Ik heb zojuist mijn oude computer even tevoorschijn getoverd zodat mijn maatje daarop zichzelf kan vermaken… Hij is best wel oud 2007 ofzo… Ik heb zojuist alles erafgeflikkerd en windows xp erop nieuw opgezet… In het begin had ik wat problemen met mijn Ethernet controller / Geluid / Raid controllers dat heb ik allemaal weten op te lossen alleen wil ik nu mijn windows update opstarten en krijg ik telkens de foutcode die als onderwerp aangegeven staat. Ik heb dit gegoogled en ben op deze site gekomen waarin ik iemand zag die hetzelfde probleem als mij had. Ik heb het stappen plan gevolgd maar er is geen enkel virus te bekennen geen mallware helemaal niets niet. Ik hoop dat ik hier alsnog mee geholpen kan worden.
MVG Jesper Poortvliet
RSIT: Info
info.txt logfile of random's system information tool 1.09 2013-05-19 16:14:15
======Uninstall list======
–>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 11 ActiveX–>C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_8_800_50_ActiveX.exe -maintain activex
DriverTuner 3.1.0.0–>“C:\Program Files\DriverTuner\unins000.exe”
ESET Online Scanner v3–>C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
Malwarebytes Anti-Malware versie 1.75.0.1300–>“C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe”
Microsoft .NET Framework 1.1 Dutch Language Pack–>MsiExec.exe /X{168F8BAC-A269-48E9-BB7A-A51B594CF6FF}
Microsoft .NET Framework 1.1–>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1–>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
NVIDIA Drivers–>C:\WINDOWS\system32\nvuninst.exe UninstallGUI
REALTEK GbE & FE Ethernet PCI NIC Driver–>C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\Setup.exe -runfromtemp -l0x0013 -removeonly
Spybot - Search & Destroy–>“C:\Program Files\Spybot - Search & Destroy 2\unins000.exe”
VIA Platform apparaatbeheer–>C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
WinRAR 4.20 (32-bit)–>C:\Program Files\WinRAR\uninstall.exe
======Hosts File======
127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
======System event log======
Computer Name: JESPER-6C794786
Event Code: 15007
Message: Reservering voor naamruimte voor URL-prefix http://*:2869/ is toegevoegd.
Record Number: 5
Source Name: HTTP
Time Written: 20130518192037.000000+120
Event Type: Gegevens
User:
Computer Name: JESPER-6C794786
Event Code: 6011
Message: De NetBIOS-naam en de DNS-hostnaam van deze computer zijn veranderd van MACHINENAME in JESPER-6C794786.
Record Number: 4
Source Name: EventLog
Time Written: 20130518191652.000000+120
Event Type: Gegevens
User:
Computer Name: MACHINENAME
Event Code: 2
Message: Bij het controleren of \Device\Serial0 een seriële poort is, is een fifo gevonden. De fifo wordt gebruikt.
Record Number: 3
Source Name: Serial
Time Written: 20130518211301.000000+120
Event Type: Gegevens
User:
Computer Name: MACHINENAME
Event Code: 6005
Message: De Event Log-service is gestart.
Record Number: 2
Source Name: EventLog
Time Written: 20130518211242.000000+120
Event Type: Gegevens
User:
Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Uniprocessor Free.
