19:50 . 2008-05-19 19:50 83456 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.pt-pt.mui 2008-05-19 19:50 . 2008-05-19 19:50 82432 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ro-ro.mui 2008-05-19 19:50 . 2008-05-19 19:50 78848 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ru-ru.mui 2008-05-19 19:50 . 2008-05-19 19:50 81920 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.sk-sk.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.sl-si.mui 2008-05-19 19:50 . 2008-05-19 19:50 82944 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.sr-latn-cs.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.sv-se.mui 2008-05-19 19:50 . 2008-05-19 19:50 74752 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.th-th.mui 2008-05-19 19:50 . 2008-05-19 19:50 77312 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.tr-tr.mui 2008-05-19 19:50 . 2008-05-19 19:50 79360 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.uk-ua.mui 2008-05-19 19:50 . 2008-05-19 19:50 86528 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.vi-vn.mui 2008-05-19 19:50 . 2008-05-19 19:50 35328 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.zh-cn.mui 2008-05-19 19:50 . 2008-05-19 19:50 34816 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.zh-tw.mui 2008-05-19 19:50 . 2008-05-19 19:50 4445184 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsi.dll 2008-05-19 19:50 . 2008-05-19 19:50 95744 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsiexec.exe 2008-05-19 19:50 . 2008-05-19 19:50 332800 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsihnd.dll 2008-05-19 19:50 . 2008-05-19 19:50 2560 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll 2008-05-19 19:50 . 2008-05-19 19:50 77824 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ar-sa.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.bg-bg.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ca-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.cs-cz.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.da-dk.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.de-de.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.el-gr.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.en-us.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.es-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.et-ee.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.eu-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.fi-fi.mui 2008-05-19 19:50 . 2008-05-19 19:50 102400 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.fr-fr.mui 2008-05-19 19:50 . 2008-05-19 19:50 73728 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.he-il.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.hr-hr.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.hu-hu.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.it-it.mui 2008-05-19 19:50 . 2008-05-19 19:50 61440 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ja-jp.mui 2008-05-19 19:50 . 2008-05-19 19:50 57344 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ko-kr.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.lt-lt.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.lv-lv.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.nb-no.mui 2008-05-19 19:50 . 2008-05-19 19:50 98304 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.nl-nl.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.pl-pl.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.pt-br.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.pt-pt.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ro-ro.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ru-ru.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.sk-sk.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.sl-si.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.sv-se.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.th-th.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.tr-tr.mui 2008-05-19 19:50 . 2008-05-19 19:50 90112 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.uk-ua.mui 2008-05-19 19:50 . 