mysearchresults spyware

  • rene

    Als ik google cloud connect wil verwijderen krijg ik de volgende melding;

    Kan geen toegang krijgen tot de Windows Installer service. Dit kan opotreden als de windows installer onjuist geinstalleerd is.

    Tips? (google tollbar wel gelukt)

    René

  • fazantje

    Hoi Rene,

    Je schreef:

    >>>Sorry voor de onervarenheid…. maarreee welke is SP1 van onderstaanden? <<<

    Geeft niets, een mens kan niet alles weten;)

    Hier kun je de goede SP1 voor windows 7 downloaden en installeren.

    Je hebt de 64 bits versie nodig.

    Een andere manier is:

    Ga naar Start - configuratiescherm - windows update.

    Klik vervolgens in de meest linker kolom op : naar updates zoeken.

    Doe eerst dit maar.

    Want er zit ook een regel in jou logje wat mss hersteld wordt als je SP1 hebt geinstalleerd.

    Succes,

    Huib;)

  • rene

    Goedemorgen/goedemiddag (bij mij is het morgen, bij jullie middag),

    Zet net de comp aan en krijg de melding windowslogonfile beschadigt, run scdsk (of zoiets). M'n werkblad/startmenu heeft nog de zelfde info, alleen vreemde kleuren.

    Als ik update laat zoeken vindt ie SP1 niet

    Als ik op je linkje klik, staat er onderop de pagina SP1 donloaden en installeren (http://windows.microsoft.com/nl-nl/installwindows7sp1# ) Deze link brengt je weer op dezelfde pagina terecht.

    Ik hoor graag van je.

    Groet,

    René

  • Ben

    Hallo,

    Eerst een paar vragen;

    Je schreef:

    De laptop is 3 jaar oud en bleef vorige week hangen tijdens opstarten, daarna recovery scan of zoiets, maar opnieuw geinstalleerdniets hielp. Een expert heeft toen W7 opnieuw geinstalleerd.

    Heb je van hem installatie cd’s mee gekregen van W7 en office?

    Want er zijn een aantal beschadigingen waar we de cd’s weer voor nodig hebben.

    Kan je nog terug naar die expert?

    Gr.Ben

    Antivirusprikbord.nl

  • rene

    Hallo Ben,

    Hij vertelde mij dat ie W7 opnieuw heeft kunnen installeren vanaf de harde schijf. Daar zou de originele versie/backup staan……. Dat was voor mij prettig want daardoor heb ik de NL versie behouden (ik woon in Brazilie en NL gaat me toch makkelijker af dan Portugees!)

    Office heb ik een tijdje geleden officieel via het internet gekocht en een CD van gemaakt. Ik heb nu met deze CD geprobeerd om Office te verwijderen. Krijg ook inderdfaad de optie om Office van deze pc te verwijderen, maar als ie daarmee klaar is, krijg ik de melding dat het verwijderne niet geheel voltooid is. Excel en Word werken ook nog gewoon…….

    René

  • Ben

    Hallo,

    Laten we stap voor stap doen:

    1. Kijk of dit je probleem kan op lossen: http://www.im-infected.com/hijacker/mysearchresults-com.html

    2. Download DDS van sUBS van één van deze locaties en plaats het op je bureaublad:

    DDS - Bleeping Computer download.

    DDS - Bleeping Computer download.

    DDS - Infospyware.

    DDS is een diagnosetool en maakt gebruik van scripts.

    Schakel je beveiligings software uit voordat je DDS uitvoert!

    Dubbelklik op DDS om de tool te starten.

    Let op!!! Windows Vista & 7 gebruikers dienen dds.scr als administrator uit te voeren "klik met rechtermuisknop : uitvoeren als"

    DDS zal 2 logfiles openen:

    * DDS.txt

    * Attach.txt

    Een scherm vraagt je om beide logjes op te slaan omdat de logjes weg zullen zijn als je ze sluit.

    Sla de logjes op bijvoorbeeld op je bureaublad of een andere plaats waar je ze makkelijk terug vind.

    Post het DDS.txt logje met je volgende antwoord. De Attach.txt post je alleen wanneer ik hier om vraag.

    Gr.Ben

    Antivirusprikbord.nl

  • rene

    Hallo Ben,

    1. Kijk of dit je probleem kan op lossen: ;

    Ik krijg dit probleem niet opgelost. Alle genoemde scanners vinden het probleem niet; ze kunnen het dus ook n iet oplossen

    Heb jullie stappenplan uitgevoerd, Google Chrome verwijderd, goole toolbar voor IE verwijderd, softonic (of zoeits) verwijderd, Office verwijderen lukt niet.

    SP1 voor W7 installeren via update lukt ook niet, via de site van Fazantje kan ik het SP niet vinden

    2. Download DDS van sUBS van één van deze locaties en plaats het op je bureaublad:

    DDS (Ver_2012-10-19.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.9.2

    Run by infosupri at 13:37:53 on 2012-11-01

    Microsoft Windows 7 Home Premium 6.1.7601.0.1252.31.1043.18.4091.2733

    .

    AV: McAfee Antivirus en antispyware *Enabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}

    SP: McAfee Antivirus en antispyware *Enabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    FW: McAfee Firewall *Disabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\wininit.exe

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\nvvsvc.exe

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\nvvsvc.exe

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Windows\system32\Dwm.exe

    C:\Program Files\LSI SoftModem\agr64svc.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files (x86)\Acer\Registration\GregHSRW.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    C:\Windows\system32\mfevtps.exe

    C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe

    C:\Windows\system32\rundll32.exe

    C:\Windows\system32\rundll32.exe

    C:\Windows\SysWOW64\rundll32.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Windows\System32\svchost.exe -k HPZ12

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

    C:\Windows\System32\svchost.exe -k HPZ12

    C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe

    C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

    C:\Windows\PLFSetI.exe

    C:\Program Files\Apoint2K\Apoint.exe

    C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

    C:\Program Files\Zune\ZuneLauncher.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Program Files (x86)\Skype\Phone\Skype.exe

    C:\Program Files (x86)\Google\Drive\googledrivesync.exe

    C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe

    C:\Program Files (x86)\Google\Drive\googledrivesync.exe

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

    C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe

    C:\Program Files\Apoint2K\ApMsgFwd.exe

    C:\Program Files\Apoint2K\HidFind.exe

    C:\Program Files\Apoint2K\Apntex.exe

    C:\Windows\system32\conhost.exe

    C:\Program Files (x86)\Launch Manager\LManager.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

    C:\Program Files\McAfee.com\Agent\mcagent.exe

    C:\Program Files (x86)\PC Cleaners\PCCleaners.exe

    C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe

    C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

    C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\wuauclt.exe

    C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE

    C:\Windows\splwow64.exe

    C:\Windows\system32\conhost.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://www.mysearchresults.com/?c=3509&t=07

    uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    mWinlogon: Userinit = userinit.exe

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

    BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

    BHO: Aanmeldhulp voor Microsoft-account: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll

    BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

    TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -

    uRun: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    uRun: “C:\Program Files (x86)\Skype\Phone\Skype.exe” /minimized /regrun

    uRun: “C:\Program Files (x86)\Google\Drive\googledrivesync.exe” /autostart

    uRunOnce: C:\Windows\System32\cmd.exe /q /c rmdir /s /q “C:\Users\infosupri\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64”

    mRun: “c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe”

    mRun: “C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe” -h -k

    mRun: “C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe”

    mRun: C:\Program Files (x86)\Launch Manager\LManager.exe

    mRun: “C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe”

    mRun: “C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe”

    mRun: “C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe”

    mRun: “C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe” -osboot

    mRun: “C:\Program Files\McAfee.com\Agent\mcagent.exe” /runkey

    mRun: “C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe”

    mRun: “C:\Program Files (x86)\QuickTime\QTTask.exe” -atboottime

    mRun: “C:\Program Files (x86)\PC Cleaners\PCCleaners.exe” /minimize

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\ACERVC~1.LNK - C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000

    IE: {10954C80-4F0F-11d3-B17C-00C0DFE39736} - c:\Program Files (x86)\Acer Bio Protection\PwdBank.exe

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

    DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx

    TCP: NameServer = 10.0.0.1

    TCP: Interfaces\{F24EB7C4-6B50-4F74-8E87-702D99727800} : DHCPNameServer = 192.168.0.1

    TCP: Interfaces\{F6303478-021E-4CC1-80F9-893A8CCF3A8C} : DHCPNameServer = 10.0.0.1

    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll

    Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    SSODL: WebCheck -

    LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp

    x64-mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    x64-mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Run: C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe

    x64-Run: C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe

    x64-Run: RUNDLL32.EXE C:\Windows\System32\NvCpl.dll,NvStartup

    x64-Run: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

    x64-Run: C:\Windows\PLFSetI.exe

    x64-Run: C:\Program Files\Apoint2K\Apoint.exe

    x64-Run: C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

    x64-Run: C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe

    x64-Run: “C:\Program Files\Zune\ZuneLauncher.exe”

    x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll

    x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} -

    x64-SSODL: WebCheck -

    .

    ============= SERVICES / DRIVERS ===============

    .

