API tools faq
paste
sabasNL

ComboFix.txt 3-8-2012

sabasNL
Aug 3rd, 2012
25
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 40.66 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 12-07-31.06 - Bas 03-08-2012 17:13:59.3.8 - x64 NETWORK
  2. Microsoft Windows 7 Ultimate 6.1.7601.1.1252.31.1043.18.8174.7213 [GMT 2:00]
  3. Gestart vanuit: e:\users\Bas\Desktop\ComboFix.exe
  4. AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
  5. AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
  6. SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
  7. SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
  8. SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  9. * Nieuw herstelpunt werd aangemaakt
  10. .
  11. .
  12. (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
  13. .
  14. .
  15. L:\install.exe
  16. .
  17. .
  18. (((((((((((((((((((( Bestanden Gemaakt van 2012-07-03 to 2012-08-03 ))))))))))))))))))))))))))))))
  19. .
  20. .
  21. 2012-08-03 15:17 . 2012-08-03 15:17 -------- d-----w- c:\users\Default\AppData\Local\temp
  22. 2012-08-02 21:59 . 2012-08-02 21:59 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6139F3D5-3473-4ABA-BA9E-8BA87C3D7BE2}\offreg.dll
  23. 2012-08-02 21:20 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6139F3D5-3473-4ABA-BA9E-8BA87C3D7BE2}\mpengine.dll
  24. 2012-08-01 22:07 . 2012-08-02 20:57 -------- d-----w- c:\users\Bas\AppData\Roaming\wargaming.net
  25. 2012-07-31 13:43 . 2012-07-31 13:43 -------- d-----w- c:\programdata\ATI
  26. 2012-07-31 13:43 . 2012-07-31 13:43 -------- d-----w- c:\program files (x86)\AMD APP
  27. 2012-07-30 11:54 . 2012-07-30 11:54 -------- d-----w- c:\users\Bas\AppData\Roaming\MotioninJoy
  28. 2012-07-30 00:10 . 2011-12-07 17:42 328712 ----a-w- c:\windows\system32\MijFrc.dll
  29. 2012-07-29 19:52 . 2012-07-29 19:59 -------- d-----w- c:\users\Bas\AppData\Roaming\GetRightToGo
  30. 2012-07-29 19:37 . 2012-07-29 19:37 -------- d-----w- c:\users\Bas\AppData\Roaming\Malwarebytes
  31. 2012-07-29 19:37 . 2012-07-29 19:37 -------- d-----w- c:\programdata\Malwarebytes
  32. 2012-07-29 19:37 . 2012-07-03 11:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
  33. 2012-07-29 18:40 . 2012-07-29 18:40 -------- d-----w- c:\program files\CCleaner
  34. 2012-07-24 21:30 . 2012-07-24 21:30 -------- d-----w- c:\users\Bas\AppData\Roaming\RoboForm
  35. 2012-07-24 21:29 . 2012-07-24 21:29 -------- d-----w- c:\programdata\RoboForm
  36. 2012-07-24 21:28 . 2012-07-03 16:21 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
  37. 2012-07-24 21:28 . 2012-07-03 16:21 355856 ----a-w- c:\windows\system32\drivers\aswSP.sys
  38. 2012-07-24 21:28 . 2012-07-03 16:21 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
  39. 2012-07-24 21:28 . 2012-07-03 16:21 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys
  40. 2012-07-24 21:28 . 2012-07-03 16:21 958400 ----a-w- c:\windows\system32\drivers\aswSnx.sys
  41. 2012-07-24 21:28 . 2012-07-03 16:21 71064 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
  42. 2012-07-24 21:28 . 2012-07-03 16:21 41224 ----a-w- c:\windows\avastSS.scr
  43. 2012-07-24 21:28 . 2012-07-03 16:21 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe
  44. 2012-07-24 18:33 . 2012-07-24 18:33 -------- d-----w- c:\users\Bas\AppData\Roaming\Leadertech
  45. 2012-07-24 18:31 . 2012-07-24 18:31 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
  46. 2012-07-24 18:31 . 2012-07-24 18:31 -------- d-----w- c:\programdata\LogiShrd
  47. 2012-07-24 18:30 . 2012-07-24 18:32 -------- d-----w- c:\program files\Logitech Gaming Software
