s@té
Legacy Member
Mijn pc is ongelooflijk traag. Surfen op internet, meerdere tabbladen openen, alle handelingen gaan onwaarschijnlijk traag, het is gewoonweg frustrerend. Ik hoop dat er mij iemand via deze weg kan helpen. Voor internet pagina's te openen moet ik ook vaak een CTRL + F5 doen om effectief de pagina te laden. Mijn anti-virus is BitDefender, heb de indruk dat die ook meer fout dan goed doet.
Heb spybot laten lopen, die vond 2 zaken, die zijn verwijderd nu.
Hieronder het malware logje:
Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download
Databaseversie: 8090
Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421
5/11/2011 15:14:05
mbam-log-2011-11-05 (15-14-05).txt
Scantype: Volledige scan (C:\|)
Objecten gescand: 298169
Verstreken tijd: 20 minuut/minuten, 55 seconde
Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0
Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registersleutels geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registerwaarden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Bestanden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
DDS logje:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Gilles at 15:23:19 on 2011-11-05
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.12287.9557 [GMT 1:00]
.
AV: Bitdefender Antivirus *Enabled/Updated* {50909708-FF80-02AF-F814-B28405891E92}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: IObit Malware Fighter *Disabled/Outdated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Bitdefender Antispyware *Enabled/Updated* {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}
FW: Bitdefender Firewall *Disabled* {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskeng.exe
C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe
C:\Windows\Explorer.EXE
C:\Program Files\Bitdefender\Bitdefender 2012\pchooklaunch64.exe
C:\Program Files\Bitdefender\Bitdefender 2012\Antispam32\pchooklaunch32.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
mStart Page = about:blank
BHO: IDMIEHlprObj Class: {0055c089-8582-441b-a0bf-17b458c2a3a8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
uRun: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
uRun: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: &Verzenden naar OneNote - C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Download alle links met IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
IE: Download FLV video inhoud met IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm
IE: Download met IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
IE: E&xporteren naar Microsoft Excel - C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
TCP: DhcpNameServer = 195.130.130.2 195.130.131.2
TCP: Interfaces\{0D38D995-B645-418F-97E8-F72E8E6E4251} : DhcpNameServer = 195.130.130.2 195.130.131.2
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
{0055C089-8582-441B-A0BF-17B458C2A3A8}
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
{53707962-6F74-2D53-2644-206D7942484F}
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}
{B4F3A835-0E21-4959-BA22-42B3008E02FF}
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRunOnce-x64: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Gilles\AppData\Roaming\Mozilla\Firefox\Profiles\bf1xr2m4.default\
FF - prefs.js: browser.startup.homepage - Zita - het Web van Z tot A - Nieuws | Entertainment | Lifestyle | Fun
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
FF - plugin: C:\Users\Gilles\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R0 avc3;avc3;C:\Windows\system32\DRIVERS\avc3.sys --> C:\Windows\system32\DRIVERS\avc3.sys [?]
R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [2011-3-1 89680]
R1 bdfwfpf;bdfwfpf;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2011-3-1 102992]
R1 BDVEDISK;BDVEDISK;C:\Windows\system32\DRIVERS\bdvedisk.sys --> C:\Windows\system32\DRIVERS\bdvedisk.sys [?]
R2 AdvancedSystemCareService;Advanced SystemCare Service;C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-11-3 328536]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-9-8 361984]
R2 AODDriver4.01;AODDriver4.01;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2011-6-24 55424]
R2 IDMWFP;IDMWFP;C:\Windows\system32\DRIVERS\idmwfp.sys --> C:\Windows\system32\DRIVERS\idmwfp.sys [?]
R2 IMFservice;IMF Service;C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2011-11-3 820568]
R2 LVPrcS64;Process Monitor;C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe [2009-10-7 191000]
R2 SafeBox;SafeBox;C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe [2011-11-4 74336]
R2 UPDATESRV;BitDefender Desktop Update Service;C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe [2011-7-22 62512]
R3 amdiox64;AMD IO Driver;C:\Windows\system32\DRIVERS\amdiox64.sys --> C:\Windows\system32\DRIVERS\amdiox64.sys [?]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?]
R3 avchv;avchv Function Driver;C:\Windows\system32\DRIVERS\avchv.sys --> C:\Windows\system32\DRIVERS\avchv.sys [?]
R3 avckf;avckf;C:\Windows\system32\DRIVERS\avckf.sys --> C:\Windows\system32\DRIVERS\avckf.sys [?]
R3 LVPr2M64;Logitech LVPr2M64 Driver;C:\Windows\system32\DRIVERS\LVPr2M64.sys --> C:\Windows\system32\DRIVERS\LVPr2M64.sys [?]
R3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\system32\DRIVERS\lvrs64.sys --> C:\Windows\system32\DRIVERS\lvrs64.sys [?]
R3 LVUVC64;Logitech QuickCam E3500(UVC);C:\Windows\system32\DRIVERS\lvuvc64.sys --> C:\Windows\system32\DRIVERS\lvuvc64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys --> C:\Windows\system32\DRIVERS\usbfilter.sys [?]
S2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-11-5 366152]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-3-25 51456888]
S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 RegFilter;RegFilter;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys [2011-11-3 33184]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 Update Server;BitDefender Update Server v2;C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe [2011-7-22 466736]
S3 UrlFilter;UrlFilter;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys [2011-11-3 21872]
S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 FileMonitor;FileMonitor;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2011-11-3 20336]
SUnknown bdsandbox;bdsandbox; [x]
.
=============== Created Last 30 ================
.
