tuergopt program not found-skipping autocheck

Hoi

Hier het log

gr mar

ComboFix 12-10-26.05 - Gebruiker 28-10-2012 12:51:13.5.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.4055.2112

Gestart vanuit: c:\users\Gebruiker\Desktop\ComboFix.exe

AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}

SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

(((((((((((((((((((( Bestanden Gemaakt van 2012-09-28 to 2012-10-28 ))))))))))))))))))))))))))))))

2012-10-28 09:25 . 2012-10-28 09:25 69000 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CABE6B9A-DB24-47EB-9A55-34F7C2B88024}\offreg.dll

2012-10-27 22:32 . 2012-10-27 22:32 89944 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fd9959051cdb49204\DSETUP.dll

2012-10-27 22:32 . 2012-10-27 22:32 537432 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fd9959051cdb49204\DXSETUP.exe

2012-10-27 22:32 . 2012-10-27 22:32 1801048 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fd9959051cdb49204\dsetup32.dll

2012-10-27 22:32 . 2012-10-27 22:32 525656 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fab04a4f1cdb49203\DXSETUP.exe

2012-10-27 22:32 . 2012-10-27 22:32 1691480 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fab04a4f1cdb49203\dsetup32.dll

2012-10-27 22:32 . 2012-10-27 22:32 94040 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fab04a4f1cdb49203\DSETUP.dll

2012-10-27 22:32 . 2012-10-27 22:32 89944 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\f7b5f5bf1cdb49201\DSETUP.dll

2012-10-27 22:32 . 2012-10-27 22:32 537432 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\f7b5f5bf1cdb49201\DXSETUP.exe

2012-10-27 22:32 . 2012-10-27 22:32 1801048 —-a-w- c:\program files (x86)\Common Files\Windows Live\.cache\f7b5f5bf1cdb49201\dsetup32.dll

2012-10-27 21:53 . 2012-10-11 22:19 9291768 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CABE6B9A-DB24-47EB-9A55-34F7C2B88024}\mpengine.dll

2012-10-27 15:29 . 2012-10-27 15:29 ——– d—–w- c:\windows\nl

2012-10-27 15:29 . 2012-10-27 15:29 ——– d—–w- c:\program files (x86)\Microsoft SQL Server Compact Edition

2012-10-27 15:28 . 2012-09-12 13:20 57856 —-a-w- c:\windows\system32\drivers\fssfltr.sys

2012-10-27 15:28 . 2012-10-27 22:33 ——– d—–w- c:\program files\Windows Live

2012-10-27 15:28 . 2012-10-27 22:33 ——– d—–w- c:\program files (x86)\Windows Live

2012-10-27 14:59 . 2012-10-27 14:59 ——– d—–w- c:\users\Gebruiker\Nieuwe map

2012-10-26 21:23 . 2012-10-25 20:53 927800 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2012-10-26 21:23 . 2012-10-26 21:22 972192 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{0F19DAE7-AD2D-43C4-B430-CB8936E56BEA}\gapaengine.dll

2012-10-26 21:22 . 2012-10-11 22:19 9291768 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2012-10-26 21:05 . 2010-06-02 02:55 77656 —-a-w- c:\windows\system32\XAPOFX1_5.dll

2012-10-26 21:05 . 2010-06-02 02:55 74072 —-a-w- c:\windows\SysWow64\XAPOFX1_5.dll

2012-10-26 21:05 . 2010-06-02 02:55 527192 —-a-w- c:\windows\SysWow64\XAudio2_7.dll

2012-10-26 21:05 . 2010-06-02 02:55 518488 —-a-w- c:\windows\system32\XAudio2_7.dll

2012-10-26 21:05 . 2010-05-26 09:41 2526056 —-a-w- c:\windows\system32\D3DCompiler_43.dll

2012-10-26 21:05 . 2010-05-26 09:41 2106216 —-a-w- c:\windows\SysWow64\D3DCompiler_43.dll

2012-10-26 21:05 . 2010-05-26 09:41 276832 —-a-w- c:\windows\system32\d3dx11_43.dll

2012-10-26 21:05 . 2010-05-26 09:41 248672 —-a-w- c:\windows\SysWow64\d3dx11_43.dll

2012-10-26 21:05 . 2012-10-26 21:05 ——– d—–w- c:\program files (x86)\Microsoft SkyDrive

2012-10-26 21:05 . 2012-10-26 21:05 ——– d—–r- c:\users\Gebruiker\SkyDrive

2012-10-26 21:04 . 2012-10-26 21:04 ——– d—–w- c:\programdata\Microsoft SkyDrive

2012-10-26 11:03 . 2012-10-26 11:03 ——– d—–w- C:\_OTL

2012-10-25 20:51 . 2012-10-25 21:08 ——– d—–w- c:\program files (x86)\Microsoft Security Client