Record Number: 1
Source Name: EventLog
Time Written: 20130518211242.000000+120
Event Type: Gegevens
User:
======Environment variables======
“ComSpec”=%SystemRoot%\system32\cmd.exe
“Path”=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM
“windir”=%SystemRoot%
“FP_NO_HOST_CHECK”=NO
“OS”=Windows_NT
“PROCESSOR_ARCHITECTURE”=x86
“PROCESSOR_LEVEL”=15
“PROCESSOR_IDENTIFIER”=x86 Family 15 Model 12 Stepping 0, AuthenticAMD
“PROCESSOR_REVISION”=0c00
“NUMBER_OF_PROCESSORS”=1
“PATHEXT”=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
“TEMP”=%SystemRoot%\TEMP
“TMP”=%SystemRoot%\TEMP
—————–EOF—————–
RSIT: log
Logfile of random's system information tool 1.09 (written by random/random)
Run by jesper at 2013-05-19 16:13:51
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 152 GB (97%) free of 156 GB
Total RAM: 1023 MB (44% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:14:14, on 19-5-2013
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Documents and Settings\jesper\Bureaublad\RSIT.exe
C:\Program Files\trend micro\jesper.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O4 - HKLM\..\Run: C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: nwiz.exe /install
O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: “C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe”
O4 - HKLM\..\RunOnce: C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Lokale service’)
O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Netwerkservice’)
O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)
O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra ‘Tools’ menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1368965763953
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
–
End of file - 4683 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\Check for updates (Spybot - Search & Destroy).job
C:\WINDOWS\tasks\Refresh immunization (Spybot - Search & Destroy).job
C:\WINDOWS\tasks\Scan the system (Spybot - Search & Destroy).job
======Registry dump======
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
“AudioDeck”=C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
“NvCplDaemon”=C:\WINDOWS\system32\NvCpl.dll
“nwiz”=nwiz.exe /install
“NvMediaCenter”=C:\WINDOWS\system32\NvMcTray.dll
“RaidTool”=C:\Program Files\VIA\RAID\raid_tool.exe
“SDTray”=C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
“Malwarebytes Anti-Malware”=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
“CTFMON.EXE”=C:\WINDOWS\system32\ctfmon.exe
SDWinLogon.dll
“dontdisplaylastusername”=0
“legalnoticecaption”=
“legalnoticetext”=
“shutdownwithoutlogon”=1
“undockwithoutlogon”=1
“NoDriveTypeAutoRun”=145
“%windir%\system32\sessmgr.exe”=“%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019”
“C:\Documents and Settings\jesper\Local Settings\Temp\usmt\migwiz.exe”=“C:\Documents and Settings\jesper\Local Settings\Temp\usmt\migwiz.exe:*:Enabled:Wizard Bestanden en instellingen overzetten”
“C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe”=“C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon”
“C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe”=“C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service”
“C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe”=“C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater”
“C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe”=“C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service”
“%windir%\system32\sessmgr.exe”=“%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019”
