Op deze website gebruiken we cookies om content en advertenties te personaliseren, om functies voor social media te bieden en om ons websiteverkeer te analyseren. Ook delen we informatie over uw gebruik van onze site met onze partners voor social media, adverteren en analyse. Deze partners kunnen deze gegevens combineren met andere informatie die u aan ze heeft verstrekt of die ze hebben verzameld op basis van uw gebruik van hun services. Meer informatie.

Akkoord

Vraag & Antwoord

Beveiliging & privacy

Win32/Cryptor virus

None
28 antwoorden
  • Hoi,

    Helaas is de laptop van een vriendin ook geveld door het Cryptor virus.
    Bij andere topics hierover las ik dat er allemaal programma's gedownload moeten worden om dit virus weg te krijgen. Ook begreep ik dat het bij iedere computer weer anders is, dus wilde ik vragen of iemand mij door dit proces kan praten.

    Alvast bedankt.
  • Je kan beter even een Hijackthis-logje maken en opnieuw posten bij beveiliging. Een expert daarin kan je dan wellicht verder helpen. :roll: http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis
  • Hallo Bianca, welke antivirus gebruikt die vriendin van jou in haar notebook?

    Download, installeer en blijf [b:49b0719b40]MBAM[/b:49b0719b40] gebruiken.
    Al meteen na de installatie wil [b:49b0719b40]MBAM[/b:49b0719b40] zijn database opwaarderen – toestaan dus.
    Ook bij herhaald gebruik: eerst de tab [b:49b0719b40]Update[/b:49b0719b40] aandoen!

    [b:49b0719b40]Download MBAM[/b:49b0719b40]

    Start [b:49b0719b40]MBAM[/b:49b0719b40] en kies voor [b:49b0719b40]Snelle Scan[/b:49b0719b40]

    [b:49b0719b40]N.B.: Vistagebruik(st)ers starten MBAM middels rechtsklikken en kiezen dan voor Als Administrator uitvoeren.[/b:49b0719b40]


    Het scannen kan een tijdje duren, dus wees geduldig.
    Wanneer de scan voltooid is, klik dan op de knop [b:49b0719b40]OK[/b:49b0719b40] , daarna op de knop [b:49b0719b40]Bekijk Resultaten[/b:49b0719b40] om de resultaten te zien.
    Zorg ervoor dat daar alles aangevinkt is, daarna klikken op: [b:49b0719b40]Verwijder geselecteerde[/b:49b0719b40] .
    Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten.

    Het log wordt automatisch bewaard door [b:49b0719b40]MBAM[/b:49b0719b40] en dat kan je terugvinden door op de tab [b:49b0719b40]Logs[/b:49b0719b40] te klikken in [b:49b0719b40]MBAM[/b:49b0719b40] .

    Indien [b:49b0719b40]MBAM[/b:49b0719b40] moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven – dan telkens op [b:49b0719b40]OK[/b:49b0719b40] klikken!
    Daarna zal [b:49b0719b40]MBAM[/b:49b0719b40] vragen om de Computer opnieuw op te starten - dus sta toe dat de computer opnieuw opgestart wordt.



    Hierna een nieuw Hijack This Log aanmaken en het resultaat daarvan samen met het scanresultaat van MBAM posten;
    tevens een Uninstall-lijst posten (Start HijackThis, klik op de knop [b:49b0719b40]Open the Misc Tools section[/b:49b0719b40], dan op de knop [b:49b0719b40]Open Uninstall Manager[/b:49b0719b40] en als laatse op de knop [b:49b0719b40]Save[/b:49b0719b40]).
  • Hoi,

    Mijn vriendin had geen goede actieve virusscanner kwam ik achter. Het enige wat ik kon vinden was Norton 2005.

    Inmiddels heb ik alle programma's gedownload en op volgorde gedraaid.
    IK begrijp dat het resultaat er niet goed uitziet, maar hopelijk is alles nog op te lossen.

    Alvast heel erg bedankt …

    Groetjes,
    Bianca.

    [b:e8cd037e3f]De MBAM log bevat het volgende:[/b:e8cd037e3f]
    Malwarebytes' Anti-Malware 1.41
    Database versie: 3197
    Windows 5.1.2600 Service Pack 2

    19-11-2009 22:15:39
    mbam-log-2009-11-19 (22-15-39).txt

    Scan type: Snelle Scan
    Objecten gescand: 152407
    Verstreken tijd: 1 hour(s), 33 minute(s), 23 second(s)

    Geheugenprocessen geïnfecteerd: 2
    Geheugenmodulen geïnfecteerd: 2
    Registersleutels geïnfecteerd: 130
    Registerwaarden geïnfecteerd: 6
    Registerdata bestanden geïnfecteerd: 2
    Mappen geïnfecteerd: 24
    Bestanden geïnfecteerd: 61

    Geheugenprocessen geïnfecteerd:
    C:\Program Files\Hotbar\bin\11.0.78.0\HotbarSA.exe (Adware.Hotbar) -> Unloaded process successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\Weather.exe (Adware.Hotbar) -> Unloaded process successfully.

    Geheugenmodulen geïnfecteerd:
    c:\program files\Hotbar\bin\11.0.78.0\hotbarsahook.dll (Adware.Hotbar) -> Delete on reboot.
    C:\Program Files\Hotbar\bin\11.0.78.0\WeSkin.dll (Adware.Hotbar) -> Delete on reboot.

    Registersleutels geïnfecteerd:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7c120379-0845-4533-b83c-621de07585ba} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vpihnetg (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_CLASSES_ROOT\CLSID\{7c120379-0845-4533-b83c-621de07585ba} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02f98b9c-8097-49cc-95ad-f5201cbe710a} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{02f98b9c-8097-49cc-95ad-f5201cbe710a} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{051820f6-e59d-4765-bdb6-1990dd2a30a4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{051820f6-e59d-4765-bdb6-1990dd2a30a4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\coresrv.lfgax (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{0729f461-8054-47dc-8d39-a31b61cc0119} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{40ca90f3-4098-4877-ae87-23eb612b18c7} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{4c3b62af-ca25-4fba-8405-32e44f83bb6f} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{5a635a91-c303-45c9-8db9-f759d98a3b9d} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{7e335d04-2e6e-4d0e-a921-c3d9192e7121} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{99ccfb8c-6380-4a14-8fdd-ef3e7e95335d} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{b20d7add-989c-4bc0-a797-f6fe7998efd7} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{bfc20a15-b0ac-44cc-a25a-a7039014ba9f} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{f019aec4-4c95-46de-a107-e302473e3b9a} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{2d00aa2a-69ef-487a-8a40-b3e27f07c91e} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{86c5840b-80c4-4c30-a655-37344a542009} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{b0cb585f-3271-4e42-88d9-ae5c9330d554} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\coresrv.lfgax.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hostie.bho (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{a57470de-14c7-4fcd-9d4c-e5711f24f0ed} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{2557dd3f-23a0-477c-bcd8-90fd0aecc4b8} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{2893116c-a176-42b1-8794-da8c9fc45564} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{99fdca0c-7380-4e9c-8d99-5dc4750334ef} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{b1d9f4b1-b9ff-463f-bf15-ab9cb26160f7} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{2aa2fbf8-9c76-4e97-a226-25c5f4ab6358} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{2aa2fbf8-9c76-4e97-a226-25c5f4ab6358} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{2aa2fbf8-9c76-4e97-a226-25c5f4ab6358} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{71f731b3-008b-4052-9ea4-4145acce40c3} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{90b8b761-df2b-48ac-bbe0-bcc03a819b3b} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{90b8b761-df2b-48ac-bbe0-bcc03a819b3b} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90b8b761-df2b-48ac-bbe0-bcc03a819b3b} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hostie.bho.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.hbax (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{e343edfc-1e6c-4cb5-aa29-e9c922641c80} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{d8560ac2-21b5-4c1a-bdd4-bd12bc83b082} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{20ea9658-6bc3-4599-a87d-6371fe9295fc} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a16ad1e9-f69a-45af-9462-b1c286708842} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{c9ccbb35-d123-4a31-affc-9b2933132116} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.hbax.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.hbinfoband (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.hbinfoband.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.iebutton (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.iebutton.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.iebuttona (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.iebuttona.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.rprtctrl (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\shoppingreport.rprtctrl.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{8ad9ad05-36be-4e40-ba62-5422eb0d02fb} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{cdca70d8-c6a6-49ee-9bed-7429d6c477a2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{d136987f-e1c4-4ccc-a220-893df03ec5df} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6} (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntiVirus) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{bd4f7a6d-0107-4bdf-b72b-021b717b06ce} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eddbb5ee-bb64-4bfc-9dbe-e7c85941335b} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dseieegs (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\dseieegs (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dseieegs (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7c120379-0845-4533-b83c-621de07585ba} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{8292078f-f6e9-412b-8eb1-360c05c5ece5} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{2447e305-5e90-42a8-bd1e-0bc333b807e1} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{50d2fdcc-2707-49cb-8223-7fe0424909aa} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{878ce013-7ba9-4650-a78c-b2234c0c1648} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a5b6fa30-d317-41ca-9cb1-c898d3c7f34e} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{cc19a5f2-b4ad-41d5-a5c9-0680904c1483} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{148e1447-c728-48fd-beec-a7d06c5fff58} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{8ee46f55-1ce1-4db9-811a-68938ec7f3dd} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{a87dfd99-cf81-4241-85ce-881e0026b686} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{c96b9fae-a032-4100-bb47-32ef05e28be4} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{14113b47-d59c-4f0f-9d10-ff1730265584} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a9c42a57-421c-4572-8b12-249c59183d1c} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{76d54105-99eb-4ecb-95b2-a944f50cc566} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{30b15818-e110-4527-9c05-46ace5a3460d} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{618aad04-921f-44c2-be38-c0818af69861} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{b5d2ed96-62f9-4c2c-956d-e425b1f67337} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{d3a412e8-1e4b-47d2-9b12-f88291f5afbb} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a3e67daa-da01-4da5-98be-3088b554a11e} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a3e67daa-da01-4da5-98be-3088b554a11e} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{d95c7240-0282-4c01-93f5-673bca03da86} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{d95c7240-0282-4c01-93f5-673bca03da86} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{03d7ff6e-9781-40b5-bb7f-94291a361604} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{3ceb04ab-08af-45f4-81b4-70d13c1f7b85} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{a7213d71-47e1-4832-92d7-d61dfe9f231f} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{cf82f350-e1c4-4916-ac12-ba73db60afb7} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{c62a9e79-2b52-439b-af57-2e60bb06e86c} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{15fd8424-d12a-4c51-8c6c-d5d57b80f781} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{67b3becf-7b6f-42b2-99f0-f7656f89cffa} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{715ffd42-4e05-4eab-9513-c8daa5395ae2} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{759d6f7c-8d30-45b6-abea-fa51c190eed5} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{9a4a64a4-a2fb-48fa-9bba-1ac50267695d} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{62906e60-bce2-4e1b-9ed0-8b9042ee15e4} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{f9bfa98d-9935-4ea4-a05a-72c7f0778f02} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{cdc73256-a88d-4642-844e-a8f20b76789c} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{d1063603-f045-475f-afbc-8cba7d5797fb} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shoppingreport (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Antivirus (Rogue.AntiVirus) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\jvmvqwao (Rootkit.Sentinel) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\jvmvqwao (Rootkit.Sentinel) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jvmvqwao (Rootkit.Sentinel) -> Delete on reboot.
    HKEY_CLASSES_ROOT\coresrv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\coresrv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hbmain.commband (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hbmain.commband.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hbr.hbmain (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hbr.hbmain.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hostol.mailanim (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hostol.mailanim.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hostol.webmailsend (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\hostol.webmailsend.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\srv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\srv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\toolbar.htmlmenuui (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\toolbar.htmlmenuui.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\toolbar.toolbarctl (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\toolbar.toolbarctl.1 (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\__c00b610 (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.

    Registerwaarden geïnfecteerd:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90b8b761-df2b-48ac-bbe0-bcc03a819b3b} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{90b8b761-df2b-48ac-bbe0-bcc03a819b3b} (Adware.Zango) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hotbarsa (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\weatherdpa (Adware.Hotbar) -> Quarantined and deleted successfully.

    Registerdata bestanden geïnfecteerd:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Mappen geïnfecteerd:
    C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 (Adware.Seekmo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\dwld (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\report (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\db (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\res1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\dwld (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\report (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\db (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\res1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar (Adware.Hotbar) -> Delete on reboot.
    C:\Program Files\Hotbar\bin (Adware.Hotbar) -> Delete on reboot.
    C:\Program Files\Hotbar\bin\11.0.78.0 (Adware.Hotbar) -> Delete on reboot.
    C:\Program Files\Hotbar\bin\11.0.78.0\firefox (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions\components (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions\plugins (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Program Files\ShoppingReport\Bin (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Program Files\ShoppingReport\Bin\2.6.58 (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32 (Worm.Archive) -> Quarantined and deleted successfully.

    Bestanden geïnfecteerd:
    c:\WINDOWS\system32\yhhbwmv.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32
    hwpppbv.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\Program Files\Hotbar\bin\11.0.78.0\CoreSrv.dll (Adware.Zango) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\HostIE.dll (Adware.Zango) -> Quarantined and deleted successfully.
    C:\Program Files\ShoppingReport\Bin\2.6.58\ShoppingReport.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\695.tmp (Worm.P2P) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\araunin.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\1.tmp (Worm.P2P) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\98.tmp (Worm.P2P) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\Config.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\gebruiker\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\Config.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Documents and Settings\kids\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\arrow.ico (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\copyright.txt (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\HostOL.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\CntntCntr.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\HotbarSA.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\HotbarSAAX.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\HotbarSADF.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\HotbarSAHook.dll (Adware.Hotbar) -> Delete on reboot.
    C:\Program Files\Hotbar\bin\11.0.78.0\HotbarUninstaller.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\Srv.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\Toolbar.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\Weather.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\WeSkin.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions\install.rdf (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions\chrome.manifest (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions\components
    pclntax.xpt (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\Hotbar\bin\11.0.78.0\firefox\extensions\plugins
    pclntax_HotbarSA.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\ShoppingReport\Uninst.exe (Adware.ShopperReports) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\145.music.au (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\141.crack.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\142.keygen.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\143.serial.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\144.setup.zip.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\145.music.au.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\146.music1.mp3.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\147.music2.mp3.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\148.music.snd.kwd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\148.music.snd (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\146.music1.mp3 (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\147.music2.mp3 (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\141.crack.zip (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\142.keygen.zip (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\143.serial.zip (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SystemService32\144.setup.zip (Worm.Archive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\~.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\drivers\jvmvqwao.sys (Rootkit.Sentinel) -> Delete on reboot.
    C:\WINDOWS\system32\GroupPolicy000.dat (Malware.Trace) -> Quarantined and deleted successfully.
    C:\WINDOWS\GnuHashes.ini (Malware.Trace) -> Quarantined and deleted successfully.



    [b:e8cd037e3f]De HijackThis log die daarna gedraaid heeft bevat het volgende:[/b:e8cd037e3f]
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:34:44, on 19-11-2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16915)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\AVG\AVG9\avgchsvx.exe
    C:\Program Files\AVG\AVG9\avgrsx.exe
    C:\Program Files\AVG\AVG9\avgcsrvx.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\AVG\AVG9\avgwdsvc.exe
    C:\Acer\Empowering Technology\admServ.exe
    C:\Program Files\AVG\AVG9\avgnsx.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
    C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
    C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
    C:\Program Files\AVG\AVG9\avgemc.exe
    C:\Program Files\AVG\AVG9\avgcsrvx.exe
    C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Acer\Acer Arcade\PCMService.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
    C:\acer\Empowering Technology\ePower\epm-dm.exe
    C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
    C:\Acer\Empowering Technology\eRecovery\Monitor.exe
    C:\Acer\Empowering Technology\admtray.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\PROGRA~1\AVG\AVG9\avgtray.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    C:\WINDOWS\system32\igfxext.exe
    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
    D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.nl/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    R3 - URLSearchHook: LimewirePlus Toolbar - {47e161a0-f4ba-41dd-a17b-d2eb26ad6a02} - C:\Program Files\LimewirePlus\tbLim0.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
    O2 - BHO: LimewirePlus Toolbar - {47e161a0-f4ba-41dd-a17b-d2eb26ad6a02} - C:\Program Files\LimewirePlus\tbLim0.dll
    O2 - BHO: (no name) - {7C120379-0845-4533-B83C-621DE07585BA} - c:\windows\system32\yhhbwmv.dll
    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
    O3 - Toolbar: Acer eDataSecurity Management - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\WINDOWS\system32\ToolBand.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: LimewirePlus Toolbar - {47e161a0-f4ba-41dd-a17b-d2eb26ad6a02} - C:\Program Files\LimewirePlus\tbLim0.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O4 - HKLM\..\Run: [LaunchApp] Alaunch
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
    O4 - HKLM\..\Run: [EPM-DM] c:\acer\Empowering Technology\ePower\epm-dm.exe
    O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
    O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
    O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
    O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "D:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"
    uncleanupscript
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
    O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Bluetooth Manager.lnk = ?
    O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3
    esources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-NL/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game08.zylom.com/activex/zylomgamesplayer.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/virtools.download.akamai.com/6712/player/install/installer.exe
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,C:\WINDOWS\System32\msxml3r32.dll
    O20 - Winlogon Notify: 320d180e583 - C:\WINDOWS\System32\msxml3r32.dll (file missing)
    O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
    O20 - Winlogon Notify: vpihnetg - C:\WINDOWS\SYSTEM32\yhhbwmv.dll
    O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
    O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
    O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe


    End of file - 14125 bytes



    [b:e8cd037e3f]En als laatste de Uninstall Log:[/b:e8cd037e3f]
    Aangifte inkomstenbelasting 2007
    Aangifte inkomstenbelasting 2008
    Acer Arcade
    Acer eDataSecurity Management 1.00.23
    Acer eLock Management
    Acer Empowering Technology framework
    Acer eNet Management
    Acer ePerformance Management
    Acer ePower Management
    Acer ePresentation Management
    Acer eSettings Management
    Acer GridVista
    Acer Screensaver
    Ad-Aware SE Personal
    Adobe Flash Player 10 ActiveX
    Adobe Reader 7.1.0
    Adobe Shockwave Player
    Apple Mobile Device Support
    Apple Software Update
    AVG Free 9.0
    Beveiligingsupdate for Windows XP (KB923689)
    Beveiligingsupdate for Windows XP (KB941569)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB938127)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB942615)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB944533)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB950759)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB953838)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB956390)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB958215)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB960714)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB961260)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB963027)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB969897)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB972260)
    Beveiligingsupdate voor Windows Internet Explorer 7 (KB974455)
    Beveiligingsupdate voor Windows Media Player (KB911564)
    Beveiligingsupdate voor Windows Media Player (KB952069)
    Beveiligingsupdate voor Windows Media Player (KB954155)
    Beveiligingsupdate voor Windows Media Player (KB968816)
    Beveiligingsupdate voor Windows Media Player (KB973540)
    Beveiligingsupdate voor Windows Media Player 11 (KB936782)
    Beveiligingsupdate voor Windows Media Player 11 (KB954154)
    Beveiligingsupdate voor Windows Media Player 6.4 (KB925398)
    Beveiligingsupdate voor Windows Media Player 9 (KB917734)
    Beveiligingsupdate voor Windows Media Player 9 (KB936782)
    Beveiligingsupdate voor Windows XP (KB890046)
    Beveiligingsupdate voor Windows XP (KB893756)
    Beveiligingsupdate voor Windows XP (KB896358)
    Beveiligingsupdate voor Windows XP (KB896423)
    Beveiligingsupdate voor Windows XP (KB896424)
    Beveiligingsupdate voor Windows XP (KB896428)
    Beveiligingsupdate voor Windows XP (KB899587)
    Beveiligingsupdate voor Windows XP (KB899591)
    Beveiligingsupdate voor Windows XP (KB900725)
    Beveiligingsupdate voor Windows XP (KB901017)
    Beveiligingsupdate voor Windows XP (KB901190)
    Beveiligingsupdate voor Windows XP (KB901214)
    Beveiligingsupdate voor Windows XP (KB902400)
    Beveiligingsupdate voor Windows XP (KB904706)
    Beveiligingsupdate voor Windows XP (KB905414)
    Beveiligingsupdate voor Windows XP (KB905749)
    Beveiligingsupdate voor Windows XP (KB908519)
    Beveiligingsupdate voor Windows XP (KB911562)
    Beveiligingsupdate voor Windows XP (KB911567)
    Beveiligingsupdate voor Windows XP (KB911927)
    Beveiligingsupdate voor Windows XP (KB912919)
    Beveiligingsupdate voor Windows XP (KB913580)
    Beveiligingsupdate voor Windows XP (KB914388)
    Beveiligingsupdate voor Windows XP (KB914389)
    Beveiligingsupdate voor Windows XP (KB917159)
    Beveiligingsupdate voor Windows XP (KB917344)
    Beveiligingsupdate voor Windows XP (KB917422)
    Beveiligingsupdate voor Windows XP (KB917953)
    Beveiligingsupdate voor Windows XP (KB918118)
    Beveiligingsupdate voor Windows XP (KB918439)
    Beveiligingsupdate voor Windows XP (KB918899)
    Beveiligingsupdate voor Windows XP (KB919007)
    Beveiligingsupdate voor Windows XP (KB920213)
    Beveiligingsupdate voor Windows XP (KB920214)
    Beveiligingsupdate voor Windows XP (KB920670)
    Beveiligingsupdate voor Windows XP (KB920683)
    Beveiligingsupdate voor Windows XP (KB920685)
    Beveiligingsupdate voor Windows XP (KB921398)
    Beveiligingsupdate voor Windows XP (KB921503)
    Beveiligingsupdate voor Windows XP (KB921883)
    Beveiligingsupdate voor Windows XP (KB922616)
    Beveiligingsupdate voor Windows XP (KB922760)
    Beveiligingsupdate voor Windows XP (KB922819)
    Beveiligingsupdate voor Windows XP (KB923191)
    Beveiligingsupdate voor Windows XP (KB923414)
    Beveiligingsupdate voor Windows XP (KB923561)
    Beveiligingsupdate voor Windows XP (KB923694)
    Beveiligingsupdate voor Windows XP (KB923980)
    Beveiligingsupdate voor Windows XP (KB924191)
    Beveiligingsupdate voor Windows XP (KB924270)
    Beveiligingsupdate voor Windows XP (KB924496)
    Beveiligingsupdate voor Windows XP (KB924667)
    Beveiligingsupdate voor Windows XP (KB925454)
    Beveiligingsupdate voor Windows XP (KB925486)
    Beveiligingsupdate voor Windows XP (KB925902)
    Beveiligingsupdate voor Windows XP (KB926255)
    Beveiligingsupdate voor Windows XP (KB926436)
    Beveiligingsupdate voor Windows XP (KB927779)
    Beveiligingsupdate voor Windows XP (KB927802)
    Beveiligingsupdate voor Windows XP (KB928090)
    Beveiligingsupdate voor Windows XP (KB928255)
    Beveiligingsupdate voor Windows XP (KB928843)
    Beveiligingsupdate voor Windows XP (KB929123)
    Beveiligingsupdate voor Windows XP (KB929969)
    Beveiligingsupdate voor Windows XP (KB930178)
    Beveiligingsupdate voor Windows XP (KB931261)
    Beveiligingsupdate voor Windows XP (KB931768)
    Beveiligingsupdate voor Windows XP (KB931784)
    Beveiligingsupdate voor Windows XP (KB932168)
    Beveiligingsupdate voor Windows XP (KB933566)
    Beveiligingsupdate voor Windows XP (KB933729)
    Beveiligingsupdate voor Windows XP (KB935839)
    Beveiligingsupdate voor Windows XP (KB935840)
    Beveiligingsupdate voor Windows XP (KB936021)
    Beveiligingsupdate voor Windows XP (KB937143)
    Beveiligingsupdate voor Windows XP (KB938127)
    Beveiligingsupdate voor Windows XP (KB938464)
    Beveiligingsupdate voor Windows XP (KB938829)
    Beveiligingsupdate voor Windows XP (KB939653)
    Beveiligingsupdate voor Windows XP (KB941202)
    Beveiligingsupdate voor Windows XP (KB941568)
    Beveiligingsupdate voor Windows XP (KB941644)
    Beveiligingsupdate voor Windows XP (KB941693)
    Beveiligingsupdate voor Windows XP (KB942615)
    Beveiligingsupdate voor Windows XP (KB943055)
    Beveiligingsupdate voor Windows XP (KB943460)
    Beveiligingsupdate voor Windows XP (KB943485)
    Beveiligingsupdate voor Windows XP (KB944533)
    Beveiligingsupdate voor Windows XP (KB944653)
    Beveiligingsupdate voor Windows XP (KB945553)
    Beveiligingsupdate voor Windows XP (KB946026)
    Beveiligingsupdate voor Windows XP (KB946648)
    Beveiligingsupdate voor Windows XP (KB948590)
    Beveiligingsupdate voor Windows XP (KB948881)
    Beveiligingsupdate voor Windows XP (KB950749)
    Beveiligingsupdate voor Windows XP (KB950760)
    Beveiligingsupdate voor Windows XP (KB950762)
    Beveiligingsupdate voor Windows XP (KB950974)
    Beveiligingsupdate voor Windows XP (KB951066)
    Beveiligingsupdate voor Windows XP (KB951376)
    Beveiligingsupdate voor Windows XP (KB951376-v2)
    Beveiligingsupdate voor Windows XP (KB951698)
    Beveiligingsupdate voor Windows XP (KB951748)
    Beveiligingsupdate voor Windows XP (KB952004)
    Beveiligingsupdate voor Windows XP (KB952954)
    Beveiligingsupdate voor Windows XP (KB953839)
    Beveiligingsupdate voor Windows XP (KB954211)
    Beveiligingsupdate voor Windows XP (KB954600)
    Beveiligingsupdate voor Windows XP (KB955069)
    Beveiligingsupdate voor Windows XP (KB956391)
    Beveiligingsupdate voor Windows XP (KB956572)
    Beveiligingsupdate voor Windows XP (KB956802)
    Beveiligingsupdate voor Windows XP (KB956803)
    Beveiligingsupdate voor Windows XP (KB956841)
    Beveiligingsupdate voor Windows XP (KB956844)
    Beveiligingsupdate voor Windows XP (KB957095)
    Beveiligingsupdate voor Windows XP (KB957097)
    Beveiligingsupdate voor Windows XP (KB958470)
    Beveiligingsupdate voor Windows XP (KB958644)
    Beveiligingsupdate voor Windows XP (KB958687)
    Beveiligingsupdate voor Windows XP (KB958690)
    Beveiligingsupdate voor Windows XP (KB958869)
    Beveiligingsupdate voor Windows XP (KB959426)
    Beveiligingsupdate voor Windows XP (KB960225)
    Beveiligingsupdate voor Windows XP (KB960715)
    Beveiligingsupdate voor Windows XP (KB960803)
    Beveiligingsupdate voor Windows XP (KB960859)
    Beveiligingsupdate voor Windows XP (KB961371)
    Beveiligingsupdate voor Windows XP (KB961373)
    Beveiligingsupdate voor Windows XP (KB961501)
    Beveiligingsupdate voor Windows XP (KB968537)
    Beveiligingsupdate voor Windows XP (KB969059)
    Beveiligingsupdate voor Windows XP (KB969898)
    Beveiligingsupdate voor Windows XP (KB969947)
    Beveiligingsupdate voor Windows XP (KB970238)
    Beveiligingsupdate voor Windows XP (KB971486)
    Beveiligingsupdate voor Windows XP (KB971557)
    Beveiligingsupdate voor Windows XP (KB971633)
    Beveiligingsupdate voor Windows XP (KB971657)
    Beveiligingsupdate voor Windows XP (KB971961)
    Beveiligingsupdate voor Windows XP (KB973346)
    Beveiligingsupdate voor Windows XP (KB973354)
    Beveiligingsupdate voor Windows XP (KB973507)
    Beveiligingsupdate voor Windows XP (KB973525)
    Beveiligingsupdate voor Windows XP (KB973869)
    Beveiligingsupdate voor Windows XP (KB974112)
    Beveiligingsupdate voor Windows XP (KB974571)
    Beveiligingsupdate voor Windows XP (KB975025)
    Beveiligingsupdate voor Windows XP (KB975467)
    Bonjour
    Canon Camera Access Library
    Canon Camera Support Core Library
    Canon EOS 5D WIA Driver
    Canon G.726 WMP-Decoder
    CANON iMAGE GATEWAY Task for ZoomBrowser EX
    Canon Internet Library for ZoomBrowser EX
    Canon MovieEdit Task for ZoomBrowser EX
    Canon RAW Image Task for ZoomBrowser EX
    Canon Utilities CameraWindow
    Canon Utilities CameraWindow DC
    Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
    Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
    Canon Utilities Digital Photo Professional 3.4
    Canon Utilities EOS Utility
    Canon Utilities MyCamera
    Canon Utilities MyCamera DC
    Canon Utilities Original Data Security Tools
    Canon Utilities PhotoStitch
    Canon Utilities Picture Style Editor
    Canon Utilities RemoteCapture Task for ZoomBrowser EX
    Canon Utilities WFT-E1/E2/E3 Utility
    Canon Utilities ZoomBrowser EX
    Canon ZoomBrowser EX Memory Card Utility
    Essentiële update voor Windows Media Player 11 (KB959772)
    Extensie voor Windows Live Toolbar (Windows Live Toolbar)
    Google Desktop
    Google Earth
    Google Earth
    Google SketchUp
    Google Toolbar for Firefox
    Google Toolbar for Internet Explorer
    Google Toolbar for Internet Explorer
    Google Updater
    HDAUDIO Soft Data Fax Modem with SmartCP
    High Definition Audio Driver Package - KB888111
    HijackThis 2.0.2
    Hotbar
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows XP (KB915865)
    Hotfix for Windows XP (KB926239)
    Hotfix voor Windows Internet Explorer 7 (KB947864)
    Hotfix voor Windows Media Player 11 (KB939683)
    Hotfix voor Windows XP (KB914440)
    Hotfix voor Windows XP (KB935448)
    Hotfix voor Windows XP (KB952287)
    Hotfix voor Windows XP (KB961118)
    Hotfix voor Windows XP (KB970653-v3)
    HP Document Viewer 5.3
    HP Extended Capabilities 5.3
    HP Image Zone 5.3
    HP Imaging Device Functions 5.3
    HP PSC & OfficeJet 5.3.A
    HP Software Update
    HP Solution Center & Imaging Support Tools 5.3
    Intel(R) Graphics Media Accelerator Driver for Mobile
    Intel(R) PROSet/Wireless Software
    InterActual Player
    iPod for Windows 2005-06-26
    iTunes
    J2SE Runtime Environment 5.0 Update 3
    Kinderopvangtoeslag 2008
    Launch Manager
    LimeWire Plus 1.8
    LimewirePlus Toolbar
    Malwarebytes' Anti-Malware
    Markeringviewer (Windows Live Toolbar)
    mCore
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Dutch Language Pack
    Microsoft .NET Framework 1.1 Security Update (KB953297)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 3.5 SP1
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
    Microsoft National Language Support Downlevel APIs
    Microsoft Silverlight
    Microsoft User-Mode Driver Framework Feature Pack 1.5
    Microsoft Visual C++ 2005 Redistributable
    mMHouse
    Mozilla Firefox (2.0.0.20)
    mPfMgr
    mProSafe
    MSVC80_x86
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 6 Service Pack 2 (KB954459)
    MV RegClean 5.0 English
    mWlsSafe
    mXML
    Nokia Connectivity Cable Driver
    Nokia PC Suite
    Nokia PC Suite
    NTI Backup NOW! 4
    NTI CD & DVD-Maker
    PC Connectivity Solution
    Philips Vesta (Pro) Camera
    Picasa 3
    PowerProducer
    QuickTime
    Realtek High Definition Audio Driver
    Safari
    SAMSUNG CDMA Modem Driver Set
    Samsung Mobile phone USB driver Software
    SAMSUNG Mobile USB Modem 1.0 Software
    SAMSUNG Mobile USB Modem Software
    Samsung PC Studio
    Security Update for CAPICOM (KB931906)
    Security Update for CAPICOM (KB931906)
    Smart Menu's (Windows Live Toolbar)
    Spirit (remove only)
    Synaptics Pointing Device Driver
    TomTom HOME 2.7.2.1825
    TomTom HOME Visual Studio Merge Modules
    TOSHIBA Bluetooth Stack for Apache by CSR
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update voor Windows Internet Explorer 7 (KB976749)
    Update voor Windows XP (KB894391)
    Update voor Windows XP (KB898461)
    Update voor Windows XP (KB900485)
    Update voor Windows XP (KB904942)
    Update voor Windows XP (KB908531)
    Update voor Windows XP (KB910437)
    Update voor Windows XP (KB911280)
    Update voor Windows XP (KB912945)
    Update voor Windows XP (KB916595)
    Update voor Windows XP (KB920872)
    Update voor Windows XP (KB922582)
    Update voor Windows XP (KB925720)
    Update voor Windows XP (KB927891)
    Update voor Windows XP (KB929338)
    Update voor Windows XP (KB930916)
    Update voor Windows XP (KB931836)
    Update voor Windows XP (KB932823-v3)
    Update voor Windows XP (KB933360)
    Update voor Windows XP (KB936357)
    Update voor Windows XP (KB938828)
    Update voor Windows XP (KB942763)
    Update voor Windows XP (KB942840)
    Update voor Windows XP (KB946627)
    Update voor Windows XP (KB951072-v2)
    Update voor Windows XP (KB955839)
    Update voor Windows XP (KB967715)
    Update voor Windows XP (KB968389)
    Update voor Windows XP (KB973815)
    Virtools 3D Life Player
    VLC media player 0.9.8a
    WaveLab Lite
    Windows Imaging Component
    Windows Installer 3.1 (KB893803)
    Windows Internet Explorer 7
    Windows Live aanmeldhulp
    Windows Live Favorites voor Windows Live Toolbar
    Windows Live installer
    Windows Live Mail
    Windows Live Messenger
    Windows Live Toolbar
    Windows Live Toolbar
    Windows Media Format 11 runtime
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Media Player 11
    Windows XP Hotfix - KB873339
    Windows XP Hotfix - KB885835
    Windows XP Hotfix - KB885836
    Windows XP Hotfix - KB886185
    Windows XP Hotfix - KB887472
    Windows XP Hotfix - KB888302
    Windows XP Hotfix - KB890859
    Windows XP Hotfix - KB891781
    Windows-stuurprogrammapakket - Nokia Modem (10/27/2008 3.9)
    Windows-stuurprogrammapakket - Nokia Modem (10/27/2008 7.01.0.1)
    Windows-stuurprogrammapakket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
  • Hallo Binca, zelden dat ik zo'n enorm log van MBAM onder ogen krijg!

    Basisfouten van je vriendin met betrekking tot haar Windows:

    a) nog geen update gedaan naar ServicePack 3 voor XP, waardoor Windows weer helemaal bijgehouden gaat worden door MS

    b) er zit een Java runtime in het systeem, die werkelijk antiek te noemen is en dus vol met veiligheidlekken zit!

    [b:07594e1c58]Java runtime dient net zoals de Adobe Flashplayer altijd actueel te zijn!
    Hou het altijd op één geïnstalleerde Java-runtime![/b:07594e1c58]

    Download naar je bureaublad : [i:07594e1c58][b:07594e1c58]Java SE Runtime Environment (JRE) 6 update 17[/b:07594e1c58][/i:07594e1c58]

    Nu ga je eerst naar [b:07594e1c58]Configuratiescherm /Software[/b:07594e1c58] en dan verwijder je [b:07594e1c58]Java SE Runtime Environment (JRE) 5 Update 3[/b:07594e1c58].

    Hierna de computer opnieuw starten!

    Daarna kan je de nieuwe versie van Java installeren!


    Ik raad je dan ook aan, dat [b:07594e1c58]Laat Combofix jouw vriendin's Windows gaat scannen[/b:07594e1c58] (KLIK).

    [b:07594e1c58]Hoe Combofix goed te gebruiken[/b:07594e1c58] (KLIK)

    [b:07594e1c58]Aanvulling: om Combofix te kunnen gebruiken geldt het volgende:[/b:07594e1c58]

    [b:07594e1c58]- er mogen geen webbrowsers openstaan
    - antivirus moet geheel gedeaktiveerd zijn
    - actieve mal- en spywarescanners moeten gedeaktiveerd zijn.[/b:07594e1c58]

    Niet in het actieve Combofixvnster klikken – dit zal Combofix doen bevriezen!

    Combofix sluit de internet verbinding – probeer deze tussentijds niet te herstellen!

    [b:07594e1c58]Vistagebruikers starten Combofix op met Administratorrechten!

    En vergeten niet Windows Defender tijdelijk uit te schakelen: zie daarvoor http://windowshelp.microsoft.com/Windows/nl-NL/help/31d797aa-091d-4d67-a556-dbfaf21bf0dc1043.mspx
    [/b:07594e1c58]


    [b:07594e1c58]Hier vindt je gegevens hoe antivirus te deaktiveren[/b:07594e1c58] (KLIK)

    Post het log van Combofix.
  • Hoi,

    Het was even een gedoe, maar het is gelukt.
    Hier is de log van Combofix.

    Groetjes,
    Bianca.

    ComboFix 09-11-22.08 - gebruiker 23-11-2009 21:18.1.1 - FAT32x86
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.31.1043.18.1014.313 [GMT 1:00]
    Gestart vanuit: c:\documents and settings\gebruiker\Bureaublad\ComboFix.exe
    AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\All Users\Menu Start\HP Image Zone .lnk
    c:\documents and settings\All Users\Menu Start\Programma's\Hotbar
    c:\documents and settings\All Users\Menu Start\Programma's\Hotbar\About Hotbar.lnk
    c:\documents and settings\All Users\Menu Start\Programma's\Hotbar\Hotbar Customer Support Center.lnk
    c:\documents and settings\All Users\Menu Start\Programma's\Hotbar\Hotbar Games!.lnk
    c:\documents and settings\All Users\Menu Start\Programma's\Hotbar\Hotbar Uninstall Instructions.lnk
    c:\documents and settings\All Users\Menu Start\Programma's\Hotbar\Hotbar Videos!.lnk
    c:\documents and settings\All Users\Menu Start\Programma's\Hotbar\Reset Cursor.lnk
    c:\documents and settings\All Users\Menu Start\Programma's\Hotbar\Weather.lnk
    c:\documents and settings\gebruiker\Application Data\020000001eee4240583C.manifest
    c:\documents and settings\gebruiker\Application Data\020000001eee4240583O.manifest
    c:\documents and settings\gebruiker\Application Data\020000001eee4240583P.manifest
    c:\documents and settings\gebruiker\Application Data\020000001eee4240583S.manifest
    c:\documents and settings\gebruiker\Application Data\Hotbar
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\1.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\1159501.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\1383594.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\1384313.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\229641.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\3251993.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\3781281.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\3893245.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\3895584.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\690752.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\766894.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\997191.sdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\domains.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\1000044868
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\146936
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\14747
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\218859
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\21889
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\225064
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\25502
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\26479
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\29115
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\29297
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\33912
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\342421
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\371665
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\392888
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\403305
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\41225
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\449624
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\4574
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\45833
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\51194
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\52335
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\552212
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\568240
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\58203
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\598953
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\606840
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\617965
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\623257
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\64495
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\689624
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702560
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702626
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702633
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702643
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702661
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702662
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702667
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702676
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702683
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702694
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702695
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702696
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702697
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\745415
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\752499
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\753036
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\753255
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\753634
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\81392
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\82342
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\84369
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\88107
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\89853
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\9021
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\92930
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\93899
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\97900
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\98914
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\ads.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\btntrans.idx
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\btntrans1.dat
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\business_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\buttondir.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\components.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\cursors.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_1000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_2000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_3000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_bar.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_bbar1.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_logos.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_other.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_weather.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\default.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_511745-514279.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz1.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz10.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz11.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz12.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz13.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz14.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz15.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz16.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz17.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz18.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz19.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz2.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz20.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz3.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz4.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz5.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz6.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz7.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz8.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz9.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_categorize.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_comparison.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_explorer-Mails.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_explorer-people.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_favorites.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Games.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Hide.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_hotbarcom.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Hotmail.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_hsskin.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemster.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemsterie.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemsteruk.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jobsearch.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Mails.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_new.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_premium.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_reun.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_ringtones.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_SearchBoxTrapper.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_searchfor.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_searchgo.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_weather.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_yellowpages.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\editblbuttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\email-def-511724-548964.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\email-def-511724-9595.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\email-t1-bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\gamesmenu.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\gamesMenu.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\hb_ie_menu.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar-premium-hotbar-premium.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar-premium.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\icons2.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\ie_games_icon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\ie_video.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\keywords.idx
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\keywords1.dat
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\layout.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\linkpathlegal.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\more.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1
    ew_games.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\progress.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\s_icons_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\sales_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\sdfmodifier.xml
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\t2_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\theweb.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\top7.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Top7_theweb.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\tsd_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\weathericon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\ads.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\btntrans.idx
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\btntrans1.dat
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\business_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\buttondir.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\components.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\cursors.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_1000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_2000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_3000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bar.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bbar1.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_logos.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_other.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_weather.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\default.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_511745-514279.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz1.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz10.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz11.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz12.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz13.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz14.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz15.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz16.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz17.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz18.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz19.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz2.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz20.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz3.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz4.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz5.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz6.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz7.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz8.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz9.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_categorize.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_comparison.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_explorer-Mails.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_explorer-people.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_favorites.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Games.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Hide.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_hotbarcom.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Hotmail.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_hsskin.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemster.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemsterie.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemsteruk.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jobsearch.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Mails.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_new.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_premium.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_reun.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_ringtones.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_SearchBoxTrapper.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_searchfor.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_searchgo.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_weather.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_yellowpages.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\editblbuttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\email-def-511724-548964.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\email-def-511724-9595.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\email-t1-bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\gamesmenu.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\gamesMenu.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\hb_ie_menu.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar-premium.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\icons2.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\ie_games_icon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\ie_video.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\keywords.idx
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\keywords1.dat
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\layout.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\linkpathlegal.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\more.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2
    ew_games.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\progress.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\s_icons_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\sales_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\sdfmodifier.xml
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\t2_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\theweb.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\top7.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Top7_theweb.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\tsd_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\weathericon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ads.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans1.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\business_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\business_promo.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\cursors.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\cursors.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_1000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_1000.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_2000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_2000.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_3000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_3000.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bar.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bar.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bbar1.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_logos.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_other.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_other.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_weather.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_weather.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\default.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\editblbuttons.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\email-t1-bg.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\gamesmenu.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hb_ie_menu.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar-premium.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar_promo.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\icons2.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_games_icon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_games_icon.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_video.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_video.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\keywords.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\keywords1.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\layout.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\layout.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\linkpathlegal.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\linkpathlegal.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\more.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\more.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\progress.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\progress.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\s_icons_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\s_icons_buttons.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sales_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sales_buttons.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sdfmodifier.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sdfmodifier.xml
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\t2_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\t2_bg.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\top7.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\tsd_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\tsd_bg.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\weathericon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\weathericon.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\Weather\Weather_XML\General
    c:\documents and settings\gebruiker\Application Data\Hotbar\Weather\WeatherStartup.xml
    c:\documents and settings\gebruiker\Application Data\WeatherDPA
    c:\documents and settings\kids\Application Data\020000001eee4240583C.manifest
    c:\documents and settings\kids\Application Data\020000001eee4240583O.manifest
    c:\documents and settings\kids\Application Data\020000001eee4240583P.manifest
    c:\documents and settings\kids\Application Data\020000001eee4240583S.manifest
    c:\documents and settings\kids\Application Data\Hotbar
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1383594.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1387450.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1387505.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1402145.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1404311.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\2019327.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\2798290.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\3251993.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\3730773.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\3781281.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\3893245.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\600583.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\997191.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\domains.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\1000041060
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\1000067585
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\104622
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\13608
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\167151
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\17025
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\18146
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\18333
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\191116
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\20514
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\218859
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\23923
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\24098
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\24996
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\25032
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\25132
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\252531
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\264564
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\26479
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\291093
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\29547
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\30854
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\34186
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\342421
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\35047
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\367353
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\3677
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\40256
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\403305
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\40766
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\41526
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\41980
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\42013
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\42208
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\422123
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\43719
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\44228
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\44271
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\44387
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\449274
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\449624
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\4574
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\45833
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\46283
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\52335
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\53481
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\544697
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\55725
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\567442
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\568240
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\58203
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\59844
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\61779
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\61837
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\642487
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\64495
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\64605
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\684104
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\68943
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\69358
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702683
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702694
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702695
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702696
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702697
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702714
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702728
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702732
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702733
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702743
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\737665
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\744857
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\744900
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\748002
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\748176
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\748862
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\752447
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\753232
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\753634
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\7598
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\78600
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\79721
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\80061
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\80663
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\82292
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\85522
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\87591
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\90009
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\9021
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\92930
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\93226
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\93899
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\95716
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\97666
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\ustat\38dd.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\ads.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\btntrans.idx
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\btntrans1.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\business_promo.htm
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\buttondir.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\components.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\cursors.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_1000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_2000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_3000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_bar.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_bbar1.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_logos.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_other.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_weather.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\default.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_511745-514279.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz1.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz10.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz11.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz12.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz13.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz14.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz15.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz16.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz17.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz18.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz19.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz2.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz20.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz3.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz4.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz5.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz6.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz7.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz8.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz9.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_categorize.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_comparison.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_explorer-Mails.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_explorer-people.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_favorites.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Games.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Hide.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_hotbarcom.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Hotmail.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_hsskin.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemster.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemsterie.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemsteruk.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jobsearch.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Mails.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_new.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_premium.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_reun.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_ringtones.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_SearchBoxTrapper.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_searchfor.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_searchgo.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_weather.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_yellowpages.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\editblbuttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\email-def-511724-548964.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\email-def-511724-9595.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\email-t1-bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\gamesmenu.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\gamesMenu.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\hb_ie_menu.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar-premium-hotbar-premium.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar-premium.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar_promo.htm
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\icons2.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\ie_games_icon.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\ie_video.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\keywords.idx
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\keywords1.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\layout.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\linkpathlegal.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\more.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1
    ew_games.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\progress.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\s_icons_buttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\sales_buttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\sdfmodifier.xml
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\t2_bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\theweb.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\top7.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Top7_theweb.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\tsd_bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\weathericon.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\ads.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\btntrans.idx
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\btntrans1.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\business_promo.htm
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\buttondir.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\components.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\cursors.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_1000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_2000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_3000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bar.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bbar1.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_logos.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_other.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_weather.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\default.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_511745-514279.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz1.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz10.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz11.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz12.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz13.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz14.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz15.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz16.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz17.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz18.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz19.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz2.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz20.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz3.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz4.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz5.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz6.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz7.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz8.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz9.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_categorize.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_comparison.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_explorer-Mails.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_explorer-people.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_favorites.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Games.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Hide.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_hotbarcom.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Hotmail.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_hsskin.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemster.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemsterie.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemsteruk.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jobsearch.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Mails.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_new.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_premium.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_reun.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_ringtones.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_SearchBoxTrapper.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_searchfor.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_searchgo.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_weather.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_yellowpages.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\editblbuttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\email-def-511724-548964.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\email-def-511724-9595.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\email-t1-bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\gamesmenu.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\gamesMenu.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\hb_ie_menu.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar-premium.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar_promo.htm
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\icons2.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\ie_games_icon.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\ie_video.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\keywords.idx
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\keywords1.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\layout.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\linkpathlegal.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\more.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2
    ew_games.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\progress.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\s_icons_buttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\sales_buttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\sdfmodifier.xml
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\t2_bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\theweb.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\top7.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Top7_theweb.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\tsd_bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\weathericon.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ads.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans1.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\business_promo.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\cursors.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_1000.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_2000.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_3000.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bar.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_other.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_weather.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\default.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\editblbuttons.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\email-t1-bg.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\gamesmenu.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hb_ie_menu.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar-premium.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar_promo.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\icons2.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_games_icon.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_video.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\keywords.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\keywords1.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\layout.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\linkpathlegal.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\more.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\progress.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\s_icons_buttons.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sales_buttons.xip
    c:\documents a
  • Hoi,