  48. 2012-07-24 18:30 . 2012-07-24 18:30 -------- d-----w- c:\users\Bas\AppData\Roaming\Logitech
  49. 2012-07-24 18:30 . 2012-07-24 18:30 -------- d-----w- c:\users\Bas\AppData\Roaming\Logishrd
  50. 2012-07-23 17:14 . 2012-07-23 20:40 -------- d-----w- c:\users\Bas\AppData\Local\FalloutNV
  51. 2012-07-23 17:13 . 2012-07-23 17:13 -------- d-----w- c:\users\Bas\AppData\Local\FOMM
  52. 2012-07-20 13:59 . 2012-07-20 13:59 -------- d-----w- c:\program files (x86)\Common Files\Overwolf
  53. 2012-07-19 16:03 . 2012-07-19 16:03 -------- d-----w- c:\users\Bas\AppData\Local\ArmA 2
  54. 2012-07-18 20:40 . 2012-07-18 20:40 66728 ----a-w- c:\windows\system32\drivers\vrtaucbl.sys
  55. 2012-07-18 17:35 . 2012-07-18 17:37 -------- d-----w- c:\users\Bas\AppData\Local\Ubisoft Game Launcher
  56. 2012-07-18 16:20 . 2012-07-18 16:20 -------- d-----w- c:\programdata\Solidshield
  57. 2012-07-18 16:15 . 2012-07-18 16:15 -------- d-----w- c:\users\Bas\AppData\Roaming\Ubisoft
  58. 2012-07-18 15:17 . 2012-07-18 15:17 -------- d-----w- c:\program files (x86)\Ubisoft
  59. 2012-07-17 19:02 . 2012-03-17 12:08 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{19E021E9-EEBD-442E-ADEC-FF5F568ABC29}\gapaengine.dll
  60. .
  61. .
  62. .
  63. ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
  64. .
  65. 2012-08-02 23:20 . 2012-04-01 12:20 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
  66. 2012-08-02 23:20 . 2012-03-17 18:24 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
  67. 2012-07-31 19:04 . 2012-03-17 13:00 283304 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
  68. 2012-07-31 19:04 . 2012-03-16 20:25 283304 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
  69. 2012-07-31 19:03 . 2012-03-16 20:25 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
  70. 2012-07-30 00:07 . 2012-03-24 20:08 466456 ----a-w- c:\windows\system32\wrap_oal.dll
  71. 2012-07-30 00:07 . 2012-03-24 20:08 122904 ----a-w- c:\windows\system32\OpenAL32.dll
  72. 2012-07-30 00:06 . 2012-03-24 20:08 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll
  73. 2012-07-30 00:06 . 2012-03-24 20:08 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
  74. 2012-07-03 16:21 . 2012-03-17 11:54 285328 ----a-w- c:\windows\system32\aswBoot.exe
  75. 2012-06-29 10:04 . 2012-03-18 10:14 9133488 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
  76. 2012-06-11 18:59 . 2012-06-11 18:59 10248192 ----a-w- c:\windows\system32\drivers\atikmdag.sys
  77. 2012-06-11 18:35 . 2012-06-11 18:35 70144 ----a-w- c:\windows\system32\coinst_8.98.dll
  78. 2012-06-11 18:29 . 2012-04-06 02:10 24826368 ----a-w- c:\windows\system32\atio6axx.dll
  79. 2012-06-11 18:00 . 2012-06-11 18:00 20467712 ----a-w- c:\windows\SysWow64\atioglxx.dll
  80. 2012-06-11 17:25 . 2012-06-11 17:25 163840 ----a-w- c:\windows\system32\atiapfxx.exe
  81. 2012-06-11 17:24 . 2012-02-15 03:18 924160 ----a-w- c:\windows\SysWow64\aticfx32.dll
  82. 2012-06-11 17:23 . 2012-02-15 03:17 1090560 ----a-w- c:\windows\system32\aticfx64.dll
  83. 2012-06-11 17:20 . 2012-06-11 17:20 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
  84. 2012-06-11 17:19 . 2012-06-11 17:19 532992 ----a-w- c:\windows\system32\atieclxx.exe
  85. 2012-06-11 17:19 . 2012-06-11 17:19 239616 ----a-w- c:\windows\system32\atiesrxx.exe
  86. 2012-06-11 17:17 . 2012-06-11 17:17 120320 ----a-w- c:\windows\system32\atitmm64.dll
  87. 2012-06-11 17:17 . 2012-06-11 17:17 21504 ----a-w- c:\windows\system32\atimuixx.dll
  88. 2012-06-11 17:17 . 2012-06-11 17:17 59392 ----a-w- c:\windows\system32\atiedu64.dll
  89. 2012-06-11 17:17 . 2012-06-11 17:17 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
