Vraag & Antwoord

Beveiliging & privacy

Open port 53.. Just a check

Anoniem
None
47 antwoorden
  • Ik deed toch echt CTRL-A, CTRL-C, CTRL-V ;-)

    nog een poging


    ComboFix 11-11-24.01 - Sander 24-11-2011 18:21:44.2.2 - x64
    Microsoft Windows 7 Enterprise 6.1.7601.1.1252.31.1033.18.2046.1131 [GMT 1:00]
    Gestart vanuit: c:\users\Sander\Desktop\ComboFix.exe
    AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
    SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    (((((((((((((((((((( Bestanden Gemaakt van 2011-10-24 to 2011-11-24 ))))))))))))))))))))))))))))))
    .
    .
    2011-11-24 17:25 . 2011-11-24 17:25 ——– d—–w- c:\users\Default\AppData\Local\temp
    2011-11-22 17:50 . 2011-11-22 17:50 ——– d—–w- c:\program files (x86)\ESET
    2011-11-21 17:32 . 2011-11-21 17:35 ——– d—–w- c:\windows\system32\appmgmt
    2011-11-20 22:04 . 2011-11-20 22:04 ——– d—–w- c:\users\Sander\AppData\Roaming\Malwarebytes
    2011-11-20 22:04 . 2011-11-20 22:04 ——– d—–w- c:\programdata\Malwarebytes
    2011-11-20 22:04 . 2011-11-20 22:04 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware
    2011-11-20 22:04 . 2011-08-31 16:00 25416 —-a-w- c:\windows\system32\drivers\mbam.sys
    2011-11-20 22:00 . 2011-11-20 22:00 388096 —-a-r- c:\users\Sander\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2011-11-20 21:36 . 2011-11-20 21:54 ——– d—–w- c:\programdata\Spybot - Search & Destroy
    2011-11-20 21:36 . 2011-11-20 21:36 ——– d—–w- c:\program files (x86)\Spybot - Search & Destroy
    2011-11-20 21:19 . 2011-11-20 21:19 ——– d—–w- c:\program files (x86)\Trend Micro
    2011-11-20 21:11 . 2011-06-21 04:09 200976 —-a-w- c:\windows\SysWow64\drivers\tmcomm.sys
    2011-11-20 18:37 . 2011-11-20 18:37 ——– d—–w- c:\users\Sander\AppData\Roaming\Avira
    2011-11-20 18:36 . 2011-09-18 07:39 130760 —-a-w- c:\windows\system32\drivers\avipbb.sys
    2011-11-20 18:36 . 2011-09-15 22:55 97312 —-a-w- c:\windows\system32\drivers\avgntflt.sys
    2011-11-20 18:36 . 2011-09-15 22:55 27760 —-a-w- c:\windows\system32\drivers\avkmgr.sys
    2011-11-20 18:36 . 2011-11-20 18:36 ——– d—–w- c:\programdata\Avira
    2011-11-20 18:36 . 2011-11-20 18:36 ——– d—–w- c:\program files (x86)\Avira
    2011-11-20 14:25 . 2011-11-20 14:25 ——– d—–w- c:\users\Sander\AppData\Local\MetaGeek,_LLC
    2011-11-20 14:15 . 2011-11-20 14:15 ——– d—–w- c:\program files\MetaGeek
    2011-11-19 14:32 . 2011-11-19 14:32 ——– d—–w- c:\users\Sander\AppData\Local\uTorrent
    2011-11-19 14:08 . 2011-11-19 14:08 ——– d—–w- c:\users\Sander\AppData\Roaming\Overlook
    2011-11-19 14:07 . 2011-11-19 14:07 ——– d—–w- c:\program files (x86)\WinPcap
    2011-11-19 14:07 . 2011-11-19 14:07 ——– d—–w- c:\programdata\Overlook
    2011-11-19 14:07 . 2011-11-19 14:07 ——– d—–w- c:\program files (x86)\Overlook Fing 1.4
    2011-11-09 18:13 . 2011-10-01 05:45 886784 —-a-w- c:\program files\Common Files\System\wab32.dll
    2011-11-09 18:13 . 2011-10-01 04:37 708608 —-a-w- c:\program files (x86)\Common Files\System\wab32.dll
    2011-11-09 18:13 . 2011-09-29 16:29 1923952 —-a-w- c:\windows\system32\drivers\tcpip.sys
    2011-11-09 18:13 . 2011-09-29 04:03 3144704 —-a-w- c:\windows\system32\win32k.sys
    2011-11-05 09:17 . 2011-11-16 19:51 ——– d—–w- c:\users\Sander\AppData\Local\Adobe
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-10-03 04:06 . 2011-01-16 15:10 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll
    2011-09-01 05:24 . 2011-10-14 01:01 2309120 —-a-w- c:\windows\system32\jscript9.dll
    2011-09-01 05:17 . 2011-10-14 01:01 1389056 —-a-w- c:\windows\system32\wininet.dll
    2011-09-01 05:12 . 2011-10-14 01:01 2382848 —-a-w- c:\windows\system32\mshtml.tlb
    2011-09-01 02:35 . 2011-10-14 01:01 1798144 —-a-w- c:\windows\SysWow64\jscript9.dll
    2011-09-01 02:28 . 2011-10-14 01:01 1126912 —-a-w- c:\windows\SysWow64\wininet.dll
    2011-09-01 02:22 . 2011-10-14 01:01 2382848 —-a-w- c:\windows\SysWow64\mshtml.tlb
    2011-08-27 05:37 . 2011-10-13 20:16 861696 —-a-w- c:\windows\system32\oleaut32.dll
    2011-08-27 05:37 . 2011-10-13 20:16 331776 —-a-w- c:\windows\system32\oleacc.dll
    2011-08-27 04:26 . 2011-10-13 20:16 571904 —-a-w- c:\windows\SysWow64\oleaut32.dll
    2011-08-27 04:26 . 2011-10-13 20:16 233472 —-a-w- c:\windows\SysWow64\oleacc.dll
    .
    .
    ((((((((((((((((((((((((((((( SnapShot@2011-11-21_17.23.21 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2010-10-02 11:17 . 2011-11-21 17:53 42152 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2009-07-14 05:10 . 2011-11-21 17:53 40170 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
    + 2010-10-02 11:13 . 2011-11-21 17:53 11044 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-677367547-3624079886-4196243676-1000_UserData.bin
    + 2009-07-14 05:30 . 2011-11-21 17:39 86016 c:\windows\system32\DriverStore\infpub.dat
    - 2009-07-14 05:30 . 2011-11-20 18:37 86016 c:\windows\system32\DriverStore\infpub.dat
    - 2011-11-21 02:31 . 2011-11-21 02:31 42496 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\357c754688a5756ac7fc4fc831ffbf03\System.Windows.Presentation.ni.dll