2008-05-19 19:50 94208 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.vi-vn.mui 2008-05-19 19:50 . 2008-05-19 19:50 45056 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.zh-cn.mui 2008-05-19 19:50 . 2008-05-19 19:50 45056 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.zh-tw.mui 2008-05-19 19:50 . 2008-05-19 19:50 18944 ----a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsisip.dll 2008-05-19 19:50 . 2008-05-19 19:50 236032 ----a-w- c:\b9219784f07378efa049\sp2qfe\msiexec.exe 2008-05-19 19:50 . 2008-05-19 19:50 1084416 ----a-w- c:\b9219784f07378efa049\sp2qfe\msihnd.dll 2008-05-19 19:50 . 2008-05-19 19:50 2560 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll 2008-05-19 19:50 . 2008-05-19 19:50 77312 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.nb-no.mui 2008-05-19 19:50 . 2008-05-19 19:50 87552 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.nl-nl.mui 2008-05-19 19:50 . 2008-05-19 19:50 62464 ----a-w- c:\b9219784f07378efa049\sp2qfe\msisip.dll 2008-05-19 19:50 . 2008-05-19 19:50 8109568 ----a-w- c:\b9219784f07378efa049\sp2qfe\msi.dll 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.bg-bg.mui 2008-05-19 19:50 . 2008-05-19 19:50 86016 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ca-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 80896 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.cs-cz.mui 2008-05-19 19:50 . 2008-05-19 19:50 79872 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.da-dk.mui 2008-05-19 19:50 . 2008-05-19 19:50 93696 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.de-de.mui 2008-05-19 19:50 . 2008-05-19 19:50 93696 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.el-gr.mui 2008-05-19 19:50 . 2008-05-19 19:50 75776 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.en-us.mui 2008-05-19 19:50 . 2008-05-19 19:50 87552 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.es-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 75264 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.et-ee.mui 2008-05-19 19:50 . 2008-05-19 19:50 84992 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.eu-es.mui 2008-05-19 19:50 . 2008-05-19 19:50 77824 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.fi-fi.mui 2008-05-19 19:50 . 2008-05-19 19:50 91136 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.fr-fr.mui 2008-05-19 19:50 . 2008-05-19 19:50 64512 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.he-il.mui 2008-05-19 19:50 . 2008-05-19 19:50 81408 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.hr-hr.mui 2008-05-19 19:50 . 2008-05-19 19:50 82944 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.hu-hu.mui 2008-05-19 19:50 . 2008-05-19 19:50 90624 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.it-it.mui 2008-05-19 19:50 . 2008-05-19 19:50 50688 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ja-jp.mui 2008-05-19 19:50 . 2008-05-19 19:50 48128 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ko-kr.mui 2008-05-19 19:50 . 2008-05-19 19:50 78848 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.lt-lt.mui 2008-05-19 19:50 . 2008-05-19 19:50 80384 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.lv-lv.mui 2008-05-19 19:50 . 2008-05-19 19:50 67584 ----a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ar-sa.mui . ---- Directory of C:\c5a64c1e933e638124b1e77b4c10 ---- . 2008-05-21 22:45 . 2008-05-21 22:45 5282816 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msi.dll 2008-05-21 22:45 . 2008-05-21 22:45 124928 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msiexec.exe 2008-05-21 22:45 . 2008-05-21 22:45 502784 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msihnd.dll 2008-05-21 22:45 . 2008-05-21 22:45 2560 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll 2008-05-21 22:45 . 2008-05-21 22:45 67584 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ar-sa.mui 2008-05-21 22:45 . 2008-05-21 22:45 86016 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.bg-bg.mui 2008-05-21 22:45 . 2008-05-21 22:45 86016 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ca-es.mui 2008-05-21 22:45 . 