“midimapper”=midimap.dll
“msacm.imaadpcm”=imaadp32.acm
“msacm.msadpcm”=msadp32.acm
“msacm.msg711”=msg711.acm
“msacm.msgsm610”=msgsm32.acm
“msacm.trspch”=tssoft32.acm
“vidc.cvid”=iccvid.dll
“vidc.I420”=msh263.drv
“vidc.iv31”=ir32_32.dll
“vidc.iv32”=ir32_32.dll
“vidc.iv41”=ir41_32.ax
“vidc.iyuv”=iyuv_32.dll
“vidc.mrle”=msrle32.dll
“vidc.msvc”=msvidc32.dll
“vidc.uyvy”=msyuv.dll
“vidc.yuy2”=msyuv.dll
“vidc.yvu9”=tsbyuv.dll
“vidc.yvyu”=msyuv.dll
“wavemapper”=msacm32.drv
“msacm.msg723”=msg723.acm
“vidc.M263”=msh263.drv
“vidc.M261”=msh261.drv
“msacm.msaudio1”=msaud32.acm
“msacm.sl_anet”=sl_anet.acm
“msacm.iac2”=C:\WINDOWS\system32\iac25_32.ax
“vidc.iv50”=ir50_32.dll
“msacm.l3acm”=C:\WINDOWS\system32\l3codeca.acm
“wave”=wdmaud.drv
“midi”=wdmaud.drv
“mixer”=wdmaud.drv
======List of files/folders created in the last 1 month======
2013-05-19 16:13:52 —-D—- C:\Program Files\trend micro
2013-05-19 16:13:51 —-D—- C:\rsit
2013-05-19 15:29:42 —-D—- C:\Program Files\ESET
2013-05-19 15:16:19 —-D—- C:\Documents and Settings\jesper\Application Data\Malwarebytes
2013-05-19 15:16:13 —-D—- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2013-05-19 15:16:12 —-D—- C:\Program Files\Malwarebytes' Anti-Malware
2013-05-19 15:16:12 —-A—- C:\WINDOWS\system32\drivers\mbam.sys
2013-05-19 15:12:07 —-A—- C:\AdwCleaner.txt
2013-05-19 15:11:54 —-A—- C:\AdwCleaner.txt
2013-05-19 14:57:06 —-A—- C:\WINDOWS\wininit.ini
2013-05-19 14:23:53 —-D—- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2013-05-19 14:23:41 —-A—- C:\WINDOWS\system32\sdnclean.exe
2013-05-19 14:23:35 —-D—- C:\Program Files\Spybot - Search & Destroy 2
2013-05-19 14:17:20 —-D—- C:\Documents and Settings\jesper\Application Data\Macromedia
2013-05-19 14:15:07 —-D—- C:\Documents and Settings\jesper\Application Data\Adobe
2013-05-19 14:06:39 —-DC—- C:\WINDOWS\system32\DRVSTORE
2013-05-19 14:06:35 —-RA—- C:\WINDOWS\system32\drivers\videX32.sys
2013-05-19 14:05:24 —-RA—- C:\WINDOWS\system32\drivers\viamraid.sys
2013-05-19 14:03:43 —-D—- C:\WINDOWS\nview
2013-05-19 14:03:43 —-A—- C:\WINDOWS\system32\nvudisp.exe
2013-05-19 14:03:38 —-D—- C:\WINDOWS\system32\ReinstallBackups
2013-05-19 14:03:33 —-A—- C:\WINDOWS\system32\NVUNINST.EXE
2013-05-19 14:03:27 —-D—- C:\NVIDIA
2013-05-19 14:02:52 —-A—- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-05-19 13:44:04 —-A—- C:\WINDOWS\system32\drivers\splitter.sys
2013-05-19 13:44:00 —-A—- C:\WINDOWS\system32\drivers\DMusic.sys
2013-05-19 13:43:45 —-A—- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2013-05-19 13:43:44 —-A—- C:\WINDOWS\system32\drivers\MSPQM.sys
2013-05-19 13:43:42 —-A—- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2013-05-19 13:43:16 —-RA—- C:\WINDOWS\system32\drivers\vinyl97.sys
2013-05-19 13:43:15 —-A—- C:\WINDOWS\system32\ksuser.dll
2013-05-19 13:42:50 —-N—- C:\WINDOWS\system32\difxapi.dll
2013-05-19 13:42:50 —-D—- C:\Program Files\VIA
2013-05-19 13:42:46 —-D—- C:\Program Files\Common Files\InstallShield
2013-05-19 13:33:21 —-A—- C:\WINDOWS\system32\wpa.bak
2013-05-19 13:31:06 —-A—- C:\WINDOWS\system32\drivers\Rtnicxp.sys
2013-05-19 13:31:04 —-HD—- C:\Program Files\InstallShield Installation Information
2013-05-19 13:31:04 —-D—- C:\WINDOWS\OPTIONS
2013-05-19 13:31:04 —-D—- C:\Program Files\Realtek
2013-05-19 13:30:57 —-D—- C:\Documents and Settings\jesper\Application Data\InstallShield
2013-05-19 03:12:33 —-D—- C:\Program Files\DriverTuner
2013-05-19 02:57:03 —-D—- C:\Documents and Settings\jesper\Application Data\WinRAR
2013-05-19 02:57:02 —-D—- C:\Program Files\WinRAR