    R1 mfehidk;McAfee Inc. mfehidk;C:\Windows\System32\drivers\mfehidk.sys

    R1 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\System32\drivers\mfewfpk.sys

    R1 MOBKFilter;MOBKFilter;C:\Windows\System32\drivers\MOBK.sys

    R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\System32\drivers\mwlPSDFilter.sys

    R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\System32\drivers\mwlPSDNserv.sys

    R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\System32\drivers\mwlPSDVDisk.sys

    R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys

    R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe

    R2 FPSensor;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys);C:\Windows\System32\drivers\FPSensor.sys

    R2 Greg_Service;GRegService;C:\Program Files (x86)\Acer\Registration\GregHSRW.exe

    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    R2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    R2 McShield;McAfee McShield;C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

    R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

    R2 mfevtp;McAfee Validation Trust Protection Service;C:\Windows\System32\mfevtps.exe

    R2 MOBKbackup;1%;C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

    R2 MWLService;MyWinLocker Service;C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe

    R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

    R2 RS_Service;Raw Socket Service;C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe

    R3 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.EXE

    R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys

    R3 hidshim;Service for HID-KMDF Shim layer;C:\Windows\System32\drivers\hidshim.sys

    R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;C:\Windows\System32\drivers\k57nd60a.sys

    R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys

    R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\System32\drivers\mfeavfk.sys

    R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\System32\drivers\mfefirek.sys

    R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\NETw5v64.sys

    R3 nuvotonhidgeneric;Nuvoton EC Generic HID;C:\Windows\System32\drivers\nuvotonhidgeneric.sys

    R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\System32\drivers\nvhda64v.sys

    S2 BBSvc;BingBar Service;C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.EXE

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

    S2 gupdate;Google Updateservice (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys

    S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe

    S3 gupdatem;Google Update-service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    S3 HipShieldK;McAfee Inc. HipShieldK;C:\Windows\System32\drivers\HipShieldK.sys

    S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\System32\drivers\mferkdet.sys

    S3 NTIBackupSvc;NTI Backup Now 5 Backup Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

    S3 Partner Service;Partner Service;“C:\ProgramData\Partner\Partner.exe” –> C:\ProgramData\Partner\Partner.exe

    S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys

    .

    =============== Created Last 30 ================

    .

    2012-10-31 13:49:58 ——– d—–w- C:\Program Files\CCleaner

    2012-10-30 22:21:14 ——– d—–w- C:\Users\infosupri\AppData\Roaming\Malwarebytes

    2012-10-30 22:21:02 ——– d—–w- C:\ProgramData\Malwarebytes

    2012-10-30 22:20:59 25928 —-a-w- C:\Windows\System32\drivers\mbam.sys

    2012-10-30 22:20:59 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2012-10-30 21:55:45 ——– d—–w- C:\ProgramData\Spybot - Search & Destroy

    2012-10-30 21:55:45 ——– d—–w- C:\Program Files (x86)\Spybot - Search & Destroy

    2012-10-30 21:45:18 ——– d—–w- C:\Users\infosupri\AppData\Roaming\LavasoftStatistics

    2012-10-30 21:44:46 ——– d—–w- C:\Users\infosupri\AppData\Roaming\Ad-Aware Antivirus

    2012-10-30 21:35:13 ——– d—–w- C:\Users\infosupri\AppData\Roaming\PC Cleaners

    2012-10-30 21:35:08 4589880 —-a-w- C:\Windows\uninst.exe

    2012-10-30 21:35:06 ——– d—–w- C:\Users\infosupri\AppData\Roaming\PCPro

    2012-10-30 21:35:06 ——– d—–w- C:\ProgramData\PC1Data

    2012-10-30 21:35:06 ——– d—–w- C:\Program Files (x86)\PC Cleaners

    2012-10-30 11:58:35 6144 —-a-w- C:\Windows\System32\PerfStringBackup.TMP

    2012-10-28 20:00:46 ——– d—–w- C:\Windows\System32\SPReview

    2012-10-28 19:59:38 ——– d—–w- C:\Windows\System32\EventProviders

    2012-10-27 00:15:56 48648 —-a-w- C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll

    2012-10-27 00:15:51 856712 —-a-w- C:\ProgramData\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

    2012-10-26 22:34:48 ——– d-s—w- C:\Users\infosupri\Google Drive

    2012-10-26 13:47:13 ——– d—–w- C:\ProgramData\EgisTec

    2012-10-25 18:27:06 ——– d—–w- C:\Users\infosupri\AppData\Local\Adobe

    2012-10-25 17:40:59 787968 —-a-w- C:\Windows\System32\d3d11.dll

    2012-10-25 17:39:59 830464 —-a-w- C:\Windows\SysWow64\MSMPEG2ENC.DLL

    2012-10-25 17:38:59 90112 —-a-w- C:\Windows\SysWow64\olepro32.dll

    2012-10-25 17:37:51 3072 —-a-w- C:\Windows\System32\drivers\nl-NL\Dot4usb.sys.mui

    2012-10-25 17:37:49 399872 —-a-w- C:\Windows\System32\dpx.dll

    2012-10-25 17:37:49 189952 —-a-w- C:\Windows\SysWow64\wdscore.dll

    2012-10-25 17:37:43 189952 —-a-w- C:\Windows\SysWow64\sqmapi.dll

    2012-10-25 17:37:35 606208 —-a-w- C:\Windows\SysWow64\wbem\fastprox.dll

    2012-10-25 17:37:35 363008 —-a-w- C:\Windows\SysWow64\wbemcomn.dll

    2012-10-25 17:37:35 189952 —-a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll

    2012-10-25 17:36:10 529408 —-a-w- C:\Windows\System32\wbemcomn.dll

    2012-10-25 17:36:10 244736 —-a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll

    2012-10-25 17:36:07 244736 —-a-w- C:\Windows\System32\sqmapi.dll

    2012-10-25 16:40:07 ——– d—–w- C:\Users\infosupri\AppData\Roaming\Dropbox

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin7.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin6.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin5.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin4.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin3.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin2.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin.dll

    2012-10-25 16:09:03 ——– d—–w- C:\Users\infosupri\AppData\Local\Apple

    2012-10-25 16:08:44 ——– d—–w- C:\Program Files\Bonjour

    2012-10-25 16:08:44 ——– d—–w- C:\Program Files (x86)\Bonjour

    2012-10-25 16:04:59 ——– d—–w- C:\Users\infosupri\AppData\Local\assembly

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\XPSViewer

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\nl

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\drivers\UMDF\nl-NL

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\drivers\nl-NL

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\0413

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\nl-NL

    2012-10-25 05:31:28 ——– d—–w- C:\Windows\SysWow64\wbem\nl-NL

    2012-10-25 05:31:28 ——– d—–w- C:\Windows\System32\nl

    2012-10-25 05:31:28 ——– d—–w- C:\Windows\System32\0413

    2012-10-25 05:31:26 ——– d—–w- C:\Windows\System32\wbem\nl-NL

    2012-10-25 05:31:26 ——– d—–w- C:\Windows\System32\drivers\UMDF\nl-NL

    2012-10-25 05:31:26 ——– d—–w- C:\Windows\System32\drivers\nl-NL

    2012-10-25 05:23:32 ——– d—–w- C:\Windows\NAPP_Dism_Log

    2012-10-25 05:18:44 347656 —-a-w- C:\Windows\UNINST32.EXE

    2012-10-25 05:18:44 25608 —-a-w- C:\Windows\SysWow64\drivers\DKbFltr.sys

    2012-10-25 05:18:42 98816 —-a-w- C:\Windows\System32\Vxdif.dll

    2012-10-25 05:18:42 243760 —-a-w- C:\Windows\System32\drivers\Apfiltr.sys

    2012-10-25 05:18:42 1490656 —-a-w- C:\Windows\System32\WdfCoInstaller01007.dll

    2012-10-25 05:18:37 5435904 —-a-w- C:\Windows\System32\drivers\NETw5v64.sys

    2012-10-25 05:18:10 64000 —-a-w- C:\Windows\agrsmdel.exe

    2012-10-25 05:18:10 14848 —-a-w- C:\Windows\System32\agrsco64.dll

    2012-10-25 05:18:09 42496 —-a-w- C:\Windows\agrdel64.exe

    2012-10-25 05:18:09 1208320 —-a-w- C:\Windows\System32\drivers\agrsm64.sys

    2012-10-25 05:16:43 431104 —-a-w- C:\Windows\WISMVIMG.EXE

    2012-10-25 05:16:43 382976 —-a-w- C:\Windows\WisGAPasx64.exe

    2012-10-25 05:16:43 335872 —-a-w- C:\Windows\ParseModule_X64.exe

    2012-10-25 05:16:43 249856 —-a-w- C:\Windows\WISI2BAT.EXE

    2012-10-25 05:16:43 159744 —-a-w- C:\Windows\PATCHFUL.EXE

    2012-10-25 05:16:42 322048 —-a-w- C:\Windows\WisGAPas.exe

    2012-10-25 05:16:42 225280 —-a-w- C:\Windows\ParseModule_X86.exe

    2012-10-25 05:00:02 ——– d—–r- C:\Users\infosupri\Podcasts

    2012-10-25 04:50:02 ——– d—–w- C:\Windows\SysWow64\wbem\en-US

    2012-10-25 04:50:00 ——– d—–w- C:\Windows\System32\wbem\en-US

    2012-10-25 04:49:53 ——– d—–w- C:\Windows\SysWow64\Wat

    2012-10-25 04:49:53 ——– d—–w- C:\Windows\System32\Wat

    2012-10-25 04:14:15 ——– d—–w- C:\Program Files (x86)\MSXML 4.0

    2012-10-25 03:39:56 81408 —-a-w- C:\Windows\System32\imagehlp.dll

    2012-10-25 03:39:56 23408 —-a-w- C:\Windows\System32\drivers\fs_rec.sys

    2012-10-25 03:39:56 159232 —-a-w- C:\Windows\SysWow64\imagehlp.dll

    2012-10-25 03:39:55 5120 —-a-w- C:\Windows\SysWow64\wmi.dll

    2012-10-25 03:39:55 5120 —-a-w- C:\Windows\System32\wmi.dll

    2012-10-25 01:58:51 3148800 —-a-w- C:\Windows\System32\win32k.sys

    2012-10-25 01:58:48 886784 —-a-w- C:\Program Files\Common Files\System\wab32.dll

    2012-10-25 01:58:47 708608 —-a-w- C:\Program Files (x86)\Common Files\System\wab32.dll