2011-11-05 13:35:25 -------- d-----w- C:\Users\Gilles\AppData\Roaming\Malwarebytes
2011-11-05 13:35:20 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
2011-11-05 13:35:20 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy
2011-11-05 13:35:16 -------- d-----w- C:\ProgramData\Malwarebytes
2011-11-05 13:35:13 25416 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-11-05 13:35:13 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-11-05 13:16:48 -------- d-----w- C:\f70654e67c62e87c705f8d7afb7ecb35
2011-11-04 16:44:43 -------- d-----w- C:\Windows\SysWow64\wbem\en-US
2011-11-04 16:44:41 -------- d-----w- C:\Windows\System32\wbem\en-US
2011-11-04 16:44:19 -------- d-----w- C:\Windows\pss
2011-11-04 16:12:59 -------- d-----w- C:\Program Files (x86)\Smart File Advisor
2011-11-04 16:12:58 -------- d-----w- C:\Program Files (x86)\IsoBuster
2011-11-04 15:28:19 -------- d-----w- C:\Program Files (x86)\DVD Shrink
2011-11-04 15:15:05 -------- d-----w- C:\Users\Gilles\AppData\Local\LogiShrd
2011-11-04 15:05:11 -------- d-----w- C:\Windows\System32\SPReview
2011-11-04 15:03:45 -------- d-----w- C:\Windows\System32\EventProviders
2011-11-04 15:01:03 1139200 ----a-w- C:\Windows\System32\FntCache.dll
2011-11-04 15:01:02 902656 ----a-w- C:\Windows\System32\d2d1.dll
2011-11-04 15:01:02 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll
2011-11-04 15:01:02 1544192 ----a-w- C:\Windows\System32\DWrite.dll
2011-11-04 15:01:02 1076736 ----a-w- C:\Windows\SysWow64\DWrite.dll
2011-11-04 14:24:09 -------- d-----w- C:\Users\Gilles\AppData\Local\gilles.ophalvens
2011-11-04 14:24:08 -------- d-----w- C:\Users\Gilles\AppData\Local\SafeBox
2011-11-04 14:07:46 79952 ----a-w- C:\Windows\System32\drivers\bdsandbox.sys
2011-11-04 14:07:46 553280 ----a-w- C:\Windows\System32\drivers\avckf.sys
2011-11-04 14:07:39 674904 ----a-w- C:\Windows\System32\drivers\avc3.sys
2011-11-04 14:06:52 165772 ----a-w- C:\ProgramData\1320415434.bdinstall.bin
2011-11-04 14:05:24 -------- d-----w- C:\Users\Gilles\AppData\Roaming\Bitdefender
2011-11-04 14:05:18 -------- d-----w- C:\ProgramData\Bitdefender
2011-11-04 14:04:16 -------- d-----w- C:\Program Files\Bitdefender
2011-11-04 14:04:14 -------- d-----w- C:\Users\Gilles\AppData\Roaming\QuickScan
2011-11-04 14:04:07 431176 ----a-w- C:\Windows\System32\drivers\bdfsfltr.sys
2011-11-04 14:04:07 288600 ----a-w- C:\Windows\System32\drivers\trufos.sys
2011-11-04 14:03:46 -------- d-----w- C:\Program Files\Common Files\Bitdefender
2011-11-04 14:03:45 -------- d-----w- C:\Program Files (x86)\Common Files\Bitdefender
2011-11-04 12:47:01 48976 ----a-w- C:\Windows\System32\netfxperf.dll
2011-11-04 12:47:01 1942856 ----a-w- C:\Windows\System32\dfshim.dll
2011-11-04 12:45:59 551936 ----a-w- C:\Windows\System32\localsec.dll
2011-11-04 12:44:57 399872 ----a-w- C:\Windows\System32\dpx.dll
2011-11-04 12:44:57 189952 ----a-w- C:\Windows\SysWow64\wdscore.dll
2011-11-04 12:44:54 189952 ----a-w- C:\Windows\SysWow64\sqmapi.dll
2011-11-04 12:44:53 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll
2011-11-04 12:44:53 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll
2011-11-04 12:44:53 189952 ----a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll
2011-11-04 12:44:36 529408 ----a-w- C:\Windows\System32\wbemcomn.dll
2011-11-04 12:44:36 244736 ----a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll
2011-11-04 12:44:35 244736 ----a-w- C:\Windows\System32\sqmapi.dll
2011-11-04 12:25:30 8570192 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2011-11-04 12:25:25 8570192 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{63CF2705-DC87-49EC-B28D-F23BADFB78AC}\mpengine.dll
2011-11-03 19:28:36 -------- d-----r- C:\Program Files (x86)\Skype
2011-11-03 19:20:23 -------- d-----w- C:\Windows\SysWow64\Wat
2011-11-03 19:20:23 -------- d-----w- C:\Windows\System32\Wat
2011-11-03 19:12:46 294912 ----a-w- C:\Windows\System32\browserchoice.exe
2011-11-03 18:25:52 -------- d-----w- C:\ProgramData\IObit
2011-11-03 18:25:25 31744 ----a-w- C:\Windows\System32\drivers\RimSerial_AMD64.sys
2011-11-03 18:24:33 -------- d-----w- C:\ProgramData\Research In Motion
2011-11-03 18:24:20 -------- d-----w- C:\Program Files (x86)\Research In Motion
2011-11-03 18:24:20 -------- d-----w- C:\Program Files (x86)\Common Files\Research In Motion
2011-11-03 18:18:05 -------- d-----w- C:\Program Files (x86)\VideoLAN
2011-11-03 18:06:19 -------- d-----w- C:\Program Files\Microsoft Synchronization Services
2011-11-03 18:05:58 -------- d-----w- C:\Windows\PCHEALTH
2011-11-03 18:05:58 -------- d-----w- C:\Program Files\Microsoft SQL Server Compact Edition
2011-11-03 18:05:18 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-03 18:03:59 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-11-03 18:02:34 -------- d-----w- C:\Program Files\Microsoft Analysis Services
2011-11-03 18:02:34 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services
2011-11-03 18:01:20 -------- d-----w- C:\Users\Gilles\AppData\Local\Microsoft Help
2011-11-03 17:56:01 -------- d-----w- C:\Users\Gilles\AppData\Roaming\IDM
2011-11-03 17:56:00 -------- d-----w- C:\Users\Gilles\AppData\Roaming\DMCache
2011-11-03 17:55:57 -------- d-----w- C:\Program Files (x86)\Internet Download Manager
2011-11-03 17:54:36 -------- d-----w- C:\Users\Gilles\AppData\Roaming\IObit
2011-11-03 17:54:35 -------- d-----w- C:\Program Files (x86)\IObit