2013-05-19 02:32:19 —-A—- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2013-05-18 21:16:39 —-A—- C:\WINDOWS\system32\h323log.txt
2013-05-18 21:15:51 —-A—- C:\WINDOWS\system32\drivers\audstub.sys
2013-05-18 21:15:21 —-A—- C:\WINDOWS\system32\drivers\redbook.sys
2013-05-18 21:15:07 —-A—- C:\WINDOWS\system32\nv4_disp.dll
2013-05-18 21:15:07 —-A—- C:\WINDOWS\system32\drivers\nv4_mini.sys
2013-05-18 21:14:37 —-A—- C:\WINDOWS\system32\drivers\GAGP30KX.SYS
2013-05-18 21:13:50 —-A—- C:\WINDOWS\imsins.BAK
2013-05-18 21:13:48 —-SHD—- C:\WINDOWS\Installer
2013-05-18 21:13:48 —-A—- C:\WINDOWS\system32\PerfStringBackup.INI
2013-05-18 21:13:47 —-D—- C:\Program Files\Common Files\ODBC
2013-05-18 21:13:47 —-A—- C:\WINDOWS\ODBCINST.INI
2013-05-18 21:13:44 —-RD—- C:\Program Files
2013-05-18 21:13:44 —-D—- C:\Program Files\Common Files\SpeechEngines
2013-05-18 21:13:44 —-D—- C:\Program Files\Common Files\Microsoft Shared
2013-05-18 21:13:44 —-D—- C:\Program Files\Common Files
2013-05-18 21:13:30 —-A—- C:\WINDOWS\system32\EqnClass.Dll
2013-05-18 21:13:30 —-A—- C:\WINDOWS\system32\dgrpsetu.dll
2013-05-18 21:13:28 —-A—- C:\WINDOWS\system32\drivers\irenum.sys
2013-05-18 21:13:28 —-A—- C:\WINDOWS\system32\CONFIG.TMP
2013-05-18 21:13:26 —-A—- C:\WINDOWS\system32\storprop.dll
2013-05-18 21:13:19 —-ASH—- C:\Documents and Settings\All Users\Application Data\desktop.ini
2013-05-18 21:13:16 —-RA—- C:\WINDOWS\SET8.tmp
2013-05-18 21:13:13 —-RA—- C:\WINDOWS\SET4.tmp
2013-05-18 21:13:12 —-RA—- C:\WINDOWS\SET3.tmp
2013-05-18 21:13:07 —-D—- C:\WINDOWS\system32\CatRoot2
2013-05-18 21:13:07 —-D—- C:\WINDOWS\system32\CatRoot
2013-05-18 21:13:01 —-SD—- C:\Documents and Settings\All Users\Application Data\Microsoft
2013-05-18 21:12:37 —-D—- C:\Documents and Settings
2013-05-18 21:12:36 —-SHD—- C:\System Volume Information
2013-05-18 21:12:36 —-A—- C:\WINDOWS\system32\FNTCACHE.DAT
2013-05-18 21:12:35 —-ASH—- C:\pagefile.sys
2013-05-18 21:07:50 —-SH—- C:\boot.ini
2013-05-18 21:01:54 —-RSHDC—- C:\WINDOWS\system32\dllcache
2013-05-18 21:01:54 —-RSD—- C:\WINDOWS\Fonts
2013-05-18 21:01:54 —-RD—- C:\WINDOWS\Web
2013-05-18 21:01:54 —-HD—- C:\WINDOWS\inf
2013-05-18 21:01:54 —-D—- C:\WINDOWS\WinSxS
2013-05-18 21:01:54 —-D—- C:\WINDOWS\twain_32
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Temp
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\wins
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\wbem
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\usmt
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\spool
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\ShellExt
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\Setup
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\ras
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\oobe
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\npp
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\mui
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\inetsrv
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\IME
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\icsxml
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\ias
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\export
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\drivers\etc
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\drivers\disdn
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\drivers
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\dhcp
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\config