    Blijkbaar was de log niet compleet, dus hierbij eht vervolg …

    Groetjes en superbedankt voor de hulp alvast ;-),
    Bianca.

    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\sdfmodifier.xml
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\t2_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\theweb.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\top7.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\Top7_theweb.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\tsd_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\1\weathericon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\ads.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\btntrans.idx
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\btntrans1.dat
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\business_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\buttondir.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\components.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\cursors.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_1000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_2000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_3000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bar.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bbar1.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_logos.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_other.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_weather.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\default.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_511745-514279.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz1.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz10.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz11.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz12.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz13.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz14.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz15.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz16.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz17.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz18.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz19.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz2.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz20.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz3.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz4.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz5.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz6.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz7.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz8.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz9.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_categorize.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_comparison.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_explorer-Mails.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_explorer-people.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_favorites.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Games.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Hide.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_hotbarcom.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Hotmail.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_hsskin.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemster.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemsterie.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemsteruk.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jobsearch.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Mails.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_new.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_premium.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_reun.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_ringtones.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_SearchBoxTrapper.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_searchfor.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_searchgo.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_weather.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_yellowpages.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\editblbuttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\email-def-511724-548964.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\email-def-511724-9595.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\email-t1-bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\gamesmenu.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\gamesMenu.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\hb_ie_menu.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar-premium.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\icons2.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\ie_games_icon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\ie_video.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\keywords.idx
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\keywords1.dat
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\layout.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\linkpathlegal.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\more.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2
    ew_games.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\progress.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\s_icons_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\sales_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\sdfmodifier.xml
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\t2_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\theweb.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\top7.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\Top7_theweb.mnu
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\tsd_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\2\weathericon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ads.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans1.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\business_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\business_promo.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\cursors.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\cursors.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_1000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_1000.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_2000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_2000.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_3000.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_3000.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bar.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bar.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bbar1.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_logos.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_other.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_other.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_weather.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_weather.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\default.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\editblbuttons.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\email-t1-bg.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\gamesmenu.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hb_ie_menu.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar-premium.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar_promo.htm
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar_promo.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\icons2.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_games_icon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_games_icon.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_video.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_video.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\keywords.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\keywords1.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\layout.cdf
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\layout.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\linkpathlegal.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\linkpathlegal.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\more.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\more.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\progress.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\progress.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\s_icons_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\s_icons_buttons.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sales_buttons.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sales_buttons.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.txt
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sdfmodifier.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sdfmodifier.xml
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\t2_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\t2_bg.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\top7.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\tsd_bg.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\tsd_bg.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\weathericon.res
    c:\documents and settings\gebruiker\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\weathericon.xip
    c:\documents and settings\gebruiker\Application Data\Hotbar\Weather\Weather_XML\General
    c:\documents and settings\gebruiker\Application Data\Hotbar\Weather\WeatherStartup.xml
    c:\documents and settings\gebruiker\Application Data\WeatherDPA
    c:\documents and settings\kids\Application Data\020000001eee4240583C.manifest
    c:\documents and settings\kids\Application Data\020000001eee4240583O.manifest
    c:\documents and settings\kids\Application Data\020000001eee4240583P.manifest
    c:\documents and settings\kids\Application Data\020000001eee4240583S.manifest
    c:\documents and settings\kids\Application Data\Hotbar
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1383594.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1387450.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1387505.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1402145.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\1404311.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\2019327.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\2798290.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\3251993.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\3730773.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\3781281.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\3893245.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\600583.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\997191.sdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\domains.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\1000041060
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\1000067585
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\104622
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\13608
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\167151
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\17025
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\18146
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\18333
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\191116
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\20514
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\218859
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\23923
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\24098
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\24996
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\25032
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\25132
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\252531
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\264564
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\26479
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\291093
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\29547
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\30854
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\34186
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\342421
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\35047
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\367353
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\3677
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\40256
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\403305
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\40766
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\41526
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\41980
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\42013
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\42208
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\422123
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\43719
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\44228
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\44271
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\44387
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\449274
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\449624
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\4574
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\45833
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\46283
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\52335
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\53481
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\544697
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\55725
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\567442
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\568240
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\58203
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\59844
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\61779
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\61837
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\642487
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\64495
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\64605
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\684104
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\68943
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\69358
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702683
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702694
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702695
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702696
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702697
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702714
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702728
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702732
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702733
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\702743
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\737665
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\744857
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\744900
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\748002
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\748176
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\748862
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\752447
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\753232
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\753634
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\7598
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\78600
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\79721
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\80061
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\80663
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\82292
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\85522
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\87591
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\90009
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\9021
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\92930
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\93226
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\93899
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\95716
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\TooltipXML\97666
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\dynamic\ustat\38dd.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\ads.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\btntrans.idx
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\btntrans1.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\business_promo.htm
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\buttondir.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\components.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\cursors.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_1000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_2000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_3000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_bar.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_bbar1.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_logos.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_other.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\d_icons_weather.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\default.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_511745-514279.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz1.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz10.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz11.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz12.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz13.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz14.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz15.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz16.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz17.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz18.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz19.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz2.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz20.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz3.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz4.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz5.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz6.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz7.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz8.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_bidz9.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_categorize.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_comparison.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_explorer-Mails.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_explorer-people.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_favorites.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Games.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Hide.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_hotbarcom.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Hotmail.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_hsskin.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemster.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemsterie.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jemsteruk.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_jobsearch.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_Mails.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_new.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_premium.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_reun.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_ringtones.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_SearchBoxTrapper.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_searchfor.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_searchgo.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_weather.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Default_yellowpages.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\editblbuttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\email-def-511724-548964.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\email-def-511724-9595.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\email-t1-bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\gamesmenu.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\gamesMenu.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\hb_ie_menu.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar-premium-hotbar-premium.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar-premium.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\hotbar_promo.htm
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\icons2.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\ie_games_icon.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\ie_video.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\keywords.idx
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\keywords1.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\layout.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\linkpathlegal.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\more.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1
    ew_games.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\progress.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\s_icons_buttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\sales_buttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\sdfmodifier.xml
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\t2_bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\theweb.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\top7.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\Top7_theweb.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\tsd_bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\1\weathericon.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\ads.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\btntrans.idx
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\btntrans1.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\business_promo.htm
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\buttondir.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\components.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\cursors.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_1000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_2000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_3000.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bar.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bbar1.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_logos.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_other.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\d_icons_weather.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\default.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_511745-514279.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz1.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz10.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz11.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz12.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz13.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz14.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz15.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz16.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz17.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz18.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz19.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz2.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz20.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz3.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz4.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz5.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz6.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz7.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz8.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_bidz9.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_categorize.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_comparison.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_explorer-Mails.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_explorer-people.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_favorites.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Games.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Hide.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_hotbarcom.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Hotmail.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_hsskin.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemster.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemsterie.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jemsteruk.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_jobsearch.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_Mails.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_new.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_premium.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_reun.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_ringtones.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_SearchBoxTrapper.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_searchfor.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_searchgo.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_weather.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Default_yellowpages.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\editblbuttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\email-def-511724-548964.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\email-def-511724-9595.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\email-t1-bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\gamesmenu.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\gamesMenu.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\hb_ie_menu.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar-premium.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\hotbar_promo.htm
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\icons2.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\ie_games_icon.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\ie_video.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\keywords.idx
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\keywords1.dat
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\layout.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\linkpathlegal.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\more.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2
    ew_games.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\progress.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\s_icons_buttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\sales_buttons.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\sdfmodifier.xml
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\t2_bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\theweb.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\top7.cdf
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\Top7_theweb.mnu
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\tsd_bg.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\2\weathericon.res
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ads.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans1.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\business_promo.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\cursors.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_1000.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_2000.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_3000.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bar.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_other.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_weather.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\default.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\editblbuttons.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\email-t1-bg.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\gamesmenu.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hb_ie_menu.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar-premium.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar_promo.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\icons2.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_games_icon.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\ie_video.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\keywords.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\keywords1.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\layout.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\linkpathlegal.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\more.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\progress.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\s_icons_buttons.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sales_buttons.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.txt
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\sdfmodifier.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\t2_bg.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\top7.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\tsd_bg.xip
    c:\documents and settings\kids\Application Data\Hotbar\v3.5\Hotbar\static\DownLoad\weathericon.xip
    c:\documents and settings\Martien\Application Data\020000001eee4240583C.manifest
    c:\documents and settings\Martien\Application Data\020000001eee4240583O.manifest
    c:\documents and settings\Martien\Application Data\020000001eee4240583P.manifest
    c:\documents and settings\Martien\Application Data\020000001eee4240583S.manifest
    c:\program files\WinPCap
    c:\program files\WinPCap\daemon_mgm.exe
    c:\program files\WinPCap
    pf_mgm.exe
    c:\program files\WinPCap\rpcapd.exe
    c:\windows\system32\araunin.dll
    c:\windows\system32\drivers\jvmvqwao.sys
    c:\windows\system32\drivers
    pf.sys
    c:\windows\system32\drivers\sxpsbcly.sys
    c:\windows\system32\IISrlvH.vbs
    c:\windows\system32\msxml3r32.dll.1
    c:\windows\system32
    hwpppbv.dll
    c:\windows\system32\Packet.dll
    c:\windows\system32\pthreadVC.dll
    c:\windows\system32\WanPacket.dll
    c:\windows\system32\wpcap.dll
    c:\windows\system32\yhhbwmv.dll
    C:\xcrashdump.dat
    D:\Autorun.inf

    Besmet exemplaar van c:\windows\system32\drivers
    tfs.sys werd aangetroffen en gedesinfecteerd
    Hersteld exemplaar van - c:\windows\$hf_mig$\KB930916\SP2QFE
    tfs.sys

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    ——-\Legacy_DSEIEEGS
    ——-\Legacy_JVMVQWAO
    ——-\Legacy_NPF
    ——-\Service_dseieegs
    ——-\Service_jvmvqwao
    ——-\Service_NPF


    (((((((((((((((((((( Bestanden Gemaakt van 2009-10-23 to 2009-11-23 ))))))))))))))))))))))))))))))
    .

    2009-11-23 19:50 . 2009-11-23 19:50 360584 —-a-w- c:\windows\system32\drivers\avgtdix.sys
    2009-11-23 19:50 . 2009-11-23 19:50 12464 —-a-w- c:\windows\system32\avgrsstx.dll
    2009-11-23 19:50 . 2009-11-23 19:50 333192 —-a-w- c:\windows\system32\drivers\avgldx86.sys
    2009-11-23 19:50 . 2009-11-23 19:50 28424 —-a-w- c:\windows\system32\drivers\avgmfx86.sys
    2009-11-23 19:50 . 2009-11-23 19:50 ——– d—–w- c:\windows\system32\drivers\Avg
    2009-11-23 19:16 . 2009-11-23 19:15 411368 —-a-w- c:\windows\system32\deploytk.dll
    2009-11-23 19:14 . 2009-11-23 19:14 152576 —-a-w- c:\documents and settings\gebruiker\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
    2009-11-23 19:06 . 2009-11-23 19:06 79488 —-a-w- c:\documents and settings\gebruiker\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
    2009-11-19 19:11 . 2009-11-19 19:11 ——– d—–w- c:\documents and settings\gebruiker\Application Data\Malwarebytes
    2009-11-19 19:10 . 2009-09-10 13:54 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-11-19 19:10 . 2009-11-19 19:10 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-11-19 19:10 . 2009-09-10 13:53 19160 —-a-w- c:\windows\system32\drivers\mbam.sys
    2009-11-13 18:00 . 2009-11-13 18:00 ——– d—–w- c:\program files\AVG
    2009-11-13 18:00 . 2009-11-13 18:00 ——– d—–w- c:\documents and settings\All Users\Application Data\avg9
    2009-11-11 17:34 . 2009-11-11 17:34 ——– d—–w- c:\program files\Marcos Velasco Security
    2009-11-11 17:34 . 2009-11-11 17:34 ——– d—–w- c:\temp\RegClean
    2009-11-09 19:06 . 2009-11-09 19:06 ——– d—–w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
    2009-11-01 20:56 . 2009-11-01 20:56 ——– d—–w- c:\documents and settings\NetworkService\Local Settings\Application Data\xsdghazb
    2009-11-01 20:56 . 2009-11-01 20:56 ——– d—–w- c:\documents and settings\NetworkService\Application Data\xsdghazb
    2009-11-01 20:35 . 2009-11-01 20:35 ——– d—–w- c:\documents and settings\kids\Local Settings\Application Data\xsdghazb
    2009-11-01 20:35 . 2009-11-01 20:35 ——– d—–w- c:\documents and settings\kids\Application Data\xsdghazb
    2009-10-29 17:19 . 2009-10-29 17:19 ——– d—–w- c:\documents and settings\gebruiker\Local Settings\Application Data\xsdghazb
    2009-10-29 17:19 . 2009-10-29 17:19 ——– d—–w- c:\documents and settings\gebruiker\Application Data\xsdghazb

    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-11-23 19:01 . 2006-01-06 18:12 1324 —-a-w- c:\windows\system32\d3d9caps.dat
    2009-11-18 17:29 . 2006-08-01 02:32 45568 —-a-w- c:\documents and settings\gebruiker\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-11-02 18:27 . 2008-11-19 14:11 38320 —ha-w- c:\windows\system32\mlfcache.dat
    2009-10-24 17:44 . 2009-10-24 17:44 ——– d—–w- c:\documents and settings\gebruiker\Application Data\vlc
    2009-10-24 17:03 . 2009-10-24 17:03 ——– d—–w- c:\program files\VideoLAN
    2009-10-24 17:01 . 2009-10-24 17:01 ——– d—–w- c:\documents and settings\All Users\Application Data\HotbarSA
    2009-10-15 20:11 . 2007-01-28 23:06 45568 —-a-w- c:\documents and settings\Martien\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-10-15 18:21 . 2006-01-06 18:22 91950 —-a-w- c:\windows\system32\perfc013.dat
    2009-10-15 18:21 . 2006-01-06 18:22 510980 —-a-w- c:\windows\system32\perfh013.dat
    2009-09-28 13:38 . 2009-09-28 13:38 ——– d—–w- c:\program files\THQ
    2009-09-11 15:37 . 2004-08-04 04:00 133632 —-a-w- c:\windows\system32\msv1_0.dll
    2009-09-04 21:47 . 2004-08-04 04:00 58880 —-a-w- c:\windows\system32\msasn1.dll
    2009-08-29 08:32 . 2004-08-04 04:00 832512 —-a-w- c:\windows\system32\wininet.dll
    2009-08-29 08:32 . 2004-08-04 04:00 78336 —-a-w- c:\windows\system32\ieencode.dll
    2009-08-29 08:32 . 2004-08-04 04:00 17408 ——w- c:\windows\system32\corpol.dll
    2009-08-27 16:24 . 2009-11-12 08:20 45568 —-a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-08-26 09:16 . 2004-08-04 04:00 247326 —-a-w- c:\windows\system32\strmdll.dll
    2008-09-20 21:35 . 2007-05-17 14:48 122880 —-a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
    2009-11-19 21:42 . 2007-02-08 10:41 67688 —-a-w- c:\program files\mozilla firefox\components\jar50.dll
    2009-11-19 21:42 . 2007-02-08 10:41 54368 —-a-w- c:\program files\mozilla firefox\components\jsd3250.dll
    2009-11-19 21:42 . 2007-02-08 10:41 34944 —-a-w- c:\program files\mozilla firefox\components\myspell.dll
    2009-11-19 21:42 . 2007-02-08 10:41 46712 —-a-w- c:\program files\mozilla firefox\components\spellchk.dll
    2009-11-19 21:42 . 2007-02-08 10:41 172136 —-a-w- c:\program files\mozilla firefox\components\xpinstal.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}"= "c:\program files\LimewirePlus\tbLim0.dll" [2009-07-23 2215960]

    [HKEY_CLASSES_ROOT\clsid\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}]
    2009-07-23 20:44 2215960 —-a-w- c:\program files\LimewirePlus\tbLim0.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}"= "c:\program files\LimewirePlus\tbLim0.dll" [2009-07-23 2215960]

    [HKEY_CLASSES_ROOT\clsid\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{47E161A0-F4BA-41DD-A17B-D2EB26AD6A02}"= "c:\program files\LimewirePlus\tbLim0.dll" [2009-07-23 2215960]

    [HKEY_CLASSES_ROOT\clsid\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-22 68856]
    "updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
    "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-08-27 247144]
    "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-12-03 1205760]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "LaunchApp"="Alaunch" [X]
    "SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2005-01-07 102491]
    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-01-07 692315]
    "PCMService"="c:\program files\Acer\Acer Arcade\PCMService.exe" [2005-08-31 147456]
    "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
    "MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
    "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
    "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
    "igfxtray"="c:\windows\system32\igfxtray.exe" [2005-07-18 94208]
    "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-07-18 77824]
    "igfxpers"="c:\windows\system32\igfxpers.exe" [2005-07-18 114688]
    "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2005-10-19 69632]
    "EPM-DM"="c:\acer\Empowering Technology\ePower\epm-dm.exe" [2005-11-25 212992]
    "Acer ePower Management"="c:\acer\Empowering Technology\ePower\Acer ePower Management.exe" [2005-11-09 3084288]
    "LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2005-12-01 458752]
    "eRecoveryService"="c:\acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 397312]
    "ADMTray.exe"="c:\acer\Empowering Technology\admtray.exe" [2005-10-24 2462208]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 49152]
    "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-09-20 29744]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-03-12 342312]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
    "Malwarebytes Anti-Malware (reboot)"="d:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
    "SunJavaUpdateSched"="d:\program files\Java\jre6\bin\jusched.exe" [2009-11-23 149280]
    "AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2009-11-23 2020120]
    "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2005-11-16 15600128]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]
    "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2006-07-29 5354792]

    c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-11 282624]
    Snelstart HP Image Zone.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2005-5-12 73728]
    Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
    Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2004-12-24 479232]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
    otify\avgrsstarter]
    2009-11-23 19:50 12464 —-a-w- c:\windows\system32\avgrsstx.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Acer\\Acer Arcade\\PCMService.exe"=
    "c:\\WINDOWS\\System32\\usmt\\migwiz.exe"=
    "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\MSN Messenger\\msncall.exe"=
    "c:\\Program Files\\Messenger\\MSMSGS.EXE"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpoews01.exe"=
    "c:\\Program Files\\LimeWire\\LimeWire.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\LimeWire Plus\\LimeWire.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\WINDOWS\\System32\\SPOOLSV.EXE"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgemc.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=

    R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [23-11-2009 20:50 333192]
    R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [23-11-2009 20:50 360584]
    R2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [23-11-2009 20:50 906520]
    R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [23-11-2009 20:50 285392]
    R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [27-8-2009 17:05 92008]
    S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [8-2-2007 11:40 29744]
    S3 phil2vid;Philips USB VGA-camera;c:\windows\system32\drivers\philcam2.sys [6-8-2006 18:15 173696]
    S3 ZD1211U(Sitecom);Sitecom Wireless Network USB Adapter Driver(Sitecom);c:\windows\system32\drivers\ZD1211U.sys [1-8-2006 18:42 233472]
    .
    Inhoud van de 'Gedeelde Taken' map

    2009-11-23 c:\windows\Tasks\Google Software Updater.job
    - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-08 22:12]

    2009-11-23 c:\windows\Tasks\Controleren op updates voor Windows Live Toolbar.job
    - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]

    2009-11-13 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 11:34]
    .
    .
    ——- Bijkomende Scan ——-
    .
    uStart Page = hxxp://google.nl/
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    uInternet Settings,ProxyOverride = *.local
    IE: &Sample Toolband Serach - c:\windows\system32\ToolBand.dll/MENUSEARCH.HTM
    IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
    IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game08.zylom.com/activex/zylomgamesplayer.cab
    FF - ProfilePath - c:\documents and settings\gebruiker\Application Data\Mozilla\Firefox\Profiles\2gkmdwfk.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
    FF - prefs.js: browser.search.selectedEngine - Live Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.msn.nl
    FF - prefs.js: keyword.URL - hxxp://search.live.com
    esults.aspx?mkt=nl-nl&FORM=MICNE2&q=
    FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
    FF - component: c:\program files\Mozilla Firefox\c
  • Hoi,

    Hier dan deel III

    Groetjes,
    Bianca.