  90. 2012-06-11 17:16 . 2012-06-11 17:16 6301696 ----a-w- c:\windows\SysWow64\atidxx32.dll
  91. 2012-06-11 17:01 . 2012-02-15 02:52 6914560 ----a-w- c:\windows\system32\atidxx64.dll
  92. 2012-06-11 16:51 . 2012-06-11 16:51 4246528 ----a-w- c:\windows\system32\atiumd6a.dll
  93. 2012-06-11 16:45 . 2012-06-11 16:45 51200 ----a-w- c:\windows\system32\aticalrt64.dll
  94. 2012-06-11 16:45 . 2012-06-11 16:45 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
  95. 2012-06-11 16:45 . 2012-02-15 02:34 5480448 ----a-w- c:\windows\SysWow64\atiumdag.dll
  96. 2012-06-11 16:45 . 2012-06-11 16:45 44544 ----a-w- c:\windows\system32\aticalcl64.dll
  97. 2012-06-11 16:45 . 2012-06-11 16:45 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
  98. 2012-06-11 16:45 . 2012-06-11 16:45 15703040 ----a-w- c:\windows\system32\aticaldd64.dll
  99. 2012-06-11 16:43 . 2012-02-15 02:29 4729344 ----a-w- c:\windows\SysWow64\atiumdva.dll
  100. 2012-06-11 16:40 . 2012-06-11 16:40 13277696 ----a-w- c:\windows\SysWow64\aticaldd.dll
  101. 2012-06-11 16:36 . 2012-06-11 16:36 6605824 ----a-w- c:\windows\system32\atiumd64.dll
  102. 2012-06-11 16:27 . 2012-04-06 01:11 539136 ----a-w- c:\windows\system32\atiadlxx.dll
  103. 2012-06-11 16:26 . 2012-06-11 16:26 368640 ----a-w- c:\windows\SysWow64\atiadlxy.dll
  104. 2012-06-11 16:26 . 2012-04-06 01:11 17920 ----a-w- c:\windows\system32\atig6pxx.dll
  105. 2012-06-11 16:26 . 2012-06-11 16:26 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
  106. 2012-06-11 16:26 . 2012-06-11 16:26 14848 ----a-w- c:\windows\system32\atiglpxx.dll
  107. 2012-06-11 16:26 . 2012-04-06 01:11 41984 ----a-w- c:\windows\system32\atig6txx.dll
  108. 2012-06-11 16:26 . 2012-06-11 16:26 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll
  109. 2012-06-11 16:26 . 2012-06-11 16:26 367616 ----a-w- c:\windows\system32\drivers\atikmpag.sys
  110. 2012-06-11 16:25 . 2012-02-15 02:12 54784 ----a-w- c:\windows\system32\atiuxp64.dll
  111. 2012-06-11 16:25 . 2012-06-11 16:25 42496 ----a-w- c:\windows\SysWow64\atiuxpag.dll
  112. 2012-06-11 16:25 . 2012-06-11 16:25 45056 ----a-w- c:\windows\system32\atiu9p64.dll
  113. 2012-06-11 16:24 . 2012-02-15 02:12 32768 ----a-w- c:\windows\SysWow64\atiu9pag.dll
  114. 2012-06-11 16:24 . 2012-06-11 16:24 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
  115. 2012-06-11 16:23 . 2012-06-11 16:23 56320 ----a-w- c:\windows\system32\atimpc64.dll
  116. 2012-06-11 16:23 . 2012-06-11 16:23 56320 ----a-w- c:\windows\system32\amdpcom64.dll
  117. 2012-06-11 16:23 . 2012-06-11 16:23 56832 ----a-w- c:\windows\SysWow64\atimpc32.dll
  118. 2012-06-11 16:23 . 2012-06-11 16:23 56832 ----a-w- c:\windows\SysWow64\amdpcom32.dll
  119. 2012-06-11 11:50 . 2012-06-11 11:50 187392 ----a-w- c:\windows\system32\clinfo.exe
  120. 2012-06-11 11:50 . 2012-06-11 11:50 75264 ----a-w- c:\windows\system32\OpenVideo64.dll
  121. 2012-06-11 11:50 . 2012-06-11 11:50 65024 ----a-w- c:\windows\SysWow64\OpenVideo.dll
  122. 2012-06-11 11:50 . 2012-06-11 11:50 63488 ----a-w- c:\windows\system32\OVDecode64.dll
  123. 2012-06-11 11:50 . 2012-06-11 11:50 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
  124. 2012-06-11 11:50 . 2012-06-11 11:50 16457728 ----a-w- c:\windows\system32\amdocl64.dll
  125. 2012-06-11 11:49 . 2012-06-11 11:49 13008896 ----a-w- c:\windows\SysWow64\amdocl.dll
  126. 2012-05-27 11:23 . 2012-05-27 11:23 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
  127. 2012-05-26 23:20 . 2012-03-16 20:25 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
  128. 2012-05-12 11:32 . 2012-05-12 11:34 3130440 ----a-w- c:\windows\SysWow64\pbsvc_blr.exe