2012-10-25 20:51 . 2012-10-25 21:08 ——– d—–w- c:\program files\Microsoft Security Client

2012-10-25 18:56 . 2012-10-28 11:56 ——– d—–w- c:\users\Gebruiker\AppData\Local\Temp

2012-10-25 18:56 . 2012-09-19 19:38 167424 —-a-w- c:\windows\zoek-delete.exe

2012-10-15 12:40 . 2012-10-15 12:40 477168 —-a-w- c:\windows\SysWow64\npdeployJava1.dll

2012-10-15 12:40 . 2012-10-15 12:40 ——– d—–w- c:\program files (x86)\Java

2012-10-10 21:06 . 2012-08-11 00:56 715776 —-a-w- c:\windows\system32\kerberos.dll

2012-10-10 21:06 . 2012-08-10 23:56 542208 —-a-w- c:\windows\SysWow64\kerberos.dll

2012-10-10 21:06 . 2012-06-02 05:41 1464320 —-a-w- c:\windows\system32\crypt32.dll

2012-10-10 21:06 . 2012-06-02 04:36 1159680 —-a-w- c:\windows\SysWow64\crypt32.dll

2012-10-10 21:06 . 2012-06-02 05:41 184320 —-a-w- c:\windows\system32\cryptsvc.dll

2012-10-10 21:06 . 2012-06-02 05:41 140288 —-a-w- c:\windows\system32\cryptnet.dll

2012-10-10 21:06 . 2012-06-02 04:36 140288 —-a-w- c:\windows\SysWow64\cryptsvc.dll

2012-10-10 21:06 . 2012-06-02 04:36 103936 —-a-w- c:\windows\SysWow64\cryptnet.dll

2012-10-10 12:20 . 2012-10-10 12:20 ——– d—–w- c:\users\Gebruiker\AppData\Roaming\Western Software Technologies

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

2012-10-15 12:40 . 2011-01-18 07:49 473072 —-a-w- c:\windows\SysWow64\deployJava1.dll

2012-10-10 21:25 . 2010-12-10 10:43 65309168 —-a-w- c:\windows\system32\MRT.exe

2012-10-09 12:11 . 2012-08-16 13:19 696760 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2012-10-09 12:11 . 2011-09-11 18:26 73656 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-09-29 17:54 . 2010-12-11 15:12 25928 —-a-w- c:\windows\system32\drivers\mbam.sys

2012-09-21 17:17 . 2012-09-21 17:11 207 —-a-w- c:\windows\DeleteOnReboot.bat

2012-09-20 17:00 . 2012-09-20 17:00 31080 —-a-w- c:\windows\system32\drivers\avgtpx64.sys

2012-09-12 14:07 . 2012-09-12 14:07 58368 —-a-w- c:\windows\SysWow64\sirenacm.dll

2012-09-12 13:57 . 2012-09-12 13:57 322048 —-a-w- c:\windows\WLXPGSS.SCR

2012-08-30 20:03 . 2012-08-30 20:03 228768 —-a-w- c:\windows\system32\drivers\MpFilter.sys

2012-08-30 20:03 . 2012-03-20 18:44 128456 —-a-w- c:\windows\system32\drivers\NisDrvWFP.sys

2012-08-24 11:15 . 2012-09-22 04:28 17810944 —-a-w- c:\windows\system32\mshtml.dll

2012-08-24 10:39 . 2012-09-22 04:28 10925568 —-a-w- c:\windows\system32\ieframe.dll

2012-08-24 10:31 . 2012-09-22 04:28 2312704 —-a-w- c:\windows\system32\jscript9.dll

2012-08-24 10:22 . 2012-09-22 04:28 1346048 —-a-w- c:\windows\system32\urlmon.dll

2012-08-24 10:21 . 2012-09-22 04:28 1392128 —-a-w- c:\windows\system32\wininet.dll

2012-08-24 10:20 . 2012-09-22 04:28 1494528 —-a-w- c:\windows\system32\inetcpl.cpl

2012-08-24 10:18 . 2012-09-22 04:28 237056 —-a-w- c:\windows\system32\url.dll

2012-08-24 10:17 . 2012-09-22 04:28 85504 —-a-w- c:\windows\system32\jsproxy.dll

2012-08-24 10:14 . 2012-09-22 04:28 173056 —-a-w- c:\windows\system32\ieUnatt.exe

2012-08-24 10:14 . 2012-09-22 04:28 816640 —-a-w- c:\windows\system32\jscript.dll

