.
DDS (Ver_2011-08-26.01) - NTFSx86 
Internet Explorer: 8.0.7601.17514  BrowserJavaVersion: 1.6.0_26
Run by Niels at 22:22:30 on 2011-10-15
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.32.1043.18.3069.975 [GMT 2:00]
.
AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\PnkBstrA.exe
C:\Program Files\Acer\Acer VCM\RS_Service.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\vfsFPService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\rundll32.exe
C:\Windows\explorer.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Common Files\Steam\SteamService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0813&s=2&o=vp32&d=0211&m=aspire_8930
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0813&s=2&o=vp32&d=0211&m=aspire_8930
mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0813&s=2&o=vp32&d=0211&m=aspire_8930
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0813&s=2&o=vp32&d=0211&m=aspire_8930
uURLSearchHooks: H - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: ShowBarObj Class: {83a2f9b1-01a2-4aa5-87d1-45b6b8505e96} - c:\program files\acer\empowering technology\edatasecurity\x86\ActiveToolBand.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Acer eDataSecurity Management: {5cbe3b7c-1e47-477e-a7dd-396db0476e29} - c:\program files\acer\empowering technology\edatasecurity\x86\eDStoolbar.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [ProductReg] "c:\program files\acer\wr_popup\ProductReg.exe"
uRun: [Steam] "c:\program files\steam\steam.exe" -silent
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [eAudio] "c:\program files\acer\empowering technology\eaudio\eAudio.exe"
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [PLFSetI] c:\windows\PLFSetI.exe
mRun: [ZPdtWzdVitaKey MC3000] "c:\program files\acer\acer bio protection\PdtWzd.exe" show
mRun: [LManager] c:\program files\launch manager\LManager.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [HP CP1020 System Tray] "c:\program files\hp\hp laserjet professional cp1020 series\HPCP1020STRAY.EXE"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [SoftMaths startmenu] "c:\program files\gedesasoft\softmaths2\Menu.exe"
mRun: [Malwarebytes' Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
mPolicies-system: SoftwareSASGeneration = 1 (0x1)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporteren naar Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {10954C80-4F0F-11d3-B17C-00C0DFE39736} - c:\program files\acer\acer bio protection\PwdBank.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} - hxxp://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/nl/uno1/GAME_UNO1.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
TCP: DhcpNameServer = 195.130.130.129 195.130.131.129
TCP: Interfaces\{163C3E8B-3433-49B1-AB34-FA5C194BA61E} : DhcpNameServer = 195.130.130.129 195.130.131.129
TCP: Interfaces\{163C3E8B-3433-49B1-AB34-FA5C194BA61E}\136393 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{163C3E8B-3433-49B1-AB34-FA5C194BA61E}\75966496F53454 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{163C3E8B-3433-49B1-AB34-FA5C194BA61E}\75966496F57324 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{163C3E8B-3433-49B1-AB34-FA5C194BA61E}\D4F6F66726F687 : DhcpNameServer = 192.168.0.10
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: AWinNotifyVitaKey MC3000 - c:\program files\acer\acer bio protection\WinNotify.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
LSA: Notification Packages = scecli c:\program files\acer\acer bio protection\PwdFilter
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\niels\appdata\roaming\mozilla\firefox\profiles\uq5j2qje.default\
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\4.0.60831.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AlfaFF;AlfaFF File System mini-filter;c:\windows\system32\drivers\AlfaFF.sys [2011-2-12 43184]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-2-17 218688]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\acer arcade deluxe\playmovie\000.fcl [2011-2-12 61424]
R2 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2010-12-21 137144]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2010-12-21 95384]
R2 NTIPPKernel;NTIPPKernel;c:\program files\acer arcade deluxe\homemedia\kernel\dmp\NTIPPKernel.sys [2011-2-12 122368]
R3 itecir;ITECIR Infrared Receiver;c:\windows\system32\drivers\itecir.sys [2011-2-12 54784]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\drivers\ManyCam.sys [2008-1-14 21632]
R3 NETw5s32;Intel(R) Wireless WiFi Link adapter stuurprogramma onder Windows 7 32 Bit;c:\windows\system32\drivers\NETw5s32.sys [2009-9-15 6114816]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2011-2-13 64032]
R3 vfs101x;vfs101x;c:\windows\system32\drivers\vfs101x.sys [2008-5-26 40752]
RUnknown SASKUTIL;SASKUTIL; [x]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 HPFXBULKLEDM;HPFXBULKLEDM;c:\windows\system32\drivers\hppcbulkio.sys [2011-1-20 20792]
S3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2009-1-12 85136]
S3 netw5v32;Stuurprogramma voor Intel(R) Wireless WiFi Link 5000 Series-adapter 32-bits Windows Vista;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-6-9 52224]
.