  129. 2012-05-10 21:19 . 2012-03-16 19:32 1170400 ----a-w- c:\windows\PE_Rom.dll
  130. .
  131. .
  132. ((((((((((((((((((((((((((((( SnapShot_2012-08-01_18.23.16 )))))))))))))))))))))))))))))))))))))))))
  133. .
  134. - 2009-07-14 04:54 . 2012-08-01 18:19 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  135. + 2009-07-14 04:54 . 2012-08-03 15:18 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  136. + 2009-07-14 04:54 . 2012-08-03 15:18 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  137. - 2009-07-14 04:54 . 2012-08-01 18:19 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  138. - 2009-07-14 04:54 . 2012-08-01 18:19 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  139. + 2009-07-14 04:54 . 2012-08-03 15:18 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  140. + 2009-07-14 05:10 . 2012-08-03 15:20 31046 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
  141. + 2012-03-16 16:03 . 2012-08-02 23:47 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  142. - 2012-03-16 16:03 . 2012-07-30 20:05 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  143. + 2012-03-16 16:03 . 2012-08-02 23:47 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  144. - 2012-03-16 16:03 . 2012-07-30 20:05 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  145. + 2009-07-14 04:54 . 2012-08-02 23:47 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  146. - 2009-07-14 04:54 . 2012-07-30 20:05 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  147. - 2012-03-16 16:35 . 2012-08-01 18:08 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  148. + 2012-03-16 16:35 . 2012-08-03 15:19 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  149. - 2012-03-16 16:35 . 2012-08-01 18:08 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  150. + 2012-03-16 16:35 . 2012-08-03 15:19 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  151. - 2012-03-16 16:35 . 2012-08-01 18:08 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  152. + 2012-03-16 16:35 . 2012-08-03 15:19 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  153. + 2012-03-16 16:23 . 2012-08-03 15:19 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  154. - 2012-03-16 16:23 . 2012-08-01 18:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  155. - 2012-03-16 16:23 . 2012-08-01 18:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  156. + 2012-03-16 16:23 . 2012-08-03 15:19 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  157. - 2012-07-24 21:54 . 2012-07-24 21:54 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
  158. + 2012-08-02 23:46 . 2012-08-02 23:46 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
  159. + 2012-08-02 23:46 . 2012-08-02 23:46 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
  160. - 2012-07-24 21:54 . 2012-07-24 21:54 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
  161. + 2012-03-16 18:36 . 2012-08-03 15:20 9524 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2001550640-3423300443-1715644720-1000_UserData.bin
  162. + 2012-08-03 15:18 . 2012-08-03 15:18 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
  163. - 2012-08-01 18:18 . 2012-08-01 18:22 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
  164. - 2012-08-01 18:18 . 2012-08-01 18:22 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
  165. + 2012-08-03 15:18 . 2012-08-03 15:18 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
  166. + 2012-08-02 23:20 . 2012-08-02 23:20 686792 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_270_Plugin.exe
  167. + 2012-08-02 22:19 . 2012-08-02 22:19 686792 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_270_ActiveX.exe