2011-11-03 17:07:14 -------- d-----w- C:\Users\Gilles\AppData\Local\AMD
2011-11-03 17:07:04 -------- d-----w- C:\Users\Gilles\AppData\Local\ATI
2011-11-03 17:06:46 0 ----a-w- C:\Windows\ativpsrm.bin
2011-11-03 17:05:20 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2011-11-03 17:05:20 2048 ----a-w- C:\Windows\System32\tzres.dll
2011-11-03 17:05:20 -------- d-----w- C:\Users\Gilles\AppData\Local\Mozilla
2011-11-03 17:05:12 -------- d-----w- C:\Program Files (x86)\AMD APP
2011-11-03 17:03:58 -------- d-----w- C:\Program Files (x86)\ATI Technologies
2011-11-03 17:03:41 404480 ----a-w- C:\Windows\System32\umpnpmgr.dll
2011-11-03 17:03:41 207872 ----a-w- C:\Windows\System32\cfgmgr32.dll
2011-11-03 17:03:40 64512 ----a-w- C:\Windows\SysWow64\devobj.dll
2011-11-03 17:03:40 44544 ----a-w- C:\Windows\SysWow64\devrtl.dll
2011-11-03 17:03:40 252928 ----a-w- C:\Windows\SysWow64\drvinst.exe
2011-11-03 17:03:40 145920 ----a-w- C:\Windows\SysWow64\cfgmgr32.dll
2011-11-03 17:03:36 142336 ----a-w- C:\Windows\System32\poqexec.exe
2011-11-03 17:03:36 123904 ----a-w- C:\Windows\SysWow64\poqexec.exe
2011-11-03 17:03:13 -------- d-----w- C:\ATI
2011-11-03 17:02:21 2871808 ----a-w- C:\Windows\explorer.exe
2011-11-03 17:02:21 2616320 ----a-w- C:\Windows\SysWow64\explorer.exe
2011-11-03 17:02:20 961024 ----a-w- C:\Windows\System32\CPFilters.dll
2011-11-03 17:02:20 723968 ----a-w- C:\Windows\System32\EncDec.dll
2011-11-03 17:02:20 642048 ----a-w- C:\Windows\SysWow64\CPFilters.dll
2011-11-03 17:02:20 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2011-11-03 17:02:20 1118720 ----a-w- C:\Windows\System32\sbe.dll
2011-11-03 17:02:19 850944 ----a-w- C:\Windows\SysWow64\sbe.dll
2011-11-03 17:02:19 259072 ----a-w- C:\Windows\System32\mpg2splt.ax
2011-11-03 17:02:19 199680 ----a-w- C:\Windows\SysWow64\mpg2splt.ax
2011-11-03 16:43:39 3138048 ----a-w- C:\Windows\System32\win32k.sys
2011-11-03 16:43:21 476160 ----a-w- C:\Windows\System32\XpsGdiConverter.dll
2011-11-03 16:43:21 288256 ----a-w- C:\Windows\SysWow64\XpsGdiConverter.dll
2011-11-03 16:42:57 870912 ----a-w- C:\Windows\SysWow64\XpsPrint.dll
2011-11-03 16:42:57 1465344 ----a-w- C:\Windows\System32\XpsPrint.dll
2011-11-03 16:42:54 1395712 ----a-w- C:\Windows\System32\mfc42.dll
2011-11-03 16:42:54 1359872 ----a-w- C:\Windows\System32\mfc42u.dll
2011-11-03 16:42:54 1137664 ----a-w- C:\Windows\SysWow64\mfc42.dll
2011-11-03 16:42:53 1164288 ----a-w- C:\Windows\SysWow64\mfc42u.dll
2011-11-03 16:41:05 70656 ----a-w- C:\Windows\SysWow64\fontsub.dll
2011-11-03 16:41:05 46080 ----a-w- C:\Windows\System32\atmlib.dll
2011-11-03 16:41:05 367616 ----a-w- C:\Windows\System32\atmfd.dll
2011-11-03 16:41:05 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2011-11-03 16:41:05 294912 ----a-w- C:\Windows\SysWow64\atmfd.dll
2011-11-03 16:41:05 100864 ----a-w- C:\Windows\System32\fontsub.dll
2011-11-03 16:40:35 27520 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2011-11-03 16:39:53 30208 ----a-w- C:\Windows\System32\dnscacheugc.exe
2011-11-03 16:39:53 28672 ----a-w- C:\Windows\SysWow64\dnscacheugc.exe
2011-11-03 16:39:53 183296 ----a-w- C:\Windows\System32\dnsrslvr.dll
2011-11-03 16:31:52 421888 ----a-w- C:\Windows\System32\KernelBase.dll
2011-11-03 16:30:47 5561216 ----a-w- C:\Windows\System32\ntoskrnl.exe
2011-11-03 16:30:46 3967872 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2011-11-03 16:30:46 3912576 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2011-11-03 16:29:29 -------- d-----w- C:\Users\Gilles\AppData\Local\Google
2011-11-03 16:27:15 -------- d-----w- C:\Users\Gilles\AppData\Local\Apps
2011-11-03 16:27:11 -------- d-----w- C:\Users\Gilles\AppData\Local\Deployment
2011-11-03 16:26:30 270720 ------w- C:\Windows\System32\MpSigStub.exe
2011-11-03 16:13:58 -------- d-----w- C:\Program Files (x86)\NEC Electronics
2011-11-03 16:11:00 38456 ----a-w- C:\Windows\System32\drivers\usbfilter.sys
2011-11-03 16:11:00 -------- d-----w- C:\Program Files (x86)\AMD
2011-11-03 16:10:47 16440 ----a-w- C:\Windows\System32\drivers\AtiPcie.sys
2011-11-03 16:10:33 116736 ----a-w- C:\Windows\System32\drivers\AtiHdmi.sys
2011-11-03 16:07:45 -------- d-----w- C:\Users\Gilles\AppData\Local\Downloaded Installations
2011-11-03 16:07:28 -------- d-----w- C:\Program Files\ATI Technologies
2011-11-03 16:07:25 -------- d-----w- C:\Program Files\ATI
2011-11-03 16:05:01 74272 ----a-w- C:\Windows\System32\RtNicProp64.dll
2011-11-03 16:05:01 346144 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2011-11-03 16:05:01 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2011-11-03 16:04:38 -------- d-----w- C:\Program Files (x86)\Realtek
2011-11-02 19:57:18 -------- d-----w- C:\Users\Gilles\AppData\Local\Adobe
2011-11-02 19:55:30 -------- d-sh--w- C:\Windows\Installer
2011-11-02 19:55:04 -------- d-----w- C:\Users\Gilles\AppData\Local\Diagnostics
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Sjablonen
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Menu Start
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Favorieten
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Documenten
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Bureaublad
2011-11-02 19:49:58 -------- d-sh--w- C:\Recovery
2011-11-02 18:40:32 -------- d-----w- C:\Windows\Panther
2011-11-02 18:40:18 -------- d-sh--w- C:\Boot
.