    2009-11-19 21:42 . 2007-02-08 10:41 67688 —-a-w- c:\program files\mozilla firefox\components\jar50.dll
    2009-11-19 21:42 . 2007-02-08 10:41 54368 —-a-w- c:\program files\mozilla firefox\components\jsd3250.dll
    2009-11-19 21:42 . 2007-02-08 10:41 34944 —-a-w- c:\program files\mozilla firefox\components\myspell.dll
    2009-11-19 21:42 . 2007-02-08 10:41 46712 —-a-w- c:\program files\mozilla firefox\components\spellchk.dll
    2009-11-19 21:42 . 2007-02-08 10:41 172136 —-a-w- c:\program files\mozilla firefox\components\xpinstal.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}"= "c:\program files\LimewirePlus\tbLim0.dll" [2009-07-23 2215960]

    [HKEY_CLASSES_ROOT\clsid\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}]
    2009-07-23 20:44 2215960 —-a-w- c:\program files\LimewirePlus\tbLim0.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}"= "c:\program files\LimewirePlus\tbLim0.dll" [2009-07-23 2215960]

    [HKEY_CLASSES_ROOT\clsid\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{47E161A0-F4BA-41DD-A17B-D2EB26AD6A02}"= "c:\program files\LimewirePlus\tbLim0.dll" [2009-07-23 2215960]

    [HKEY_CLASSES_ROOT\clsid\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-22 68856]
    "updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
    "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-08-27 247144]
    "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-12-03 1205760]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "LaunchApp"="Alaunch" [X]
    "SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2005-01-07 102491]
    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-01-07 692315]
    "PCMService"="c:\program files\Acer\Acer Arcade\PCMService.exe" [2005-08-31 147456]
    "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
    "MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
    "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
    "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
    "igfxtray"="c:\windows\system32\igfxtray.exe" [2005-07-18 94208]
    "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-07-18 77824]
    "igfxpers"="c:\windows\system32\igfxpers.exe" [2005-07-18 114688]
    "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2005-10-19 69632]
    "EPM-DM"="c:\acer\Empowering Technology\ePower\epm-dm.exe" [2005-11-25 212992]
    "Acer ePower Management"="c:\acer\Empowering Technology\ePower\Acer ePower Management.exe" [2005-11-09 3084288]
    "LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2005-12-01 458752]
    "eRecoveryService"="c:\acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 397312]
    "ADMTray.exe"="c:\acer\Empowering Technology\admtray.exe" [2005-10-24 2462208]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 49152]
    "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-09-20 29744]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-03-12 342312]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
    "Malwarebytes Anti-Malware (reboot)"="d:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
    "SunJavaUpdateSched"="d:\program files\Java\jre6\bin\jusched.exe" [2009-11-23 149280]
    "AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2009-11-23 2020120]
    "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2005-11-16 15600128]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]
    "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2006-07-29 5354792]

    c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-11 282624]
    Snelstart HP Image Zone.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2005-5-12 73728]
    Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
    Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2004-12-24 479232]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
    otify\avgrsstarter]
    2009-11-23 19:50 12464 —-a-w- c:\windows\system32\avgrsstx.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Acer\\Acer Arcade\\PCMService.exe"=
    "c:\\WINDOWS\\System32\\usmt\\migwiz.exe"=
    "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\MSN Messenger\\msncall.exe"=
    "c:\\Program Files\\Messenger\\MSMSGS.EXE"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpoews01.exe"=
    "c:\\Program Files\\LimeWire\\LimeWire.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\LimeWire Plus\\LimeWire.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\WINDOWS\\System32\\SPOOLSV.EXE"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgemc.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=

    R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [23-11-2009 20:50 333192]
    R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [23-11-2009 20:50 360584]
    R2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [23-11-2009 20:50 906520]
    R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [23-11-2009 20:50 285392]
    R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [27-8-2009 17:05 92008]
    S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [8-2-2007 11:40 29744]
    S3 phil2vid;Philips USB VGA-camera;c:\windows\system32\drivers\philcam2.sys [6-8-2006 18:15 173696]
    S3 ZD1211U(Sitecom);Sitecom Wireless Network USB Adapter Driver(Sitecom);c:\windows\system32\drivers\ZD1211U.sys [1-8-2006 18:42 233472]
    .
    Inhoud van de 'Gedeelde Taken' map

    2009-11-23 c:\windows\Tasks\Google Software Updater.job
    - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-08 22:12]

    2009-11-23 c:\windows\Tasks\Controleren op updates voor Windows Live Toolbar.job
    - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]

    2009-11-13 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 11:34]
    .
    .
    ——- Bijkomende Scan ——-
    .
    uStart Page = hxxp://google.nl/
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    uInternet Settings,ProxyOverride = *.local
    IE: &Sample Toolband Serach - c:\windows\system32\ToolBand.dll/MENUSEARCH.HTM
    IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
    IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game08.zylom.com/activex/zylomgamesplayer.cab
    FF - ProfilePath - c:\documents and settings\gebruiker\Application Data\Mozilla\Firefox\Profiles\2gkmdwfk.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
    FF - prefs.js: browser.search.selectedEngine - Live Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.msn.nl
    FF - prefs.js: keyword.URL - hxxp://search.live.com
    esults.aspx?mkt=nl-nl&FORM=MICNE2&q=
    FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
    FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
    FF - component: c:\program files\Mozilla Firefox\extensions\{47e161a0-f4ba-41dd-a17b-d2eb26ad6a02}\components\FFAlert.dll
    FF - component: c:\program files\Mozilla Firefox\extensions\talkback@mozilla.org\components\qfaservices.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
    .
    - - - - ORPHANS VERWIJDERD - - - -

    BHO-{02F98B9C-8097-49CC-95AD-F5201CBE710a} - c:\windows\system32
    hwpppbv.dll
    Notify-320d180e583 - c:\windows\System32\msxml3r32.dll



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-11-23 21:34
    Windows 5.1.2600 Service Pack 2 FAT NTAPI

    scannen van verborgen processen …

    scannen van verborgen autostart items …

    scannen van verborgen bestanden …

    Scan succesvol afgerond
    verborgen bestanden: 0

    **************************************************************************
    "ImagePath"="\"c:\program files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe\"\00|\00\00\00\00PöV\02\00\00\00\00°ÓY\02`ç\13\00pè\13\00pè\13\00ˆ\01\15\00\00Þ
    [\02ÿÿÿÿ\18\02\15\00x\01\15\00\00\00\15\00\00\00\00\00ö\1b"

    .
    ——————— DLLs Geladen Onder Lopende Processen ———————

    - - - - - - - > 'winlogon.exe'(776)
    c:\windows\system32\Ati2evxx.dll

    - - - - - - - > 'explorer.exe'(2856)
    c:\windows\system32\MSNChatHook.dll
    c:\windows\system32\sysenv.dll
    c:\windows\system32\MSVCR71.dll
    c:\windows\system32\browselc.dll
    c:\windows\system32\msls31.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
    c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
    c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_dut.nlr
    c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ———————— Andere Aktieve Processen ————————
    .
    c:\program files\AVG\AVG9\avgchsvx.exe
    c:\program files\AVG\AVG9\avgrsx.exe
    c:\program files\Intel\Wireless\Bin\EvtEng.exe
    c:\program files\Intel\Wireless\Bin\S24EvMon.exe
    c:\program files\AVG\AVG9\avgcsrvx.exe
    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\acer\Empowering Technology\admServ.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\program files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
    c:\program files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
    c:\program files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
    c:\program files\AVG\AVG9\avgnsx.exe
    d:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Intel\Wireless\Bin\RegSrvc.exe
    c:\program files\CyberLink\Shared Files\RichVideo.exe
    c:\program files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
    c:\program files\AVG\AVG9\avgcsrvx.exe
    c:\program files\Canon\CAL\CALMAIN.exe
    c:\windows\system32\wscntfy.exe
    c:\windows\system32\igfxext.exe
    c:\windows\system32\igfxsrvc.exe
    c:\program files\iPod\bin\iPodService.exe
    c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
    c:\program files\HP\Digital Imaging\bin\hpqimzone.exe
    c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
    c:\program files\PC Connectivity Solution\ServiceLayer.exe
    c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
    c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
    c:\program files\PC Connectivity Solution\Transports\NclToBTSrv.exe
    c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
    c:\program files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
    .
    **************************************************************************
    .
    Voltooingstijd: 2009-11-23 21:38 - machine werd herstart
    ComboFix-quarantined-files.txt 2009-11-23 20:38

    Pre-Run: 12.821.299.200 bytes beschikbaar
    Post-Run: 14.783.545.344 bytes beschikbaar

    WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

    - - End Of File - - 92C692FE764FF6BC99AEB7588CCAEEEE
  • Hallo Bianca, pft - een Combofixlog als bovenstaande, heb ik nog niet eerder onder ogen gehad, maar ja / alles heeft een eerste keer!


    Open een nieuw kladblok bestand. (Start>Alle programma’s>Bureau-accessoires>Kladblok),
    kopieer en plak de volgende (vetgedrukte, blauwe tekst) in een leeg venster


    [b:385e783aea]Folder::
    c:\windows\system32\d3d9caps.dat
    c:\program files\Marcos Velasco Security
    c:\temp\RegClean

    Driver::
    ——-\Legacy_DSEIEEGS
    ——-\Legacy_JVMVQWAO
    ——-\Legacy_NPF
    ——-\Service_dseieegs
    ——-\Service_jvmvqwao
    ——-\Service_NPF[/color:385e783aea][/b:385e783aea]


    Sla dit kladblokbestand op je bureaublad op als [b:385e783aea]CFScript.txt[/b:385e783aea].

    [b:385e783aea]Nu eerst de antivirus deaktiveren![/b:385e783aea]


    Sleep CFScript.txt in ComboFix.exe


    [img:385e783aea]http://i5.photobucket.com/albums/y165/Kingpin2005/CFScript.gif[/img:385e783aea]

    Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.


    Post het Combofix log dat na het opnieuw starten wordt getoond!
  • Hoi,

    Alles is gedraaid, maar ik hoefde de computer niet opnieuw op te starten.
    Ik heb zelf geen idee of dat 'goed'of 'fout'is ;-). De log is weer immens groot.

    Groetjes,
    Bianca.

    ComboFix 09-11-25.01 - gebruiker 25-11-2009 20:08.2.1 - FAT32x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1014.342 [GMT 1:00]
    Gestart vanuit: c:\documents and settings\gebruiker\Bureaublad\ComboFix.exe
    gebruikte Opdracht switches :: c:\documents and settings\gebruiker\Bureaublad\CFScript.txt.txt
    AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\program files\Marcos Velasco Security
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\ESPECIAL.DAT
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\HELPGERAL.HTML
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\HELPINFO.HTML
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\HELPOPCOES.HTML
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\IMAGEM1.JPG
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\IMAGEM2.JPG
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\IMAGEM3.JPG
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\IMAGEM4.JPG
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\IMAGEM5.JPG
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\MVREGCLEAN.EXE
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\MVREGCLEAN.EXE.MANIFEST
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\OPCOES.DAT
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\PARSER.DLL
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\01.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\02.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\03.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\04.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\05.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\06.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\07.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\08.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\09.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\10.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\Skins\11.skn
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\undo-20091112-125433.reg
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\unins000.dat
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\unins000.exe
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\USUARIO.DAT
    c:\program files\Marcos Velasco Security\MV RegClean 5.0 English\VELASCO.DAT
    c:\temp\RegClean
    c:\temp\RegClean\Marcos Velasco Security.url
    c:\temp\RegClean\setup.exe

    .
    (((((((((((((((((((( Bestanden Gemaakt van 2009-10-25 to 2009-11-25 ))))))))))))))))))))))))))))))
    .

    2009-11-25 18:22 . 2009-11-25 18:22 ——– d—–w- c:\windows\LastGood
    2009-11-25 18:18 . 2009-11-25 18:18 ——– d—–w- c:\windows\ShellNew
    2009-11-25 14:18 . 2009-11-25 14:18 ——– d-sh–w- c:\documents and settings\gebruiker\PrivacIE
    2009-11-25 14:15 . 2009-11-25 14:16 ——– d-sh–w- c:\documents and settings\gebruiker\IETldCache
    2009-11-25 14:11 . 2009-10-02 04:44 92160 ——w- c:\windows\system32\dllcache\iecompat.dll
    2009-11-25 14:10 . 2009-11-25 14:10 ——– d—–w- c:\windows\ie8updates
    2009-11-25 14:10 . 2009-08-29 08:00 12800 ——w- c:\windows\system32\dllcache\xpshims.dll
    2009-11-25 14:10 . 2009-08-29 08:00 246272 ——w- c:\windows\system32\dllcache\ieproxy.dll
    2009-11-25 14:07 . 2009-11-25 14:07 ——– d–h–w- c:\windows\ie8
    2009-11-25 13:46 . 2009-11-25 13:46 ——– d—–w- C:\$AVG
    2009-11-25 13:39 . 2009-11-23 19:50 497944 —-a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgchjwx.dll
    2009-11-25 13:39 . 2009-11-23 19:50 3963648 —-a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgcorex.dll
    2009-11-25 13:38 . 2009-11-23 19:50 877848 —-a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe
    2009-11-25 13:38 . 2009-11-23 19:50 1657112 —-a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll
    2009-11-23 21:46 . 2009-11-23 21:46 ——– d—–w- c:\windows\l2schemas
    2009-11-23 21:46 . 2009-11-23 21:46 ——– d—–w- c:\windows\system32
    l
    2009-11-23 21:46 . 2009-11-23 21:46 ——– d—–w- c:\windows\system32\bits
    2009-11-23 21:31 . 2009-11-23 21:31 ——– d—–w- c:\windows\EHome
    2009-11-23 19:50 . 2009-11-23 19:50 360584 —-a-w- c:\windows\system32\drivers\avgtdix.sys
    2009-11-23 19:50 . 2009-11-23 19:50 12464 —-a-w- c:\windows\system32\avgrsstx.dll
    2009-11-23 19:50 . 2009-11-23 19:50 333192 —-a-w- c:\windows\system32\drivers\avgldx86.sys
    2009-11-23 19:50 . 2009-11-23 19:50 28424 —-a-w- c:\windows\system32\drivers\avgmfx86.sys
    2009-11-23 19:50 . 2009-11-23 19:50 ——– d—–w- c:\windows\system32\drivers\Avg
    2009-11-23 19:16 . 2009-11-23 19:15 411368 —-a-w- c:\windows\system32\deploytk.dll
    2009-11-23 19:14 . 2009-11-23 19:14 152576 —-a-w- c:\documents and settings\gebruiker\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
    2009-11-23 19:06 . 2009-11-23 19:06 79488 —-a-w- c:\documents and settings\gebruiker\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
    2009-11-19 19:11 . 2009-11-19 19:11 ——– d—–w- c:\documents and settings\gebruiker\Application Data\Malwarebytes
    2009-11-19 19:10 . 2009-09-10 13:54 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-11-19 19:10 . 2009-11-19 19:10 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-11-19 19:10 . 2009-09-10 13:53 19160 —-a-w- c:\windows\system32\drivers\mbam.sys
    2009-11-13 18:00 . 2009-11-13 18:00 ——– d—–w- c:\program files\AVG
    2009-11-13 18:00 . 2009-11-13 18:00 ——– d—–w- c:\documents and settings\All Users\Application Data\avg9
    2009-11-09 19:06 . 2009-11-09 19:06 ——– d—–w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
    2009-11-01 20:56 . 2009-11-01 20:56 ——– d—–w- c:\documents and settings\NetworkService\Local Settings\Application Data\xsdghazb
    2009-11-01 20:56 . 2009-11-01 20:56 ——– d—–w- c:\documents and settings\NetworkService\Application Data\xsdghazb
    2009-11-01 20:35 . 2009-11-01 20:35 ——– d—–w- c:\documents and settings\kids\Local Settings\Application Data\xsdghazb
    2009-11-01 20:35 . 2009-11-01 20:35 ——– d—–w- c:\documents and settings\kids\Application Data\xsdghazb
    2009-10-29 17:19 . 2009-10-29 17:19 ——– d—–w- c:\documents and settings\gebruiker\Local Settings\Application Data\xsdghazb
    2009-10-29 17:19 . 2009-10-29 17:19 ——– d—–w- c:\documents and settings\gebruiker\Application Data\xsdghazb