  168. + 2012-08-02 22:19 . 2012-08-02 22:19 466632 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_270_ActiveX.dll
  169. - 2012-04-01 12:20 . 2012-07-27 20:19 250056 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  170. + 2012-04-01 12:20 . 2012-08-02 23:20 250056 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  171. + 2012-08-02 23:20 . 2012-08-02 23:20 417992 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_270_Plugin.exe
  172. + 2012-08-02 22:19 . 2012-08-02 22:19 417992 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_270_ActiveX.exe
  173. + 2012-08-02 22:19 . 2012-08-02 22:19 513224 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_270_ActiveX.dll
  174. - 2009-07-14 05:01 . 2012-08-01 08:28 407492 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
  175. + 2009-07-14 05:01 . 2012-08-02 19:28 407492 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
  176. + 2012-08-02 23:46 . 2012-08-02 23:46 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
  177. - 2012-07-24 21:54 . 2012-07-24 21:54 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
  178. - 2012-07-24 21:54 . 2012-07-24 21:54 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
  179. + 2012-08-02 23:46 . 2012-08-02 23:46 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
  180. + 2012-08-02 23:46 . 2012-08-02 23:46 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
  181. - 2012-07-24 21:54 . 2012-07-24 21:54 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
  182. + 2012-08-02 23:46 . 2012-08-02 23:46 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
  183. - 2012-07-24 21:54 . 2012-07-24 21:54 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
  184. - 2012-07-24 21:54 . 2012-07-24 21:54 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
  185. + 2012-08-02 23:46 . 2012-08-02 23:46 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
  186. + 2012-08-02 23:46 . 2012-08-02 23:46 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  187. - 2012-07-24 21:54 . 2012-07-24 21:54 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  188. + 2012-08-02 23:46 . 2012-08-02 23:46 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  189. - 2012-07-24 21:54 . 2012-07-24 21:54 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  190. - 2012-07-24 21:54 . 2012-07-24 21:54 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  191. + 2012-08-02 23:46 . 2012-08-02 23:46 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  192. - 2012-07-24 21:54 . 2012-07-24 21:54 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  193. + 2012-08-02 23:46 . 2012-08-02 23:46 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  194. - 2012-07-24 21:54 . 2012-07-24 21:54 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  195. + 2012-08-02 23:46 . 2012-08-02 23:46 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  196. - 2012-07-24 21:54 . 2012-07-24 21:54 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  197. + 2012-08-02 23:46 . 2012-08-02 23:46 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  198. + 2012-08-02 23:46 . 2012-08-02 23:46 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  199. - 2012-07-24 21:54 . 2012-07-24 21:54 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  200. + 2012-08-02 23:46 . 2012-08-02 23:46 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  201. - 2012-07-24 21:54 . 2012-07-24 21:54 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  202. - 2012-07-24 21:54 . 2012-07-24 21:54 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
  203. + 2012-08-02 23:46 . 2012-08-02 23:46 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
