Hoi,
Zoals gezegt heb ik die combo gedaan en daarna hijack…hij is nog wel erg traag…neem aan dat jullie er wel wijs uit kunnen worden wat hier staat en of het
nu helemaal in orde is!…ik hoor het graag
alvast bedankt
groetjes Suzan
ComboFix 10-07-31.04 - Administrator 01-08-2010 10:25:46.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.2047.926
Gestart vanuit: c:\users\Administrator\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
c:\users\suzan\ImageAnalyzer.exe
I:\Autorun.inf
.
(((((((((((((((((((( Bestanden Gemaakt van 2010-07-01 to 2010-08-01 ))))))))))))))))))))))))))))))
.
2010-08-01 08:39 . 2010-08-01 08:40 ——– d—–w- c:\users\Administrator\AppData\Local\temp
2010-08-01 08:39 . 2010-08-01 08:39 ——– d—–w- c:\users\suzan\AppData\Local\temp
2010-08-01 08:39 . 2010-08-01 08:39 ——– d—–w- c:\users\Default\AppData\Local\temp
2010-07-31 13:45 . 2010-08-01 08:00 ——– d—–w- c:\users\Administrator\Tracing
2010-07-31 13:11 . 2010-07-31 13:11 79008 —-a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2010-07-31 13:10 . 2010-07-31 13:10 ——– d—–w- c:\users\Administrator\AppData\Roaming\ATI
2010-07-31 13:10 . 2010-07-31 13:10 ——– d—–w- c:\users\Administrator\AppData\Local\ATI
2010-07-31 13:09 . 2010-07-31 13:09 ——– d—–w- c:\users\Administrator\AppData\Roaming\Malwarebytes
2010-07-31 13:09 . 2010-07-31 13:09 8224 —-a-w- c:\users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2010-07-31 13:09 . 2010-07-31 13:09 ——– d—–w- c:\users\Administrator\AppData\Local\SupportSoft
2010-07-31 12:49 . 2010-07-31 12:49 388096 —-a-r- c:\users\suzan\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-07-31 12:49 . 2010-07-31 12:49 ——– d—–w- c:\program files\Trend Micro
2010-07-30 14:59 . 2010-07-30 14:59 ——– d—–w- c:\users\suzan\AppData\Roaming\Malwarebytes
2010-07-30 14:59 . 2010-04-29 13:39 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-30 14:59 . 2010-07-30 14:59 ——– d—–w- c:\programdata\Malwarebytes
2010-07-30 14:59 . 2010-07-30 14:59 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-07-30 14:59 . 2010-04-29 13:39 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-07-30 10:42 . 2010-07-30 10:43 ——– d—–w- c:\program files\Microsoft Security Essentials
2010-07-30 10:42 . 2010-07-30 10:42 7348384 —-a-w- c:\users\suzan\mssefullinstall-x86fre-nl-nl-vista-win7.exe
2010-07-30 09:06 . 2010-07-30 09:06 129552 —-a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.459\mmpprtc.dll
2010-07-26 11:49 . 2010-07-26 11:49 ——– dc-h–w- c:\programdata\{BD986C1B-72EC-4B82-B47B-6CAC4E6F494E}
2010-07-26 11:49 . 2010-07-12 08:56 2979280 -c–a-w- c:\programdata\{BD986C1B-72EC-4B82-B47B-6CAC4E6F494E}\Ad-AwareInstall.exe
2010-07-26 11:40 . 2010-07-26 11:40 128750008 —-a-w- c:\users\suzan\Ad-AwareInstall.exe
2010-07-25 12:16 . 2010-07-25 12:16 ——– d—–w- c:\programdata\SweetIM
2010-07-17 10:06 . 2010-07-17 10:06 ——– d—–w- c:\program files\Google
2010-07-17 10:04 . 2010-07-17 10:06 ——– d—–w- C:\picasa
2010-07-14 16:46 . 2009-10-09 21:56 2048 —-a-w- c:\windows\system32\winrsmgr.dll
2010-07-14 16:46 . 2009-10-09 21:56 12800 —-a-w- c:\windows\system32\wsmprovhost.exe
2010-07-14 16:46 . 2009-10-09 21:56 20480 —-a-w- c:\windows\system32\winrshost.exe
2010-07-14 16:46 . 2009-10-09 21:56 40448 —-a-w- c:\windows\system32\winrs.exe
2010-07-14 16:46 . 2009-10-09 21:56 10240 —-a-w- c:\windows\system32\wsmplpxy.dll
2010-07-14 16:46 . 2009-10-09 21:56 10240 —-a-w- c:\windows\system32\winrssrv.dll
2010-07-14 16:46 . 2009-10-09 21:56 41472 —-a-w- c:\windows\system32\pwrshplugin.dll
2010-07-14 16:46 . 2009-10-09 21:55 79872 —-a-w- c:\windows\system32\wecutil.exe
2010-07-14 16:46 . 2009-10-09 21:55 54272 —-a-w- c:\windows\system32\WsmRes.dll