    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-11-25 18:22 . 2007-03-26 20:27 5058 —-a-w- c:\windows\Help\hhcolreg.dat
    2009-11-23 22:11 . 2006-01-06 18:22 91950 —-a-w- c:\windows\system32\perfc013.dat
    2009-11-23 22:11 . 2006-01-06 18:22 510980 —-a-w- c:\windows\system32\perfh013.dat
    2009-11-23 21:48 . 2006-01-06 00:55 76487 —-a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
    2009-11-23 19:01 . 2006-01-06 18:12 1324 —-a-w- c:\windows\system32\d3d9caps.dat
    2009-11-18 17:29 . 2006-08-01 02:32 45568 —-a-w- c:\documents and settings\gebruiker\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-11-02 18:27 . 2008-11-19 14:11 38320 —ha-w- c:\windows\system32\mlfcache.dat
    2009-10-24 17:44 . 2009-10-24 17:44 ——– d—–w- c:\documents and settings\gebruiker\Application Data\vlc
    2009-10-24 17:03 . 2009-10-24 17:03 ——– d—–w- c:\program files\VideoLAN
    2009-10-24 17:01 . 2009-10-24 17:01 ——– d—–w- c:\documents and settings\All Users\Application Data\HotbarSA
    2009-10-15 20:11 . 2007-01-28 23:06 45568 —-a-w- c:\documents and settings\Martien\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-09-28 13:38 . 2009-09-28 13:38 ——– d—–w- c:\program files\THQ
    2009-09-11 15:20 . 2004-08-04 04:00 136192 —-a-w- c:\windows\system32\msv1_0.dll
    2009-09-04 22:05 . 2004-08-04 04:00 58880 —-a-w- c:\windows\system32\msasn1.dll
    2009-08-29 08:00 . 2004-08-04 04:00 916480 —-a-w- c:\windows\system32\wininet.dll
    2008-09-20 21:35 . 2007-05-17 14:48 122880 —-a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
    2009-11-19 21:42 . 2007-02-08 10:41 67688 —-a-w- c:\program files\mozilla firefox\components\jar50.dll
    2009-11-19 21:42 . 2007-02-08 10:41 54368 —-a-w- c:\program files\mozilla firefox\components\jsd3250.dll
    2009-11-19 21:42 . 2007-02-08 10:41 34944 —-a-w- c:\program files\mozilla firefox\components\myspell.dll
    2009-11-19 21:42 . 2007-02-08 10:41 46712 —-a-w- c:\program files\mozilla firefox\components\spellchk.dll
    2009-11-19 21:42 . 2007-02-08 10:41 172136 —-a-w- c:\program files\mozilla firefox\components\xpinstal.dll
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-11-23_20.34.09 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-04-14 18:00 . 2008-04-14 18:00 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
    + 2008-04-14 18:00 . 2008-04-14 18:00 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    - 2007-02-17 22:22 . 2007-01-19 12:52 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 50688 c:\windows\twain_32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 50688 c:\windows\twain_32.dll
    + 2009-11-25 17:31 . 2009-11-25 17:31 16384 c:\windows\Temp\Perflib_Perfdata_7fc.dat
    + 2004-08-04 04:00 . 2008-04-14 18:02 11776 c:\windows\system32\xolehlp.dll
    - 2004-08-04 04:00 . 2006-03-01 20:44 11776 c:\windows\system32\xolehlp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 50176 c:\windows\system32\xmlprovi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 50176 c:\windows\system32\xmlprovi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 30720 c:\windows\system32\xcopy.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 30720 c:\windows\system32\xcopy.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 91648 c:\windows\system32\xactsrv.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 91648 c:\windows\system32\xactsrv.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 52736 c:\windows\system32\wzcsapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 18432 c:\windows\system32\wtsapi32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18432 c:\windows\system32\wtsapi32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 51200 c:\windows\system32\wstdecod.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 51200 c:\windows\system32\wstdecod.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24576 c:\windows\system32\wsock32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 24576 c:\windows\system32\wsock32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 41984 c:\windows\system32\wsnmp32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 19456 c:\windows\system32\wshtcpip.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 11264 c:\windows\system32\WshRm.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 14336 c:\windows\system32\wship6.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 14336 c:\windows\system32\wship6.dll
    + 2004-08-04 04:00 . 2008-05-09 10:56 90112 c:\windows\system32\wshext.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 36864 c:\windows\system32\wshcon.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 80896 c:\windows\system32\wscsvc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 13824 c:\windows\system32\wscntfy.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 13824 c:\windows\system32\wscntfy.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 19968 c:\windows\system32\ws2help.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 19968 c:\windows\system32\ws2help.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 82432 c:\windows\system32\ws2_32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 11776 c:\windows\system32\wpnpinst.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 32256 c:\windows\system32\wpabaln.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 32256 c:\windows\system32\wpabaln.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\wmpui.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\wmpui.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\wmpcore.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\wmpcore.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\wmpcd.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\wmpcd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 93696 c:\windows\system32\wlnotify.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 93696 c:\windows\system32\wlnotify.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 69120 c:\windows\system32\wlanapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 53760 c:\windows\system32\winsta.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 53760 c:\windows\system32\winsta.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 17408 c:\windows\system32\winshfhc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17408 c:\windows\system32\winshfhc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 99840 c:\windows\system32\winscard.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 99840 c:\windows\system32\winscard.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 16896 c:\windows\system32\winrnr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 16896 c:\windows\system32\winrnr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 32256 c:\windows\system32\winipsec.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 75776 c:\windows\system32\wiascr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 75776 c:\windows\system32\wiascr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 66048 c:\windows\system32\wextract.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 66048 c:\windows\system32\wextract.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 68096 c:\windows\system32\webclnt.dll
    - 2004-08-04 04:00 . 2006-01-04 04:36 68096 c:\windows\system32\webclnt.dll
    - 2004-08-04 00:03 . 2004-08-04 00:03 23552 c:\windows\system32\wdmaud.drv
    + 2004-08-04 00:03 . 2008-04-14 18:03 23552 c:\windows\system32\wdmaud.drv
    + 2004-08-04 04:00 . 2009-06-25 09:27 54272 c:\windows\system32\wdigest.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 98304 c:\windows\system32\wbem\wmiutils.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 98304 c:\windows\system32\wbem\wmiutils.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 41472 c:\windows\system32\wbem\wmipsess.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 41472 c:\windows\system32\wbem\wmipsess.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 62464 c:\windows\system32\wbem\wmipjobj.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 61952 c:\windows\system32\wbem\wmipiprt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 60928 c:\windows\system32\wbem\wmicookr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 60928 c:\windows\system32\wbem\wmicookr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 88576 c:\windows\system32\wbem\wmiaprpl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 43520 c:\windows\system32\wbem\wbemsvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 43520 c:\windows\system32\wbem\wbemsvc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18944 c:\windows\system32\wbem\wbemprox.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 18944 c:\windows\system32\wbem\wbemprox.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 44032 c:\windows\system32\wbem\wbemperf.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 44032 c:\windows\system32\wbem\wbemperf.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 71680 c:\windows\system32\wbem\wbemcons.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 71680 c:\windows\system32\wbem\wbemcons.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 86528 c:\windows\system32\wbem\stdprov.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 86528 c:\windows\system32\wbem\stdprov.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 36352 c:\windows\system32\wbem\scrcons.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 47104 c:\windows\system32\wbem
    cprov.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 47104 c:\windows\system32\wbem
    cprov.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17408 c:\windows\system32\wbem\mofcomp.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 17408 c:\windows\system32\wbem\mofcomp.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 24576 c:\windows\system32\wbem\krnlprov.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24576 c:\windows\system32\wbem\krnlprov.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 21504 c:\windows\system32\wbem\evntrprv.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17664 c:\windows\system32\watchdog.sys
    + 2004-08-04 04:00 . 2008-04-13 19:45 17664 c:\windows\system32\watchdog.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 15872 c:\windows\system32\w3ssl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 15872 c:\windows\system32\w3ssl.dll
    + 2006-08-06 17:14 . 2008-04-14 18:02 54272 c:\windows\system32\vfwwdm32.dll
    - 2006-08-06 17:14 . 2004-08-04 00:03 54272 c:\windows\system32\vfwwdm32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18944 c:\windows\system32\version.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 18944 c:\windows\system32\version.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 26624 c:\windows\system32\verifier.dll
    - 2006-03-17 01:38 . 2006-03-17 01:38 28672 c:\windows\system32\verclsid.exe
    + 2006-03-17 01:38 . 2008-04-14 18:03 28672 c:\windows\system32\verclsid.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 51712 c:\windows\system32\vdmredir.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 51712 c:\windows\system32\vdmredir.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 26112 c:\windows\system32\vdmdbg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 26112 c:\windows\system32\vdmdbg.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 30749 c:\windows\system32\vbajet32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 30749 c:\windows\system32\vbajet32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 50176 c:\windows\system32\utilman.exe
    - 2004-08-04 04:00 . 2006-10-04 14:34 50176 c:\windows\system32\utilman.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 19968 c:\windows\system32\usmt\log.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 19968 c:\windows\system32\usmt\log.dll
    + 2008-04-13 17:44 . 2008-04-13 17:44 17920 c:\windows\system32\usmt\cobramsg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 26112 c:\windows\system32\userinit.exe
    + 2004-08-04 00:03 . 2008-04-14 18:02 76288 c:\windows\system32\usbui.dll
    - 2004-08-04 00:03 . 2004-08-04 00:03 76288 c:\windows\system32\usbui.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 16896 c:\windows\system32\usbmon.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 16896 c:\windows\system32\usbmon.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 18432 c:\windows\system32\ups.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 18432 c:\windows\system32\ups.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 16896 c:\windows\system32\upnpcont.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 16896 c:\windows\system32\upnpcont.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 13824 c:\windows\system32\uniplat.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 13824 c:\windows\system32\uniplat.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 78336 c:\windows\system32\unimdmat.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 78336 c:\windows\system32\unimdmat.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 76288 c:\windows\system32\uniime.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 76288 c:\windows\system32\uniime.dll
    - 2004-08-04 04:00 . 2006-10-04 14:39 36352 c:\windows\system32\umandlg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 36352 c:\windows\system32\umandlg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 26624 c:\windows\system32\udhisapi.dll
    - 2007-01-29 08:58 . 2009-07-14 12:03 46080 c:\windows\system32\tzchange.exe
    + 2007-01-29 08:58 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 57856 c:\windows\system32\twext.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 50688 c:\windows\system32\tspkg.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 53248 c:\windows\system32\tsgqec.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 12168 c:\windows\system32\tsddd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 12168 c:\windows\system32\tsddd.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 94208 c:\windows\system32\tscfgwmi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 94208 c:\windows\system32\tscfgwmi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 90112 c:\windows\system32\trkwks.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 12800 c:\windows\system32\tree.com
    + 2004-08-04 04:00 . 2008-04-14 18:03 12800 c:\windows\system32\tracert.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 12800 c:\windows\system32\tracert.exe
    + 2004-08-04 04:00 . 2009-06-15 11:45 79872 c:\windows\system32\telnet.exe
    - 2004-08-04 04:00 . 2009-06-15 12:33 79872 c:\windows\system32\telnet.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 46080 c:\windows\system32\tcpmonui.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 46080 c:\windows\system32\tcpmon.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 46080 c:\windows\system32\tcpmon.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 14848 c:\windows\system32\tcpmib.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 14848 c:\windows\system32\tcpmib.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 57856 c:\windows\system32\synceng.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 57856 c:\windows\system32\synceng.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 14336 c:\windows\system32\svchost.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 14336 c:\windows\system32\svchost.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 75776 c:\windows\system32\strmfilt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 75776 c:\windows\system32\strmfilt.dll
    - 2004-08-04 00:03 . 2004-08-04 00:03 76288 c:\windows\system32\storprop.dll
    + 2004-08-04 00:03 . 2008-04-14 18:02 76288 c:\windows\system32\storprop.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 14848 c:\windows\system32\stimon.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 14848 c:\windows\system32\stimon.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 68096 c:\windows\system32\sti.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 59392 c:\windows\system32\stclient.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 14336 c:\windows\system32\ssstars.scr
    - 2004-08-04 04:00 . 2004-08-04 04:00 14336 c:\windows\system32\ssstars.scr
    - 2004-08-04 04:00 . 2004-08-04 04:00 18944 c:\windows\system32\ssmyst.scr
    + 2004-08-04 04:00 . 2008-04-14 18:03 18944 c:\windows\system32\ssmyst.scr
    + 2004-08-04 04:00 . 2008-04-14 18:03 47616 c:\windows\system32\ssmypics.scr
    - 2004-08-04 04:00 . 2004-08-04 04:00 47616 c:\windows\system32\ssmypics.scr
    + 2004-08-04 04:00 . 2008-04-14 18:03 20992 c:\windows\system32\ssmarque.scr
    - 2004-08-04 04:00 . 2004-08-04 04:00 20992 c:\windows\system32\ssmarque.scr
    + 2004-08-04 04:00 . 2008-04-14 18:02 71680 c:\windows\system32\ssdpsrv.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 71680 c:\windows\system32\ssdpsrv.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 34816 c:\windows\system32\ssdpapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 34816 c:\windows\system32\ssdpapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 19968 c:\windows\system32\ssbezier.scr
    - 2004-08-04 04:00 . 2004-08-04 04:00 19968 c:\windows\system32\ssbezier.scr
    + 2004-08-04 04:00 . 2008-04-14 18:02 96768 c:\windows\system32\srvsvc.dll
    - 2004-08-04 04:00 . 2004-12-07 20:34 96768 c:\windows\system32\srvsvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 67584 c:\windows\system32\srclient.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 67584 c:\windows\system32\srclient.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 20992 c:\windows\system32\spupdwxp.exe
    + 2004-11-18 09:42 . 2009-01-07 17:21 26144 c:\windows\system32\spupdsvc.exe
    - 2004-08-04 04:00 . 2005-06-11 00:53 57856 c:\windows\system32\spoolsv.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 57856 c:\windows\system32\spoolsv.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 75264 c:\windows\system32\spoolss.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 26624 c:\windows\system32\spool\drivers\w32x86\3\fxsdrv.dll
    + 2004-08-04 04:00 . 2008-04-14 21:33 11264 c:\windows\system32\spnpinst.exe
    + 2008-10-21 19:36 . 2009-01-07 17:21 18464 c:\windows\system32\spmsg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 26112 c:\windows\system32\sort.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 18944 c:\windows\system32\snmpapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18944 c:\windows\system32\snmpapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 50688 c:\windows\system32\smss.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 50688 c:\windows\system32\smss.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 91648 c:\windows\system32\smlogsvc.exe
    + 2008-04-14 18:03 . 2008-04-14 18:03 73796 c:\windows\system32\slserv.exe
    + 2008-04-14 18:03 . 2008-04-14 18:03 32866 c:\windows\system32\slrundll.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 73832 c:\windows\system32\slcoinst.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 98304 c:\windows\system32\slbiop.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 98304 c:\windows\system32\slbiop.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 25600 c:\windows\system32\slayerxp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 25600 c:\windows\system32\slayerxp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 26112 c:\windows\system32\skeys.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 26112 c:\windows\system32\skeys.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 71168 c:\windows\system32\sigverif.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 71168 c:\windows\system32\sigverif.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 13824 c:\windows\system32\sigtab.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 13824 c:\windows\system32\sigtab.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20992 c:\windows\system32\shutdown.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 20992 c:\windows\system32\shutdown.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 28160 c:\windows\system32\shscrap.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 28160 c:\windows\system32\shscrap.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 78336 c:\windows\system32\shrpubw.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 78336 c:\windows\system32\shrpubw.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 45056 c:\windows\system32\shmgrate.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 65024 c:\windows\system32\shimeng.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 68096 c:\windows\system32\shgina.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 68096 c:\windows\system32\shgina.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 25088 c:\windows\system32\shfolder.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 25088 c:\windows\system32\shfolder.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 32768 c:\windows\system32\setupn.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 26624 c:\windows\system32\Setup\startoc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17408 c:\windows\system32\Setup\ocmsn.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 17408 c:\windows\system32\Setup\ocmsn.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 15872 c:\windows\system32\Setup\ocgen.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15872 c:\windows\system32\Setup\ocgen.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 63488 c:\windows\system32\Setup
    toc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 63488 c:\windows\system32\Setup
    toc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 77824 c:\windows\system32\Setup
    etoc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 77824 c:\windows\system32\Setup
    etoc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 15360 c:\windows\system32\Setup\msgrocm.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15360 c:\windows\system32\Setup\msgrocm.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 90112 c:\windows\system32\Setup\msdtcstp.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 32828 c:\windows\system32\Setup\fp40ext.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 32828 c:\windows\system32\Setup\fp40ext.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 23040 c:\windows\system32\setup.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 23040 c:\windows\system32\setup.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 32768 c:\windows\system32\sethc.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 32768 c:\windows\system32\sethc.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 56320 c:\windows\system32\servdeps.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 56320 c:\windows\system32\servdeps.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 39424 c:\windows\system32\sens.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 55296 c:\windows\system32\sendmail.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 55296 c:\windows\system32\sendmail.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 29696 c:\windows\system32\sendcmsg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 29696 c:\windows\system32\sendcmsg.dll
    + 2004-08-04 04:00 . 2009-06-25 09:27 56832 c:\windows\system32\secur32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18944 c:\windows\system32\seclogon.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 18944 c:\windows\system32\seclogon.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 29184 c:\windows\system32\sdhcinst.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 29184 c:\windows\system32\sdhcinst.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 78336 c:\windows\system32\sdbinst.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 78336 c:\windows\system32\sdbinst.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 21504 c:\windows\system32\sclgntfy.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 21504 c:\windows\system32\sclgntfy.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 98304 c:\windows\system32\scardsvr.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 98304 c:\windows\system32\scardsvr.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 70656 c:\windows\system32\scarddlg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 70656 c:\windows\system32\scarddlg.dll
    - 2004-08-04 04:00 . 2009-02-06 17:54 35328 c:\windows\system32\sc.exe
    + 2004-08-04 04:00 . 2009-02-06 11:39 35328 c:\windows\system32\sc.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 13824 c:\windows\system32\savedump.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 13824 c:\windows\system32\savedump.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 64000 c:\windows\system32\samlib.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 64000 c:\windows\system32\samlib.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 45568 c:\windows\system32\safrslv.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 45568 c:\windows\system32\safrslv.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 29696 c:\windows\system32\safrdm.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 29696 c:\windows\system32\safrdm.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 43520 c:\windows\system32\safrcdlg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 43520 c:\windows\system32\safrcdlg.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 14336 c:\windows\system32\runonce.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 14336 c:\windows\system32\runonce.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 33792 c:\windows\system32\rundll32.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 33792 c:\windows\system32\rundll32.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 44032 c:\windows\system32\rtutils.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 44032 c:\windows\system32\rtutils.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 31744 c:\windows\system32\rtipxmib.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 31744 c:\windows\system32\rtipxmib.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 78336 c:\windows\system32\rtcshare.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 78336 c:\windows\system32\rtcshare.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 92672 c:\windows\system32\rsvpsp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18944 c:\windows\system32\rsmps.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 18944 c:\windows\system32\rsmps.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 40448 c:\windows\system32\rshx32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 40448 c:\windows\system32\rshx32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 15872 c:\windows\system32\rsh.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 15872 c:\windows\system32\rsh.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 14848 c:\windows\system32\rexec.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 14848 c:\windows\system32\rexec.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 58880 c:\windows\system32\resutils.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 58880 c:\windows\system32\resutils.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 61440 c:\windows\system32\remotepg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 61440 c:\windows\system32\remotepg.dll
    + 2009-11-23 21:37 . 2004-08-04 04:00 40192 c:\windows\system32\ReinstallBackups\0020\DriverFiles\i386\intelppm.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 12288 c:\windows\system32\regsvr32.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 12288 c:\windows\system32\regsvr32.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 59904 c:\windows\system32\regsvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 59904 c:\windows\system32\regsvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 49664 c:\windows\system32\regapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 49664 c:\windows\system32\regapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 56832 c:\windows\system32\reg.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 56832 c:\windows\system32\reg.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 67072 c:\windows\system32\rdshost.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 67072 c:\windows\system32\rdshost.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 13824 c:\windows\system32\rdsaddin.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 13824 c:\windows\system32\rdsaddin.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 87176 c:\windows\system32\rdpwsx.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 87176 c:\windows\system32\rdpwsx.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 19968 c:\windows\system32\rdpsnd.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 19968 c:\windows\system32\rdpsnd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 92424 c:\windows\system32\rdpdd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 62976 c:\windows\system32\rdpclip.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 22016 c:\windows\system32\rcp.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 22016 c:\windows\system32\rcp.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 35840 c:\windows\system32\rcimlby.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 35840 c:\windows\system32\rcimlby.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 58368 c:\windows\system32\rastapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 16384 c:\windows\system32\rassapi.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 61952 c:\windows\system32\rasqec.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 57856 c:\windows\system32\rasphone.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 57856 c:\windows\system32\rasphone.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 61440 c:\windows\system32\rasman.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 61440 c:\windows\system32\rasman.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 79872 c:\windows\system32\raschap.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 88576 c:\windows\system32\rasauto.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 43520 c:\windows\system32\racpldlg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 43520 c:\windows\system32\racpldlg.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 76800 c:\windows\system32\qutil.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\qprocess.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 20480 c:\windows\system32\qprocess.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 18944 c:\windows\system32\qmgrprxy.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18944 c:\windows\system32\qmgrprxy.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 62464 c:\windows\system32\qcliprov.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 34304 c:\windows\system32\pstorsvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 34304 c:\windows\system32\pstorsvc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 43520 c:\windows\system32\pstorec.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 43520 c:\windows\system32\pstorec.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 98304 c:\windows\system32\psbase.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 98304 c:\windows\system32\psbase.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 23040 c:\windows\system32\psapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 23040 c:\windows\system32\psapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 50688 c:\windows\system32\proquota.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 50688 c:\windows\system32\proquota.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 27648 c:\windows\system32\profmap.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 27648 c:\windows\system32\profmap.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17408 c:\windows\system32\powrprof.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 17408 c:\windows\system32\powrprof.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 49152 c:\windows\system32\powercfg.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 49152 c:\windows\system32\powercfg.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 58880 c:\windows\system32\pnrpnsp.dll
    + 2004-08-04 04:00 . 2009-03-08 03:31 46592 c:\windows\system32\pngfilt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15360 c:\windows\system32\pjlmon.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 15360 c:\windows\system32\pjlmon.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 18432 c:\windows\system32\ping.exe
    + 2004-08-04 04:00 . 2008-04-13 19:35 24064 c:\windows\system32\pidgen.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24064 c:\windows\system32\pidgen.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 35328 c:\windows\system32\pid.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 35328 c:\windows\system32\pid.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 35328 c:\windows\system32\perfproc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 35328 c:\windows\system32\perfproc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 26112 c:\windows\system32\perfos.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 26112 c:\windows\system32\perfos.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18432 c:\windows\system32\perfnet.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15872 c:\windows\system32\perfmon.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 15872 c:\windows\system32\perfmon.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 26624 c:\windows\system32\perfdisk.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 41472 c:\windows\system32\perfctrs.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 41472 c:\windows\system32\perfctrs.dll
    + 2006-01-06 18:22 . 2009-11-23 22:11 72066 c:\windows\system32\perfc009.dat
    - 2006-01-06 18:22 . 2009-10-15 18:21 72066 c:\windows\system32\perfc009.dat
    + 2004-08-04 04:00 . 2008-04-14 18:02 69632 c:\windows\system32\pautoenr.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 58880 c:\windows\system32\packager.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 58880 c:\windows\system32\packager.exe
    + 2000-01-10 23:33 . 2000-01-10 23:33 65586 c:\windows\system32\OUTLWAB.DLL
    - 2004-08-04 04:00 . 2004-08-04 04:00 68096 c:\windows\system32\osuninst.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 68096 c:\windows\system32\osuninst.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 51712 c:\windows\system32\oobe\oobebaln.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 51712 c:\windows\system32\oobe\oobebaln.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 29184 c:\windows\system32\oobe\msoobe.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 19456 c:\windows\system32\oobe\msobweb.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 30720 c:\windows\system32\oobe\msobshel.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 30720 c:\windows\system32\oobe\msobshel.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 16384 c:\windows\system32\oobe\msobdl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 16384 c:\windows\system32\oobe\msobdl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 84992 c:\windows\system32\olepro32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 37376 c:\windows\system32\olecnv32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 74752 c:\windows\system32\olecli32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20511 c:\windows\system32\odtext32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20511 c:\windows\system32\odtext32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20510 c:\windows\system32\odpdx32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20510 c:\windows\system32\odpdx32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20510 c:\windows\system32\odfox32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20510 c:\windows\system32\odfox32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20510 c:\windows\system32\odexl32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20510 c:\windows\system32\odexl32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20511 c:\windows\system32\oddbse32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20511 c:\windows\system32\oddbse32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 12288 c:\windows\system32\odbcp32r.dll
    + 2004-08-04 04:00 . 2008-04-13 18:26 12288 c:\windows\system32\odbcp32r.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 57375 c:\windows\system32\odbcji32.dll
    + 2004-08-04 04:00 . 2007-03-28 13:54 98304 c:\windows\system32\odbcint.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 98304 c:\windows\system32\odbcint.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 65536 c:\windows\system32\odbccu32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 65536 c:\windows\system32\odbccu32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 65536 c:\windows\system32\odbccr32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 65536 c:\windows\system32\odbccr32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 69632 c:\windows\system32\odbcconf.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 69632 c:\windows\system32\odbcconf.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 24576 c:\windows\system32\odbcbcp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 24576 c:\windows\system32\odbcbcp.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 32768 c:\windows\system32\odbcad32.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 32768 c:\windows\system32\odbcad32.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 16384 c:\windows\system32\odbc32gt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 16384 c:\windows\system32\odbc32gt.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 68096 c:\windows\system32\ocmanage.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 15360 c:\windows\system32
    tvdmd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 92160 c:\windows\system32
    tprint.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 92160 c:\windows\system32
    tprint.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 40960 c:\windows\system32
    tmsapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 40960 c:\windows\system32
    tmsapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 44032 c:\windows\system32
    tlanman.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 67072 c:\windows\system32
    tdsapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 67072 c:\windows\system32
    tdsapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 76800 c:\windows\system32
    slookup.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 76800 c:\windows\system32
    slookup.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 55296 c:\windows\system32
    pptools.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 55296 c:\windows\system32
    pptools.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15360 c:\windows\system32
    pp
    ppagent.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 15360 c:\windows\system32
    pp
    ppagent.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 57344 c:\windows\system32
    pp
    disnpp.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 57344 c:\windows\system32
    pp
    disnpp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 70144 c:\windows\system32
    otepad.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 70144 c:\windows\system32
    otepad.exe
    - 2006-06-29 07:05 . 2006-06-29 07:05 23552 c:\windows\system32
    ormaliz.dll
    + 2006-06-29 07:05 . 2009-01-07 17:20 23552 c:\windows\system32
    ormaliz.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 28672 c:\windows\system32
    mmkcert.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 28672 c:\windows\system32
    mmkcert.dll
    - 2006-06-28 16:59 . 2006-06-28 16:59 24576 c:\windows\system32
    lsdl.dll
    + 2006-06-28 16:59 . 2009-01-07 17:20 24576 c:\windows\system32
    lsdl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 98304 c:\windows\system32
    lhtml.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 36864 c:\windows\system32
    l\mmcex.resources.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 16384 c:\windows\system32
    l\microsoft.managementconsole.resources.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 81408 c:\windows\system32
    etui0.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 81408 c:\windows\system32
    etui0.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 37888 c:\windows\system32
    etstat.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 37888 c:\windows\system32
    etstat.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 88576 c:\windows\system32
    etsh.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 88576 c:\windows\system32
    etsh.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 11776 c:\windows\system32
    etrap.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 42496 c:\windows\system32
    et.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 42496 c:\windows\system32
    et.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 19456 c:\windows\system32
    ddenb32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 19456 c:\windows\system32
    ddenb32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 17920 c:\windows\system32
    ddeapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17920 c:\windows\system32
    ddeapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 36352 c:\windows\system32
    cobjapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 36352 c:\windows\system32
    cobjapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 54784 c:\windows\system32
    arrator.exe
    - 2004-08-04 04:00 . 2006-10-04 14:34 54784 c:\windows\system32
    arrator.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 30208 c:\windows\system32
    apipsec.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 91136 c:\windows\system32\mydocs.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 91136 c:\windows\system32\mydocs.dll
    + 2004-08-04 04:00 . 2008-06-12 15:24 91648 c:\windows\system32\mtxoci.dll
    - 2004-08-04 04:00 . 2008-06-12 15:19 91648 c:\windows\system32\mtxoci.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 34304 c:\windows\system32\mtxlegih.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 30720 c:\windows\system32\mtxdm.dll
    + 2004-08-04 04:00 . 2008-06-12 15:24 66560 c:\windows\system32\mtxclu.dll
    - 2004-08-04 04:00 . 2008-06-12 15:19 66560 c:\windows\system32\mtxclu.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 16896 c:\windows\system32\msyuv.dll
    + 2007-05-08 16:08 . 2008-04-14 17:39 88064 c:\windows\system32\msxml6r.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 72704 c:\windows\system32\msw3prt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 72704 c:\windows\system32\msw3prt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 61440 c:\windows\system32\msvcrt40.dll
    + 2004-08-04 04:00 . 2008-04-13 19:30 61440 c:\windows\system32\msvcrt40.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 57344 c:\windows\system32\msvcirt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 12288 c:\windows\system32\mstinit.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 12288 c:\windows\system32\mstinit.exe
    + 2008-04-14 17:38 . 2008-04-14 17:38 78336 c:\windows\system32\msshavmsg.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 11264 c:\windows\system32\msrle32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 11264 c:\windows\system32\msrle32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 48128 c:\windows\system32\msprivs.dll
    + 2004-08-04 04:00 . 2008-04-13 17:23 48128 c:\windows\system32\msprivs.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 29696 c:\windows\system32\mspatcha.dll
    + 2004-08-04 04:00 . 2007-03-28 13:54 24576 c:\windows\system32\msorc32r.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24576 c:\windows\system32\msorc32r.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 25600 c:\windows\system32\mslbui.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 25600 c:\windows\system32\mslbui.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 15360 c:\windows\system32\msisip.dll
    - 2004-08-04 04:00 . 2005-05-04 13:45 15360 c:\windows\system32\msisip.dll
    - 2004-08-04 04:00 . 2005-05-04 13:45 78848 c:\windows\system32\msiexec.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 78848 c:\windows\system32\msiexec.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 51712 c:\windows\system32\msident.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 51712 c:\windows\system32\msident.dll
    + 2004-08-04 04:00 . 2009-03-08 03:31 48128 c:\windows\system32\mshtmler.dll
    - 2004-08-04 04:00 . 2007-08-13 17:01 48128 c:\windows\system32\mshtmler.dll
    + 2004-08-04 04:00 . 2009-03-08 03:31 66560 c:\windows\system32\mshtmled.dll
    - 2004-08-04 04:00 . 2007-08-13 17:32 45568 c:\windows\system32\mshta.exe
    + 2004-08-04 04:00 . 2009-03-08 03:31 45568 c:\windows\system32\mshta.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 33792 c:\windows\system32\msgsvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 33792 c:\windows\system32\msgsvc.dll
    + 2007-08-13 17:36 . 2009-03-08 03:31 13312 c:\windows\system32\msfeedssync.exe
    + 2007-08-13 17:54 . 2009-08-29 08:00 55296 c:\windows\system32\msfeedsbs.dll
    - 2004-08-04 04:00 . 2008-06-12 15:19 58880 c:\windows\system32\msdtclog.dll
    + 2004-08-04 04:00 . 2008-06-12 15:24 58880 c:\windows\system32\msdtclog.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 14336 c:\windows\system32\msdmo.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 14336 c:\windows\system32\msdmo.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 68608 c:\windows\system32\msctfp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 36864 c:\windows\system32\mscpxl32.dLL
    - 2004-08-04 04:00 . 2004-08-04 04:00 36864 c:\windows\system32\mscpxl32.dLL
    - 2004-08-04 04:00 . 2004-08-04 04:00 12288 c:\windows\system32\mscpx32r.dLL
    + 2004-08-04 04:00 . 2008-04-13 18:26 12288 c:\windows\system32\mscpx32r.dLL
    - 2004-08-04 04:00 . 2004-08-04 04:00 69632 c:\windows\system32\msconf.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 69632 c:\windows\system32\msconf.dll
    + 2004-08-04 04:00 . 2008-06-24 17:46 74240 c:\windows\system32\mscms.dll
    - 2004-08-04 04:00 . 2008-06-24 17:24 74240 c:\windows\system32\mscms.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 86016 c:\windows\system32\msapsspc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 86016 c:\windows\system32\msapsspc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 71680 c:\windows\system32\msacm32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 71680 c:\windows\system32\msacm32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 53248 c:\windows\system32\mprdim.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 87040 c:\windows\system32\mprapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 87040 c:\windows\system32\mprapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 59904 c:\windows\system32\mpr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 59904 c:\windows\system32\mpr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 16896 c:\windows\system32\more.com
    + 2004-08-04 04:00 . 2008-04-14 18:03 32768 c:\windows\system32\mnmsrvc.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 32768 c:\windows\system32\mnmsrvc.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 34560 c:\windows\system32\mnmdd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 34560 c:\windows\system32\mnmdd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 17920 c:\windows\system32\mmfutil.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17920 c:\windows\system32\mmfutil.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 61440 c:\windows\system32\mmcshext.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 33792 c:\windows\system32\mmcperf.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 29696 c:\windows\system32\mimefilt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 60928 c:\windows\system32\miglibnt.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 60928 c:\windows\system32\miglibnt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 18944 c:\windows\system32\midimap.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18944 c:\windows\system32\midimap.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 14848 c:\windows\system32\mgmtapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 14848 c:\windows\system32\mgmtapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 22528 c:\windows\system32\mfcsubs.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 22528 c:\windows\system32\mfcsubs.dll
    - 2004-08-04 04:00 . 2007-03-08 16:39 40960 c:\windows\system32\mf3216.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 40960 c:\windows\system32\mf3216.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 23552 c:\windows\system32\mciwave.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 23552 c:\windows\system32\mciwave.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 23040 c:\windows\system32\mciseq.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 23040 c:\windows\system32\mciseq.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 35328 c:\windows\system32\mciqtz32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 35328 c:\windows\system32\mciqtz32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 84992 c:\windows\system32\mciavi32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 84992 c:\windows\system32\mciavi32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 14336 c:\windows\system32\mcastmib.dll
    + 1998-10-01 11:00 . 1998-10-01 11:00 40208 c:\windows\system32\MAPISRVR.EXE
    + 2004-08-04 04:00 . 2008-04-14 18:03 57344 c:\windows\system32\makecab.exe
    - 2004-08-04 04:00 . 2006-10-04 14:34 73216 c:\windows\system32\magnify.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 73216 c:\windows\system32\magnify.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 13312 c:\windows\system32\lsass.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 13312 c:\windows\system32\lsass.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 10240 c:\windows\system32\lprhelp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 10240 c:\windows\system32\lprhelp.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 22016 c:\windows\system32\lpk.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 22016 c:\windows\system32\lpk.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 61440 c:\windows\system32\logman.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 61440 c:\windows\system32\logman.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 75264 c:\windows\system32\locator.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 75264 c:\windows\system32\locator.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 11776 c:\windows\system32\localui.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 11776 c:\windows\system32\localui.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 99328 c:\windows\system32\loadperf.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 99328 c:\windows\system32\loadperf.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 13824 c:\windows\system32\lmhsvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 13824 c:\windows\system32\lmhsvc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 19968 c:\windows\system32\linkinfo.dll
    - 2004-08-04 04:00 . 2005-09-01 03:28 19968 c:\windows\system32\linkinfo.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 58880 c:\windows\system32\licwmi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 58880 c:\windows\system32\licwmi.dll
    + 2004-08-04 04:00 . 2009-03-08 03:34 43008 c:\windows\system32\licmgr10.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 37376 c:\windows\system32\l2gpstore.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 61440 c:\windows\system32\kmsvc.dll
    + 2004-08-04 04:00 . 2009-08-29 08:00 25600 c:\windows\system32\jsproxy.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 27648 c:\windows\system32\jgpl400.dll
    - 2004-08-04 04:00 . 2006-06-01 19:49 27648 c:\windows\system32\jgpl400.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 47616 c:\windows\system32\iyuv_32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 47616 c:\windows\system32\iyuv_32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 54784 c:\windows\system32\ixsso.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 54784 c:\windows\system32\ixsso.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 32768 c:\windows\system32\isrdbg32.dll
    - 2004-08-04 04:00 .
  • hallo Bianca, oké, het is weer een lap en niet helemaal compleet.