==================== Find3M ====================
.
2011-11-04 16:54:56 175616 ----a-w- C:\Windows\System32\msclmd.dll
2011-11-04 16:54:56 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll
2011-09-14 10:47:42 60416 ----a-w- C:\Windows\System32\OVDecode64.dll
2011-09-14 10:47:40 53760 ----a-w- C:\Windows\SysWow64\OVDecode.dll
2011-09-14 10:47:22 51200 ----a-w- C:\Windows\System32\OpenCL.dll
2011-09-14 10:47:18 43520 ----a-w- C:\Windows\SysWow64\OpenCL.dll
2011-09-14 10:47:10 16652288 ----a-w- C:\Windows\System32\amdocl64.dll
2011-09-14 10:46:58 13625856 ----a-w- C:\Windows\SysWow64\amdocl.dll
2011-09-14 10:38:30 44032 ----a-w- C:\Windows\System32\amdoclcl64.dll
2011-09-14 10:38:28 37376 ----a-w- C:\Windows\SysWow64\amdoclcl.dll
2011-09-08 18:27:22 10203648 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
2011-09-08 17:59:44 24229376 ----a-w- C:\Windows\System32\atio6axx.dll
2011-09-08 17:39:44 18534912 ----a-w- C:\Windows\SysWow64\atioglxx.dll
2011-09-08 17:34:20 151552 ----a-w- C:\Windows\System32\atiapfxx.exe
2011-09-08 17:34:10 732672 ----a-w- C:\Windows\SysWow64\aticfx32.dll
2011-09-08 17:32:58 862720 ----a-w- C:\Windows\System32\aticfx64.dll
2011-09-08 17:30:38 466944 ----a-w- C:\Windows\System32\ATIDEMGX.dll
2011-09-08 17:30:26 486912 ----a-w- C:\Windows\System32\atieclxx.exe
2011-09-08 17:29:56 204288 ----a-w- C:\Windows\System32\atiesrxx.exe
2011-09-08 17:28:54 120320 ----a-w- C:\Windows\System32\atitmm64.dll
2011-09-08 17:28:38 423424 ----a-w- C:\Windows\System32\atipdl64.dll
2011-09-08 17:28:32 356352 ----a-w- C:\Windows\SysWow64\atipdlxx.dll
2011-09-08 17:28:22 278528 ----a-w- C:\Windows\SysWow64\Oemdspif.dll
2011-09-08 17:28:18 21504 ----a-w- C:\Windows\System32\atimuixx.dll
2011-09-08 17:28:14 59392 ----a-w- C:\Windows\System32\atiedu64.dll
2011-09-08 17:28:10 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
2011-09-08 17:24:38 4204032 ----a-w- C:\Windows\SysWow64\atidxx32.dll
2011-09-08 17:18:56 1113088 ----a-w- C:\Windows\System32\atiumd6v.dll
2011-09-08 17:18:22 1828864 ----a-w- C:\Windows\SysWow64\atiumdmv.dll
2011-09-08 17:18:08 3888640 ----a-w- C:\Windows\System32\atiumd6a.dll
2011-09-08 17:16:00 4944896 ----a-w- C:\Windows\System32\atidxx64.dll
2011-09-08 17:09:42 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
2011-09-08 17:09:40 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
2011-09-08 17:09:30 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
2011-09-08 17:09:28 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
2011-09-08 17:09:18 8723456 ----a-w- C:\Windows\System32\aticaldd64.dll
2011-09-08 17:08:24 4064768 ----a-w- C:\Windows\SysWow64\atiumdva.dll
2011-09-08 17:05:52 7331840 ----a-w- C:\Windows\SysWow64\aticaldd.dll
2011-09-08 17:05:44 4289024 ----a-w- C:\Windows\SysWow64\atiumdag.dll
2011-09-08 17:00:02 5428736 ----a-w- C:\Windows\System32\atiumd64.dll
2011-09-08 16:59:48 58880 ----a-w- C:\Windows\System32\coinst.dll
2011-09-08 16:53:20 381952 ----a-w- C:\Windows\System32\atiadlxx.dll
2011-09-08 16:53:12 270336 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
2011-09-08 16:52:58 15360 ----a-w- C:\Windows\System32\atig6pxx.dll
2011-09-08 16:52:56 13312 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
2011-09-08 16:52:56 13312 ----a-w- C:\Windows\System32\atiglpxx.dll
2011-09-08 16:52:54 39936 ----a-w- C:\Windows\System32\atig6txx.dll
2011-09-08 16:52:46 32768 ----a-w- C:\Windows\SysWow64\atigktxx.dll
2011-09-08 16:52:40 310784 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
2011-09-08 16:52:00 40960 ----a-w- C:\Windows\System32\atiuxp64.dll
2011-09-08 16:51:54 31744 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
2011-09-08 16:51:50 38912 ----a-w- C:\Windows\System32\atiu9p64.dll
2011-09-08 16:51:44 29184 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
2011-09-08 16:51:12 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
2011-09-08 16:51:02 54784 ----a-w- C:\Windows\System32\atimpc64.dll
2011-09-08 16:51:02 54784 ----a-w- C:\Windows\System32\amdpcom64.dll
2011-09-08 16:50:54 53760 ----a-w- C:\Windows\SysWow64\atimpc32.dll
2011-09-08 16:50:54 53760 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
2011-08-27 05:37:49 861696 ----a-w- C:\Windows\System32\oleaut32.dll
2011-08-27 05:37:48 331776 ----a-w- C:\Windows\System32\oleacc.dll
2011-08-27 04:26:27 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2011-08-27 04:26:27 233472 ----a-w- C:\Windows\SysWow64\oleacc.dll
2011-08-17 05:26:46 613888 ----a-w- C:\Windows\System32\psisdecd.dll
2011-08-17 05:25:08 108032 ----a-w- C:\Windows\System32\psisrndr.ax
2011-08-17 04:24:12 465408 ----a-w- C:\Windows\SysWow64\psisdecd.dll
2011-08-17 04:19:27 75776 ----a-w- C:\Windows\SysWow64\psisrndr.ax
.