2008-05-21 22:45 80896 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.cs-cz.mui 2008-05-21 22:45 . 2008-05-21 22:45 79872 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.da-dk.mui 2008-05-21 22:45 . 2008-05-21 22:45 93696 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.de-de.mui 2008-05-21 22:45 . 2008-05-21 22:45 93696 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.el-gr.mui 2008-05-21 22:45 . 2008-05-21 22:45 75776 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.en-us.mui 2008-05-21 22:45 . 2008-05-21 22:45 87552 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.es-es.mui 2008-05-21 22:45 . 2008-05-21 22:45 75264 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.et-ee.mui 2008-05-21 22:45 . 2008-05-21 22:45 84992 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.eu-es.mui 2008-05-21 22:45 . 2008-05-21 22:45 77824 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.fi-fi.mui 2008-05-21 22:45 . 2008-05-21 22:45 91136 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.fr-fr.mui 2008-05-21 22:45 . 2008-05-21 22:45 64512 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.he-il.mui 2008-05-21 22:45 . 2008-05-21 22:45 81408 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.hr-hr.mui 2008-05-21 22:45 . 2008-05-21 22:45 82944 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.hu-hu.mui 2008-05-21 22:45 . 2008-05-21 22:45 90624 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.it-it.mui 2008-05-21 22:45 . 2008-05-21 22:45 50688 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ja-jp.mui 2008-05-21 22:45 . 2008-05-21 22:45 48128 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ko-kr.mui 2008-05-21 22:45 . 2008-05-21 22:45 78848 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.lt-lt.mui 2008-05-21 22:45 . 2008-05-21 22:45 80384 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.lv-lv.mui 2008-05-21 22:45 . 2008-05-21 22:45 77312 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.nb-no.mui 2008-05-21 22:45 . 2008-05-21 22:45 87552 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.nl-nl.mui 2008-05-21 22:45 . 2008-05-21 22:45 83456 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.pl-pl.mui 2008-05-21 22:45 . 2008-05-21 22:45 83456 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.pt-br.mui 2008-05-21 22:45 . 2008-05-21 22:45 83456 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.pt-pt.mui 2008-05-21 22:45 . 2008-05-21 22:45 82432 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ro-ro.mui 2008-05-21 22:45 . 2008-05-21 22:45 78848 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ru-ru.mui 2008-05-21 22:45 . 2008-05-21 22:45 81920 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.sk-sk.mui 2008-05-21 22:45 . 2008-05-21 22:45 79872 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.sl-si.mui 2008-05-21 22:45 . 2008-05-21 22:45 82944 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.sr-latn-cs.mui 2008-05-21 22:45 . 2008-05-21 22:45 79872 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.sv-se.mui 2008-05-21 22:45 . 2008-05-21 22:45 74752 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.th-th.mui 2008-05-21 22:45 . 2008-05-21 22:45 77312 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.tr-tr.mui 2008-05-21 22:45 . 2008-05-21 22:45 79360 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.uk-ua.mui 2008-05-21 22:45 . 2008-05-21 22:45 86528 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.vi-vn.mui 2008-05-21 22:45 . 2008-05-21 22:45 35328 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.zh-cn.mui 2008-05-21 22:45 . 2008-05-21 22:45 34816 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.zh-tw.mui 2008-05-21 22:45 . 2008-05-21 22:45 24064 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msisip.dll 2008-05-21 22:45 . 2008-05-21 22:45 4445184 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsi.dll 2008-05-21 22:45 . 2008-05-21 22:45 95744 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsiexec.exe 2008-05-21 22:45 . 