  204. + 2012-08-02 23:20 . 2012-08-02 23:20 9465032 c:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll
  205. + 2012-08-02 23:20 . 2012-08-02 23:20 1536712 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe
  206. + 2012-03-16 23:49 . 2012-08-02 19:28 4960111 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2001550640-3423300443-1715644720-1000-12288.dat
  207. - 2012-03-16 23:49 . 2012-07-31 13:41 4960111 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2001550640-3423300443-1715644720-1000-12288.dat
  208. + 2012-08-02 23:47 . 2012-08-02 23:47 6556160 c:\windows\Installer\{A8DBF55D-73C0-4E37-A10E-365BFBB14119}\BF2.exe
  209. - 2012-07-24 21:54 . 2012-07-24 21:54 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  210. + 2012-08-02 23:46 . 2012-08-02 23:46 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  211. - 2012-07-24 21:54 . 2012-07-24 21:54 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  212. + 2012-08-02 23:46 . 2012-08-02 23:46 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
  213. + 2012-08-02 23:20 . 2012-08-02 23:20 12315336 c:\windows\system32\Macromed\Flash\NPSWF64_11_3_300_270.dll
  214. + 2011-06-28 20:49 . 2011-06-28 20:49 16797696 c:\windows\Installer\5b1ae9b.msi
  215. .
  216. -- Snapshot teruggezet naar huidige datum --
  217. .
  218. ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
  219. .
  220. .
  221. *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
  222. REGEDIT4
  223. .
  224. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  225. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  226. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  227. 2012-02-14 22:58 94208 ----a-w- c:\users\Bas\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
  228. .
  229. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  230. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  231. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  232. 2012-02-14 22:58 94208 ----a-w- c:\users\Bas\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
  233. .
  234. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  235. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  236. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  237. 2012-02-14 22:58 94208 ----a-w- c:\users\Bas\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
  238. .
  239. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
  240. @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
  241. [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
  242. 2012-02-14 22:58 94208 ----a-w- c:\users\Bas\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
  243. .
  244. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  245. "AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
  246. "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
  247. "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-06-11 641704]
  248. "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-07-03 4273976]
  249. .
  250. c:\users\Bas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  251. Dropbox.lnk - c:\users\Bas\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
  252. .
  253. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  254. "ConsentPromptBehaviorAdmin"= 0 (0x0)
  255. "ConsentPromptBehaviorUser"= 3 (0x3)
  256. "EnableLUA"= 0 (0x0)
  257. "EnableUIADesktopToggle"= 0 (0x0)
  258. "PromptOnSecureDesktop"= 0 (0x0)
  259. .
  260. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
  261. Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
  262. .
  263. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
  264. @="Service"
  265. .