=============== Created Last 30 ================
.
2011-10-15 20:13:39	41272	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2011-10-14 20:18:45	54016	----a-w-	c:\windows\system32\drivers\qmuc.sys
2011-10-14 16:27:20	56200	----a-w-	c:\programdata\microsoft\windows defender\definition updates\{fa3ea1e7-f5af-4d90-a6a3-6f97abf652f7}\offreg.dll
2011-10-14 15:17:15	7269712	----a-w-	c:\programdata\microsoft\windows defender\definition updates\{fa3ea1e7-f5af-4d90-a6a3-6f97abf652f7}\mpengine.dll
2011-10-14 05:49:53	--------	d-----w-	c:\users\niels\appdata\local\{7027E086-6312-4333-B445-7E0FD7EEE8B8}
2011-10-14 05:49:31	--------	d-----w-	c:\users\niels\appdata\local\{A30FB95B-37EE-4D60-ACE4-F5A8C4D4FEF0}
2011-10-13 17:16:34	--------	d-----w-	c:\users\niels\appdata\local\{A4CC0BD4-04EA-4C59-8F86-5569868660D4}
2011-10-13 17:16:20	--------	d-----w-	c:\users\niels\appdata\local\{8248B0EE-0CC3-4BF1-B396-5D763DBDC670}
2011-10-12 19:56:05	75776	----a-w-	c:\windows\system32\psisrndr.ax
2011-10-12 19:56:04	465408	----a-w-	c:\windows\system32\psisdecd.dll
2011-10-12 19:56:03	233472	----a-w-	c:\windows\system32\oleacc.dll
2011-10-12 19:56:02	571904	----a-w-	c:\windows\system32\oleaut32.dll
2011-10-12 16:11:36	--------	d-----w-	c:\users\niels\appdata\local\{FC45665E-85F7-47AE-B812-B8958DFACA58}
2011-10-12 16:11:14	--------	d-----w-	c:\users\niels\appdata\local\{58D45C99-CBAC-45ED-B20E-BC21E0CB33E6}
2011-10-10 16:35:31	--------	d-----w-	c:\users\niels\appdata\local\{BF3A6863-415A-48A6-8F5C-B6BE6EC18BC7}
2011-10-10 16:35:03	--------	d-----w-	c:\users\niels\appdata\local\{BAB92BEB-1149-4391-A563-7BBD0FD3B504}
2011-10-09 16:38:26	--------	d-----w-	c:\users\niels\appdata\local\{34569E67-A094-4ACC-A9C3-28BE93AABA96}
2011-10-09 16:38:03	--------	d-----w-	c:\users\niels\appdata\local\{E6570C2D-59CB-41D1-9113-712E9BB1243A}
2011-10-03 17:40:17	--------	d-----w-	c:\users\niels\appdata\local\{DAFE633A-4E2B-4A91-B95C-B5518E00FDD1}
2011-10-03 17:15:00	--------	d-----w-	c:\users\niels\appdata\local\{2EBDD362-A03A-4292-AA64-BFE0E0741D03}
2011-10-01 15:21:37	--------	d-----w-	c:\users\niels\appdata\local\{93DF830F-0FEB-466A-9FD5-9C77C60E4A9F}
2011-09-30 17:53:24	--------	d-----w-	c:\users\niels\appdata\local\{4FC3900C-06AF-41DD-993E-1606EE3598BF}
2011-09-30 06:24:11	--------	d-----w-	c:\users\niels\appdata\local\{DE09A728-9E22-4A4C-BFE3-BAB8E53096CC}