============= FINISH: 15:23:58,95 ===============
Heb spybot laten lopen, die vond 2 zaken, die zijn verwijderd nu.
Hieronder het malware logje:
Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download
Databaseversie: 8090
Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421
5/11/2011 15:14:05
mbam-log-2011-11-05 (15-14-05).txt
Scantype: Volledige scan (C:\|)
Objecten gescand: 298169
Verstreken tijd: 20 minuut/minuten, 55 seconde

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0
Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registersleutels geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registerwaarden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Bestanden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
DDS logje:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Gilles at 15:23:19 on 2011-11-05
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.12287.9557 [GMT 1:00]
.
AV: Bitdefender Antivirus *Enabled/Updated* {50909708-FF80-02AF-F814-B28405891E92}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: IObit Malware Fighter *Disabled/Outdated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Bitdefender Antispyware *Enabled/Updated* {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}
FW: Bitdefender Firewall *Disabled* {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskeng.exe
C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe
C:\Windows\Explorer.EXE
C:\Program Files\Bitdefender\Bitdefender 2012\pchooklaunch64.exe
C:\Program Files\Bitdefender\Bitdefender 2012\Antispam32\pchooklaunch32.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
mStart Page = about:blank
BHO: IDMIEHlprObj Class: {0055c089-8582-441b-a0bf-17b458c2a3a8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
uRun: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
uRun: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: &Verzenden naar OneNote - C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Download alle links met IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
IE: Download FLV video inhoud met IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm
IE: Download met IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
IE: E&xporteren naar Microsoft Excel - C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
TCP: DhcpNameServer = 195.130.130.2 195.130.131.2
TCP: Interfaces\{0D38D995-B645-418F-97E8-F72E8E6E4251} : DhcpNameServer = 195.130.130.2 195.130.131.2
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
{0055C089-8582-441B-A0BF-17B458C2A3A8}
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
{53707962-6F74-2D53-2644-206D7942484F}
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}
{B4F3A835-0E21-4959-BA22-42B3008E02FF}
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRunOnce-x64: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Gilles\AppData\Roaming\Mozilla\Firefox\Profiles\bf1xr2m4.default\
FF - prefs.js: browser.startup.homepage - Zita - het Web van Z tot A - Nieuws | Entertainment | Lifestyle | Fun
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
FF - plugin: C:\Users\Gilles\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R0 avc3;avc3;C:\Windows\system32\DRIVERS\avc3.sys --> C:\Windows\system32\DRIVERS\avc3.sys [?]
R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [2011-3-1 89680]
R1 bdfwfpf;bdfwfpf;C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2011-3-1 102992]
R1 BDVEDISK;BDVEDISK;C:\Windows\system32\DRIVERS\bdvedisk.sys --> C:\Windows\system32\DRIVERS\bdvedisk.sys [?]
R2 AdvancedSystemCareService;Advanced SystemCare Service;C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-11-3 328536]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-9-8 361984]
R2 AODDriver4.01;AODDriver4.01;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2011-6-24 55424]
R2 IDMWFP;IDMWFP;C:\Windows\system32\DRIVERS\idmwfp.sys --> C:\Windows\system32\DRIVERS\idmwfp.sys [?]
R2 IMFservice;IMF Service;C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2011-11-3 820568]
R2 LVPrcS64;Process Monitor;C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe [2009-10-7 191000]
R2 SafeBox;SafeBox;C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe [2011-11-4 74336]
R2 UPDATESRV;BitDefender Desktop Update Service;C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe [2011-7-22 62512]
R3 amdiox64;AMD IO Driver;C:\Windows\system32\DRIVERS\amdiox64.sys --> C:\Windows\system32\DRIVERS\amdiox64.sys [?]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?]
R3 avchv;avchv Function Driver;C:\Windows\system32\DRIVERS\avchv.sys --> C:\Windows\system32\DRIVERS\avchv.sys [?]
R3 avckf;avckf;C:\Windows\system32\DRIVERS\avckf.sys --> C:\Windows\system32\DRIVERS\avckf.sys [?]
R3 LVPr2M64;Logitech LVPr2M64 Driver;C:\Windows\system32\DRIVERS\LVPr2M64.sys --> C:\Windows\system32\DRIVERS\LVPr2M64.sys [?]
R3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\system32\DRIVERS\lvrs64.sys --> C:\Windows\system32\DRIVERS\lvrs64.sys [?]
R3 LVUVC64;Logitech QuickCam E3500(UVC);C:\Windows\system32\DRIVERS\lvuvc64.sys --> C:\Windows\system32\DRIVERS\lvuvc64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys --> C:\Windows\system32\DRIVERS\usbfilter.sys [?]
S2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-11-5 366152]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-3-25 51456888]
S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 RegFilter;RegFilter;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys [2011-11-3 33184]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 Update Server;BitDefender Update Server v2;C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe [2011-7-22 466736]
S3 UrlFilter;UrlFilter;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys [2011-11-3 21872]
S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 FileMonitor;FileMonitor;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2011-11-3 20336]
SUnknown bdsandbox;bdsandbox; [x]
.
=============== Created Last 30 ================
.