    2012-10-25 01:57:24 142336 —-a-w- C:\Windows\System32\poqexec.exe

    2012-10-25 01:57:23 123904 —-a-w- C:\Windows\SysWow64\poqexec.exe

    2012-10-25 01:55:21 961024 —-a-w- C:\Windows\System32\CPFilters.dll

    2012-10-25 01:55:21 642048 —-a-w- C:\Windows\SysWow64\CPFilters.dll

    2012-10-25 01:55:20 850944 —-a-w- C:\Windows\SysWow64\sbe.dll

    2012-10-25 01:55:20 259072 —-a-w- C:\Windows\System32\mpg2splt.ax

    2012-10-25 01:55:20 1118720 —-a-w- C:\Windows\System32\sbe.dll

    2012-10-25 01:55:19 199680 —-a-w- C:\Windows\SysWow64\mpg2splt.ax

    2012-10-25 01:48:41 514560 —-a-w- C:\Windows\SysWow64\qdvd.dll

    2012-10-25 01:48:41 1572864 —-a-w- C:\Windows\System32\quartz.dll

    2012-10-25 01:48:41 1328128 —-a-w- C:\Windows\SysWow64\quartz.dll

    2012-10-25 01:48:40 366592 —-a-w- C:\Windows\System32\qdvd.dll

    2012-10-25 01:48:28 288768 —-a-w- C:\Windows\System32\drivers\mrxsmb10.sys

    2012-10-25 01:48:28 158208 —-a-w- C:\Windows\System32\drivers\mrxsmb.sys

    2012-10-25 01:48:28 128000 —-a-w- C:\Windows\System32\drivers\mrxsmb20.sys

    2012-10-25 01:48:24 395776 —-a-w- C:\Windows\System32\webio.dll

    2012-10-25 01:48:23 314880 —-a-w- C:\Windows\SysWow64\webio.dll

    2012-10-25 01:47:47 1881600 —-a-w- C:\Windows\System32\msxml3.dll

    2012-10-25 01:47:46 2004480 —-a-w- C:\Windows\System32\msxml6.dll

    2012-10-25 01:47:45 2048 —-a-w- C:\Windows\SysWow64\msxml3r.dll

    2012-10-25 01:47:45 2048 —-a-w- C:\Windows\System32\msxml3r.dll

    2012-10-25 01:47:45 1390080 —-a-w- C:\Windows\SysWow64\msxml6.dll

    2012-10-25 01:47:45 1236992 —-a-w- C:\Windows\SysWow64\msxml3.dll

    2012-10-25 01:47:16 43520 —-a-w- C:\Windows\System32\csrsrv.dll

    2012-10-25 01:46:41 5559664 —-a-w- C:\Windows\System32\ntoskrnl.exe

    2012-10-25 01:46:39 3968880 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe

    2012-10-25 01:46:38 3914096 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe

    2012-10-25 01:46:23 1395712 —-a-w- C:\Windows\System32\mfc42.dll

    2012-10-25 01:46:23 1359872 —-a-w- C:\Windows\System32\mfc42u.dll

    2012-10-25 01:46:22 1164288 —-a-w- C:\Windows\SysWow64\mfc42u.dll

    2012-10-25 01:46:22 1137664 —-a-w- C:\Windows\SysWow64\mfc42.dll

    2012-10-25 01:43:07 220160 —-a-w- C:\Windows\System32\wintrust.dll

    2012-10-25 01:43:06 172544 —-a-w- C:\Windows\SysWow64\wintrust.dll

    2012-10-25 01:42:48 2048 —-a-w- C:\Windows\SysWow64\tzres.dll

    2012-10-25 01:42:48 2048 —-a-w- C:\Windows\System32\tzres.dll

    2012-10-25 01:42:00 467456 —-a-w- C:\Windows\System32\drivers\srv.sys

    2012-10-25 01:42:00 410112 —-a-w- C:\Windows\System32\drivers\srv2.sys

    2012-10-25 01:42:00 168448 —-a-w- C:\Windows\System32\drivers\srvnet.sys

    2012-10-25 01:40:45 642944 —-a-w- C:\Windows\System32\winload.efi

    2012-10-25 01:39:59 5120 —ha-w- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll

    2012-10-25 01:38:54 690688 —-a-w- C:\Windows\SysWow64\msvcrt.dll

    2012-10-25 01:37:56 1731920 —-a-w- C:\Windows\System32\ntdll.dll

    2012-10-25 01:37:56 1292080 —-a-w- C:\Windows\SysWow64\ntdll.dll

    2012-10-25 01:37:35 1464320 —-a-w- C:\Windows\System32\crypt32.dll

    2012-10-25 01:37:34 184320 —-a-w- C:\Windows\System32\cryptsvc.dll

    2012-10-25 01:37:34 140288 —-a-w- C:\Windows\System32\cryptnet.dll

    2012-10-25 01:37:34 1159680 —-a-w- C:\Windows\SysWow64\crypt32.dll

    2012-10-25 01:37:33 140288 —-a-w- C:\Windows\SysWow64\cryptsvc.dll

    2012-10-25 01:37:33 103936 —-a-w- C:\Windows\SysWow64\cryptnet.dll

    2012-10-25 01:16:22 77312 —-a-w- C:\Windows\System32\packager.dll

    2012-10-25 01:16:22 67072 —-a-w- C:\Windows\SysWow64\packager.dll

    2012-10-25 00:48:33 9291768 —-a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{217B8838-990F-4C7F-8427-57F8E291AA7D}\mpengine.dll

    2012-10-25 00:48:31 279656 ——w- C:\Windows\System32\MpSigStub.exe

    2012-10-25 00:48:04 ——– d—–w- C:\Program Files (x86)\McAfeeMOBK

    2012-10-25 00:47:54 66040 —-a-w- C:\Windows\System32\drivers\MOBK.sys

    2012-10-25 00:47:53 ——– d—–w- C:\Program Files (x86)\McAfee Online Backup

    2012-10-25 00:47:50 196440 —-a-w- C:\Windows\System32\drivers\HipShieldK.sys

    2012-10-25 00:47:24 ——– d—–w- C:\Program Files (x86)\McAfee.com

    2012-10-25 00:47:10 10288 —-a-w- C:\Windows\System32\drivers\mfeclnk.sys

    2012-10-25 00:47:10 ——– d—–w- C:\Program Files (x86)\Common Files\McAfee

    2012-10-25 00:47:06 69672 —-a-w- C:\Windows\System32\drivers\cfwids.sys

    2012-10-25 00:47:06 513456 —-a-w- C:\Windows\System32\drivers\mfefirek.sys

    2012-10-25 00:47:06 300392 —-a-w- C:\Windows\System32\drivers\mfeavfk.sys

    2012-10-25 00:47:06 106112 —-a-w- C:\Windows\System32\drivers\mferkdet.sys

    2012-10-25 00:47:00 ——– d—–w- C:\Program Files\Common Files\McAfee

    2012-10-25 00:46:54 ——– d—–w- C:\Program Files\McAfee.com

    2012-10-25 00:46:54 ——– d—–w- C:\Program Files\McAfee

    2012-10-25 00:46:51 ——– d—–w- C:\Program Files (x86)\McAfee

    2012-10-25 00:44:41 ——– d—–w- C:\Users\infosupri\AppData\Roaming\Windows Live Writer

    2012-10-25 00:44:41 ——– d—–w- C:\Users\infosupri\AppData\Local\Windows Live Writer

    2012-10-25 00:35:37 177144 —-a-w- C:\Windows\System32\mfevtps.exe

    2012-10-25 00:26:10 ——– d—–w- C:\Windows\System32\drivers\UMDF\ko-KR

    2012-10-25 00:26:05 ——– d—–w- C:\Windows\System32\drivers\UMDF\ms-MY

    2012-10-25 00:26:01 ——– d—–w- C:\Windows\System32\drivers\UMDF\id-ID

    2012-10-25 00:21:30 ——– d—–w- C:\Windows\System32\drivers\UMDF\en-US

    2012-10-25 00:10:48 ——– d—–w- C:\Program Files (x86)\Common Files\xing shared

    2012-10-25 00:09:37 746984 —-a-w- C:\Windows\SysWow64\deployJava1.dll

    2012-10-25 00:09:36 821736 —-a-w- C:\Windows\SysWow64\npDeployJava1.dll

    2012-10-25 00:09:17 95208 —-a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