2011-09-29 07:31:01	--------	d-----w-	c:\users\niels\appdata\local\{3594B2D5-0A6C-4C68-9961-85A7DB0F7145}
2011-09-28 18:20:37	--------	d-----w-	c:\users\niels\appdata\local\{CF8B7D8D-CC41-4F5B-8FF9-A3F94F14DBBB}
2011-09-28 15:14:51	--------	d-----w-	c:\users\niels\appdata\local\{1F75519D-0011-4AE3-9A32-01D35C693D7D}
2011-09-26 18:19:12	--------	d-----w-	c:\users\niels\appdata\local\{A254542B-F80A-400C-ADAF-5DDF953524DC}
2011-09-22 17:39:34	--------	d-----w-	c:\users\niels\appdata\local\{E838E657-E3AE-44AF-A7FE-E1B55E12A88D}
2011-09-22 17:39:12	--------	d-----w-	c:\users\niels\appdata\local\{1C029BBC-4606-425E-8F45-9F6AD8462948}
2011-09-22 05:38:47	--------	d-----w-	c:\users\niels\appdata\local\{4DA6D5BD-9B98-4A16-9787-1BDE68F6C706}
2011-09-22 05:38:24	--------	d-----w-	c:\users\niels\appdata\local\{334B5549-192D-4C38-AFCC-4BF58FDAB0C7}
2011-09-21 11:07:37	--------	d-----w-	c:\users\niels\appdata\local\{4BEC9EEC-1D77-48C3-9327-8D8F5D879674}
2011-09-21 11:07:14	--------	d-----w-	c:\users\niels\appdata\local\{56F6565F-141D-460C-9659-714E5AB6BB1C}
2011-09-17 15:43:47	--------	d-----w-	c:\users\niels\appdata\local\{3070EC84-13FA-4AB8-AB57-ACCF044B741A}
2011-09-17 15:43:34	--------	d-----w-	c:\users\niels\appdata\local\{5E32EC10-1BD7-449B-8BD5-4177F05A0465}
2011-09-16 17:51:15	--------	d-----w-	c:\users\niels\appdata\local\{14D6C425-F2D2-4B8C-B08E-4042CF4AAC21}
.
==================== Find3M  ====================
.
2011-10-10 16:47:03	414368	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-01 02:42:56	1638912	----a-w-	c:\windows\system32\mshtml.tlb
2011-09-06 02:28:37	2334720	----a-w-	c:\windows\system32\win32k.sys
2011-08-31 15:00:50	22216	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-08-27 16:30:36	499712	----a-w-	c:\windows\system32\msvcp71.dll
2011-08-27 16:30:36	348160	----a-w-	c:\windows\system32\msvcr71.dll
2011-08-20 04:31:05	981504	----a-w-	c:\windows\system32\wininet.dll
2011-08-15 13:06:20	90928	----a-w-	c:\windows\system32\drivers\VBoxUSBMon.sys
2011-08-15 13:06:20	158512	----a-w-	c:\windows\system32\drivers\VBoxDrv.sys
2011-08-15 13:06:20	116016	----a-w-	c:\windows\system32\drivers\VBoxNetFlt.sys
2011-08-15 13:06:20	104752	----a-w-	c:\windows\system32\drivers\VBoxNetAdp.sys
2011-08-15 13:06:12	135472	----a-w-	c:\windows\system32\VBoxNetFltNobj.dll
.
============= FINISH: 22:23:39,63 ===============