2011-11-05 13:35:25 -------- d-----w- C:\Users\Gilles\AppData\Roaming\Malwarebytes
2011-11-05 13:35:20 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
2011-11-05 13:35:20 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy
2011-11-05 13:35:16 -------- d-----w- C:\ProgramData\Malwarebytes
2011-11-05 13:35:13 25416 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-11-05 13:35:13 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-11-05 13:16:48 -------- d-----w- C:\f70654e67c62e87c705f8d7afb7ecb35
2011-11-04 16:44:43 -------- d-----w- C:\Windows\SysWow64\wbem\en-US
2011-11-04 16:44:41 -------- d-----w- C:\Windows\System32\wbem\en-US
2011-11-04 16:44:19 -------- d-----w- C:\Windows\pss
2011-11-04 16:12:59 -------- d-----w- C:\Program Files (x86)\Smart File Advisor
2011-11-04 16:12:58 -------- d-----w- C:\Program Files (x86)\IsoBuster
2011-11-04 15:28:19 -------- d-----w- C:\Program Files (x86)\DVD Shrink
2011-11-04 15:15:05 -------- d-----w- C:\Users\Gilles\AppData\Local\LogiShrd
2011-11-04 15:05:11 -------- d-----w- C:\Windows\System32\SPReview
2011-11-04 15:03:45 -------- d-----w- C:\Windows\System32\EventProviders
2011-11-04 15:01:03 1139200 ----a-w- C:\Windows\System32\FntCache.dll
2011-11-04 15:01:02 902656 ----a-w- C:\Windows\System32\d2d1.dll
2011-11-04 15:01:02 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll
2011-11-04 15:01:02 1544192 ----a-w- C:\Windows\System32\DWrite.dll
2011-11-04 15:01:02 1076736 ----a-w- C:\Windows\SysWow64\DWrite.dll
2011-11-04 14:24:09 -------- d-----w- C:\Users\Gilles\AppData\Local\gilles.ophalvens
2011-11-04 14:24:08 -------- d-----w- C:\Users\Gilles\AppData\Local\SafeBox
2011-11-04 14:07:46 79952 ----a-w- C:\Windows\System32\drivers\bdsandbox.sys
2011-11-04 14:07:46 553280 ----a-w- C:\Windows\System32\drivers\avckf.sys
2011-11-04 14:07:39 674904 ----a-w- C:\Windows\System32\drivers\avc3.sys
2011-11-04 14:06:52 165772 ----a-w- C:\ProgramData\1320415434.bdinstall.bin
2011-11-04 14:05:24 -------- d-----w- C:\Users\Gilles\AppData\Roaming\Bitdefender
2011-11-04 14:05:18 -------- d-----w- C:\ProgramData\Bitdefender
2011-11-04 14:04:16 -------- d-----w- C:\Program Files\Bitdefender
2011-11-04 14:04:14 -------- d-----w- C:\Users\Gilles\AppData\Roaming\QuickScan
2011-11-04 14:04:07 431176 ----a-w- C:\Windows\System32\drivers\bdfsfltr.sys
2011-11-04 14:04:07 288600 ----a-w- C:\Windows\System32\drivers\trufos.sys
2011-11-04 14:03:46 -------- d-----w- C:\Program Files\Common Files\Bitdefender
2011-11-04 14:03:45 -------- d-----w- C:\Program Files (x86)\Common Files\Bitdefender
2011-11-04 12:47:01 48976 ----a-w- C:\Windows\System32\netfxperf.dll
2011-11-04 12:47:01 1942856 ----a-w- C:\Windows\System32\dfshim.dll
2011-11-04 12:45:59 551936 ----a-w- C:\Windows\System32\localsec.dll
2011-11-04 12:44:57 399872 ----a-w- C:\Windows\System32\dpx.dll
2011-11-04 12:44:57 189952 ----a-w- C:\Windows\SysWow64\wdscore.dll
2011-11-04 12:44:54 189952 ----a-w- C:\Windows\SysWow64\sqmapi.dll
2011-11-04 12:44:53 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll
2011-11-04 12:44:53 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll
2011-11-04 12:44:53 189952 ----a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll
2011-11-04 12:44:36 529408 ----a-w- C:\Windows\System32\wbemcomn.dll
2011-11-04 12:44:36 244736 ----a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll
2011-11-04 12:44:35 244736 ----a-w- C:\Windows\System32\sqmapi.dll
2011-11-04 12:25:30 8570192 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2011-11-04 12:25:25 8570192 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{63CF2705-DC87-49EC-B28D-F23BADFB78AC}\mpengine.dll
2011-11-03 19:28:36 -------- d-----r- C:\Program Files (x86)\Skype
2011-11-03 19:20:23 -------- d-----w- C:\Windows\SysWow64\Wat
2011-11-03 19:20:23 -------- d-----w- C:\Windows\System32\Wat
2011-11-03 19:12:46 294912 ----a-w- C:\Windows\System32\browserchoice.exe
2011-11-03 18:25:52 -------- d-----w- C:\ProgramData\IObit
2011-11-03 18:25:25 31744 ----a-w- C:\Windows\System32\drivers\RimSerial_AMD64.sys
2011-11-03 18:24:33 -------- d-----w- C:\ProgramData\Research In Motion
2011-11-03 18:24:20 -------- d-----w- C:\Program Files (x86)\Research In Motion
2011-11-03 18:24:20 -------- d-----w- C:\Program Files (x86)\Common Files\Research In Motion
2011-11-03 18:18:05 -------- d-----w- C:\Program Files (x86)\VideoLAN
2011-11-03 18:06:19 -------- d-----w- C:\Program Files\Microsoft Synchronization Services
2011-11-03 18:05:58 -------- d-----w- C:\Windows\PCHEALTH
2011-11-03 18:05:58 -------- d-----w- C:\Program Files\Microsoft SQL Server Compact Edition
2011-11-03 18:05:18 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-03 18:03:59 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-11-03 18:02:34 -------- d-----w- C:\Program Files\Microsoft Analysis Services
2011-11-03 18:02:34 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services
2011-11-03 18:01:20 -------- d-----w- C:\Users\Gilles\AppData\Local\Microsoft Help
2011-11-03 17:56:01 -------- d-----w- C:\Users\Gilles\AppData\Roaming\IDM
2011-11-03 17:56:00 -------- d-----w- C:\Users\Gilles\AppData\Roaming\DMCache
2011-11-03 17:55:57 -------- d-----w- C:\Program Files (x86)\Internet Download Manager
2011-11-03 17:54:36 -------- d-----w- C:\Users\Gilles\AppData\Roaming\IObit
2011-11-03 17:54:35 -------- d-----w- C:\Program Files (x86)\IObit