    2012-10-25 00:01:18 ——– d—–r- C:\Program Files (x86)\Skype

    2012-10-24 23:38:57 ——– d—–w- C:\Windows\nl

    2012-10-24 23:34:42 57856 —-a-w- C:\Windows\System32\drivers\fssfltr.sys

    2012-10-24 23:26:31 77656 —-a-w- C:\Windows\System32\XAPOFX1_5.dll

    2012-10-24 23:26:31 74072 —-a-w- C:\Windows\SysWow64\XAPOFX1_5.dll

    2012-10-24 23:26:31 527192 —-a-w- C:\Windows\SysWow64\XAudio2_7.dll

    2012-10-24 23:26:31 518488 —-a-w- C:\Windows\System32\XAudio2_7.dll

    2012-10-24 23:26:30 2526056 —-a-w- C:\Windows\System32\D3DCompiler_43.dll

    2012-10-24 23:26:30 2106216 —-a-w- C:\Windows\SysWow64\D3DCompiler_43.dll

    2012-10-24 23:26:27 276832 —-a-w- C:\Windows\System32\d3dx11_43.dll

    2012-10-24 23:26:27 248672 —-a-w- C:\Windows\SysWow64\d3dx11_43.dll

    2012-10-24 23:23:26 523088 —-a-w- C:\Windows\System32\d3dx10_42.dll

    2012-10-24 23:23:26 453456 —-a-w- C:\Windows\SysWow64\d3dx10_42.dll

    2012-10-24 23:17:46 5659096 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c2bb24ef1cdb23d01\skydrivesetup.exe

    2012-10-24 23:04:09 ——– d—–w- C:\Users\infosupri\Tracing

    2012-10-24 23:03:06 ——– d—–w- C:\69bba851d1478ac0ad3b

    2012-10-24 22:57:24 ——– d—–w- C:\5391f7764729b24e0b71243a

    2012-10-24 22:57:09 ——– d—–w- C:\Program Files (x86)\Microsoft SkyDrive

    2012-10-24 22:57:07 ——– d—–r- C:\Users\infosupri\SkyDrive

    2012-10-24 22:56:39 ——– d—–w- C:\ProgramData\Microsoft SkyDrive

    2012-10-24 22:52:15 89944 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\344b726d1cdb23a07\DSETUP.dll

    2012-10-24 22:52:15 537432 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\344b726d1cdb23a07\DXSETUP.exe

    2012-10-24 22:52:15 1801048 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\344b726d1cdb23a07\dsetup32.dll

    2012-10-24 22:52:08 89944 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\30c7aa461cdb23a06\DSETUP.dll

    2012-10-24 22:52:08 537432 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\30c7aa461cdb23a06\DXSETUP.exe

    2012-10-24 22:52:08 1801048 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\30c7aa461cdb23a06\dsetup32.dll

    2012-10-24 22:52:05 94040 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\295cbc491cdb23a05\DSETUP.dll

    2012-10-24 22:52:05 525656 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\295cbc491cdb23a05\DXSETUP.exe

    2012-10-24 22:52:05 1691480 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\295cbc491cdb23a05\dsetup32.dll

    2012-10-24 22:51:18 889416 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\137e17c51cdb23a01\dotNetFx40_Full_setup.exe

    2012-10-24 22:51:12 ——– d—–w- C:\Users\infosupri\AppData\Local\Windows Live

    2012-10-24 22:31:18 224768 —-a-w- C:\Windows\System32\Spool\prtprocs\x64\hpzpp4v2.dll

    2012-10-24 22:28:21 ——– d—–w- C:\Program Files (x86)\Common Files\HP

    2012-10-24 22:28:15 ——– d—–w- C:\Program Files (x86)\Common Files\Hewlett-Packard

    2012-10-24 22:27:47 134144 —-a-w- C:\Windows\System32\hpzll4v2.dll

    2012-10-24 22:27:35 ——– d—–w- C:\Program Files (x86)\HP

    2012-10-24 22:21:57 338944 —-a-w- C:\Windows\System32\hpzids40.dll

    2012-10-24 22:21:56 859136 —-a-w- C:\Windows\System32\hpowiax4.dll

    2012-10-24 22:21:56 729088 —-a-w- C:\Windows\System32\hpotscl4.dll

    2012-10-24 22:21:56 540672 —-a-w- C:\Windows\System32\hppldcoi.dll

    2012-10-24 22:21:56 488960 —-a-w- C:\Windows\System32\hpovst11.dll

    2012-10-24 22:02:16 230400 —-a-w- C:\Windows\System32\Spool\prtprocs\x64\hpzppw71.dll

    2012-10-24 21:26:51 826880 —-a-w- C:\Windows\SysWow64\rdpcore.dll

    2012-10-24 21:26:51 23552 —-a-w- C:\Windows\System32\drivers\tdtcp.sys

    2012-10-24 21:26:51 1031680 —-a-w- C:\Windows\System32\rdpcore.dll

    2012-10-24 21:19:46 2622464 —-a-w- C:\Windows\System32\wucltux.dll

    2012-10-24 21:19:21 99840 —-a-w- C:\Windows\System32\wudriver.dll

    2012-10-24 21:18:51 36864 —-a-w- C:\Windows\System32\wuapp.exe

    2012-10-24 21:18:51 186752 —-a-w- C:\Windows\System32\wuwebv.dll

    2012-10-24 21:03:07 ——– d—–w- C:\Program Files (x86)\Microsoft Visual Studio 8

    2012-10-24 21:02:21 ——– d—–w- C:\Users\infosupri\AppData\Local\Microsoft Help

    2012-10-24 20:58:40 4398360 —-a-w- C:\Windows\System32\d3dx9_32.dll

    2012-10-24 20:58:40 3426072 —-a-w- C:\Windows\SysWow64\d3dx9_32.dll

    2012-10-24 20:58:15 ——– d—–w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition

    2012-10-24 20:57:58 ——– d—–w- C:\Users\infosupri\AppData\Local\Google

    2012-10-24 20:57:15 ——– d—–w- C:\Program Files (x86)\Microsoft

    2012-10-24 20:55:09 144416072 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\wlc81BE.tmp

    2012-10-24 20:54:36 ——– d—–w- C:\Program Files (x86)\Common Files\Windows Live

    2012-10-24 20:22:45 ——– d—–w- C:\backup

    2012-10-24 20:19:39 ——– d—–w- C:\BOOK

    2012-10-24 20:15:26 82432 —-a-w- C:\Windows\SysWow64\msxml4r.dll

    2012-10-24 20:15:26 44544 —-a-w- C:\Windows\SysWow64\msxml4a.dll

    2012-10-24 20:14:17 77824 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll

    2012-10-24 20:14:17 32768 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll

    2012-10-24 20:14:17 225280 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\IScript\iscript.dll

    2012-10-24 20:14:17 176128 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll

    2012-10-24 20:14:16 610436 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe

    2012-10-24 20:10:30 ——– d—–w- C:\Program Files (x86)\Acer Arcade Deluxe

    2012-10-24 20:09:12 ——– d—–w- C:\Program Files (x86)\Nuvoton Technology Corporation

    2012-10-24 20:08:40 ——– d—–w- C:\Program Files (x86)\AmIcoSingLun

    2012-10-24 20:04:48 ——– d—–w- C:\Program Files (x86)\Launch Manager

    2012-10-24 20:03:56 ——– d—–w- C:\Program Files\Apoint2K

    2012-10-24 20:02:01 ——– d—–w- C:\Program Files (x86)\Acer Bio Protection

    2012-10-24 20:01:37 564784 —-a-w- C:\Windows\System32\NBMatS1SDK.dll

    2012-10-24 20:01:37 465456 —-a-w- C:\Windows\SysWow64\NBMatS1SDK.dll

    2012-10-24 20:01:20 29184 —-a-w- C:\Windows\System32\drivers\FPSensor.sys

    2012-10-24 20:00:42 200704 —-a-w- C:\Windows\PLFSetI.exe

    2012-10-24 20:00:41 106496 —-a-w- C:\Windows\FixUVC.exe

    2012-10-24 20:00:03 ——– d—–w- C:\Windows\SysWow64\RTCOM

    2012-10-24 19:56:44 ——– d—–w- C:\Users\infosupri\AppData\Local\EgisTec

    2012-10-24 19:54:44 ——– d—–w- C:\Users\infosupri\AppData\Local\VirtualStore

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Sjablonen

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Menu Start

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Favorieten

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Documenten

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Bureaublad

    2012-10-24 19:52:21 ——– d-sh–w- C:\Recovery

    2012-10-24 19:49:15 ——– d—–w- C:\Program Files\LSI SoftModem

    2012-10-24 19:46:28 539680 —-a-w- C:\Windows\System32\nvuninst.exe

    .

    ==================== Find3M ====================

    .

    2012-10-28 20:11:24 175616 —-a-w- C:\Windows\System32\msclmd.dll

    2012-10-28 20:11:24 152576 —-a-w- C:\Windows\SysWow64\msclmd.dll

    2012-10-25 05:30:44 2560 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\qwavedrv.sys.mui

    2012-10-25 05:30:34 5632 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\ndiscap.sys.mui

    2012-10-25 05:30:29 50688 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\tcpip.sys.mui

    2012-10-25 05:30:27 26624 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\bfe.dll.mui

    2012-10-25 05:30:27 16896 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\pacer.sys.mui

    2012-10-25 05:30:19 2560 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\scfilter.sys.mui

    2012-09-12 14:07:44 58368 —-a-w- C:\Windows\SysWow64\sirenacm.dll

    2012-09-12 13:57:44 322048 —-a-w- C:\Windows\WLXPGSS.SCR

    2012-08-11 00:56:03 715776 —-a-w- C:\Windows\System32\kerberos.dll

    2012-08-10 23:56:14 542208 —-a-w- C:\Windows\SysWow64\kerberos.dll

    .