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\3com_dmi
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\3076
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\2052
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1054
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1043
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1042
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1041
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1037
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1033
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1031
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1028
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32\1025
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system32
2013-05-18 21:01:54 —-D—- C:\WINDOWS\system
2013-05-18 21:01:54 —-D—- C:\WINDOWS\security
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Resources
2013-05-18 21:01:54 —-D—- C:\WINDOWS\repair
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Provisioning
2013-05-18 21:01:54 —-D—- C:\WINDOWS\PeerNet
2013-05-18 21:01:54 —-D—- C:\WINDOWS\pchealth
2013-05-18 21:01:54 —-D—- C:\WINDOWS\mui
2013-05-18 21:01:54 —-D—- C:\WINDOWS\msapps
2013-05-18 21:01:54 —-D—- C:\WINDOWS\msagent
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Media
2013-05-18 21:01:54 —-D—- C:\WINDOWS\java
2013-05-18 21:01:54 —-D—- C:\WINDOWS\ime
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Help
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Driver Cache
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Debug
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Cursors
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Connection Wizard
2013-05-18 21:01:54 —-D—- C:\WINDOWS\Config
2013-05-18 21:01:54 —-D—- C:\WINDOWS\AppPatch
2013-05-18 21:01:54 —-D—- C:\WINDOWS\addins
2013-05-18 21:01:54 —-D—- C:\WINDOWS
2013-05-18 20:09:50 —-D—- C:\WINDOWS\Prefetch
2013-05-18 20:02:08 —-A—- C:\WINDOWS\system32\spxcoins.dll
2013-05-18 20:02:08 —-A—- C:\WINDOWS\system32\irclass.dll
2013-05-18 20:01:55 —-RA—- C:\WINDOWS\SET27.tmp
2013-05-18 20:01:53 —-RA—- C:\WINDOWS\SET1B.tmp
2013-05-18 20:01:52 —-RA—- C:\WINDOWS\SET18.tmp
2013-05-18 19:52:13 —-A—- C:\WINDOWS\UPGRADE.TXT
2013-05-18 19:52:09 —-D—- C:\WINDOWS\setup.pss
2013-05-18 19:44:59 —-RSD—- C:\WINDOWS\assembly
2013-05-18 19:44:59 —-D—- C:\WINDOWS\system32\URTTemp
2013-05-18 19:44:59 —-D—- C:\WINDOWS\Microsoft.NET
2013-05-18 19:26:02 —-D—- C:\Documents and Settings\jesper\Application Data\Identities
2013-05-18 19:26:01 —-HD—- C:\Program Files\Uninstall Information
2013-05-18 19:25:55 —-SD—- C:\Documents and Settings\jesper\Application Data\Microsoft
2013-05-18 19:25:55 —-ASH—- C:\Documents and Settings\jesper\Application Data\desktop.ini
2013-05-18 19:25:53 —-ASH—- C:\hiberfil.sys
2013-05-18 19:24:43 —-D—- C:\WINDOWS\SoftwareDistribution
2013-05-18 19:24:42 —-SD—- C:\WINDOWS\system32\Microsoft
2013-05-18 19:24:41 —-A—- C:\WINDOWS\SchedLgU.Txt
2013-05-18 19:23:44 —-AS—- C:\WINDOWS\bootstat.dat
2013-05-18 19:21:59 —-D—- C:\WINDOWS\system32\xircom
2013-05-18 19:21:59 —-D—- C:\Program Files\xerox
2013-05-18 19:21:59 —-D—- C:\Program Files\microsoft frontpage
2013-05-18 19:21:49 —-RASH—- C:\MSDOS.SYS
2013-05-18 19:21:49 —-RASH—- C:\IO.SYS
2013-05-18 19:21:49 —-A—- C:\WINDOWS\control.ini
2013-05-18 19:21:49 —-A—- C:\CONFIG.SYS
2013-05-18 19:21:49 —-A—- C:\AUTOEXEC.BAT
2013-05-18 19:21:30 —-A—- C:\WINDOWS\system32\mapi32.dll