2011-11-03 17:07:14 -------- d-----w- C:\Users\Gilles\AppData\Local\AMD
2011-11-03 17:07:04 -------- d-----w- C:\Users\Gilles\AppData\Local\ATI
2011-11-03 17:06:46 0 ----a-w- C:\Windows\ativpsrm.bin
2011-11-03 17:05:20 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2011-11-03 17:05:20 2048 ----a-w- C:\Windows\System32\tzres.dll
2011-11-03 17:05:20 -------- d-----w- C:\Users\Gilles\AppData\Local\Mozilla
2011-11-03 17:05:12 -------- d-----w- C:\Program Files (x86)\AMD APP
2011-11-03 17:03:58 -------- d-----w- C:\Program Files (x86)\ATI Technologies
2011-11-03 17:03:41 404480 ----a-w- C:\Windows\System32\umpnpmgr.dll
2011-11-03 17:03:41 207872 ----a-w- C:\Windows\System32\cfgmgr32.dll
2011-11-03 17:03:40 64512 ----a-w- C:\Windows\SysWow64\devobj.dll
2011-11-03 17:03:40 44544 ----a-w- C:\Windows\SysWow64\devrtl.dll
2011-11-03 17:03:40 252928 ----a-w- C:\Windows\SysWow64\drvinst.exe
2011-11-03 17:03:40 145920 ----a-w- C:\Windows\SysWow64\cfgmgr32.dll
2011-11-03 17:03:36 142336 ----a-w- C:\Windows\System32\poqexec.exe
2011-11-03 17:03:36 123904 ----a-w- C:\Windows\SysWow64\poqexec.exe
2011-11-03 17:03:13 -------- d-----w- C:\ATI
2011-11-03 17:02:21 2871808 ----a-w- C:\Windows\explorer.exe
2011-11-03 17:02:21 2616320 ----a-w- C:\Windows\SysWow64\explorer.exe
2011-11-03 17:02:20 961024 ----a-w- C:\Windows\System32\CPFilters.dll
2011-11-03 17:02:20 723968 ----a-w- C:\Windows\System32\EncDec.dll
2011-11-03 17:02:20 642048 ----a-w- C:\Windows\SysWow64\CPFilters.dll
2011-11-03 17:02:20 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2011-11-03 17:02:20 1118720 ----a-w- C:\Windows\System32\sbe.dll
2011-11-03 17:02:19 850944 ----a-w- C:\Windows\SysWow64\sbe.dll
2011-11-03 17:02:19 259072 ----a-w- C:\Windows\System32\mpg2splt.ax
2011-11-03 17:02:19 199680 ----a-w- C:\Windows\SysWow64\mpg2splt.ax
2011-11-03 16:43:39 3138048 ----a-w- C:\Windows\System32\win32k.sys
2011-11-03 16:43:21 476160 ----a-w- C:\Windows\System32\XpsGdiConverter.dll
2011-11-03 16:43:21 288256 ----a-w- C:\Windows\SysWow64\XpsGdiConverter.dll
2011-11-03 16:42:57 870912 ----a-w- C:\Windows\SysWow64\XpsPrint.dll
2011-11-03 16:42:57 1465344 ----a-w- C:\Windows\System32\XpsPrint.dll
2011-11-03 16:42:54 1395712 ----a-w- C:\Windows\System32\mfc42.dll
2011-11-03 16:42:54 1359872 ----a-w- C:\Windows\System32\mfc42u.dll
2011-11-03 16:42:54 1137664 ----a-w- C:\Windows\SysWow64\mfc42.dll
2011-11-03 16:42:53 1164288 ----a-w- C:\Windows\SysWow64\mfc42u.dll
2011-11-03 16:41:05 70656 ----a-w- C:\Windows\SysWow64\fontsub.dll
2011-11-03 16:41:05 46080 ----a-w- C:\Windows\System32\atmlib.dll
2011-11-03 16:41:05 367616 ----a-w- C:\Windows\System32\atmfd.dll
2011-11-03 16:41:05 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2011-11-03 16:41:05 294912 ----a-w- C:\Windows\SysWow64\atmfd.dll
2011-11-03 16:41:05 100864 ----a-w- C:\Windows\System32\fontsub.dll
2011-11-03 16:40:35 27520 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2011-11-03 16:39:53 30208 ----a-w- C:\Windows\System32\dnscacheugc.exe
2011-11-03 16:39:53 28672 ----a-w- C:\Windows\SysWow64\dnscacheugc.exe
2011-11-03 16:39:53 183296 ----a-w- C:\Windows\System32\dnsrslvr.dll
2011-11-03 16:31:52 421888 ----a-w- C:\Windows\System32\KernelBase.dll
2011-11-03 16:30:47 5561216 ----a-w- C:\Windows\System32\ntoskrnl.exe
2011-11-03 16:30:46 3967872 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2011-11-03 16:30:46 3912576 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2011-11-03 16:29:29 -------- d-----w- C:\Users\Gilles\AppData\Local\Google
2011-11-03 16:27:15 -------- d-----w- C:\Users\Gilles\AppData\Local\Apps
2011-11-03 16:27:11 -------- d-----w- C:\Users\Gilles\AppData\Local\Deployment
2011-11-03 16:26:30 270720 ------w- C:\Windows\System32\MpSigStub.exe
2011-11-03 16:13:58 -------- d-----w- C:\Program Files (x86)\NEC Electronics
2011-11-03 16:11:00 38456 ----a-w- C:\Windows\System32\drivers\usbfilter.sys
2011-11-03 16:11:00 -------- d-----w- C:\Program Files (x86)\AMD
2011-11-03 16:10:47 16440 ----a-w- C:\Windows\System32\drivers\AtiPcie.sys
2011-11-03 16:10:33 116736 ----a-w- C:\Windows\System32\drivers\AtiHdmi.sys
2011-11-03 16:07:45 -------- d-----w- C:\Users\Gilles\AppData\Local\Downloaded Installations
2011-11-03 16:07:28 -------- d-----w- C:\Program Files\ATI Technologies
2011-11-03 16:07:25 -------- d-----w- C:\Program Files\ATI
2011-11-03 16:05:01 74272 ----a-w- C:\Windows\System32\RtNicProp64.dll
2011-11-03 16:05:01 346144 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2011-11-03 16:05:01 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2011-11-03 16:04:38 -------- d-----w- C:\Program Files (x86)\Realtek
2011-11-02 19:57:18 -------- d-----w- C:\Users\Gilles\AppData\Local\Adobe
2011-11-02 19:55:30 -------- d-sh--w- C:\Windows\Installer
2011-11-02 19:55:04 -------- d-----w- C:\Users\Gilles\AppData\Local\Diagnostics
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Sjablonen
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Menu Start
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Favorieten
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Documenten
2011-11-02 19:49:58 -------- d-sh--we C:\ProgramData\Bureaublad
2011-11-02 19:49:58 -------- d-sh--w- C:\Recovery
2011-11-02 18:40:32 -------- d-----w- C:\Windows\Panther
2011-11-02 18:40:18 -------- d-sh--w- C:\Boot
.