  266. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  267. R2 gupdate;Google Update-service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-22 116648]
  268. R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-06-07 160944]
  269. R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-02 250056]
  270. R3 Desura Install Service;Desura Install Service;c:\program files (x86)\Common Files\Desura\desura_service.exe [2012-03-30 131912]
  271. R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2012-02-24 99384]
  272. R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
  273. R3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;c:\windows\system32\DRIVERS\aabed2.sys [2008-03-20 28672]
  274. R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-22 116648]
  275. R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys [2011-11-10 115272]
  276. R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 40832]
  277. R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [2012-07-15 18360]
  278. R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]
  279. R3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtTeam60.sys [2010-01-14 48416]
  280. R3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtVlan60.sys [2010-01-14 29472]
  281. R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2012-02-24 203320]
  282. R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
  283. R3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.2);c:\windows\system32\DRIVERS\RtTeam60.sys [2010-01-14 48416]
  284. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
  285. R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
  286. R3 TunngleService;TunngleService;d:\program files\Tunngle\TnglCtrl.exe [2012-06-01 736104]
  287. R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
  288. R3 VLAN;Realtek Virtual Miniport Driver for VLAN (NDIS 6.2);c:\windows\system32\DRIVERS\RtVLAN60.sys [2010-01-14 29472]
  289. R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-19 1255736]
  290. R3 WinRing0_1_2_0;WinRing0_1_2_0;d:\program files\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
  291. R3 X6va006;X6va006;c:\users\Bas\AppData\Local\Temp\006D4AA.tmp [x]
  292. R3 X6va007;X6va007;c:\users\Bas\AppData\Local\Temp\007FFF6.tmp [x]
  293. R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
  294. S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
  295. S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
  296. S1 aswSnx;aswSnx; [x]
  297. S1 aswSP;aswSP; [x]
  298. S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
  299. S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-06-11 239616]
  300. S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [2010-11-03 918144]
  301. S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [2010-12-02 915584]
  302. S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
  303. S2 aswFsBlk;aswFsBlk; [x]
  304. S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-07-03 71064]
  305. S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\program files\LogMeIn Hamachi\hamachi-2.exe [2012-06-27 2369960]
  306. S2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\DRIVERS\RtNdPt60.sys [2010-01-14 32544]
  307. S2 TeamViewer7;TeamViewer 7;d:\program files\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
  308. S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2012-06-11 10248192]
  309. S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2012-06-11 367616]
  310. S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
  311. S3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM);c:\windows\system32\DRIVERS\vrtaucbl.sys [2012-07-18 66728]
  312. S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
  313. S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys [2012-02-07 66328]
  314. S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
  315. S3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 84864]
  316. S3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
  317. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-04-21 471144]
  318. S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
  319. .
  320. .
  321. Inhoud van de 'Gedeelde Taken' map
  322. .
  323. 2012-08-03 c:\windows\Tasks\Adobe Flash Player Updater.job
  324. - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 23:20]
  325. .
  326. 2012-07-29 c:\windows\Tasks\avast! Emergency Update.job
  327. - c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-07-24 16:21]
  328. .
  329. 2012-08-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  330. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22 17:04]
  331. .
  332. 2012-08-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  333. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-22 17:04]
  334. .
  335. 2012-08-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2001550640-3423300443-1715644720-1000Core.job
  336. - c:\users\Bas\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-18 12:27]
  337. .
  338. 2012-08-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2001550640-3423300443-1715644720-1000UA.job
  339. - c:\users\Bas\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-18 12:27]
  340. .
  341. .
  342. --------- X64 Entries -----------
  343. .
  344. .
  345. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
  346. @="{472083B0-C522-11CF-8763-00608CC02F24}"
  347. [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
  348. 2012-07-03 16:21 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
  349. .
  350. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  351. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  352. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  353. 2012-02-14 22:58 97792 ----a-w- c:\users\Bas\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
  354. .
  355. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  356. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  357. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  358. 2012-02-14 22:58 97792 ----a-w- c:\users\Bas\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
  359. .
  360. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  361. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  362. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  363. 2012-02-14 22:58 97792 ----a-w- c:\users\Bas\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
  364. .
  365. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
  366. @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
  367. [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
  368. 2012-02-14 22:58 97792 ----a-w- c:\users\Bas\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
  369. .
  370. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
  371. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
  372. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
  373. 2012-06-20 17:02 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  374. .
  375. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
  376. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
  377. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
  378. 2012-06-20 17:02 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  379. .
  380. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
  381. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
  382. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
  383. 2012-06-20 17:02 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  384. .
  385. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
  386. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
  387. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
  388. 2012-06-20 17:02 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
  389. .
  390. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  391. "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-19 11613288]
  392. "Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-05-21 6868280]
  393. .
  394. ------- Bijkomende Scan -------
  395. .