2008-05-21 22:45 332800 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsihnd.dll 2008-05-21 22:45 . 2008-05-21 22:45 2560 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll 2008-05-21 22:45 . 2008-05-21 22:45 77824 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ar-sa.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.bg-bg.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ca-es.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.cs-cz.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.da-dk.mui 2008-05-21 22:45 . 2008-05-21 22:45 102400 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.de-de.mui 2008-05-21 22:45 . 2008-05-21 22:45 102400 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.el-gr.mui 2008-05-21 22:45 . 2008-05-21 22:45 86016 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.en-us.mui 2008-05-21 22:45 . 2008-05-21 22:45 98304 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.es-es.mui 2008-05-21 22:45 . 2008-05-21 22:45 86016 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.et-ee.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.eu-es.mui 2008-05-21 22:45 . 2008-05-21 22:45 86016 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.fi-fi.mui 2008-05-21 22:45 . 2008-05-21 22:45 102400 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.fr-fr.mui 2008-05-21 22:45 . 2008-05-21 22:45 73728 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.he-il.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.hr-hr.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.hu-hu.mui 2008-05-21 22:45 . 2008-05-21 22:45 98304 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.it-it.mui 2008-05-21 22:45 . 2008-05-21 22:45 61440 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ja-jp.mui 2008-05-21 22:45 . 2008-05-21 22:45 57344 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ko-kr.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.lt-lt.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.lv-lv.mui 2008-05-21 22:45 . 2008-05-21 22:45 86016 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.nb-no.mui 2008-05-21 22:45 . 2008-05-21 22:45 98304 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.nl-nl.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.pl-pl.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.pt-br.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.pt-pt.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ro-ro.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ru-ru.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.sk-sk.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.sl-si.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.sv-se.mui 2008-05-21 22:45 . 2008-05-21 22:45 86016 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.th-th.mui 2008-05-21 22:45 . 2008-05-21 22:45 86016 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.tr-tr.mui 2008-05-21 22:45 . 2008-05-21 22:45 90112 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.uk-ua.mui 2008-05-21 22:45 . 2008-05-21 22:45 94208 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.vi-vn.mui 2008-05-21 22:45 . 2008-05-21 22:45 45056 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.zh-cn.mui 2008-05-21 22:45 . 2008-05-21 22:45 45056 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.zh-tw.mui 2008-05-21 22:45 . 2008-05-21 22:45 18944 ----a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsisip.dll . ---- Directory of C:\JRT ---- . 2012-12-23 13:06 . 2012-12-23 13:10 0 ----a-w- c:\jrt\temp\null.txt 2012-12-23 13:06 . 2012-12-14 20:36 43520 ----a-w- c:\jrt\nircmd.exe 2012-12-23 13:06 . 2012-12-07 16:27 17920 ----a-w- c:\jrt\cut.exe 2012-12-23 13:06 . 2012-12-07 16:27 157696 ----a-w- c:\jrt\erunt\ERUNT.EXE 2012-12-23 13:06 . 2005-02-27 09:40 45056 ----a-w- c:\jrt\choice.exe 2012-12-23 13:06 . 2012-12-07 16:27 2815 ----a-w- c:\jrt\erunt\ERDNTDOS.LOC 2012-12-23 13:06 . 2012-12-07 16:27 3275 ----a-w- c:\jrt\erunt\ERDNTWIN.LOC 2012-12-23 13:06 . 2012-12-07 16:27 4090 ----a-w- c:\jrt\erunt\ERUNT.LOC 2012-12-23 13:06 . 