    Vreemd dat de computer geen herstart deed!

    Hoe gaat het ondertussen met het notebook van je vriendin?
  • Hoi,

    Het gaat beter met de Notebook van mijn vriendin gelukkig.
    Inmiddels heb ik Windows ge-update en Microsoft OIffice weer geïnstalleerd.
    Hij is een stuk stabieler dan daarvoor …

    Het klopt dat de log nog niet compleet was. Vanavond zal ik de rest op het forum zetten. De log was zo groot dat ik problemen had met kopiëren ;-). Ik zal niet in details treden, maar vanaf de laptop kon ik niet op het forum, waardoor ik dit vanaf mijn computer moest doen … Al met al heb ik nog niet alles op het forum gekregen. Vanavond wordt de rest op het forum gezet.

    Groetjes,
    Bianca.
  • Hallo Bianca - fijn dat er vooruitgang is te bespeuren.
    Vanwege AVG raad ik aan dat MBAM blijft en dat je er een tweede goede spy-en malware scanner erbij zet, die vult MBAM dan weer aan en bevat zelf twee scanners!


    Dus download, installeer en blijf [b:6ffd702f5f]a-squared Free 4.5 [/b:6ffd702f5f]gebruiken.

    Direkt na de installatie wil ook [b:6ffd702f5f]a-squared Free 4.5[/b:6ffd702f5f] updaten.

    Dat verhinder je. Start [b:6ffd702f5f]a-squared Free 4.5[/b:6ffd702f5f] en klik op [b:6ffd702f5f]Configureer updates[/b:6ffd702f5f] en [b:6ffd702f5f]haal dan het vinkje weg bij Extra talen installeren[/b:6ffd702f5f]!

    Hierna kan je [b:6ffd702f5f]a-squared Free 4.5[/b:6ffd702f5f] de nieuwste definities binnenhalen.
    [b:6ffd702f5f]Nadat de update gedaan is kies je voor Slimme Scan.[/b:6ffd702f5f]


    http://www.emsisoft.nl/asquaredfree/index.htm
  • OK, ik zal dit vanavond doen en zal ik dan de log die hieruit volgt ook meteen posten of is dit puur voor de veiligheid.

    Kun je me ook uitleggen of AVG een goede virusscanner?
    Of is AVG alleen gespecificeerd op virussen en niet op spy- en malware?
    Welke anti-virus software zou jij aanbevelen en waarom?

    Alvast bedankt.

    Groetjes,
    Bianca.
  • AVG 9.0 is niet slecht, maar is ook niet de nummer 1 bij de gratis antivirusprogramma's.

    Dat is momenteel Avira Antivir Free, met Avast for Home als zeer goede tweede.

    AVG 9.0 kan geen keyloggers vinden, maar kan ook geen rootkits verwijderen. En dat kunnen Avira en Avast wel!

    ALs ik moet adviseren voor jouw vriendin: dan Avast, die heeft o.a. een emailscanner (heeft Avira niet!) en dan daarbij dus MBAM en a-squarred voor de wekelijkse scan!
  • Hoi,

    Hierbij dan deel 2 van het conbofix log bestand.

    Groetjes,
    Bianca.