  396. uLocal Page = c:\windows\system32\blank.htm
  397. mLocal Page = c:\windows\SysWOW64\blank.htm
  398. uInternet Settings,ProxyOverride = *.local
  399. IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
  400. .
  401. .
  402. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va006]
  403. "ImagePath"="\??\c:\users\Bas\AppData\Local\Temp\006D4AA.tmp"
  404. .
  405. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va007]
  406. "ImagePath"="\??\c:\users\Bas\AppData\Local\Temp\007FFF6.tmp"
  407. .
  408. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
  409. "ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
  410. .
  411. --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
  412. .
  413. [HKEY_USERS\S-1-5-21-2001550640-3423300443-1715644720-1000\Software\SecuROM\License information*]
  414. "datasecu"=hex:2c,44,85,5a,07,da,1e,4a,01,d0,2e,59,3d,0a,a6,7c,32,23,74,70,4d,
  415. ea,55,3b,9b,08,cb,54,8f,6f,8c,32,ab,95,12,c3,9f,1b,d8,25,fc,c4,77,05,ff,5a,\
  416. "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
  417. .
  418. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  419. @Denied: (A 2) (Everyone)
  420. @="FlashBroker"
  421. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe,-101"
  422. .
  423. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  424. "Enabled"=dword:00000001
  425. .
  426. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  427. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe"
  428. .
  429. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  430. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  431. .
  432. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  433. @Denied: (A 2) (Everyone)
  434. @="Shockwave Flash Object"
  435. .
  436. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  437. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx"
  438. "ThreadingModel"="Apartment"
  439. .
  440. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  441. @="0"
  442. .
  443. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  444. @="ShockwaveFlash.ShockwaveFlash.11"
  445. .
  446. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  447. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1"
  448. .
  449. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  450. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  451. .
  452. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  453. @="1.0"
  454. .
  455. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  456. @="ShockwaveFlash.ShockwaveFlash"
  457. .
  458. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  459. @Denied: (A 2) (Everyone)
  460. @="Macromedia Flash Factory Object"
  461. .
  462. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  463. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx"
  464. "ThreadingModel"="Apartment"
  465. .
  466. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  467. @="FlashFactory.FlashFactory.1"
  468. .
  469. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  470. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1"
  471. .
  472. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  473. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  474. .
  475. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  476. @="1.0"
  477. .
  478. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  479. @="FlashFactory.FlashFactory"
  480. .
  481. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  482. @Denied: (A 2) (Everyone)
  483. @="IFlashBroker4"
  484. .
  485. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  486. @="{00020424-0000-0000-C000-000000000046}"
  487. .
  488. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  489. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  490. "Version"="1.0"
  491. .
  492. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  493. @Denied: (A) (Users)
  494. @Denied: (A) (Everyone)
  495. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  496. "BlindDial"=dword:00000000
  497. .
  498. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  499. @Denied: (Full) (Everyone)
  500. .
  501. ------------------------ Andere Aktieve Processen ------------------------
  502. .
  503. c:\program files\AVAST Software\Avast\AvastSvc.exe
  504. c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  505. c:\windows\SysWOW64\PnkBstrA.exe
  506. c:\program files (x86)\ASUS\AI Suite II\AsRoutineController.exe
  507. d:\program files\Game Booster 3\gbtray.exe
  508. c:\program files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
  509. c:\program files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
  510. c:\program files (x86)\ASUS\AI Suite II\AI Suite II.exe
  511. c:\program files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
  512. .
  513. **************************************************************************
  514. .
  515. Voltooingstijd: 2012-08-03 17:22:24 - machine werd herstart
  516. ComboFix-quarantined-files.txt 2012-08-03 15:22
  517. ComboFix2.txt 2012-08-01 18:25
  518. .
  519. Pre-Run: 103.665.291.264 bytes beschikbaar
  520. Post-Run: 103.414.870.016 bytes beschikbaar
  521. .
  522. - - End Of File - - 690DA89F686527241CBF0B4A18B6F6B7
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!