2010-07-14 16:46 . 2009-10-09 21:55 146944 —-a-w- c:\windows\system32\wecsvc.dll
2010-07-14 16:46 . 2009-10-09 21:55 81408 —-a-w- c:\windows\system32\wevtfwd.dll
2010-07-14 16:46 . 2009-10-09 21:55 56320 —-a-w- c:\windows\system32\wecapi.dll
2010-07-14 16:45 . 2009-08-01 06:27 201184 —-a-w- c:\windows\system32\winrm.vbs
2010-07-14 16:45 . 2009-10-09 21:56 214016 —-a-w- c:\windows\system32\WsmWmiPl.dll
2010-07-14 16:45 . 2009-10-09 21:56 241152 —-a-w- c:\windows\system32\winrscmd.dll
2010-07-14 16:45 . 2009-10-09 21:56 145408 —-a-w- c:\windows\system32\WsmAuto.dll
2010-07-14 16:45 . 2009-10-09 21:55 252416 —-a-w- c:\windows\system32\WSManMigrationPlugin.dll
2010-07-14 16:45 . 2009-10-09 21:56 1181696 —-a-w- c:\windows\system32\WsmSvc.dll
2010-07-14 16:45 . 2009-10-09 21:56 246272 —-a-w- c:\windows\system32\WSManHTTPConfig.exe
2010-07-06 14:43 . 2010-07-06 14:43 ——– d—–w- c:\program files\MeeSoft
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-01 08:00 . 2009-10-11 13:33 ——– d—–w- c:\programdata\Kaspersky Lab
2010-07-31 17:57 . 2008-01-21 06:47 667114 —-a-w- c:\windows\system32\perfh013.dat
2010-07-31 17:57 . 2008-01-21 06:47 126648 —-a-w- c:\windows\system32\perfc013.dat
2010-07-30 15:27 . 2010-03-04 17:47 ——– d—–w- c:\programdata\WinZip
2010-07-29 15:56 . 2009-10-11 13:33 97549 —-a-w- c:\windows\system32\drivers\klick.dat
2010-07-29 15:56 . 2009-10-11 13:33 113933 —-a-w- c:\windows\system32\drivers\klin.dat
2010-07-23 13:13 . 2009-10-14 16:35 304160 —-a-w- C:\PA207.DAT
2010-07-14 16:17 . 2006-11-02 11:18 ——– d—–w- c:\program files\Windows Mail
2010-07-12 08:55 . 2010-06-07 11:53 64288 —-a-w- c:\windows\system32\drivers\Lbd.sys
2010-06-19 11:03 . 2009-10-13 14:33 ——– d—–w- c:\users\suzan\AppData\Roaming\LimeWire
2010-06-17 11:57 . 2010-04-05 14:06 15880 —-a-w- c:\windows\system32\lsdelete.exe
2010-06-15 12:43 . 2010-06-15 12:43 129624 —-a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.459\mmpprtc.dll
2010-06-05 09:45 . 2009-10-11 19:03 ——– d—–w- c:\program files\Microsoft Silverlight
2010-06-03 02:41 . 2010-06-03 02:41 3600384 —-a-w- c:\windows\system32\GPhotos.scr
2010-06-01 17:37 . 2009-10-12 14:03 221568 ——w- c:\windows\system32\MpSigStub.exe
2010-05-26 17:06 . 2010-06-10 07:18 34304 —-a-w- c:\windows\system32\atmlib.dll
2010-05-26 14:47 . 2010-06-10 07:18 289792 —-a-w- c:\windows\system32\atmfd.dll
2010-05-04 05:59 . 2010-06-10 07:18 916480 —-a-w- c:\windows\system32\wininet.dll
2010-05-04 05:55 . 2010-06-10 07:18 109056 —-a-w- c:\windows\system32\iesysprep.dll
2010-05-04 05:55 . 2010-06-10 07:18 71680 —-a-w- c:\windows\system32\iesetup.dll
2010-05-04 04:31 . 2010-06-10 07:18 133632 —-a-w- c:\windows\system32\ieUnatt.exe
2010-04-05 11:46 . 2010-04-05 11:45 97395640 —-a-w- c:\program files\lavasoft_adawarefree.exe
2009-10-11 17:03 . 2009-10-11 17:03 604140 –sha-w- c:\windows\System32\drivers\ISwift3(40).dat
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4
“Sidebar”=“c:\program files\Windows Sidebar\sidebar.exe”
“WindowsWelcomeCenter”=“oobefldr.dll”
“msnmsgr”=“c:\program files\Windows Live\Messenger\msnmsgr.exe”
“Windows Defender”=“c:\program files\Windows Defender\MSASCui.exe”
“AVP”=“c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe”
“PAC207_Monitor”=“c:\windows\PixArt\PAC207\Monitor.exe”
“StartCCC”=“c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”
“lxbkbmgr.exe”=“c:\program files\Lexmark X1100 Series\lxbkbmgr.exe”
“SunJavaUpdateSched”=“c:\program files\Common Files\Java\Java Update\jusched.exe”
“UPC”=“c:\program files\UPC\bin\sprtcmd.exe”
“Adobe Reader Speed Launcher”=“c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe”
“MSSE”=“c:\program files\Microsoft Security Essentials\msseces.exe”