==================== Find3M ====================
.
2011-11-04 16:54:56 175616 ----a-w- C:\Windows\System32\msclmd.dll
2011-11-04 16:54:56 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll
2011-09-14 10:47:42 60416 ----a-w- C:\Windows\System32\OVDecode64.dll
2011-09-14 10:47:40 53760 ----a-w- C:\Windows\SysWow64\OVDecode.dll
2011-09-14 10:47:22 51200 ----a-w- C:\Windows\System32\OpenCL.dll
2011-09-14 10:47:18 43520 ----a-w- C:\Windows\SysWow64\OpenCL.dll
2011-09-14 10:47:10 16652288 ----a-w- C:\Windows\System32\amdocl64.dll
2011-09-14 10:46:58 13625856 ----a-w- C:\Windows\SysWow64\amdocl.dll
2011-09-14 10:38:30 44032 ----a-w- C:\Windows\System32\amdoclcl64.dll
2011-09-14 10:38:28 37376 ----a-w- C:\Windows\SysWow64\amdoclcl.dll
2011-09-08 18:27:22 10203648 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
2011-09-08 17:59:44 24229376 ----a-w- C:\Windows\System32\atio6axx.dll
2011-09-08 17:39:44 18534912 ----a-w- C:\Windows\SysWow64\atioglxx.dll
2011-09-08 17:34:20 151552 ----a-w- C:\Windows\System32\atiapfxx.exe
2011-09-08 17:34:10 732672 ----a-w- C:\Windows\SysWow64\aticfx32.dll
2011-09-08 17:32:58 862720 ----a-w- C:\Windows\System32\aticfx64.dll
2011-09-08 17:30:38 466944 ----a-w- C:\Windows\System32\ATIDEMGX.dll
2011-09-08 17:30:26 486912 ----a-w- C:\Windows\System32\atieclxx.exe
2011-09-08 17:29:56 204288 ----a-w- C:\Windows\System32\atiesrxx.exe
2011-09-08 17:28:54 120320 ----a-w- C:\Windows\System32\atitmm64.dll
2011-09-08 17:28:38 423424 ----a-w- C:\Windows\System32\atipdl64.dll
2011-09-08 17:28:32 356352 ----a-w- C:\Windows\SysWow64\atipdlxx.dll
2011-09-08 17:28:22 278528 ----a-w- C:\Windows\SysWow64\Oemdspif.dll
2011-09-08 17:28:18 21504 ----a-w- C:\Windows\System32\atimuixx.dll
2011-09-08 17:28:14 59392 ----a-w- C:\Windows\System32\atiedu64.dll
2011-09-08 17:28:10 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
2011-09-08 17:24:38 4204032 ----a-w- C:\Windows\SysWow64\atidxx32.dll
2011-09-08 17:18:56 1113088 ----a-w- C:\Windows\System32\atiumd6v.dll
2011-09-08 17:18:22 1828864 ----a-w- C:\Windows\SysWow64\atiumdmv.dll
2011-09-08 17:18:08 3888640 ----a-w- C:\Windows\System32\atiumd6a.dll
2011-09-08 17:16:00 4944896 ----a-w- C:\Windows\System32\atidxx64.dll
2011-09-08 17:09:42 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
2011-09-08 17:09:40 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
2011-09-08 17:09:30 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
2011-09-08 17:09:28 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
2011-09-08 17:09:18 8723456 ----a-w- C:\Windows\System32\aticaldd64.dll
2011-09-08 17:08:24 4064768 ----a-w- C:\Windows\SysWow64\atiumdva.dll
2011-09-08 17:05:52 7331840 ----a-w- C:\Windows\SysWow64\aticaldd.dll
2011-09-08 17:05:44 4289024 ----a-w- C:\Windows\SysWow64\atiumdag.dll
2011-09-08 17:00:02 5428736 ----a-w- C:\Windows\System32\atiumd64.dll
2011-09-08 16:59:48 58880 ----a-w- C:\Windows\System32\coinst.dll
2011-09-08 16:53:20 381952 ----a-w- C:\Windows\System32\atiadlxx.dll
2011-09-08 16:53:12 270336 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
2011-09-08 16:52:58 15360 ----a-w- C:\Windows\System32\atig6pxx.dll
2011-09-08 16:52:56 13312 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
2011-09-08 16:52:56 13312 ----a-w- C:\Windows\System32\atiglpxx.dll
2011-09-08 16:52:54 39936 ----a-w- C:\Windows\System32\atig6txx.dll
2011-09-08 16:52:46 32768 ----a-w- C:\Windows\SysWow64\atigktxx.dll
2011-09-08 16:52:40 310784 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
2011-09-08 16:52:00 40960 ----a-w- C:\Windows\System32\atiuxp64.dll
2011-09-08 16:51:54 31744 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
2011-09-08 16:51:50 38912 ----a-w- C:\Windows\System32\atiu9p64.dll
2011-09-08 16:51:44 29184 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
2011-09-08 16:51:12 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
2011-09-08 16:51:02 54784 ----a-w- C:\Windows\System32\atimpc64.dll
2011-09-08 16:51:02 54784 ----a-w- C:\Windows\System32\amdpcom64.dll
2011-09-08 16:50:54 53760 ----a-w- C:\Windows\SysWow64\atimpc32.dll
2011-09-08 16:50:54 53760 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
2011-08-27 05:37:49 861696 ----a-w- C:\Windows\System32\oleaut32.dll
2011-08-27 05:37:48 331776 ----a-w- C:\Windows\System32\oleacc.dll
2011-08-27 04:26:27 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2011-08-27 04:26:27 233472 ----a-w- C:\Windows\SysWow64\oleacc.dll
2011-08-17 05:26:46 613888 ----a-w- C:\Windows\System32\psisdecd.dll
2011-08-17 05:25:08 108032 ----a-w- C:\Windows\System32\psisrndr.ax
2011-08-17 04:24:12 465408 ----a-w- C:\Windows\SysWow64\psisdecd.dll
2011-08-17 04:19:27 75776 ----a-w- C:\Windows\SysWow64\psisrndr.ax
.
============= FINISH: 15:23:58,95 ===============