2012-08-24 10:13 . 2012-09-22 04:28 599040 —-a-w- c:\windows\system32\vbscript.dll

2012-08-24 10:12 . 2012-09-22 04:28 2144768 —-a-w- c:\windows\system32\iertutil.dll

2012-08-24 10:11 . 2012-09-22 04:28 729088 —-a-w- c:\windows\system32\msfeeds.dll

2012-08-24 10:10 . 2012-09-22 04:28 96768 —-a-w- c:\windows\system32\mshtmled.dll

2012-08-24 10:09 . 2012-09-22 04:28 2382848 —-a-w- c:\windows\system32\mshtml.tlb

2012-08-24 10:04 . 2012-09-22 04:28 248320 —-a-w- c:\windows\system32\ieui.dll

2012-08-24 06:59 . 2012-09-22 04:28 1800704 —-a-w- c:\windows\SysWow64\jscript9.dll

2012-08-24 06:51 . 2012-09-22 04:28 1129472 —-a-w- c:\windows\SysWow64\wininet.dll

2012-08-24 06:51 . 2012-09-22 04:28 1427968 —-a-w- c:\windows\SysWow64\inetcpl.cpl

2012-08-24 06:47 . 2012-09-22 04:28 142848 —-a-w- c:\windows\SysWow64\ieUnatt.exe

2012-08-24 06:47 . 2012-09-22 04:28 420864 —-a-w- c:\windows\SysWow64\vbscript.dll

2012-08-24 06:43 . 2012-09-22 04:28 2382848 —-a-w- c:\windows\SysWow64\mshtml.tlb

2012-08-23 08:26 . 2012-09-18 10:43 9310152 ——w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{91822C35-7FDC-4F3B-9DED-AD24212201C4}\mpengine.dll

2012-08-22 18:12 . 2012-09-12 06:46 1913200 —-a-w- c:\windows\system32\drivers\tcpip.sys

2012-08-22 18:12 . 2012-09-12 06:46 950128 —-a-w- c:\windows\system32\drivers\ndis.sys

2012-08-22 18:12 . 2012-09-12 06:46 376688 —-a-w- c:\windows\system32\drivers\netio.sys

2012-08-22 18:12 . 2012-09-12 06:46 288624 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS

2012-08-21 21:01 . 2012-09-26 06:11 245760 —-a-w- c:\windows\system32\OxpsConverter.exe

2012-08-21 09:12 . 2011-11-27 19:04 285328 —-a-w- c:\windows\system32\aswBoot.exe

2012-08-20 17:38 . 2012-10-10 21:07 44032 —-a-w- c:\windows\apppatch\acwow64.dll

2012-08-02 17:58 . 2012-09-12 06:46 574464 —-a-w- c:\windows\system32\d3d10level9.dll

2012-08-02 16:57 . 2012-09-12 06:46 490496 —-a-w- c:\windows\SysWow64\d3d10level9.dll

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

@=“{F241C880-6982-4CE5-8CF7-7085BA96DA5A}”

2012-10-26 21:04 220632 —-a-w- c:\users\Gebruiker\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

@=“{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}”

2012-10-26 21:04 220632 —-a-w- c:\users\Gebruiker\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

@=“{BBACC218-34EA-4666-9D7A-C78F2274A524}”

2012-10-26 21:04 220632 —-a-w- c:\users\Gebruiker\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

“Sidebar”=“c:\program files\Windows Sidebar\sidebar.exe”

“Skype”=“c:\program files (x86)\Skype\Phone\Skype.exe”

“OfficeSyncProcess”=“c:\program files\Microsoft Office\Office14\MSOSYNC.EXE”

“MyTomTomSA.exe”=“c:\program files (x86)\MyTomTom 3\MyTomTomSA.exe”

“SwitchBoard”=“c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe”

“AdobeCS6ServiceManager”=“c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe”

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

“ConsentPromptBehaviorAdmin”= 0 (0x0)

“ConsentPromptBehaviorUser”= 0 (0x0)

“EnableLUA”= 0 (0x0)

“EnableUIADesktopToggle”= 0 (0x0)

“PromptOnSecureDesktop”= 0 (0x0)

“EnableLinkedConnections”= 1 (0x1)

“mixer1”=wdmaud.drv

BootExecute REG_MULTI_SZ autocheck autochk *\0autocheck turegopt /AM

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

@=“Service”

“HP Software Update”=c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe

“SunJavaUpdateSched”=“c:\program files (x86)\Common Files\Java\Java Update\jusched.exe”

“Adobe ARM”=“c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe

R2 KMService;KMService;c:\windows\system32\srvany.exe

R2 LiveTunerPM;Ashampoo LiveTuner ProcessMonitor Driver;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor64.sys