    - 2004-08-04 04:00 . 2004-08-04 04:00 32768 c:\windows\system32\isrdbg32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 86016 c:\windows\system32\isign32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 86016 c:\windows\system32\isign32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 22016 c:\windows\system32\ipxwan.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24064 c:\windows\system32\ipxroute.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 24064 c:\windows\system32\ipxroute.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 59904 c:\windows\system32\ipv6mon.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 53760 c:\windows\system32\ipv6.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 53760 c:\windows\system32\ipv6.exe
    - 2004-08-04 04:00 . 2006-05-19 14:50 95232 c:\windows\system32\iphlpapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 95232 c:\windows\system32\iphlpapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 57344 c:\windows\system32\ipconfig.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 57344 c:\windows\system32\ipconfig.exe
    + 2004-08-04 04:00 . 2009-03-08 03:32 94720 c:\windows\system32\inseng.dll
    + 2004-08-04 04:00 . 2008-04-14 17:37 50176 c:\windows\system32\inetres.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 50176 c:\windows\system32\inetres.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15872 c:\windows\system32\inetppui.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 15872 c:\windows\system32\inetppui.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 75264 c:\windows\system32\inetpp.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 75264 c:\windows\system32\inetpp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 32768 c:\windows\system32\inetmib1.dll
    + 2004-08-04 04:00 . 2009-03-08 03:31 34816 c:\windows\system32\imgutil.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 36921 c:\windows\system32\imeshare.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 36921 c:\windows\system32\imeshare.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 10240 c:\windows\system32\IME\TINTLGNT\TMIGRATE.DLL
    + 2004-08-04 04:00 . 2008-04-14 18:01 10240 c:\windows\system32\IME\TINTLGNT\tmigrate.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 67584 c:\windows\system32\IME\PINTLGNT\pmigrate.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 67584 c:\windows\system32\IME\PINTLGNT\PMIGRATE.DLL
    + 2004-08-04 04:00 . 2008-04-13 17:43 70144 c:\windows\system32\IME\PINTLGNT\pintlphr.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 70144 c:\windows\system32\IME\PINTLGNT\PINTLPHR.EXE
    - 2004-08-04 04:00 . 2004-08-04 04:00 81920 c:\windows\system32\ils.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 81920 c:\windows\system32\ils.dll
    + 2007-08-13 17:39 . 2009-03-08 03:32 36864 c:\windows\system32\ieudinit.exe
    + 2004-08-04 04:00 . 2009-03-08 03:32 71680 c:\windows\system32\iesetup.dll
    + 2004-08-04 04:00 . 2009-03-08 03:32 55808 c:\windows\system32\iernonce.dll
    - 2006-06-29 07:05 . 2006-06-29 07:05 26112 c:\windows\system32\idndl.dll
    + 2006-06-29 07:05 . 2009-01-07 17:20 26112 c:\windows\system32\idndl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 65536 c:\windows\system32\icwphbk.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 65536 c:\windows\system32\icwphbk.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 73728 c:\windows\system32\icwdial.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 73728 c:\windows\system32\icwdial.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 80384 c:\windows\system32\iccvid.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 80384 c:\windows\system32\iccvid.dll
    + 2007-08-13 17:36 . 2009-03-08 03:31 59904 c:\windows\system32\icardie.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 11264 c:\windows\system32\icaapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 11264 c:\windows\system32\icaapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 42496 c:\windows\system32\htui.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 42496 c:\windows\system32\htui.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24576 c:\windows\system32\httpapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 24576 c:\windows\system32\httpapi.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 32285 c:\windows\system32\hsfcisp2.dll
    - 2004-08-04 04:00 . 2006-07-21 09:29 72704 c:\windows\system32\hlink.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 72704 c:\windows\system32\hlink.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20992 c:\windows\system32\hid.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20992 c:\windows\system32\hid.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 41472 c:\windows\system32\hhsetup.dll
    - 2004-08-04 04:00 . 2005-05-27 03:08 41472 c:\windows\system32\hhsetup.dll
    + 2004-08-04 04:00 . 2008-04-14 18:03 16384 c:\windows\system32\help.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 39424 c:\windows\system32\grpconv.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 39424 c:\windows\system32\grpconv.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 10240 c:\windows\system32\gpkrsrc.dll
    + 2004-08-04 04:00 . 2008-04-14 17:34 10240 c:\windows\system32\gpkrsrc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 23552 c:\windows\system32\fxsmon.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 23552 c:\windows\system32\fxsmon.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 23552 c:\windows\system32\fxsext32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 23552 c:\windows\system32\fxsext32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 61952 c:\windows\system32\fxsevent.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 61952 c:\windows\system32\fxsevent.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 26624 c:\windows\system32\fxsdrv.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 72192 c:\windows\system32\fxscom.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 72192 c:\windows\system32\fxscom.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 60416 c:\windows\system32\fwcfg.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 60416 c:\windows\system32\fwcfg.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 45056 c:\windows\system32\ftp.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 45056 c:\windows\system32\ftp.exe
    + 2004-08-04 04:00 . 2008-04-14 18:03 29696 c:\windows\system32\format.com
    + 2004-08-04 04:00 . 2008-04-14 18:02 21504 c:\windows\system32\fontview.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 21504 c:\windows\system32\fontview.exe
    + 2004-08-04 04:00 . 2009-06-16 15:40 81920 c:\windows\system32\fontsub.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 23040 c:\windows\system32\fltMc.exe
    - 2004-08-04 04:00 . 2006-08-21 10:14 23040 c:\windows\system32\fltMc.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 16896 c:\windows\system32\fltlib.dll
    - 2004-08-04 04:00 . 2006-08-21 13:28 16896 c:\windows\system32\fltlib.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 88576 c:\windows\system32\fldrclnr.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 88576 c:\windows\system32\fldrclnr.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 28672 c:\windows\system32\findstr.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 28672 c:\windows\system32\findstr.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 21504 c:\windows\system32\feclient.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 21504 c:\windows\system32\feclient.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 20992 c:\windows\system32\faxpatch.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 80896 c:\windows\system32\faultrep.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 80896 c:\windows\system32\faultrep.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 24064 c:\windows\system32\extrac32.exe
    + 1999-02-16 11:38 . 1999-02-16 11:38 38912 c:\windows\system32\EXSEC32.DLL
    + 2004-08-04 04:00 . 2008-04-14 18:02 56320 c:\windows\system32\eventlog.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 23040 c:\windows\system32\ersvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 23040 c:\windows\system32\ersvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\encapi.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\encapi.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 33792 c:\windows\system32\eapsvc.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 59392 c:\windows\system32\eapqec.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 40960 c:\windows\system32\eappprxy.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 94720 c:\windows\system32\eappgnui.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 30720 c:\windows\system32\eapolqec.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17920 c:\windows\system32\dvdupgrd.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 17920 c:\windows\system32\dvdupgrd.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 10752 c:\windows\system32\dumprep.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 10752 c:\windows\system32\dumprep.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 19456 c:\windows\system32\dswave.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 19456 c:\windows\system32\dswave.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 52224 c:\windows\system32\dssec.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 52224 c:\windows\system32\dssec.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 93184 c:\windows\system32\dskquota.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 93184 c:\windows\system32\dskquota.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 72192 c:\windows\system32\dsdmoprp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 72192 c:\windows\system32\dsdmoprp.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 16384 c:\windows\system32\ds32gt.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 16384 c:\windows\system32\ds32gt.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 14336 c:\windows\system32\drprov.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 14336 c:\windows\system32\drprov.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 87040 c:\windows\system32\drmstor.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 87040 c:\windows\system32\drmstor.dll
    + 2006-08-06 17:15 . 2008-04-13 19:46 19200 c:\windows\system32\drivers\wstcodec.sys
    + 2004-08-03 22:15 . 2008-04-13 20:17 83072 c:\windows\system32\drivers\wdmaud.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 25471 c:\windows\system32\drivers\watv10nt.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 22271 c:\windows\system32\drivers\watv06nt.sys
    + 2004-08-04 04:00 . 2008-04-13 19:57 34560 c:\windows\system32\drivers\wanarp.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 34560 c:\windows\system32\drivers\wanarp.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 11935 c:\windows\system32\drivers\wadv11nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 11871 c:\windows\system32\drivers\wadv09nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 11295 c:\windows\system32\drivers\wadv08nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 11807 c:\windows\system32\drivers\wadv07nt.sys
    + 2008-04-13 19:43 . 2008-04-13 19:43 14208 c:\windows\system32\drivers\wacompen.sys
    + 2004-08-04 04:00 . 2008-04-14 17:33 53504 c:\windows\system32\drivers\volsnap.sys
    + 2004-08-04 04:00 . 2008-04-13 19:44 81664 c:\windows\system32\drivers\videoprt.sys
    + 2004-08-03 22:07 . 2008-04-13 19:36 42240 c:\windows\system32\drivers\viaagp.sys
    - 2004-08-03 22:07 . 2004-08-03 22:07 42240 c:\windows\system32\drivers\VIAAGP.SYS
    + 2004-08-04 04:00 . 2008-04-13 19:44 20992 c:\windows\system32\drivers\vga.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 20992 c:\windows\system32\drivers\vga.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 11325 c:\windows\system32\drivers\vchnt5.dll
    + 2004-08-04 04:00 . 2008-04-13 19:45 20608 c:\windows\system32\drivers\usbuhci.sys
    + 2007-01-26 22:40 . 2008-04-13 19:45 26368 c:\windows\system32\drivers\usbstor.sys
    + 2009-03-30 12:50 . 2008-04-13 19:45 26112 c:\windows\system32\drivers\usbser.sys
    + 2007-01-26 22:50 . 2008-04-13 19:45 15104 c:\windows\system32\drivers\usbscan.sys
    - 2007-01-26 22:50 . 2004-08-03 21:58 15104 c:\windows\system32\drivers\usbscan.sys
    - 2006-08-03 22:02 . 2004-08-03 22:01 25856 c:\windows\system32\drivers\usbprint.sys
    + 2006-08-03 22:02 . 2008-04-13 19:47 25856 c:\windows\system32\drivers\usbprint.sys
    + 2004-08-04 04:00 . 2008-04-13 19:45 15872 c:\windows\system32\drivers\usbintel.sys
    + 2004-08-04 04:00 . 2008-04-13 19:45 59520 c:\windows\system32\drivers\usbhub.sys
    + 2004-08-04 04:00 . 2008-04-13 19:45 30208 c:\windows\system32\drivers\usbehci.sys
    + 2006-08-06 17:14 . 2008-04-13 19:45 32128 c:\windows\system32\drivers\usbccgp.sys
    + 2004-08-04 04:00 . 2008-04-13 19:45 25728 c:\windows\system32\drivers\usbcamd2.sys
    + 2004-08-04 04:00 . 2008-04-13 19:45 25600 c:\windows\system32\drivers\usbcamd.sys
    + 2006-08-06 17:15 . 2008-04-13 19:45 60032 c:\windows\system32\drivers\usbaudio.sys
    + 2008-04-13 19:56 . 2008-04-13 19:56 12800 c:\windows\system32\drivers\usb8023x.sys
    + 2004-08-04 04:00 . 2008-04-13 19:56 12800 c:\windows\system32\drivers\usb8023.sys
    + 2004-08-04 04:00 . 2008-04-13 19:32 66048 c:\windows\system32\drivers\udfs.sys
    + 2008-04-13 19:36 . 2008-04-13 19:36 44672 c:\windows\system32\drivers\uagp35.sys
    + 2004-08-04 04:00 . 2008-04-13 19:56 12288 c:\windows\system32\drivers\tunmp.sys
    - 2004-08-04 00:03 . 2004-08-04 00:03 40840 c:\windows\system32\drivers\termdd.sys
    + 2004-08-04 00:03 . 2008-04-14 18:03 40840 c:\windows\system32\drivers\termdd.sys
    + 2004-08-04 04:00 . 2008-04-14 18:03 21896 c:\windows\system32\drivers\tdtcp.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 21896 c:\windows\system32\drivers\tdtcp.sys
    + 2004-08-04 04:00 . 2008-04-14 18:03 12040 c:\windows\system32\drivers\tdpipe.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 12040 c:\windows\system32\drivers\tdpipe.sys
    + 2004-08-04 04:00 . 2008-04-13 20:00 19072 c:\windows\system32\drivers\tdi.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 14976 c:\windows\system32\drivers\tape.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 14976 c:\windows\system32\drivers\tape.sys
    - 2004-08-03 22:15 . 2004-08-03 22:15 60800 c:\windows\system32\drivers\sysaudio.sys
    + 2004-08-03 22:15 . 2008-04-13 20:15 60800 c:\windows\system32\drivers\sysaudio.sys
    + 2001-08-17 21:00 . 2008-04-13 19:45 56576 c:\windows\system32\drivers\swmidi.sys
    + 2006-08-06 17:15 . 2008-04-13 19:46 15232 c:\windows\system32\drivers\StreamIP.sys
    + 2004-08-03 22:08 . 2008-04-13 19:45 49408 c:\windows\system32\drivers\stream.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 73472 c:\windows\system32\drivers\sr.sys
    + 2004-08-04 04:00 . 2008-04-14 17:43 73472 c:\windows\system32\drivers\sr.sys
    + 2004-08-04 04:00 . 2008-04-13 19:46 25344 c:\windows\system32\drivers\sonydcam.sys
    + 2008-10-22 10:24 . 2004-08-03 21:41 13240 c:\windows\system32\drivers\slwdmsup.sys
    + 2008-10-22 10:23 . 2004-08-03 21:41 95424 c:\windows\system32\drivers\slnthal.sys
    + 2006-08-06 17:15 . 2008-04-13 19:46 11136 c:\windows\system32\drivers\slip.sys
    - 2006-08-06 17:15 . 2004-08-04 04:00 11136 c:\windows\system32\drivers\SLIP.sys
    + 2004-08-03 22:07 . 2008-04-13 19:36 40960 c:\windows\system32\drivers\sisagp.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 11392 c:\windows\system32\drivers\sfloppy.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 11392 c:\windows\system32\drivers\sfloppy.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 11008 c:\windows\system32\drivers\sffp_sd.sys
    + 2008-04-13 19:40 . 2008-04-13 19:40 10240 c:\windows\system32\drivers\sffp_mmc.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 11904 c:\windows\system32\drivers\sffdisk.sys
    + 2004-08-04 04:00 . 2008-04-14 17:36 65536 c:\windows\system32\drivers\serial.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 15744 c:\windows\system32\drivers\serenum.sys
    + 2004-08-04 04:00 . 2008-04-13 19:36 79232 c:\windows\system32\drivers\sdbus.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 96384 c:\windows\system32\drivers\scsiport.sys
    + 2008-04-13 19:56 . 2008-04-13 19:56 30592 c:\windows\system32\drivers\rndismpx.sys
    + 2004-08-04 04:00 . 2008-04-13 19:56 30592 c:\windows\system32\drivers\rndismp.sys
    + 2008-04-13 19:46 . 2008-04-13 19:46 59136 c:\windows\system32\drivers\rfcomm.sys
    + 2004-08-03 23:54 . 2008-04-14 17:34 58112 c:\windows\system32\drivers\redbook.sys
    + 2008-10-22 10:24 . 2004-08-03 21:41 13776 c:\windows\system32\drivers\recagent.sys
    + 2004-08-04 04:00 . 2008-04-13 20:19 48384 c:\windows\system32\drivers\raspptp.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 48384 c:\windows\system32\drivers\raspptp.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 41472 c:\windows\system32\drivers\raspppoe.sys
    + 2004-08-04 04:00 . 2008-04-13 19:57 41472 c:\windows\system32\drivers\raspppoe.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 51328 c:\windows\system32\drivers\rasl2tp.sys
    + 2004-08-04 04:00 . 2008-04-13 20:19 51328 c:\windows\system32\drivers\rasl2tp.sys
    + 2004-08-04 04:00 . 2008-04-13 19:56 69120 c:\windows\system32\drivers\psched.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 69120 c:\windows\system32\drivers\psched.sys
    + 2004-08-04 04:00 . 2008-04-14 17:32 39936 c:\windows\system32\drivers\processr.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 24960 c:\windows\system32\drivers\pciidex.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 68224 c:\windows\system32\drivers\pci.sys
    + 2004-08-04 04:00 . 2008-04-14 17:43 68224 c:\windows\system32\drivers\pci.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 19712 c:\windows\system32\drivers\partmgr.sys
    + 2004-08-04 04:00 . 2008-04-14 17:43 80256 c:\windows\system32\drivers\parport.sys
    + 2004-08-04 04:00 . 2008-04-14 17:43 46848 c:\windows\system32\drivers\p3.sys
    + 2004-08-04 04:00 . 2008-04-13 19:56 88320 c:\windows\system32\drivers
    wlnkipx.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 30848 c:\windows\system32\drivers
    pfs.sys
    + 2004-08-04 04:00 . 2008-04-13 19:32 30848 c:\windows\system32\drivers
    pfs.sys
    + 2004-08-04 04:00 . 2008-04-13 19:53 40320 c:\windows\system32\drivers
    mnt.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 40320 c:\windows\system32\drivers
    mnt.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 61824 c:\windows\system32\drivers
    ic1394.sys
    + 2004-08-04 04:00 . 2008-04-13 19:51 61824 c:\windows\system32\drivers
    ic1394.sys
    + 2004-08-04 04:00 . 2008-04-13 19:56 34688 c:\windows\system32\drivers
    etbios.sys
    + 2004-08-04 04:00 . 2008-04-13 19:57 40576 c:\windows\system32\drivers
    dproxy.sys
    + 2004-08-04 04:00 . 2008-04-13 20:20 91520 c:\windows\system32\drivers
    diswan.sys
    + 2004-08-04 04:00 . 2008-04-13 19:55 14592 c:\windows\system32\drivers
    disuio.sys
    + 2004-08-04 04:00 . 2008-04-13 19:57 10112 c:\windows\system32\drivers
    distapi.sys
    + 2006-08-06 17:15 . 2008-04-13 19:46 10880 c:\windows\system32\drivers\NdisIP.sys
    - 2006-08-06 17:15 . 2004-08-03 22:10 10880 c:\windows\system32\drivers\NdisIP.sys
    + 2006-08-06 17:15 . 2008-04-13 19:46 85248 c:\windows\system32\drivers
    abtsfec.sys
    + 2008-04-13 19:43 . 2008-04-13 19:43 12672 c:\windows\system32\drivers\mutohpen.sys
    + 2004-08-03 22:07 . 2008-04-13 19:36 15488 c:\windows\system32\drivers\mssmbios.sys
    - 2004-08-03 22:07 . 2004-08-03 22:07 15488 c:\windows\system32\drivers\mssmbios.sys
    + 2004-08-04 04:00 . 2008-04-13 19:56 35072 c:\windows\system32\drivers\msgpc.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 35072 c:\windows\system32\drivers\msgpc.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 19072 c:\windows\system32\drivers\msfs.sys
    + 2004-08-04 04:00 . 2008-04-13 19:32 19072 c:\windows\system32\drivers\msfs.sys
    + 2004-08-04 04:00 . 2008-04-13 19:39 42368 c:\windows\system32\drivers\mountmgr.sys
    - 2004-08-03 23:53 . 2004-08-03 23:53 23552 c:\windows\system32\drivers\mouclass.sys
    + 2004-08-03 23:53 . 2008-04-14 17:30 23552 c:\windows\system32\drivers\mouclass.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 30336 c:\windows\system32\drivers\modem.sys
    + 2004-08-04 04:00 . 2008-04-14 17:30 30336 c:\windows\system32\drivers\modem.sys
    + 2004-08-04 04:00 . 2008-04-13 19:36 63744 c:\windows\system32\drivers\mf.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 63744 c:\windows\system32\drivers\mf.sys
    + 2004-08-04 04:00 . 2009-06-24 12:18 92928 c:\windows\system32\drivers\ksecdd.sys
    + 2004-08-04 04:00 . 2008-04-14 17:39 25088 c:\windows\system32\drivers\kbdclass.sys
    + 2004-08-04 04:00 . 2008-04-14 17:38 37760 c:\windows\system32\drivers\isapnp.sys
    + 2004-08-04 04:00 . 2008-04-13 19:54 11264 c:\windows\system32\drivers\irenum.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 11264 c:\windows\system32\drivers\irenum.sys
    + 2004-08-04 04:00 . 2008-04-13 20:19 75264 c:\windows\system32\drivers\ipsec.sys
    + 2004-08-04 04:00 . 2008-04-13 19:57 20864 c:\windows\system32\drivers\ipinip.sys
    + 2004-08-04 04:00 . 2008-04-13 19:53 36608 c:\windows\system32\drivers\ip6fw.sys
    + 2004-08-04 04:00 . 2008-04-14 17:37 40448 c:\windows\system32\drivers\intelppm.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 42112 c:\windows\system32\drivers\imapi.sys
    + 2004-08-04 04:00 . 2008-04-14 17:35 53504 c:\windows\system32\drivers\i8042prt.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 18560 c:\windows\system32\drivers\i2omp.sys
    + 2004-08-04 04:00 . 2008-04-13 19:41 18560 c:\windows\system32\drivers\i2omp.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 24960 c:\windows\system32\drivers\hidparse.sys
    + 2004-08-04 04:00 . 2008-04-13 19:45 24960 c:\windows\system32\drivers\hidparse.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 19200 c:\windows\system32\drivers\hidir.sys
    + 2004-08-04 04:00 . 2008-04-13 19:45 36864 c:\windows\system32\drivers\hidclass.sys
    + 2008-04-14 17:34 . 2008-04-14 17:34 25728 c:\windows\system32\drivers\hidbth.sys
    + 2008-04-13 19:36 . 2008-04-13 19:36 46464 c:\windows\system32\drivers\gagp30kx.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\drivers\flpydisk.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 20480 c:\windows\system32\drivers\flpydisk.sys
    + 2004-08-04 04:00 . 2008-04-14 17:32 44672 c:\windows\system32\drivers\fips.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 27392 c:\windows\system32\drivers\fdc.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 27392 c:\windows\system32\drivers\fdc.sys
    + 2004-08-04 04:00 . 2008-04-13 19:38 71168 c:\windows\system32\drivers\dxg.sys
    + 2004-08-03 22:08 . 2008-04-13 19:45 60160 c:\windows\system32\drivers\drmk.sys
    - 2004-08-03 22:07 . 2004-08-03 22:07 52864 c:\windows\system32\drivers\DMusic.sys
    + 2004-08-03 22:07 . 2008-04-13 19:45 52864 c:\windows\system32\drivers\DMusic.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 14208 c:\windows\system32\drivers\diskdump.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 14208 c:\windows\system32\drivers\diskdump.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 36352 c:\windows\system32\drivers\disk.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 36352 c:\windows\system32\drivers\disk.sys
    + 2004-08-04 04:00 . 2008-04-14 17:38 40832 c:\windows\system32\drivers\crusoe.sys
    + 2001-08-17 20:58 . 2008-04-13 19:36 10240 c:\windows\system32\drivers\compbatt.sys
    + 2004-08-03 22:07 . 2008-04-13 19:36 13952 c:\windows\system32\drivers\CmBatt.sys
    + 2004-08-04 04:00 . 2008-04-13 20:16 49536 c:\windows\system32\drivers\classpnp.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 15423 c:\windows\system32\drivers\ch7xxnt5.dll
    + 2004-08-04 04:00 . 2008-04-13 19:40 62976 c:\windows\system32\drivers\cdrom.sys
    + 2004-08-04 04:00 . 2008-04-13 20:14 63744 c:\windows\system32\drivers\cdfs.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 63744 c:\windows\system32\drivers\cdfs.sys
    - 2006-08-06 17:15 . 2004-08-03 22:10 17024 c:\windows\system32\drivers\CCDECODE.sys
    + 2006-08-06 17:15 . 2008-04-13 19:46 17024 c:\windows\system32\drivers\ccdecode.sys
    + 2008-04-13 19:46 . 2008-04-13 19:46 18944 c:\windows\system32\drivers\bthusb.sys
    + 2008-04-13 19:46 . 2008-04-13 19:46 36480 c:\windows\system32\drivers\bthprint.sys
    + 2008-04-13 19:46 . 2008-04-13 19:46 37888 c:\windows\system32\drivers\bthmodem.sys
    + 2008-04-13 19:46 . 2008-04-13 19:46 17024 c:\windows\system32\drivers\bthenum.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 71552 c:\windows\system32\drivers\bridge.sys
    + 2004-08-04 04:00 . 2008-04-13 19:53 71552 c:\windows\system32\drivers\bridge.sys
    + 2001-08-17 20:57 . 2008-04-13 19:36 14208 c:\windows\system32\drivers\battc.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 17279 c:\windows\system32\drivers\atv10nt5.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 14143 c:\windows\system32\drivers\atv06nt5.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 25471 c:\windows\system32\drivers\atv04nt5.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 11359 c:\windows\system32\drivers\atv02nt5.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 21183 c:\windows\system32\drivers\atv01nt5.dll
    + 2004-08-04 04:00 . 2008-04-13 19:51 55808 c:\windows\system32\drivers\atmlane.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 59904 c:\windows\system32\drivers\atmarpc.sys
    + 2004-08-04 04:00 . 2008-04-13 19:51 59904 c:\windows\system32\drivers\atmarpc.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 63488 c:\windows\system32\drivers\atinxsxx.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 31744 c:\windows\system32\drivers\atinxbxx.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 73216 c:\windows\system32\drivers\atintuxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 13824 c:\windows\system32\drivers\atinttxx.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 28672 c:\windows\system32\drivers\atinsnxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 52224 c:\windows\system32\drivers\atinraxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 14336 c:\windows\system32\drivers\atinpdxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 13824 c:\windows\system32\drivers\atinmdxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 57856 c:\windows\system32\drivers\atinbtxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 34735 c:\windows\system32\drivers\ati1xsxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 29455 c:\windows\system32\drivers\ati1xbxx.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 36463 c:\windows\system32\drivers\ati1tuxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 21343 c:\windows\system32\drivers\ati1ttxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 26367 c:\windows\system32\drivers\ati1snxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 63663 c:\windows\system32\drivers\ati1rvxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 30671 c:\windows\system32\drivers\ati1raxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 12047 c:\windows\system32\drivers\ati1pdxx.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 11615 c:\windows\system32\drivers\ati1mdxx.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 56623 c:\windows\system32\drivers\ati1btxx.sys
    + 2004-08-04 04:00 . 2008-04-13 19:40 96512 c:\windows\system32\drivers\atapi.sys
    + 2004-08-04 04:00 . 2008-04-13 19:57 14336 c:\windows\system32\drivers\asyncmac.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 14336 c:\windows\system32\drivers\asyncmac.sys
    + 2004-08-04 04:00 . 2008-04-13 19:51 60800 c:\windows\system32\drivers\arp1394.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 60800 c:\windows\system32\drivers\arp1394.sys
    + 2004-08-04 04:00 . 2008-04-14 17:31 41856 c:\windows\system32\drivers\amdk7.sys
    + 2004-08-04 04:00 . 2008-04-14 17:31 41472 c:\windows\system32\drivers\amdk6.sys
    + 2004-08-03 22:07 . 2008-04-13 19:36 43008 c:\windows\system32\drivers\amdagp.sys
    - 2004-08-03 22:07 . 2004-08-03 22:07 43008 c:\windows\system32\drivers\AMDAGP.SYS
    + 2004-08-03 22:07 . 2008-04-13 19:36 42752 c:\windows\system32\drivers\alim1541.sys
    - 2004-08-03 22:07 . 2004-08-03 22:07 42752 c:\windows\system32\drivers\ALIM1541.SYS
    + 2004-08-03 22:07 . 2008-04-13 19:36 44928 c:\windows\system32\drivers\agpcpq.sys
    - 2004-08-03 22:07 . 2004-08-03 22:07 44928 c:\windows\system32\drivers\AGPCPQ.SYS
    - 2004-08-03 22:07 . 2004-08-03 22:07 42368 c:\windows\system32\drivers\agp440.sys
    + 2004-08-03 22:07 . 2008-04-13 19:36 42368 c:\windows\system32\drivers\agp440.sys
    - 2004-08-04 04:00 . 2004-08-04 04:00 57856 c:\windows\system32\dpwsockx.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 57856 c:\windows\system32\dpwsockx.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 83456 c:\windows\system32\dpvsetup.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 83456 c:\windows\system32\dpvsetup.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 21504 c:\windows\system32\dpvacm.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 21504 c:\windows\system32\dpvacm.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 18432 c:\windows\system32\dpnsvr.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 18432 c:\windows\system32\dpnsvr.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 60928 c:\windows\system32\dpnhupnp.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 60928 c:\windows\system32\dpnhupnp.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 35328 c:\windows\system32\dpnhpast.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 35328 c:\windows\system32\dpnhpast.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24064 c:\windows\system32\dpmodemx.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 24064 c:\windows\system32\dpmodemx.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 29696 c:\windows\system32\dplaysvr.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 56832 c:\windows\system32\dot3msm.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 39936 c:\windows\system32\dot3gpclnt.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 60928 c:\windows\system32\dot3cfg.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 26112 c:\windows\system32\dot3api.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 48640 c:\windows\system32\docprop2.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 48640 c:\windows\system32\docprop2.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 45568 c:\windows\system32\dnsrslvr.dll