2012-12-14 04:08 1445 ----a-w- c:\jrt\services.dat 2012-12-23 13:06 . 2012-12-07 16:27 163328 ----a-w- c:\jrt\erunt\ERDNT.E_E 2012-12-23 13:06 . 2012-12-07 16:27 525 ----a-w- c:\jrt\regkey_x64.dat 2012-12-23 13:06 . 2012-12-07 16:27 326 ----a-w- c:\jrt\regkey_x86.dat 2012-12-23 13:06 . 2012-12-15 23:17 55 ----a-w- c:\jrt\REGsetup.dat 2012-12-23 13:06 . 2012-12-07 16:27 345 ----a-w- c:\jrt\regvalue_x64.dat 2012-12-23 13:06 . 2012-12-07 16:27 345 ----a-w- c:\jrt\regvalue_x86.dat 2012-12-23 13:06 . 2012-12-22 01:16 511 ----a-w- c:\jrt\FFXPI.dat 2012-12-23 13:06 . 2012-12-16 23:59 678 ----a-w- c:\jrt\FWCLSID.dat 2012-12-23 13:06 . 2012-12-16 21:07 272 ----a-w- c:\jrt\modules.dat 2012-12-23 13:06 . 2012-12-14 04:09 157 ----a-w- c:\jrt\moduleservices.dat 2012-12-23 13:06 . 2012-12-07 16:27 75 ----a-w- c:\jrt\FFplugins.dat 2012-12-23 13:06 . 2012-12-17 00:18 3214 ----a-w- c:\jrt\FFprefs.dat 2012-12-23 13:06 . 2012-12-07 16:27 177 ----a-w- c:\jrt\FFregkey_x64.dat 2012-12-23 13:06 . 2012-12-07 16:27 109 ----a-w- c:\jrt\FFregkey_x86.dat 2012-12-23 13:06 . 2012-12-16 21:17 1101 ----a-w- c:\jrt\FFXML.dat 2012-12-23 13:06 . 2012-12-13 01:18 102 ----a-w- c:\jrt\badAPPINIT.dat 2012-12-23 13:06 . 2012-12-22 03:38 37234 ----a-w- c:\jrt\CLSID.dat 2012-12-23 13:06 . 2012-12-07 16:27 119 ----a-w- c:\jrt\FFbrowsermngr.dat 2012-12-23 13:06 . 2012-12-20 19:56 5967 ----a-w- c:\jrt\FFextensions.dat 2012-12-23 13:06 . 2012-12-07 16:27 625 ----a-w- c:\jrt\askregkey_x64.dat 2012-12-23 13:06 . 2012-12-07 16:27 370 ----a-w- c:\jrt\askregkey_x86.dat 2012-12-23 13:06 . 2012-12-07 16:27 347 ----a-w- c:\jrt\askregvalue_x64.dat 2012-12-23 13:06 . 2012-12-07 16:27 345 ----a-w- c:\jrt\askregvalue_x86.dat 2012-12-23 13:06 . 2012-12-08 10:56 22 ----a-w- c:\jrt\askservices.dat 2012-12-23 13:06 . 2012-12-22 00:10 2438 ----a-w- c:\jrt\askCLSID.dat 2012-12-23 13:06 . 2012-12-16 21:22 1384 ----a-w- c:\jrt\REGhklm_software_wow6432node.cfg 2012-12-23 13:06 . 2012-12-07 16:27 207 ----a-w- c:\jrt\runvalues_x64.cfg 2012-12-23 13:06 . 2012-12-07 16:27 129 ----a-w- c:\jrt\runvalues_x86.cfg 2012-12-23 13:06 . 2012-12-15 21:34 1870 ----a-w- c:\jrt\REGhkcu_software_microsoft.cfg 2012-12-23 13:06 . 2012-12-17 00:01 28391 ----a-w- c:\jrt\REGhklm_software_classes.cfg 2012-12-23 13:06 . 2012-12-15 21:39 1582 ----a-w- c:\jrt\REGhklm_software_microsoft.cfg 2012-12-23 13:06 . 2012-12-16 21:19 2310 ----a-w- c:\jrt\CHR_extensions.cfg 2012-12-23 13:06 . 2012-12-13 20:01 89 ----a-w- c:\jrt\FFwhtlist.cfg 2012-12-23 13:06 . 2012-12-15 21:19 4819 ----a-w- c:\jrt\REGhcr.cfg 2012-12-23 13:06 . 2012-12-15 21:41 1002 ----a-w- c:\jrt\REGhkcu_and_hklm_software.cfg 2012-12-23 13:06 . 2012-12-15 22:26 646 ----a-w- c:\jrt\REGhkcu_software_appdatalow.cfg 2012-12-23 13:06 . 2012-12-07 16:27 174 ----a-w- c:\jrt\CHRregkey_x64.cfg 2012-12-23 13:06 . 2012-12-07 16:27 107 ----a-w- c:\jrt\CHRregkey_x86.cfg 2012-12-23 13:06 . 2012-12-09 05:35 94 ----a-w- c:\jrt\badFOLDERScom.cfg 2012-12-23 13:06 . 2012-12-22 00:33 531 ----a-w- c:\jrt\badFOLDERSstart.cfg 2012-12-23 13:06 . 2012-12-14 03:56 2838 ----a-w- c:\jrt\badvalues.cfg 2012-12-23 13:06 . 2012-12-07 16:27 128 ----a-w- c:\jrt\browsermngr_keys.cfg 2012-12-23 13:06 . 2012-12-08 11:32 94 ----a-w- c:\jrt\browsermngr_values.cfg 2012-12-23 13:06 . 2012-12-22 01:32 10980 ----a-w- c:\jrt\badFOLDERS.cfg 2012-12-23 13:06 . 2005-03-06 13:10 2384 ----a-w- c:\jrt\choice.txt 2012-12-23 13:06 . 2012-12-07 22:52 107 ----a-w- c:\jrt\sednewline.txt 2012-12-23 13:06 . 2012-12-07 16:27 31952 ----a-w- c:\jrt\erunt\README.TXT 2012-12-23 13:06 . 2012-12-19 21:46 9678 ----a-w- c:\jrt\modules.bat 2012-12-23 13:06 . 2012-12-15 22:05 5111 ----a-w- c:\jrt\runvalues.bat 2012-12-23 13:06 . 2012-12-08 10:49 1023 ----a-w- c:\jrt\TDL4.bat 2012-12-23 13:06 . 2012-12-15 18:52 24911 ----a-w- c:\jrt\iexplore.bat 2012-12-23 13:06 . 2012-12-22 03:39 11406 ----a-w- c:\jrt\JRT.bat 2012-12-23 13:06 . 2012-12-08 10:50 12262 ----a-w- c:\jrt\medfos.bat 2012-12-23 13:06 . 2012-12-22 01:36 68061 ----a-w- c:\jrt\misc.bat 2012-12-23 13:06 . 