R2 MBAMService;MBAMService;e:\program files\Malwarebytes' Anti-Malware\mbamservice.exe

R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe

R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE

R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

R3 SetupNTGLM7X;SetupNTGLM7X;F:\NTGLM7X.sys

R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe

S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

S2 MBAMScheduler;MBAMScheduler;e:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe

S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys

S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys

S3 netr7364;Stuurprogramma voor RT73 USB draadloze LAN-kaart voor Vista;c:\windows\system32\DRIVERS\netr7364.sys

S3 NisSrv;Microsoft Netwerkinspectie;c:\program files\Microsoft Security Client\NisSrv.exe

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys

S3 RTL8167;Realtek 8167 NT-stuurprogramma;c:\windows\system32\DRIVERS\Rt64win7.sys

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

Inhoud van de ‘Gedeelde Taken’ map

2012-10-28 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

2012-10-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe

2012-10-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe

——— X64 Entries ———–

@=“{F241C880-6982-4CE5-8CF7-7085BA96DA5A}”

2012-10-26 21:04 244696 —-a-w- c:\users\Gebruiker\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

@=“{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}”

2012-10-26 21:04 244696 —-a-w- c:\users\Gebruiker\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

@=“{BBACC218-34EA-4666-9D7A-C78F2274A524}”

2012-10-26 21:04 244696 —-a-w- c:\users\Gebruiker\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

“BCSSync”=“c:\program files\Microsoft Office\Office14\BCSSync.exe”

“AdobeAAMUpdater-1.0”=“c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe”

“MSC”=“c:\program files\Microsoft Security Client\msseces.exe”

——- Bijkomende Scan ——-

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://google.nl/

IE: &Verzenden naar OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000

IE: Free YouTube to Mp3 Converter - c:\users\Gebruiker\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\3b8i8jfo.default\

FF - prefs.js: browser.search.defaulturl -

FF - prefs.js: network.proxy.type - 0

- - - - ORPHANS VERWIJDERD - - - -

AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe

——————— VERGRENDELDE REGISTER SLEUTELS ———————

@Denied: (2) (S-1-5-21-1848488349-641486460-2212997090-1000)

@Denied: (2) (LocalSystem)

“Progid”=“WindowsLiveMail.Email.1”

@Denied: (2) (S-1-5-21-1848488349-641486460-2212997090-1000)

@Denied: (2) (LocalSystem)

“Progid”=“WindowsLiveMail.VCard.1”

@Denied: (A 2) (Everyone)

@=“FlashBroker”

“LocalizedString”=“@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101”

“Enabled”=dword:00000001

@=“c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe”

@=“{FAB3E735-69C7-453B-A446-B6823C6DF1C9}”

@Denied: (A 2) (Everyone)

@=“IFlashBroker5”

@=“{00020424-0000-0000-C000-000000000046}”

@=“{FAB3E735-69C7-453B-A446-B6823C6DF1C9}”

“Version”=“1.0”

@Denied: (A 2) (Everyone)

@=“FlashBroker”

“LocalizedString”=“@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101”

“Enabled”=dword:00000001

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe”

@=“{FAB3E735-69C7-453B-A446-B6823C6DF1C9}”

@Denied: (A 2) (Everyone)

@=“Shockwave Flash Object”

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx”

“ThreadingModel”=“Apartment”

@=“0”

@=“ShockwaveFlash.ShockwaveFlash.11”

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1”

@=“{D27CDB6B-AE6D-11cf-96B8-444553540000}”

@=“1.0”

@=“ShockwaveFlash.ShockwaveFlash”

@Denied: (A 2) (Everyone)

@=“Macromedia Flash Factory Object”

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx”

“ThreadingModel”=“Apartment”

@=“FlashFactory.FlashFactory.1”

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1”

@=“{D27CDB6B-AE6D-11cf-96B8-444553540000}”

@=“1.0”

@=“FlashFactory.FlashFactory”

@Denied: (A 2) (Everyone)

@=“IFlashBroker5”

@=“{00020424-0000-0000-C000-000000000046}”

@=“{FAB3E735-69C7-453B-A446-B6823C6DF1C9}”

“Version”=“1.0”

@Denied: (Full) (Everyone)

Voltooingstijd: 2012-10-28 12:58:30

ComboFix-quarantined-files.txt 2012-10-28 11:58

ComboFix2.txt 2012-10-24 13:55

Pre-Run: 273.616.003.072 bytes beschikbaar

Post-Run: 273.608.675.328 bytes beschikbaar

- - End Of File - - FD16C8DC27CF9A0BC43BF372BD48521B

mar

mar

Ben

mar

fazantje

mar

Ben

mar

Ben

mar