    - 2004-08-04 04:00 . 2008-02-20 06:39 45568 c:\windows\system32\dnsrslvr.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 55296 c:\windows\system32\dmutil.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 55296 c:\windows\system32\dmutil.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 24064 c:\windows\system32\dmserver.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24064 c:\windows\system32\dmserver.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 82432 c:\windows\system32\dmscript.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 82432 c:\windows\system32\dmscript.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15872 c:\windows\system32\dmremote.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 15872 c:\windows\system32\dmremote.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 35840 c:\windows\system32\dmloader.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 35840 c:\windows\system32\dmloader.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 61440 c:\windows\system32\dmcompos.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 61440 c:\windows\system32\dmcompos.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 28672 c:\windows\system32\dmband.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 28672 c:\windows\system32\dmband.dll
    + 2008-05-09 10:56 . 2008-05-09 10:56 90112 c:\windows\system32\dllcache\wshext.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\dllcache\wmpui.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\dllcache\wmpui.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\dllcache\wmpcore.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\dllcache\wmpcore.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\dllcache\wmpcd.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\dllcache\wmpcd.dll
    + 2009-06-25 09:27 . 2009-06-25 09:27 54272 c:\windows\system32\dllcache\wdigest.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 86073 c:\windows\system32\dllcache\voicesub.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 86073 c:\windows\system32\dllcache\voicesub.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 76288 c:\windows\system32\dllcache\uniime.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 76288 c:\windows\system32\dllcache\uniime.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 10240 c:\windows\system32\dllcache\tmigrate.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 10240 c:\windows\system32\dllcache\tmigrate.dll
    - 2004-08-04 04:00 . 2009-06-15 12:33 79872 c:\windows\system32\dllcache\telnet.exe
    + 2009-06-15 11:45 . 2009-06-15 11:45 79872 c:\windows\system32\dllcache\telnet.exe
    + 2009-02-03 20:59 . 2009-06-25 09:27 56832 c:\windows\system32\dllcache\secur32.dll
    - 2004-08-04 04:00 . 2009-02-06 17:54 35328 c:\windows\system32\dllcache\sc.exe
    + 2004-08-04 04:00 . 2009-02-06 11:39 35328 c:\windows\system32\dllcache\sc.exe
    + 2004-08-04 04:00 . 2009-03-08 03:31 46592 c:\windows\system32\dllcache\pngfilt.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 67584 c:\windows\system32\dllcache\pmigrate.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 67584 c:\windows\system32\dllcache\pmigrate.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 70144 c:\windows\system32\dllcache\pintlphr.exe
    + 2004-08-04 04:00 . 2008-04-13 17:43 70144 c:\windows\system32\dllcache\pintlphr.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 53760 c:\windows\system32\dllcache\pintlcsd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 53760 c:\windows\system32\dllcache\pintlcsd.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 15360 c:\windows\system32\dllcache\padrs804.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15360 c:\windows\system32\dllcache\padrs804.dll
    + 2004-08-04 04:00 . 2008-04-14 18:01 15872 c:\windows\system32\dllcache\padrs404.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15872 c:\windows\system32\dllcache\padrs404.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 10240 c:\windows\system32\dllcache
    pwmsdrm.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 10240 c:\windows\system32\dllcache
    pwmsdrm.dll
    - 2004-08-04 04:00 . 2008-06-12 15:19 91648 c:\windows\system32\dllcache\mtxoci.dll
    + 2008-06-12 15:24 . 2008-06-12 15:24 91648 c:\windows\system32\dllcache\mtxoci.dll
    - 2004-08-04 04:00 . 2008-06-12 15:19 66560 c:\windows\system32\dllcache\mtxclu.dll
    + 2008-06-12 15:24 . 2008-06-12 15:24 66560 c:\windows\system32\dllcache\mtxclu.dll
    + 2008-04-14 17:39 . 2008-04-14 17:39 88064 c:\windows\system32\dllcache\msxml6r.dll
    - 2004-08-04 04:00 . 2007-08-13 17:01 48128 c:\windows\system32\dllcache\mshtmler.dll
    + 2004-08-04 04:00 . 2009-03-08 03:31 48128 c:\windows\system32\dllcache\mshtmler.dll
    + 2004-08-04 04:00 . 2009-03-08 03:31 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-08-04 04:00 . 2009-03-08 03:31 45568 c:\windows\system32\dllcache\mshta.exe
    - 2004-08-04 04:00 . 2007-08-13 17:32 45568 c:\windows\system32\dllcache\mshta.exe
    + 2008-03-18 19:58 . 2009-08-29 08:00 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-06-12 15:24 . 2008-06-12 15:24 58880 c:\windows\system32\dllcache\msdtclog.dll
    - 2004-08-04 04:00 . 2008-06-12 15:19 58880 c:\windows\system32\dllcache\msdtclog.dll
    - 2004-08-04 05:00 . 2008-06-24 17:24 74240 c:\windows\system32\dllcache\mscms.dll
    + 2008-06-24 17:46 . 2008-06-24 17:46 74240 c:\windows\system32\dllcache\mscms.dll
    - 2004-08-04 05:00 . 2009-09-04 21:47 58880 c:\windows\system32\dllcache\msasn1.dll
    + 2009-09-04 22:05 . 2009-09-04 22:05 58880 c:\windows\system32\dllcache\msasn1.dll
    + 2004-08-04 04:00 . 2009-03-08 03:34 43008 c:\windows\system32\dllcache\licmgr10.dll
    + 2009-06-24 12:18 . 2009-06-24 12:18 92928 c:\windows\system32\dllcache\ksecdd.sys
    + 2004-08-04 04:00 . 2009-08-29 08:00 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2004-08-04 04:00 . 2009-03-08 03:32 94720 c:\windows\system32\dllcache\inseng.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 81976 c:\windows\system32\dllcache\imjpdct.dll
    + 2004-08-04 04:00 . 2008-04-14 18:00 81976 c:\windows\system32\dllcache\imjpdct.dll
    + 2004-08-04 04:00 . 2009-03-08 03:31 34816 c:\windows\system32\dllcache\imgutil.dll
    + 2004-08-04 04:00 . 2008-04-14 18:00 86016 c:\windows\system32\dllcache\imekrmbx.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 86016 c:\windows\system32\dllcache\imekrmbx.dll
    + 2004-08-04 04:00 . 2009-03-08 03:32 71680 c:\windows\system32\dllcache\iesetup.dll
    + 2004-08-04 04:00 . 2009-03-08 03:32 55808 c:\windows\system32\dllcache\iernonce.dll
    + 2008-03-18 19:58 . 2009-03-08 03:31 59904 c:\windows\system32\dllcache\icardie.dll
    + 2004-08-04 04:00 . 2009-03-08 03:24 68608 c:\windows\system32\dllcache\hmmapi.dll
    + 2009-06-16 15:40 . 2009-06-16 15:40 81920 c:\windows\system32\dllcache\fontsub.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 87040 c:\windows\system32\dllcache\drmstor.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 87040 c:\windows\system32\dllcache\drmstor.dll
    + 2004-08-04 04:00 . 2009-03-08 03:33 18944 c:\windows\system32\dllcache\corpol.dll
    + 2004-08-04 04:00 . 2008-04-14 18:00 56320 c:\windows\system32\dllcache\chtskdic.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 56320 c:\windows\system32\dllcache\chtskdic.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 97792 c:\windows\system32\dllcache\chtmbx.dll
    + 2004-08-04 04:00 . 2008-04-14 18:00 97792 c:\windows\system32\dllcache\chtmbx.dll
    - 2004-08-04 04:00 . 2009-06-10 15:26 85504 c:\windows\system32\dllcache\avifil32.dll
    + 2009-06-10 15:16 . 2009-06-10 15:16 85504 c:\windows\system32\dllcache\avifil32.dll
    - 2004-08-04 05:00 . 2009-07-17 20:01 58880 c:\windows\system32\dllcache\atl.dll
    + 2004-08-04 05:00 . 2009-07-17 20:04 58880 c:\windows\system32\dllcache\atl.dll
    + 2004-08-04 04:00 . 2009-03-08 03:32 72704 c:\windows\system32\dllcache\admparse.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 32768 c:\windows\system32\dispex.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 39936 c:\windows\system32\dimsroam.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 19456 c:\windows\system32\dimsntfy.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 68608 c:\windows\system32\digest.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 68608 c:\windows\system32\digest.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 87040 c:\windows\system32\diantz.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 48640 c:\windows\system32\dhcpqec.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 28672 c:\windows\system32\dfsshlex.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 28672 c:\windows\system32\dfsshlex.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 39424 c:\windows\system32\dfrgsnap.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 82944 c:\windows\system32\dfrgfat.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 59904 c:\windows\system32\devenum.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 59904 c:\windows\system32\devenum.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 25088 c:\windows\system32\defrag.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 25088 c:\windows\system32\defrag.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 27136 c:\windows\system32\ddrawex.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 27136 c:\windows\system32\ddrawex.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 31232 c:\windows\system32\ddeshare.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 31232 c:\windows\system32\ddeshare.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 28672 c:\windows\system32\dbnmpntw.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 28672 c:\windows\system32\dbnmpntw.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 24576 c:\windows\system32\dbmsrpcn.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 24576 c:\windows\system32\dbmsrpcn.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 25600 c:\windows\system32\davclnt.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 54784 c:\windows\system32\dataclen.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 54784 c:\windows\system32\dataclen.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15360 c:\windows\system32\ctfmon.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 15360 c:\windows\system32\ctfmon.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 32256 c:\windows\system32\csrsrv.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 62464 c:\windows\system32\cryptsvc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 64512 c:\windows\system32\cryptnet.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 54784 c:\windows\system32\cryptext.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 54784 c:\windows\system32\cryptext.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 33280 c:\windows\system32\cryptdll.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 33280 c:\windows\system32\cryptdll.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 75776 c:\windows\system32\cryptdlg.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 75776 c:\windows\system32\cryptdlg.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 12800 c:\windows\system32\credssp.dll
    + 2004-08-04 04:00 . 2009-03-08 03:33 18944 c:\windows\system32\corpol.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 27648 c:\windows\system32\conime.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 27648 c:\windows\system32\conime.exe
    + 2006-07-20 17:09 . 2009-11-23 22:07 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2006-07-20 17:09 . 2009-09-30 20:48 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2009-11-23 22:07 . 2009-11-23 22:07 32768 c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\MSHist012009112320091124\index.dat
    - 2006-07-20 17:09 . 2009-09-30 20:48 32768 c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\index.dat
    + 2006-07-20 17:09 . 2009-11-23 22:07 32768 c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\index.dat
    - 2006-07-20 17:09 . 2009-09-30 20:48 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2009-11-23 22:07 . 2009-11-23 22:07 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2004-08-04 04:00 . 2005-07-26 05:42 97792 c:\windows\system32\comrepl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 97792 c:\windows\system32\comrepl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 28160 c:\windows\system32\comaddin.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 60416 c:\windows\system32\colbact.dll
    - 2004-08-04 04:00 . 2005-07-26 05:42 60416 c:\windows\system32\colbact.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 49152 c:\windows\system32\cnbjmon.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 49152 c:\windows\system32\cnbjmon.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 40448 c:\windows\system32\cmutil.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 40448 c:\windows\system32\cmutil.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 64512 c:\windows\system32\cmstp.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 64512 c:\windows\system32\cmstp.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 13312 c:\windows\system32\cmsetACL.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 40448 c:\windows\system32\cmmon32.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 40448 c:\windows\system32\cmmon32.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 25600 c:\windows\system32\cmdl32.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 15872 c:\windows\system32\cmcfg32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 15872 c:\windows\system32\cmcfg32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 58368 c:\windows\system32\clusapi.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 33280 c:\windows\system32\clipsrv.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 33280 c:\windows\system32\clipsrv.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\cliconfg.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 20480 c:\windows\system32\cliconfg.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 77824 c:\windows\system32\cliconfg.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 77824 c:\windows\system32\cliconfg.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 65024 c:\windows\system32\cleanmgr.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 65024 c:\windows\system32\cleanmgr.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 69120 c:\windows\system32\ciodm.dll
    - 2004-08-04 04:00 . 2006-06-22 06:17 69120 c:\windows\system32\ciodm.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 16896 c:\windows\system32\cfgmgr32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:00 16896 c:\windows\system32\cfgmgr32.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 39424 c:\windows\system32\cfgbkend.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 39424 c:\windows\system32\cfgbkend.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 85504 c:\windows\system32\catsrvps.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 85504 c:\windows\system32\catsrvps.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 50688 c:\windows\system32\camocx.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 50688 c:\windows\system32\camocx.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20480 c:\windows\system32\cacls.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 85504 c:\windows\system32\cabview.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 85504 c:\windows\system32\cabview.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 60416 c:\windows\system32\cabinet.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 50688 c:\windows\system32\btpanui.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 50688 c:\windows\system32\btpanui.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 30208 c:\windows\system32\bthserv.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 30208 c:\windows\system32\bthserv.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 20992 c:\windows\system32\bthci.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 20992 c:\windows\system32\bthci.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 78336 c:\windows\system32\browsewm.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 78336 c:\windows\system32\browsewm.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 77824 c:\windows\system32\browser.dll
    + 2004-08-04 04:00 . 2008-04-14 17:34 67584 c:\windows\system32\browselc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 67584 c:\windows\system32\browselc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 71680 c:\windows\system32\blastcln.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 71680 c:\windows\system32\blastcln.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 17408 c:\windows\system32\bidispl.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17408 c:\windows\system32\bidispl.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 29184 c:\windows\system32\batmeter.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 52736 c:\windows\system32\basesrv.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 52736 c:\windows\system32\basesrv.dll
    + 2004-08-04 04:00 . 2009-06-10 15:16 85504 c:\windows\system32\avifil32.dll
    - 2004-08-04 04:00 . 2009-06-10 15:26 85504 c:\windows\system32\avifil32.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 11264 c:\windows\system32\autolfn.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 11264 c:\windows\system32\autolfn.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 62464 c:\windows\system32\authz.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 14336 c:\windows\system32\auditusr.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 14336 c:\windows\system32\auditusr.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 42496 c:\windows\system32\audiosrv.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 42496 c:\windows\system32\audiosrv.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 12288 c:\windows\system32\attrib.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 30208 c:\windows\system32\atmlib.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 30208 c:\windows\system32\atmlib.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 11264 c:\windows\system32\atmadm.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 11264 c:\windows\system32\atmadm.exe
    + 2004-08-04 04:00 . 2009-07-17 20:04 58880 c:\windows\system32\atl.dll
    - 2004-08-04 04:00 . 2009-07-17 20:01 58880 c:\windows\system32\atl.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 32768 c:\windows\system32\ativtmxx.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 26112 c:\windows\system32\at.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 26112 c:\windows\system32\at.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 65024 c:\windows\system32\asycfilt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 65024 c:\windows\system32\asycfilt.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 70656 c:\windows\system32\amstream.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 70656 c:\windows\system32\amstream.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 17408 c:\windows\system32\alrsvc.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 17408 c:\windows\system32\alrsvc.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 44544 c:\windows\system32\alg.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 44544 c:\windows\system32\alg.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 98304 c:\windows\system32\ahui.exe
    + 2004-08-04 04:00 . 2008-04-14 18:02 98304 c:\windows\system32\ahui.exe
    - 2004-08-04 04:00 . 2004-08-04 04:00 68096 c:\windows\system32\adsmsext.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 68096 c:\windows\system32\adsmsext.dll
    + 2004-08-04 04:00 . 2009-03-08 03:32 72704 c:\windows\system32\admparse.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 98304 c:\windows\system32\actxprxy.dll
    + 2004-08-04 04:00 . 2008-04-14 18:02 58434 c:\windows\srchasst\srchctls.dll
    - 2004-08-04 04:00 . 2004-08-04 04:00 58434 c:\windows\srchasst\srchctls.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 32866 c:\windows\slrundll.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 82944 c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 33792 c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 18944 c:\windows\ServicePackFiles\i386\xrxscnui.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 11776 c:\windows\ServicePackFiles\i386\xolehlp.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 50176 c:\windows\ServicePackFiles\i386\xmlprovi.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 30720 c:\windows\ServicePackFiles\i386\xcopy.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 91648 c:\windows\ServicePackFiles\i386\xactsrv.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 52736 c:\windows\ServicePackFiles\i386\wzcsapi.dll
    + 2008-10-22 10:23 . 2004-08-03 21:29 19455 c:\windows\ServicePackFiles\i386\wvchntxx.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 32256 c:\windows\ServicePackFiles\i386\wups.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 18432 c:\windows\ServicePackFiles\i386\wtsapi32.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 51200 c:\windows\ServicePackFiles\i386\wstdecod.dll
    + 2008-04-13 19:46 . 2008-04-13 19:46 19200 c:\windows\ServicePackFiles\i386\wstcodec.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 24576 c:\windows\ServicePackFiles\i386\wsock32.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 41984 c:\windows\ServicePackFiles\i386\wsnmp32.dll
    + 2008-10-22 10:24 . 2004-08-03 21:29 12063 c:\windows\ServicePackFiles\i386\wsiintxx.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 19456 c:\windows\ServicePackFiles\i386\wshtcpip.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 11264 c:\windows\ServicePackFiles\i386\wshrm.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 14336 c:\windows\ServicePackFiles\i386\wship6.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 90112 c:\windows\ServicePackFiles\i386\wshext.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 36864 c:\windows\ServicePackFiles\i386\wshcon.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 80896 c:\windows\ServicePackFiles\i386\wscsvc.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 13824 c:\windows\ServicePackFiles\i386\wscntfy.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 19968 c:\windows\ServicePackFiles\i386\ws2help.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 82432 c:\windows\ServicePackFiles\i386\ws2_32.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 11776 c:\windows\ServicePackFiles\i386\wpnpinst.exe
    + 2008-04-14 18:03 . 2008-04-14 18:03 32256 c:\windows\ServicePackFiles\i386\wpabaln.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 98304 c:\windows\ServicePackFiles\i386\wmiutils.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 41472 c:\windows\ServicePackFiles\i386\wmipsess.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 62464 c:\windows\ServicePackFiles\i386\wmipjobj.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 61952 c:\windows\ServicePackFiles\i386\wmipiprt.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 60928 c:\windows\ServicePackFiles\i386\wmicookr.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 88576 c:\windows\ServicePackFiles\i386\wmiaprpl.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 93696 c:\windows\ServicePackFiles\i386\wlnotify.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 69120 c:\windows\ServicePackFiles\i386\wlanapi.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 53760 c:\windows\ServicePackFiles\i386\winsta.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 17408 c:\windows\ServicePackFiles\i386\winshfhc.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 99840 c:\windows\ServicePackFiles\i386\winscard.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 16896 c:\windows\ServicePackFiles\i386\winrnr.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 32256 c:\windows\ServicePackFiles\i386\winipsec.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 75776 c:\windows\ServicePackFiles\i386\wiascr.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 66048 c:\windows\ServicePackFiles\i386\wextract.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 68096 c:\windows\ServicePackFiles\i386\webclnt.dll
    + 2008-04-13 20:17 . 2008-04-13 20:17 83072 c:\windows\ServicePackFiles\i386\wdmaud.sys
    + 2008-04-14 18:03 . 2008-04-14 18:03 23552 c:\windows\ServicePackFiles\i386\wdmaud.drv
    + 2008-04-14 18:02 . 2008-04-14 18:02 49152 c:\windows\ServicePackFiles\i386\wdigest.dll
    + 2008-10-22 10:23 . 2004-08-03 21:29 23615 c:\windows\ServicePackFiles\i386\wch7xxnt.sys
    + 2008-04-14 17:34 . 2008-04-14 17:34 32000 c:\windows\ServicePackFiles\i386\wceusbsh.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 43520 c:\windows\ServicePackFiles\i386\wbemsvc.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 18944 c:\windows\ServicePackFiles\i386\wbemprox.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 44032 c:\windows\ServicePackFiles\i386\wbemperf.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 71680 c:\windows\ServicePackFiles\i386\wbemcons.dll
    + 2008-10-22 10:23 . 2004-08-03 21:29 25471 c:\windows\ServicePackFiles\i386\watv10nt.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 22271 c:\windows\ServicePackFiles\i386\watv06nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 33599 c:\windows\ServicePackFiles\i386\watv04nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 19551 c:\windows\ServicePackFiles\i386\watv02nt.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 29311 c:\windows\ServicePackFiles\i386\watv01nt.sys
    + 2008-04-13 19:44 . 2008-04-13 19:45 17664 c:\windows\ServicePackFiles\i386\watchdog.sys
    + 2008-04-13 19:57 . 2008-04-13 19:57 34560 c:\windows\ServicePackFiles\i386\wanarp.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 11935 c:\windows\ServicePackFiles\i386\wadv11nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 11871 c:\windows\ServicePackFiles\i386\wadv09nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 11295 c:\windows\ServicePackFiles\i386\wadv08nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 11807 c:\windows\ServicePackFiles\i386\wadv07nt.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 11775 c:\windows\ServicePackFiles\i386\wadv05nt.sys
    + 2008-10-22 10:23 . 2004-08-03 21:29 12127 c:\windows\ServicePackFiles\i386\wadv02nt.sys
    + 2008-10-22 10:24 . 2004-08-03 21:29 12415 c:\windows\ServicePackFiles\i386\wadv01nt.sys
    + 2008-04-13 19:43 . 2008-04-13 19:43 14208 c:\windows\ServicePackFiles\i386\wacompen.sys
    + 2008-04-14 18:03 . 2008-04-14 18:03 30208 c:\windows\ServicePackFiles\i386\wabmig.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 85504 c:\windows\ServicePackFiles\i386\wabimp.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 32768 c:\windows\ServicePackFiles\i386\wabfind.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 46080 c:\windows\ServicePackFiles\i386\wab.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 15872 c:\windows\ServicePackFiles\i386\w3ssl.dll
    + 2008-04-14 17:33 . 2008-04-14 17:33 53504 c:\windows\ServicePackFiles\i386\volsnap.sys
    + 2008-04-13 19:44 . 2008-04-13 19:44 81664 c:\windows\ServicePackFiles\i386\videoprt.sys
    + 2008-04-13 19:36 . 2008-04-13 19:36 42240 c:\windows\ServicePackFiles\i386\viaagp.sys
    + 2008-04-13 19:44 . 2008-04-13 19:44 20992 c:\windows\ServicePackFiles\i386\vga.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 54272 c:\windows\ServicePackFiles\i386\vfwwdm32.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 18944 c:\windows\ServicePackFiles\i386\version.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 26624 c:\windows\ServicePackFiles\i386\verifier.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 28672 c:\windows\ServicePackFiles\i386\verclsid.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 51712 c:\windows\ServicePackFiles\i386\vdmredir.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 26112 c:\windows\ServicePackFiles\i386\vdmdbg.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 11325 c:\windows\ServicePackFiles\i386\vchnt5.dll
    + 2008-04-14 18:02 . 2008-04-14 18:02 30749 c:\windows\ServicePackFiles\i386\vbajet32.dll
    + 2008-04-14 18:03 . 2008-04-14 18:03 50176 c:\windows\ServicePackFiles\i386\utilman.exe
    + 2008-04-14 18:03 . 2008-04-14 18:03 26112 c:\windows\ServicePackFiles\i386\userinit.exe
    + 2008-04-14 18:02 . 2008-04-14 18:02 76288 c:\windows\ServicePackFiles\i386\usbui.dll
    + 2008-04-13 19:45 . 2008-04-13 19:45 20608 c:\windows\ServicePackFiles\i386\usbuhci.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 26368 c:\windows\ServicePackFiles\i386\usbstor.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 26112 c:\windows\ServicePackFiles\i386\usbser.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 15104 c:\windows\ServicePackFiles\i386\usbscan.sys
    + 2008-04-13 19:47 . 2008-04-13 19:47 25856 c:\windows\ServicePackFiles\i386\usbprint.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 17152 c:\windows\ServicePackFiles\i386\usbohci.sys
    + 2008-04-14 18:02 . 2008-04-14 18:02 16896 c:\windows\ServicePackFiles\i386\usbmon.dll
    + 2008-04-13 19:45 . 2008-04-13 19:45 15872 c:\windows\ServicePackFiles\i386\usbintel.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 59520 c:\windows\ServicePackFiles\i386\usbhub.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 30208 c:\windows\ServicePackFiles\i386\usbehci.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 32128 c:\windows\ServicePackFiles\i386\usbccgp.sys
    + 2008-04-13 19:45 . 2008-04-13 19:45 25728 c:\windows\ServicePackFiles\i386\usbcamd2.sys
    + 2008-