2013-05-18 19:20:47 —-SD—- C:\WINDOWS\Downloaded Program Files
2013-05-18 19:20:47 —-RD—- C:\WINDOWS\Offline Web Pages
2013-05-18 19:20:38 —-HD—- C:\Program Files\WindowsUpdate
2013-05-18 19:20:34 —-D—- C:\Program Files\Online Services
2013-05-18 19:20:20 —-D—- C:\WINDOWS\system32\DirectX
2013-05-18 19:20:00 —-A—- C:\WINDOWS\system32\atrace.dll
2013-05-18 19:19:58 —-A—- C:\WINDOWS\system32\desktop.ini
2013-05-18 19:19:58 —-A—- C:\WINDOWS\desktop.ini
2013-05-18 19:19:52 —-A—- C:\WINDOWS\system32\nmevtmsg.dll
2013-05-18 19:19:50 —-D—- C:\Program Files\Common Files\Services
2013-05-18 19:19:50 —-A—- C:\WINDOWS\system32\acctres.dll
2013-05-18 19:19:47 —-SD—- C:\WINDOWS\Tasks
2013-05-18 19:19:47 —-A—- C:\WINDOWS\system32\icfgnt5.dll
2013-05-18 19:19:46 —-D—- C:\Program Files\Common Files\MSSoap
2013-05-18 19:19:43 —-D—- C:\WINDOWS\srchasst
2013-05-18 19:19:42 —-D—- C:\WINDOWS\system32\Macromed
2013-05-18 19:19:39 —-A—- C:\WINDOWS\system32\wuweb.dll
2013-05-18 19:19:39 —-A—- C:\WINDOWS\system32\wups.dll
2013-05-18 19:19:39 —-A—- C:\WINDOWS\system32\wucltui.dll
2013-05-18 19:19:39 —-A—- C:\WINDOWS\system32\wuauserv.dll
2013-05-18 19:19:39 —-A—- C:\WINDOWS\system32\wuaueng1.dll
2013-05-18 19:19:39 —-A—- C:\WINDOWS\system32\wuaueng.dll
2013-05-18 19:19:38 —-A—- C:\WINDOWS\system32\wuauclt1.exe
2013-05-18 19:19:38 —-A—- C:\WINDOWS\system32\wuauclt.exe
2013-05-18 19:19:38 —-A—- C:\WINDOWS\system32\wuapi.dll
2013-05-18 19:19:38 —-A—- C:\WINDOWS\system32\qmgrprxy.dll
2013-05-18 19:19:38 —-A—- C:\WINDOWS\system32\qmgr.dll
2013-05-18 19:19:38 —-A—- C:\WINDOWS\system32\bitsprx3.dll
2013-05-18 19:19:38 —-A—- C:\WINDOWS\system32\bitsprx2.dll
2013-05-18 19:19:34 —-D—- C:\Program Files\Movie Maker
2013-05-18 19:19:30 —-A—- C:\WINDOWS\system32\safrslv.dll
2013-05-18 19:19:30 —-A—- C:\WINDOWS\system32\safrdm.dll
2013-05-18 19:19:30 —-A—- C:\WINDOWS\system32\safrcdlg.dll
2013-05-18 19:19:30 —-A—- C:\WINDOWS\system32\racpldlg.dll
2013-05-18 19:19:27 —-A—- C:\WINDOWS\system32\fltMc.exe
2013-05-18 19:19:27 —-A—- C:\WINDOWS\system32\fltlib.dll
2013-05-18 19:19:27 —-A—- C:\WINDOWS\system32\drivers\fltMgr.sys
2013-05-18 19:19:26 —-D—- C:\WINDOWS\system32\Restore
2013-05-18 19:19:26 —-A—- C:\WINDOWS\system32\srsvc.dll
2013-05-18 19:19:26 —-A—- C:\WINDOWS\system32\srrstr.dll
2013-05-18 19:19:26 —-A—- C:\WINDOWS\system32\srclient.dll
2013-05-18 19:19:26 —-A—- C:\WINDOWS\system32\mnmdd.dll
2013-05-18 19:19:26 —-A—- C:\WINDOWS\system32\isrdbg32.dll
2013-05-18 19:19:26 —-A—- C:\WINDOWS\system32\ils.dll
2013-05-18 19:19:26 —-A—- C:\WINDOWS\system32\drivers\sr.sys
2013-05-18 19:19:25 —-A—- C:\WINDOWS\system32\nmmkcert.dll
2013-05-18 19:19:25 —-A—- C:\WINDOWS\system32\msconf.dll
2013-05-18 19:19:25 —-A—- C:\WINDOWS\system32\mnmsrvc.exe
2013-05-18 19:19:23 —-D—- C:\Program Files\NetMeeting
2013-05-18 19:19:23 —-A—- C:\WINDOWS\system32\msoert2.dll
2013-05-18 19:19:23 —-A—- C:\WINDOWS\system32\msoeacct.dll
2013-05-18 19:19:22 —-A—- C:\WINDOWS\system32\inetres.dll
2013-05-18 19:19:22 —-A—- C:\WINDOWS\system32\inetcomm.dll
2013-05-18 19:19:19 —-D—- C:\Program Files\Outlook Express
2013-05-18 19:19:19 —-A—- C:\WINDOWS\system32\schedsvc.dll
2013-05-18 19:19:19 —-A—- C:\WINDOWS\system32\mstinit.exe
2013-05-18 19:19:19 —-A—- C:\WINDOWS\system32\mstask.dll
2013-05-18 19:19:19 —-A—- C:\WINDOWS\system32\isign32.dll
2013-05-18 19:19:19 —-A—- C:\WINDOWS\system32\icwphbk.dll
2013-05-18 19:19:19 —-A—- C:\WINDOWS\system32\icwdial.dll
2013-05-18 19:19:18 —-A—- C:\WINDOWS\system32\inetcfg.dll