2012-12-07 16:27 1342 ----a-w- c:\jrt\firefoxdefaults.bat 2012-12-23 13:06 . 2012-12-08 10:50 1256 ----a-w- c:\jrt\FWPolicy.bat 2012-12-23 13:06 . 2012-12-22 03:39 13598 ----a-w- c:\jrt\get.bat 2012-12-23 13:06 . 2012-12-08 10:22 732 ----a-w- c:\jrt\ev_clear.bat 2012-12-23 13:06 . 2012-12-15 18:53 205314 ----a-w- c:\jrt\firefox.bat 2012-12-23 13:06 . 2012-12-08 10:49 13618 ----a-w- c:\jrt\chrome.bat 2012-12-23 13:06 . 2012-12-08 10:50 3777 ----a-w- c:\jrt\clsid_keys.bat 2012-12-23 13:06 . 2012-12-08 10:50 5425 ----a-w- c:\jrt\clsid_values.bat 2012-12-23 13:06 . 2012-12-14 07:36 36087 ----a-w- c:\jrt\ask.bat 2012-12-23 13:06 . 2012-12-07 16:27 565 ----a-w- c:\jrt\erunt\ERUNT.EXE.manifest . ---- Directory of c:\program files (x86)\BRS ---- . 2012-12-03 22:38 . 2012-12-03 22:38 228 ----a-w- c:\program files (x86)\BRS\ufl\9VMMT3G97800.cache\D813322EB7EC08AEA25A18BAA24A1FED.pft 2012-12-03 22:37 . 2012-09-19 17:00 2672715 ----a-w- c:\program files (x86)\BRS\ufl\formatlibrary.pfl 2012-12-03 22:37 . 2012-09-19 17:06 1885696 ----a-w- c:\program files (x86)\BRS\UserLayout.exe 2012-12-03 22:37 . 2012-09-19 16:39 19582 ----a-w- c:\program files (x86)\BRS\changes_rapture3d.txt 2012-12-03 22:37 . 2012-09-19 16:59 2550 ----a-w- c:\program files (x86)\BRS\wxWidgets\wxwidgets_licence.txt 2012-12-03 22:37 . 2012-09-19 16:59 7639 ----a-w- c:\program files (x86)\BRS\wxWidgets\lgpl-3.0.txt 2012-12-03 22:37 . 2010-10-02 14:50 1697 ----a-w- c:\program files (x86)\BRS\rapture3d_game_eula.txt 2012-12-03 22:37 . 2012-07-01 17:45 270280 ----a-w- c:\program files (x86)\BRS\rapture3dgame.chm 2012-12-03 22:37 . 2012-12-03 22:37 840478 ----a-w- c:\program files (x86)\BRS\unins000.exe 2012-12-03 22:37 . 2012-12-03 22:37 2216 ----a-w- c:\program files (x86)\BRS\unins000.dat . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904] "Steam"="c:\program files (x86)\Steam\steam.exe" [2012-12-03 1354736] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2009-06-05 1310720] "TurboV"="c:\program files\ASUS\TurboV\TurboV.exe" [2009-10-20 5516800] "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-11-08 997320] "ROC_roc_ssl_v12"="c:\program files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" [2012-08-29 1020512] "AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-11-06 3143800] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-06 5814392] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944] R3 appliand;Applian Network Service;c:\windows\system32\DRIVERS\appliand.sys [2011-06-26 33888] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-04-25 52736] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-08-30 1255736] R3 WSDScan;Ondersteuning voor WSD-scan via UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-10-05 111456] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800] S0 mv61xx;mv61xx;c:\windows\system32\DRIVERS\mv61xx.sys [2009-05-11 178728] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032] S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2012-11-08 30568] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-20 283200] S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-08-19 90112] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664] S2 MDES;DVM Meta Data Export Service;c:\asus.sys\CONFIG\DVMExportService.exe [2009-02-18 315392] S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-11-30 382824] S2 vToolbarUpdater13.2.0;vToolbarUpdater13.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\Toolb Quote Link naar reactie
0 anoniem Geplaatst: 23 december 2012 Auteur Delen Geplaatst: 23 december 2012 Vertel nu eerst hoe het gaat met jouw Windows. Quote Link naar reactie
0 anoniem Geplaatst: 24 december 2012 Auteur Delen Geplaatst: 24 december 2012 Ik denk dat het nu goed is. het exe bestand is weg, maar ook mijn pc start sneller op en ik heb bepaalde pictogrammen terug die ik eerst mistte. ontzettend bedankt voor je hulp! :D Quote Link naar reactie
Vraag
anoniem
Link naar reactie
10 antwoorden op deze vraag
Aanbevolen berichten
Om een reactie te plaatsen, moet je eerst inloggen