    ============= FINISH: 13:40:38,26 ===============

    Hoop dat je me kunt helpen. Ga nu naar m';n werk, dus duurt even voordat ik je kan antwoorden.

    René

  • rene

    Zie in de eerste regels van de text dat er staat dat mcafee enabled is…. Blijkbaar is dit ding in delen uit te zetten.

    DDS (Ver_2012-10-19.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.9.2

    Run by infosupri at 13:51:37 on 2012-11-01

    Microsoft Windows 7 Home Premium 6.1.7601.0.1252.31.1043.18.4091.2583

    .

    AV: McAfee Antivirus en antispyware *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}

    SP: McAfee Antivirus en antispyware *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    FW: McAfee Firewall *Disabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\wininit.exe

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\nvvsvc.exe

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\nvvsvc.exe

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Windows\system32\Dwm.exe

    C:\Program Files\LSI SoftModem\agr64svc.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files (x86)\Acer\Registration\GregHSRW.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    C:\Windows\system32\mfevtps.exe

    C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe

    C:\Windows\system32\rundll32.exe

    C:\Windows\system32\rundll32.exe

    C:\Windows\SysWOW64\rundll32.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Windows\System32\svchost.exe -k HPZ12

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

    C:\Windows\System32\svchost.exe -k HPZ12

    C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe

    C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

    C:\Windows\PLFSetI.exe

    C:\Program Files\Apoint2K\Apoint.exe

    C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

    C:\Program Files\Zune\ZuneLauncher.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Program Files (x86)\Skype\Phone\Skype.exe

    C:\Program Files (x86)\Google\Drive\googledrivesync.exe

    C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe

    C:\Program Files (x86)\Google\Drive\googledrivesync.exe

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

    C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe

    C:\Program Files\Apoint2K\ApMsgFwd.exe

    C:\Program Files\Apoint2K\HidFind.exe

    C:\Program Files\Apoint2K\Apntex.exe

    C:\Windows\system32\conhost.exe

    C:\Program Files (x86)\Launch Manager\LManager.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

    C:\Program Files\McAfee.com\Agent\mcagent.exe

    C:\Program Files (x86)\PC Cleaners\PCCleaners.exe

    C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe

    C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

    C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\wuauclt.exe

    C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE

    C:\Windows\splwow64.exe

    C:\Program Files\Common Files\McAfee\Core\mchost.exe

    C:\Windows\system32\conhost.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://www.mysearchresults.com/?c=3509&t=07

    uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    mWinlogon: Userinit = userinit.exe

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

    BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

    BHO: Aanmeldhulp voor Microsoft-account: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll

    BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

    TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -

    uRun: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    uRun: “C:\Program Files (x86)\Skype\Phone\Skype.exe” /minimized /regrun

    uRun: “C:\Program Files (x86)\Google\Drive\googledrivesync.exe” /autostart

    uRunOnce: C:\Windows\System32\cmd.exe /q /c rmdir /s /q “C:\Users\infosupri\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64”

    mRun: “c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe”

    mRun: “C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe” -h -k

    mRun: “C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe”

    mRun: C:\Program Files (x86)\Launch Manager\LManager.exe

    mRun: “C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe”

    mRun: “C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe”

    mRun: “C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe”

    mRun: “C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe” -osboot

    mRun: “C:\Program Files\McAfee.com\Agent\mcagent.exe” /runkey

    mRun: “C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe”

    mRun: “C:\Program Files (x86)\QuickTime\QTTask.exe” -atboottime

    mRun: “C:\Program Files (x86)\PC Cleaners\PCCleaners.exe” /minimize

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    dRunOnce: C:\Windows\System32\cmd.exe /C del “C:\ProgramData\Microsoft Help\Rgstrtn.lck” /Q /A:H

    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\ACERVC~1.LNK - C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000

    IE: {10954C80-4F0F-11d3-B17C-00C0DFE39736} - c:\Program Files (x86)\Acer Bio Protection\PwdBank.exe

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

    DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx

    TCP: NameServer = 10.0.0.1

    TCP: Interfaces\{F24EB7C4-6B50-4F74-8E87-702D99727800} : DHCPNameServer = 192.168.0.1

    TCP: Interfaces\{F6303478-021E-4CC1-80F9-893A8CCF3A8C} : DHCPNameServer = 10.0.0.1

    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll

    Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    SSODL: WebCheck -

    LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp

    x64-mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    x64-mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7738&r=27361012z336l03e8z1i5t6831w251

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Run: C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe

    x64-Run: C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe

    x64-Run: RUNDLL32.EXE C:\Windows\System32\NvCpl.dll,NvStartup

    x64-Run: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

    x64-Run: C:\Windows\PLFSetI.exe

    x64-Run: C:\Program Files\Apoint2K\Apoint.exe

    x64-Run: C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

    x64-Run: C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe

    x64-Run: “C:\Program Files\Zune\ZuneLauncher.exe”

    x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll

    x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} -

    x64-SSODL: WebCheck -

    .

    ============= SERVICES / DRIVERS ===============

    .

    R1 mfehidk;McAfee Inc. mfehidk;C:\Windows\System32\drivers\mfehidk.sys

    R1 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\System32\drivers\mfewfpk.sys

    R1 MOBKFilter;MOBKFilter;C:\Windows\System32\drivers\MOBK.sys

    R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\System32\drivers\mwlPSDFilter.sys

    R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\System32\drivers\mwlPSDNserv.sys

    R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\System32\drivers\mwlPSDVDisk.sys

    R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys

    R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe

    R2 FPSensor;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys);C:\Windows\System32\drivers\FPSensor.sys

    R2 Greg_Service;GRegService;C:\Program Files (x86)\Acer\Registration\GregHSRW.exe

    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    R2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    R2 McShield;McAfee McShield;C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

    R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

    R2 mfevtp;McAfee Validation Trust Protection Service;C:\Windows\System32\mfevtps.exe

    R2 MOBKbackup;1%;C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe

    R2 MWLService;MyWinLocker Service;C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe

    R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

    R2 RS_Service;Raw Socket Service;C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe

    R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    R2 Updater Service;Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    R3 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.EXE

    R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys

    R3 hidshim;Service for HID-KMDF Shim layer;C:\Windows\System32\drivers\hidshim.sys

    R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;C:\Windows\System32\drivers\k57nd60a.sys

    R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys

    R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\System32\drivers\mfeavfk.sys

    R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\System32\drivers\mfefirek.sys

    R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\NETw5v64.sys

    R3 nuvotonhidgeneric;Nuvoton EC Generic HID;C:\Windows\System32\drivers\nuvotonhidgeneric.sys

    R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\System32\drivers\nvhda64v.sys

    S2 BBSvc;BingBar Service;C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.EXE

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

    S2 gupdate;Google Updateservice (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe

    S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys

    S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe

    S3 gupdatem;Google Update-service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    S3 HipShieldK;McAfee Inc. HipShieldK;C:\Windows\System32\drivers\HipShieldK.sys

    S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\System32\drivers\mferkdet.sys

    S3 NTIBackupSvc;NTI Backup Now 5 Backup Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

    S3 Partner Service;Partner Service;“C:\ProgramData\Partner\Partner.exe” –> C:\ProgramData\Partner\Partner.exe

    S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys

    S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe

    S3 WMZuneComm;Zune Windows Mobile Connectivity Service;C:\Program Files\Zune\WMZuneComm.exe

    .

    =============== Created Last 30 ================

    .

    2012-10-31 13:49:58 ——– d—–w- C:\Program Files\CCleaner

    2012-10-30 22:21:14 ——– d—–w- C:\Users\infosupri\AppData\Roaming\Malwarebytes

    2012-10-30 22:21:02 ——– d—–w- C:\ProgramData\Malwarebytes

    2012-10-30 22:20:59 25928 —-a-w- C:\Windows\System32\drivers\mbam.sys

    2012-10-30 22:20:59 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2012-10-30 21:55:45 ——– d—–w- C:\ProgramData\Spybot - Search & Destroy

    2012-10-30 21:55:45 ——– d—–w- C:\Program Files (x86)\Spybot - Search & Destroy

    2012-10-30 21:45:18 ——– d—–w- C:\Users\infosupri\AppData\Roaming\LavasoftStatistics

    2012-10-30 21:44:46 ——– d—–w- C:\Users\infosupri\AppData\Roaming\Ad-Aware Antivirus

    2012-10-30 21:35:13 ——– d—–w- C:\Users\infosupri\AppData\Roaming\PC Cleaners

    2012-10-30 21:35:08 4589880 —-a-w- C:\Windows\uninst.exe

    2012-10-30 21:35:06 ——– d—–w- C:\Users\infosupri\AppData\Roaming\PCPro

    2012-10-30 21:35:06 ——– d—–w- C:\ProgramData\PC1Data

    2012-10-30 21:35:06 ——– d—–w- C:\Program Files (x86)\PC Cleaners

    2012-10-30 11:58:35 6144 —-a-w- C:\Windows\System32\PerfStringBackup.TMP

    2012-10-28 20:00:46 ——– d—–w- C:\Windows\System32\SPReview

    2012-10-28 19:59:38 ——– d—–w- C:\Windows\System32\EventProviders

    2012-10-27 00:15:56 48648 —-a-w- C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll

    2012-10-27 00:15:51 856712 —-a-w- C:\ProgramData\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

    2012-10-26 22:34:48 ——– d-s—w- C:\Users\infosupri\Google Drive

    2012-10-26 13:47:13 ——– d—–w- C:\ProgramData\EgisTec

    2012-10-25 18:27:06 ——– d—–w- C:\Users\infosupri\AppData\Local\Adobe

    2012-10-25 17:40:59 787968 —-a-w- C:\Windows\System32\d3d11.dll

    2012-10-25 17:39:59 830464 —-a-w- C:\Windows\SysWow64\MSMPEG2ENC.DLL

    2012-10-25 17:38:59 90112 —-a-w- C:\Windows\SysWow64\olepro32.dll

    2012-10-25 17:37:51 3072 —-a-w- C:\Windows\System32\drivers\nl-NL\Dot4usb.sys.mui

    2012-10-25 17:37:49 399872 —-a-w- C:\Windows\System32\dpx.dll

    2012-10-25 17:37:49 189952 —-a-w- C:\Windows\SysWow64\wdscore.dll

    2012-10-25 17:37:43 189952 —-a-w- C:\Windows\SysWow64\sqmapi.dll

    2012-10-25 17:37:35 606208 —-a-w- C:\Windows\SysWow64\wbem\fastprox.dll

    2012-10-25 17:37:35 363008 —-a-w- C:\Windows\SysWow64\wbemcomn.dll

    2012-10-25 17:37:35 189952 —-a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll

    2012-10-25 17:36:10 529408 —-a-w- C:\Windows\System32\wbemcomn.dll

    2012-10-25 17:36:10 244736 —-a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll

    2012-10-25 17:36:07 244736 —-a-w- C:\Windows\System32\sqmapi.dll

    2012-10-25 16:40:07 ——– d—–w- C:\Users\infosupri\AppData\Roaming\Dropbox

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin7.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin6.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin5.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin4.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin3.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin2.dll

    2012-10-25 16:23:47 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin.dll

    2012-10-25 16:09:03 ——– d—–w- C:\Users\infosupri\AppData\Local\Apple

    2012-10-25 16:08:44 ——– d—–w- C:\Program Files\Bonjour

    2012-10-25 16:08:44 ——– d—–w- C:\Program Files (x86)\Bonjour

    2012-10-25 16:04:59 ——– d—–w- C:\Users\infosupri\AppData\Local\assembly

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\XPSViewer

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\nl

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\drivers\UMDF\nl-NL

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\drivers\nl-NL

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\SysWow64\0413

    2012-10-25 05:31:30 ——– d—–w- C:\Windows\nl-NL

    2012-10-25 05:31:28 ——– d—–w- C:\Windows\SysWow64\wbem\nl-NL

    2012-10-25 05:31:28 ——– d—–w- C:\Windows\System32\nl

    2012-10-25 05:31:28 ——– d—–w- C:\Windows\System32\0413

    2012-10-25 05:31:26 ——– d—–w- C:\Windows\System32\wbem\nl-NL

    2012-10-25 05:31:26 ——– d—–w- C:\Windows\System32\drivers\UMDF\nl-NL

    2012-10-25 05:31:26 ——– d—–w- C:\Windows\System32\drivers\nl-NL

    2012-10-25 05:23:32 ——– d—–w- C:\Windows\NAPP_Dism_Log

    2012-10-25 05:18:44 347656 —-a-w- C:\Windows\UNINST32.EXE

    2012-10-25 05:18:44 25608 —-a-w- C:\Windows\SysWow64\drivers\DKbFltr.sys

    2012-10-25 05:18:42 98816 —-a-w- C:\Windows\System32\Vxdif.dll

    2012-10-25 05:18:42 243760 —-a-w- C:\Windows\System32\drivers\Apfiltr.sys

    2012-10-25 05:18:42 1490656 —-a-w- C:\Windows\System32\WdfCoInstaller01007.dll

    2012-10-25 05:18:37 5435904 —-a-w- C:\Windows\System32\drivers\NETw5v64.sys

    2012-10-25 05:18:10 64000 —-a-w- C:\Windows\agrsmdel.exe

    2012-10-25 05:18:10 14848 —-a-w- C:\Windows\System32\agrsco64.dll

    2012-10-25 05:18:09 42496 —-a-w- C:\Windows\agrdel64.exe

    2012-10-25 05:18:09 1208320 —-a-w- C:\Windows\System32\drivers\agrsm64.sys

    2012-10-25 05:16:43 431104 —-a-w- C:\Windows\WISMVIMG.EXE

    2012-10-25 05:16:43 382976 —-a-w- C:\Windows\WisGAPasx64.exe

    2012-10-25 05:16:43 335872 —-a-w- C:\Windows\ParseModule_X64.exe

    2012-10-25 05:16:43 249856 —-a-w- C:\Windows\WISI2BAT.EXE

    2012-10-25 05:16:43 159744 —-a-w- C:\Windows\PATCHFUL.EXE

    2012-10-25 05:16:42 322048 —-a-w- C:\Windows\WisGAPas.exe

    2012-10-25 05:16:42 225280 —-a-w- C:\Windows\ParseModule_X86.exe

    2012-10-25 05:00:02 ——– d—–r- C:\Users\infosupri\Podcasts

    2012-10-25 04:50:02 ——– d—–w- C:\Windows\SysWow64\wbem\en-US

    2012-10-25 04:50:00 ——– d—–w- C:\Windows\System32\wbem\en-US

    2012-10-25 04:49:53 ——– d—–w- C:\Windows\SysWow64\Wat

    2012-10-25 04:49:53 ——– d—–w- C:\Windows\System32\Wat

    2012-10-25 04:14:15 ——– d—–w- C:\Program Files (x86)\MSXML 4.0

    2012-10-25 03:39:56 81408 —-a-w- C:\Windows\System32\imagehlp.dll

    2012-10-25 03:39:56 23408 —-a-w- C:\Windows\System32\drivers\fs_rec.sys

    2012-10-25 03:39:56 159232 —-a-w- C:\Windows\SysWow64\imagehlp.dll

    2012-10-25 03:39:55 5120 —-a-w- C:\Windows\SysWow64\wmi.dll

    2012-10-25 03:39:55 5120 —-a-w- C:\Windows\System32\wmi.dll

    2012-10-25 01:58:51 3148800 —-a-w- C:\Windows\System32\win32k.sys

    2012-10-25 01:58:48 886784 —-a-w- C:\Program Files\Common Files\System\wab32.dll

    2012-10-25 01:58:47 708608 —-a-w- C:\Program Files (x86)\Common Files\System\wab32.dll

    2012-10-25 01:57:24 142336 —-a-w- C:\Windows\System32\poqexec.exe

    2012-10-25 01:57:23 123904 —-a-w- C:\Windows\SysWow64\poqexec.exe

    2012-10-25 01:55:21 961024 —-a-w- C:\Windows\System32\CPFilters.dll

    2012-10-25 01:55:21 642048 —-a-w- C:\Windows\SysWow64\CPFilters.dll

    2012-10-25 01:55:20 850944 —-a-w- C:\Windows\SysWow64\sbe.dll

    2012-10-25 01:55:20 259072 —-a-w- C:\Windows\System32\mpg2splt.ax

    2012-10-25 01:55:20 1118720 —-a-w- C:\Windows\System32\sbe.dll

    2012-10-25 01:55:19 199680 —-a-w- C:\Windows\SysWow64\mpg2splt.ax

    2012-10-25 01:48:41 514560 —-a-w- C:\Windows\SysWow64\qdvd.dll

    2012-10-25 01:48:41 1572864 —-a-w- C:\Windows\System32\quartz.dll

    2012-10-25 01:48:41 1328128 —-a-w- C:\Windows\SysWow64\quartz.dll

    2012-10-25 01:48:40 366592 —-a-w- C:\Windows\System32\qdvd.dll

    2012-10-25 01:48:28 288768 —-a-w- C:\Windows\System32\drivers\mrxsmb10.sys

    2012-10-25 01:48:28 158208 —-a-w- C:\Windows\System32\drivers\mrxsmb.sys

    2012-10-25 01:48:28 128000 —-a-w- C:\Windows\System32\drivers\mrxsmb20.sys

    2012-10-25 01:48:24 395776 —-a-w- C:\Windows\System32\webio.dll

    2012-10-25 01:48:23 314880 —-a-w- C:\Windows\SysWow64\webio.dll

    2012-10-25 01:47:47 1881600 —-a-w- C:\Windows\System32\msxml3.dll

    2012-10-25 01:47:46 2004480 —-a-w- C:\Windows\System32\msxml6.dll

    2012-10-25 01:47:45 2048 —-a-w- C:\Windows\SysWow64\msxml3r.dll

    2012-10-25 01:47:45 2048 —-a-w- C:\Windows\System32\msxml3r.dll

    2012-10-25 01:47:45 1390080 —-a-w- C:\Windows\SysWow64\msxml6.dll

    2012-10-25 01:47:45 1236992 —-a-w- C:\Windows\SysWow64\msxml3.dll

    2012-10-25 01:47:16 43520 —-a-w- C:\Windows\System32\csrsrv.dll

    2012-10-25 01:46:41 5559664 —-a-w- C:\Windows\System32\ntoskrnl.exe

    2012-10-25 01:46:39 3968880 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe

    2012-10-25 01:46:38 3914096 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe

    2012-10-25 01:46:23 1395712 —-a-w- C:\Windows\System32\mfc42.dll

    2012-10-25 01:46:23 1359872 —-a-w- C:\Windows\System32\mfc42u.dll

    2012-10-25 01:46:22 1164288 —-a-w- C:\Windows\SysWow64\mfc42u.dll

    2012-10-25 01:46:22 1137664 —-a-w- C:\Windows\SysWow64\mfc42.dll

    2012-10-25 01:43:07 220160 —-a-w- C:\Windows\System32\wintrust.dll

    2012-10-25 01:43:06 172544 —-a-w- C:\Windows\SysWow64\wintrust.dll

    2012-10-25 01:42:48 2048 —-a-w- C:\Windows\SysWow64\tzres.dll

    2012-10-25 01:42:48 2048 —-a-w- C:\Windows\System32\tzres.dll

    2012-10-25 01:42:00 467456 —-a-w- C:\Windows\System32\drivers\srv.sys

    2012-10-25 01:42:00 410112 —-a-w- C:\Windows\System32\drivers\srv2.sys

    2012-10-25 01:42:00 168448 —-a-w- C:\Windows\System32\drivers\srvnet.sys

    2012-10-25 01:40:45 642944 —-a-w- C:\Windows\System32\winload.efi

    2012-10-25 01:39:59 5120 —ha-w- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll

    2012-10-25 01:38:54 690688 —-a-w- C:\Windows\SysWow64\msvcrt.dll

    2012-10-25 01:37:56 1731920 —-a-w- C:\Windows\System32\ntdll.dll

    2012-10-25 01:37:56 1292080 —-a-w- C:\Windows\SysWow64\ntdll.dll

    2012-10-25 01:37:35 1464320 —-a-w- C:\Windows\System32\crypt32.dll

    2012-10-25 01:37:34 184320 —-a-w- C:\Windows\System32\cryptsvc.dll

    2012-10-25 01:37:34 140288 —-a-w- C:\Windows\System32\cryptnet.dll

    2012-10-25 01:37:34 1159680 —-a-w- C:\Windows\SysWow64\crypt32.dll

    2012-10-25 01:37:33 140288 —-a-w- C:\Windows\SysWow64\cryptsvc.dll

    2012-10-25 01:37:33 103936 —-a-w- C:\Windows\SysWow64\cryptnet.dll

    2012-10-25 01:16:22 77312 —-a-w- C:\Windows\System32\packager.dll

    2012-10-25 01:16:22 67072 —-a-w- C:\Windows\SysWow64\packager.dll

    2012-10-25 00:48:33 9291768 —-a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{217B8838-990F-4C7F-8427-57F8E291AA7D}\mpengine.dll

    2012-10-25 00:48:31 279656 ——w- C:\Windows\System32\MpSigStub.exe

    2012-10-25 00:48:04 ——– d—–w- C:\Program Files (x86)\McAfeeMOBK

    2012-10-25 00:47:54 66040 —-a-w- C:\Windows\System32\drivers\MOBK.sys

    2012-10-25 00:47:53 ——– d—–w- C:\Program Files (x86)\McAfee Online Backup

    2012-10-25 00:47:50 196440 —-a-w- C:\Windows\System32\drivers\HipShieldK.sys

    2012-10-25 00:47:24 ——– d—–w- C:\Program Files (x86)\McAfee.com

    2012-10-25 00:47:10 10288 —-a-w- C:\Windows\System32\drivers\mfeclnk.sys

    2012-10-25 00:47:10 ——– d—–w- C:\Program Files (x86)\Common Files\McAfee

    2012-10-25 00:47:06 69672 —-a-w- C:\Windows\System32\drivers\cfwids.sys

    2012-10-25 00:47:06 513456 —-a-w- C:\Windows\System32\drivers\mfefirek.sys

    2012-10-25 00:47:06 300392 —-a-w- C:\Windows\System32\drivers\mfeavfk.sys

    2012-10-25 00:47:06 106112 —-a-w- C:\Windows\System32\drivers\mferkdet.sys

    2012-10-25 00:47:00 ——– d—–w- C:\Program Files\Common Files\McAfee

    2012-10-25 00:46:54 ——– d—–w- C:\Program Files\McAfee.com

    2012-10-25 00:46:54 ——– d—–w- C:\Program Files\McAfee

    2012-10-25 00:46:51 ——– d—–w- C:\Program Files (x86)\McAfee

    2012-10-25 00:44:41 ——– d—–w- C:\Users\infosupri\AppData\Roaming\Windows Live Writer

    2012-10-25 00:44:41 ——– d—–w- C:\Users\infosupri\AppData\Local\Windows Live Writer

    2012-10-25 00:35:37 177144 —-a-w- C:\Windows\System32\mfevtps.exe

    2012-10-25 00:26:10 ——– d—–w- C:\Windows\System32\drivers\UMDF\ko-KR

    2012-10-25 00:26:05 ——– d—–w- C:\Windows\System32\drivers\UMDF\ms-MY

    2012-10-25 00:26:01 ——– d—–w- C:\Windows\System32\drivers\UMDF\id-ID

    2012-10-25 00:21:30 ——– d—–w- C:\Windows\System32\drivers\UMDF\en-US

    2012-10-25 00:10:48 ——– d—–w- C:\Program Files (x86)\Common Files\xing shared

    2012-10-25 00:09:37 746984 —-a-w- C:\Windows\SysWow64\deployJava1.dll

    2012-10-25 00:09:36 821736 —-a-w- C:\Windows\SysWow64\npDeployJava1.dll

    2012-10-25 00:09:17 95208 —-a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

    2012-10-25 00:01:18 ——– d—–r- C:\Program Files (x86)\Skype

    2012-10-24 23:38:57 ——– d—–w- C:\Windows\nl

    2012-10-24 23:34:42 57856 —-a-w- C:\Windows\System32\drivers\fssfltr.sys

    2012-10-24 23:26:31 77656 —-a-w- C:\Windows\System32\XAPOFX1_5.dll

    2012-10-24 23:26:31 74072 —-a-w- C:\Windows\SysWow64\XAPOFX1_5.dll

    2012-10-24 23:26:31 527192 —-a-w- C:\Windows\SysWow64\XAudio2_7.dll

    2012-10-24 23:26:31 518488 —-a-w- C:\Windows\System32\XAudio2_7.dll

    2012-10-24 23:26:30 2526056 —-a-w- C:\Windows\System32\D3DCompiler_43.dll

    2012-10-24 23:26:30 2106216 —-a-w- C:\Windows\SysWow64\D3DCompiler_43.dll

    2012-10-24 23:26:27 276832 —-a-w- C:\Windows\System32\d3dx11_43.dll

    2012-10-24 23:26:27 248672 —-a-w- C:\Windows\SysWow64\d3dx11_43.dll

    2012-10-24 23:23:26 523088 —-a-w- C:\Windows\System32\d3dx10_42.dll

    2012-10-24 23:23:26 453456 —-a-w- C:\Windows\SysWow64\d3dx10_42.dll

    2012-10-24 23:17:46 5659096 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c2bb24ef1cdb23d01\skydrivesetup.exe

    2012-10-24 23:04:09 ——– d—–w- C:\Users\infosupri\Tracing

    2012-10-24 23:03:06 ——– d—–w- C:\69bba851d1478ac0ad3b

    2012-10-24 22:57:24 ——– d—–w- C:\5391f7764729b24e0b71243a

    2012-10-24 22:57:09 ——– d—–w- C:\Program Files (x86)\Microsoft SkyDrive

    2012-10-24 22:57:07 ——– d—–r- C:\Users\infosupri\SkyDrive

    2012-10-24 22:56:39 ——– d—–w- C:\ProgramData\Microsoft SkyDrive

    2012-10-24 22:52:15 89944 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\344b726d1cdb23a07\DSETUP.dll

    2012-10-24 22:52:15 537432 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\344b726d1cdb23a07\DXSETUP.exe

    2012-10-24 22:52:15 1801048 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\344b726d1cdb23a07\dsetup32.dll

    2012-10-24 22:52:08 89944 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\30c7aa461cdb23a06\DSETUP.dll

    2012-10-24 22:52:08 537432 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\30c7aa461cdb23a06\DXSETUP.exe

    2012-10-24 22:52:08 1801048 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\30c7aa461cdb23a06\dsetup32.dll

    2012-10-24 22:52:05 94040 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\295cbc491cdb23a05\DSETUP.dll

    2012-10-24 22:52:05 525656 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\295cbc491cdb23a05\DXSETUP.exe

    2012-10-24 22:52:05 1691480 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\295cbc491cdb23a05\dsetup32.dll

    2012-10-24 22:51:18 889416 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\137e17c51cdb23a01\dotNetFx40_Full_setup.exe

    2012-10-24 22:51:12 ——– d—–w- C:\Users\infosupri\AppData\Local\Windows Live

    2012-10-24 22:31:18 224768 —-a-w- C:\Windows\System32\Spool\prtprocs\x64\hpzpp4v2.dll