2013-05-18 19:19:14 —-D—- C:\Program Files\Common Files\System
2013-05-18 19:19:09 —-D—- C:\Program Files\Internet Explorer
2013-05-18 19:19:07 —-A—- C:\WINDOWS\system32\emptyregdb.dat
2013-05-18 19:18:57 —-D—- C:\Program Files\ComPlus Applications
2013-05-18 19:18:55 —-A—- C:\WINDOWS\vbaddin.ini
2013-05-18 19:18:55 —-A—- C:\WINDOWS\vb.ini
2013-05-18 19:18:50 —-D—- C:\WINDOWS\Registration
2013-05-18 19:18:22 —-D—- C:\Program Files\Windows Media Player
2013-05-18 19:18:18 —-D—- C:\Program Files\Messenger
2013-05-18 19:18:15 —-D—- C:\Program Files\MSN Gaming Zone
2013-05-18 19:18:15 —-A—- C:\WINDOWS\system32\write.exe
2013-05-18 19:18:06 —-A—- C:\WINDOWS\system32\sndvol32.exe
2013-05-18 19:18:06 —-A—- C:\WINDOWS\system32\hticons.dll
2013-05-18 19:18:06 —-A—- C:\WINDOWS\system32\avwav.dll
2013-05-18 19:18:06 —-A—- C:\WINDOWS\system32\avtapi.dll
2013-05-18 19:18:06 —-A—- C:\WINDOWS\system32\avmeter.dll
2013-05-18 19:18:05 —-A—- C:\WINDOWS\system32\winchat.exe
2013-05-18 19:17:59 —-A—- C:\WINDOWS\system32\getuname.dll
2013-05-18 19:17:59 —-A—- C:\WINDOWS\system32\charmap.exe
2013-05-18 19:17:59 —-A—- C:\WINDOWS\system32\calc.exe
2013-05-18 19:17:58 —-A—- C:\WINDOWS\system32\winmine.exe
2013-05-18 19:17:58 —-A—- C:\WINDOWS\system32\sol.exe
2013-05-18 19:17:58 —-A—- C:\WINDOWS\system32\mshearts.exe
2013-05-18 19:17:58 —-A—- C:\WINDOWS\system32\freecell.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\usrlogon.cmd
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\tsshutdn.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\tslabels.ini
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\tskill.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\tsdiscon.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\tscon.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\shadow.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\rwinsta.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\reset.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\regini.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\rdpcfgex.dll
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\qwinsta.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\qappsrv.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\msg.exe
2013-05-18 19:17:57 —-A—- C:\WINDOWS\system32\logoff.exe
2013-05-18 19:17:56 —-A—- C:\WINDOWS\system32\msdtcprf.ini
2013-05-18 19:17:56 —-A—- C:\WINDOWS\system32\dcomcnfg.exe
2013-05-18 19:17:56 —-A—- C:\WINDOWS\system32\cdmodem.dll
2013-05-18 19:17:55 —-A—- C:\WINDOWS\system32\stclient.dll
2013-05-18 19:17:55 —-A—- C:\WINDOWS\system32\mtxlegih.dll
2013-05-18 19:17:55 —-A—- C:\WINDOWS\system32\mtxex.dll
2013-05-18 19:17:55 —-A—- C:\WINDOWS\system32\mtxdm.dll
2013-05-18 19:17:55 —-A—- C:\WINDOWS\system32\comsnap.dll
2013-05-18 19:17:55 —-A—- C:\WINDOWS\system32\comrepl.dll
2013-05-18 19:17:55 —-A—- C:\WINDOWS\system32\comaddin.dll
2013-05-18 19:17:50 —-A—- C:\WINDOWS\system32\wmimgmt.msc
2013-05-18 19:17:49 —-D—- C:\Program Files\Windows NT
2013-05-18 19:17:49 —-A—- C:\WINDOWS\system32\sndrec32.exe
2013-05-18 19:17:49 —-A—- C:\WINDOWS\system32\mplay32.exe
2013-05-18 19:17:49 —-A—- C:\WINDOWS\system32\hypertrm.dll
2013-05-18 19:17:49 —-A—- C:\WINDOWS\system32\accwiz.exe
2013-05-18 19:17:48 —-A—- C:\WINDOWS\system32\tscfgwmi.dll
2013-05-18 19:17:48 —-A—- C:\WINDOWS\system32\spider.exe
2013-05-18 19:17:48 —-A—- C:\WINDOWS\system32\mspaint.exe
2013-05-18 19:17:48 —-A—- C:\WINDOWS\system32\drivers\tdtcp.sys
2013-05-18 19:17:48 —-A—- C:\WINDOWS\system32\drivers\tdpipe.sys