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.exe.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
“EnableUIADesktopToggle”= 0 (0x0)
“AppInit_DLLs”=c:\progra~1\KASPER~1\KASPER~1\mzvkbd3.dll,c:\progra~1\KASPER~1\KASPER~1\kloehk.dll
@=“Service”
@=“Service”
@=“Service”
“DisableMonitoring”=dword:00000001
“VistaSp2”=hex(b):fa,0e,c4,b3,92,51,ca,01
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe
S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe
S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys
S3 PAC207;Trust 100K Series Webcam;c:\windows\system32\DRIVERS\PFC027.SYS
S3 RTL85n86;Realtek 8180/8185 Extensible 802.11 Wireless Device Driver;c:\windows\system32\DRIVERS\RTL85n86.sys
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSGB6.sys
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Inhoud van de ‘Gedeelde Taken’ map
2010-08-01 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
2010-07-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3943016130-1007977713-3429883170-1000Core.job
- c:\users\suzan\AppData\Local\Google\Update\GoogleUpdate.exe
2010-08-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3943016130-1007977713-3429883170-1000UA.job
- c:\users\suzan\AppData\Local\Google\Update\GoogleUpdate.exe
.
.
——- Bijkomende Scan ——-
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Toevoegen aan Anti-Banner - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-01 10:40
Windows 6.0.6002 Service Pack 2 NTFS
scannen van verborgen processen …
scannen van verborgen autostart items …
scannen van verborgen bestanden …
Scan succesvol afgerond
verborgen bestanden: 0
**************************************************************************
.
——————— VERGRENDELDE REGISTER SLEUTELS ———————
@Denied: (2) (Administrator)
“88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977”=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,5f,6d,86,0d,d5,00,2e,45,89,95,c4,\
“2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81”=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,5f,6d,86,0d,d5,00,2e,45,89,95,c4,\
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
“BlindDial”=dword:00000000
.
Voltooingstijd: 2010-08-01 10:44:32
ComboFix-quarantined-files.txt 2010-08-01 08:44
Pre-Run: 158.987.472.896 bytes beschikbaar
Post-Run: 159.168.036.864 bytes beschikbaar
- - End Of File - - F07A9F3F418997F6B2B4DBAE579BD436
—————————————————————————————-
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:01:53, on 1-8-2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\UPC\bin\sprtcmd.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtblfs.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Windows\system32\conime.exe
C:\Users\Administrator\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O4 - HKLM\..\Run: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: “C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe”
O4 - HKLM\..\Run: C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” MSRun
O4 - HKLM\..\Run: “C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe”
O4 - HKLM\..\Run: “C:\Program Files\Common Files\Java\Java Update\jusched.exe”
O4 - HKLM\..\Run: “C:\Program Files\UPC\bin\sprtcmd.exe” /P UPC
O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”
O4 - HKLM\..\Run: “C:\Program Files\Microsoft Security Essentials\msseces.exe” -hide -runkey
O4 - HKCU\..\Run: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Toevoegen aan Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O9 - Extra button: &Virtueel toetsenbord - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Internetadressen c&ontrole - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe
–
End of file - 6246 bytes