    2012-10-24 22:28:21 ——– d—–w- C:\Program Files (x86)\Common Files\HP

    2012-10-24 22:28:15 ——– d—–w- C:\Program Files (x86)\Common Files\Hewlett-Packard

    2012-10-24 22:27:47 134144 —-a-w- C:\Windows\System32\hpzll4v2.dll

    2012-10-24 22:27:35 ——– d—–w- C:\Program Files (x86)\HP

    2012-10-24 22:21:57 338944 —-a-w- C:\Windows\System32\hpzids40.dll

    2012-10-24 22:21:56 859136 —-a-w- C:\Windows\System32\hpowiax4.dll

    2012-10-24 22:21:56 729088 —-a-w- C:\Windows\System32\hpotscl4.dll

    2012-10-24 22:21:56 540672 —-a-w- C:\Windows\System32\hppldcoi.dll

    2012-10-24 22:21:56 488960 —-a-w- C:\Windows\System32\hpovst11.dll

    2012-10-24 22:02:16 230400 —-a-w- C:\Windows\System32\Spool\prtprocs\x64\hpzppw71.dll

    2012-10-24 21:26:51 826880 —-a-w- C:\Windows\SysWow64\rdpcore.dll

    2012-10-24 21:26:51 23552 —-a-w- C:\Windows\System32\drivers\tdtcp.sys

    2012-10-24 21:26:51 1031680 —-a-w- C:\Windows\System32\rdpcore.dll

    2012-10-24 21:19:46 2622464 —-a-w- C:\Windows\System32\wucltux.dll

    2012-10-24 21:19:21 99840 —-a-w- C:\Windows\System32\wudriver.dll

    2012-10-24 21:18:51 36864 —-a-w- C:\Windows\System32\wuapp.exe

    2012-10-24 21:18:51 186752 —-a-w- C:\Windows\System32\wuwebv.dll

    2012-10-24 21:03:07 ——– d—–w- C:\Program Files (x86)\Microsoft Visual Studio 8

    2012-10-24 21:02:21 ——– d—–w- C:\Users\infosupri\AppData\Local\Microsoft Help

    2012-10-24 20:58:40 4398360 —-a-w- C:\Windows\System32\d3dx9_32.dll

    2012-10-24 20:58:40 3426072 —-a-w- C:\Windows\SysWow64\d3dx9_32.dll

    2012-10-24 20:58:15 ——– d—–w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition

    2012-10-24 20:57:58 ——– d—–w- C:\Users\infosupri\AppData\Local\Google

    2012-10-24 20:57:15 ——– d—–w- C:\Program Files (x86)\Microsoft

    2012-10-24 20:55:09 144416072 —-a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\wlc81BE.tmp

    2012-10-24 20:54:36 ——– d—–w- C:\Program Files (x86)\Common Files\Windows Live

    2012-10-24 20:22:45 ——– d—–w- C:\backup

    2012-10-24 20:19:39 ——– d—–w- C:\BOOK

    2012-10-24 20:15:26 82432 —-a-w- C:\Windows\SysWow64\msxml4r.dll

    2012-10-24 20:15:26 44544 —-a-w- C:\Windows\SysWow64\msxml4a.dll

    2012-10-24 20:14:17 77824 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll

    2012-10-24 20:14:17 32768 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll

    2012-10-24 20:14:17 225280 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\IScript\iscript.dll

    2012-10-24 20:14:17 176128 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll

    2012-10-24 20:14:16 610436 —-a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe

    2012-10-24 20:10:30 ——– d—–w- C:\Program Files (x86)\Acer Arcade Deluxe

    2012-10-24 20:09:12 ——– d—–w- C:\Program Files (x86)\Nuvoton Technology Corporation

    2012-10-24 20:08:40 ——– d—–w- C:\Program Files (x86)\AmIcoSingLun

    2012-10-24 20:04:48 ——– d—–w- C:\Program Files (x86)\Launch Manager

    2012-10-24 20:03:56 ——– d—–w- C:\Program Files\Apoint2K

    2012-10-24 20:02:01 ——– d—–w- C:\Program Files (x86)\Acer Bio Protection

    2012-10-24 20:01:37 564784 —-a-w- C:\Windows\System32\NBMatS1SDK.dll

    2012-10-24 20:01:37 465456 —-a-w- C:\Windows\SysWow64\NBMatS1SDK.dll

    2012-10-24 20:01:20 29184 —-a-w- C:\Windows\System32\drivers\FPSensor.sys

    2012-10-24 20:00:42 200704 —-a-w- C:\Windows\PLFSetI.exe

    2012-10-24 20:00:41 106496 —-a-w- C:\Windows\FixUVC.exe

    2012-10-24 20:00:03 ——– d—–w- C:\Windows\SysWow64\RTCOM

    2012-10-24 19:56:44 ——– d—–w- C:\Users\infosupri\AppData\Local\EgisTec

    2012-10-24 19:54:44 ——– d—–w- C:\Users\infosupri\AppData\Local\VirtualStore

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Sjablonen

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Menu Start

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Favorieten

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Documenten

    2012-10-24 19:52:21 ——– d-sh–we C:\ProgramData\Bureaublad

    2012-10-24 19:52:21 ——– d-sh–w- C:\Recovery

    2012-10-24 19:49:15 ——– d—–w- C:\Program Files\LSI SoftModem

    2012-10-24 19:46:28 539680 —-a-w- C:\Windows\System32\nvuninst.exe

    .

    ==================== Find3M ====================

    .

    2012-10-28 20:11:24 175616 —-a-w- C:\Windows\System32\msclmd.dll

    2012-10-28 20:11:24 152576 —-a-w- C:\Windows\SysWow64\msclmd.dll

    2012-10-25 05:30:44 2560 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\qwavedrv.sys.mui

    2012-10-25 05:30:34 5632 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\ndiscap.sys.mui

    2012-10-25 05:30:29 50688 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\tcpip.sys.mui

    2012-10-25 05:30:27 26624 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\bfe.dll.mui

    2012-10-25 05:30:27 16896 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\pacer.sys.mui

    2012-10-25 05:30:19 2560 —-a-w- C:\Windows\SysWow64\drivers\nl-NL\scfilter.sys.mui

    2012-09-12 14:07:44 58368 —-a-w- C:\Windows\SysWow64\sirenacm.dll

    2012-09-12 13:57:44 322048 —-a-w- C:\Windows\WLXPGSS.SCR

    2012-08-11 00:56:03 715776 —-a-w- C:\Windows\System32\kerberos.dll

    2012-08-10 23:56:14 542208 —-a-w- C:\Windows\SysWow64\kerberos.dll

    .

    ============= FINISH: 13:51:57,66 ===============

    Hoop dat je me kunt helpen. Ga nu naar m';n werk, dus duurt even voordat ik je kan antwoorden.

    René

  • Ben

    Hallo,

    Klik op Start > (Instellingen) > Configuratiescherm > Een programma verwijderen:

    Spybot - Search & Destroy

    Ad-Aware Antivirus

    Herstart je pc.

    “zoek.exe” gebruiken

    Schakel je antivirus- en antispywareprogramma's uit, zoek.exe wordt tijdens het downloaden of tijdens gebruik soms als trojan aangezien.

    (hier of hier) kan je lezen hoe je dat doet.

    Download daarna zoek.exe naar het bureaublad.

    Windows Vista en Windows 7: start de tool middels rechtsklik op “zoek.exe” en dan kiezen voor Als Administrator uitvoeren.

    Vervolgens zal er na een tijdje een venster geopend worden.

    Zet een vinkje bij "Create System Restore Point".

    Met je muis selecteer je nu de volgende keuze "Combined fix"(rechts onderaan)

    Kopieer nu onderstaande Vet gedrukte en plak die in het grote invulvenster:

    startupall;

    filesrcm;

    iedefaults;

    emptyclsid;

    emptyjava;

    emptyflash;

    emptyiecache;

    emptytemp;

    Sluit nu eerst alle nog openstaande programmavensters!

    Klik nu op de knop "Run script".

    Wacht nu geduldig af tot er een logje opent(dit kan na een herstart zijn)

    Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

    Post nu de inhoud van het geopende logje in het volgende bericht en vertel hoe het nu gaat.

    Gr.Ben

    Antivirusprikbord.nl

  • rene

    Hallo Ben,

    Klik op Start > (Instellingen) > Configuratiescherm > Een programma verwijderen:

    Spybot - Search & Destroy

    Ad-Aware Antivirus

    Beide programma's staan niet in de lijst. Heb ze eerder al verwijderd, maar misschien dat er ergens iets is achter gebleven. Als het nodig is om die deeltjes te verwijderen hoor ik graag hoe.

    Zoekexe uitgevoerd. Hieronder het file, maar zo te zien is het probleem opgelost; IE opende niet op mysearchresults. Ben er dus vanaf?

    - Kan ik Office (legale versie) nu met de schijf hetstellen (toch wat foutmeldingen hier en daar)

    - Hoe krijg ik de kleuren etc weer terug van windows (met melding windowslogonfile beschadigt run chckdsk)

    Als ik het file bijvoeg kan ik het bericht niet posten omdat het te lang is. Kan ik het je mailen of zal ik het in 2-en knippen en in 2 berichten posten?

    Groet,

    René

Dit topic is gesloten, er kunnen geen reacties meer worden geplaatst.