2013-05-18 19:17:48 —-A—- C:\WINDOWS\system32\drivers\rdpwd.sys
2013-05-18 19:17:48 —-A—- C:\WINDOWS\system32\clipbrd.exe
2013-05-18 19:17:47 —-A—- C:\WINDOWS\system32\tscupgrd.exe
2013-05-18 19:17:47 —-A—- C:\WINDOWS\system32\sessmgr.exe
2013-05-18 19:17:47 —-A—- C:\WINDOWS\system32\remotepg.dll
2013-05-18 19:17:47 —-A—- C:\WINDOWS\system32\rdshost.exe
2013-05-18 19:17:47 —-A—- C:\WINDOWS\system32\rdsaddin.exe
2013-05-18 19:17:47 —-A—- C:\WINDOWS\system32\rdchost.dll
2013-05-18 19:17:47 —-A—- C:\WINDOWS\system32\mstscax.dll
2013-05-18 19:17:47 —-A—- C:\WINDOWS\system32\mstsc.exe
2013-05-18 19:17:46 —-D—- C:\WINDOWS\system32\MsDtc
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\termsrv.dll
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\rdpwsx.dll
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\rdpsnd.dll
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\rdpclip.exe
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\qprocess.exe
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\mtxoci.dll
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\msdtcuiu.dll
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\icaapi.dll
2013-05-18 19:17:46 —-A—- C:\WINDOWS\system32\cfgbkend.dll
2013-05-18 19:17:45 —-A—- C:\WINDOWS\system32\xolehlp.dll
2013-05-18 19:17:45 —-A—- C:\WINDOWS\system32\msdtctm.dll
2013-05-18 19:17:45 —-A—- C:\WINDOWS\system32\msdtcprx.dll
2013-05-18 19:17:45 —-A—- C:\WINDOWS\system32\msdtclog.dll
2013-05-18 19:17:45 —-A—- C:\WINDOWS\system32\msdtc.exe
2013-05-18 19:17:44 —-D—- C:\WINDOWS\system32\Com
2013-05-18 19:17:44 —-A—- C:\WINDOWS\system32\colbact.dll
2013-05-18 19:17:44 —-A—- C:\WINDOWS\system32\clbcatex.dll
2013-05-18 19:17:44 —-A—- C:\WINDOWS\system32\catsrvps.dll
2013-05-18 19:17:43 —-A—- C:\WINDOWS\system32\comuid.dll
2013-05-18 19:17:43 —-A—- C:\WINDOWS\system32\comsvcs.dll
2013-05-18 19:17:43 —-A—- C:\WINDOWS\system32\clbcatq.dll
2013-05-18 19:17:43 —-A—- C:\WINDOWS\system32\catsrvut.dll
2013-05-18 19:17:43 —-A—- C:\WINDOWS\system32\catsrv.dll
2013-05-18 19:17:38 —-A—- C:\WINDOWS\system32\servdeps.dll
2013-05-18 19:17:38 —-A—- C:\WINDOWS\system32\mmfutil.dll
2013-05-18 19:17:38 —-A—- C:\WINDOWS\system32\licwmi.dll
2013-05-18 19:17:38 —-A—- C:\WINDOWS\system32\cmprops.dll
2013-05-18 19:17:34 —-A—- C:\WINDOWS\system32\drivers\rdpdr.sys
2013-05-18 19:17:33 —-A—- C:\WINDOWS\system32\drivers\termdd.sys
======List of files/folders modified in the last 1 month======
2013-05-18 20:06:35 —-ASH—- C:\WINDOWS\fonts\desktop.ini
2013-05-18 20:06:02 —-A—- C:\WINDOWS\win.ini
2013-05-18 20:02:12 —-A—- C:\WINDOWS\system.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys
R0 viamraid;viamraid; C:\WINDOWS\system32\DRIVERS\viamraid.sys
R0 videX32;videX32; C:\WINDOWS\system32\DRIVERS\videX32.sys
R3 hidusb;Microsoft HID Class-stuurprogramma; C:\WINDOWS\system32\DRIVERS\hidusb.sys
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys
R3 mouhid;Stuurprogramma voor muis-HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
R3 USBSTOR;Stuurprogramma voor USB-massaopslag; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys
R3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\DOCUME~1\jesper\LOCALS~1\Temp\Rar$EXa0.760\kerneld.wnt
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
S2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
S3 aspnet_state;ASP.NET-statusservice; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
—————–EOF—————–
ADW cleaner en MBAM hadden ook beide niets gevonden.