    + 2011-11-24 02:25 . 2011-11-24 02:25 42496 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\357c754688a5756ac7fc4fc831ffbf03\System.Windows.Presentation.ni.dll
    + 2011-11-24 02:25 . 2011-11-24 02:25 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\f7738bf2ff3dc492be82f64880dcfc4c\System.Web.ApplicationServices.ni.dll
    - 2011-11-21 02:31 . 2011-11-21 02:31 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\f7738bf2ff3dc492be82f64880dcfc4c\System.Web.ApplicationServices.ni.dll
    - 2011-11-21 02:29 . 2011-11-21 02:29 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\32d3441efb46d802cdc65de502f28e3b\System.AddIn.Contract.ni.dll
    + 2011-11-24 02:22 . 2011-11-24 02:22 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\32d3441efb46d802cdc65de502f28e3b\System.AddIn.Contract.ni.dll
    + 2011-11-24 02:20 . 2011-11-24 02:20 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\512c12c2af578c00e8655b0ec2a92102\Microsoft.VisualC.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\512c12c2af578c00e8655b0ec2a92102\Microsoft.VisualC.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\4a82ab8680409c1dc5a55e26742e8900\dfsvc.ni.exe
    + 2011-11-24 02:19 . 2011-11-24 02:19 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\4a82ab8680409c1dc5a55e26742e8900\dfsvc.ni.exe
    - 2011-11-21 02:26 . 2011-11-21 02:26 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\b1136d0eb9ce963a7675b0d6cd7c4c4e\Accessibility.ni.dll
    + 2011-11-24 02:19 . 2011-11-24 02:19 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\b1136d0eb9ce963a7675b0d6cd7c4c4e\Accessibility.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\a2ef92260effc4f8cef9339a24ba230b\UIAutomationProvider.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\a2ef92260effc4f8cef9339a24ba230b\UIAutomationProvider.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\fd3809e0cf174aaadc13e0b409123fd3\System.Windows.Presentation.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\fd3809e0cf174aaadc13e0b409123fd3\System.Windows.Presentation.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\6b87fc6f1e65b1bf6df19a9bd5b02f80\System.Web.ApplicationServices.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\6b87fc6f1e65b1bf6df19a9bd5b02f80\System.Web.ApplicationServices.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\49989f9c9f180a49b0953cb47078df77\System.ServiceModel.Channels.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\49989f9c9f180a49b0953cb47078df77\System.ServiceModel.Channels.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\6c15a9f7fb56275fb9ad22ae306d9d42\System.AddIn.Contract.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\6c15a9f7fb56275fb9ad22ae306d9d42\System.AddIn.Contract.ni.dll
    - 2011-11-21 02:07 . 2011-11-21 02:07 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\9cce7d40f80e50a7e43d8e99f039359f\Microsoft.VisualC.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\9cce7d40f80e50a7e43d8e99f039359f\Microsoft.VisualC.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\ec6caf1c86ddb8ce9d7a89adb10264e8\Accessibility.ni.dll
    - 2011-11-21 02:07 . 2011-11-21 02:07 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\ec6caf1c86ddb8ce9d7a89adb10264e8\Accessibility.ni.dll
    + 2011-11-24 02:19 . 2011-11-24 02:19 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\0d036f215cfdf37305d84ac680e19413\System.Windows.Presentation.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\0d036f215cfdf37305d84ac680e19413\System.Windows.Presentation.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\c4a4564925c5fa6d43dac830cfb294bd\System.Web.DynamicData.Design.ni.dll
    + 2011-11-24 02:18 . 2011-11-24 02:18 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\c4a4564925c5fa6d43dac830cfb294bd\System.Web.DynamicData.Design.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\3a5529f1de05952773c725a6ff2e07fb\PresentationFontCache.ni.exe
    - 2011-11-21 02:24 . 2011-11-21 02:24 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\3a5529f1de05952773c725a6ff2e07fb\PresentationFontCache.ni.exe
    - 2011-11-21 02:16 . 2011-11-21 02:16 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\c066431266a5b4c8326779d12542161c\PresentationCFFRasterizer.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\c066431266a5b4c8326779d12542161c\PresentationCFFRasterizer.ni.dll
    - 2011-11-21 02:23 . 2011-11-21 02:23 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\621b2f176909228deae402a6031e7420\Microsoft.WSMan.Runtime.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\621b2f176909228deae402a6031e7420\Microsoft.WSMan.Runtime.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\ecd29eb2eda46acfda1229f8362f60e9\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    - 2011-11-21 02:23 . 2011-11-21 02:23 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\ecd29eb2eda46acfda1229f8362f60e9\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    - 2011-11-21 02:23 . 2011-11-21 02:23 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d77eafc89b58f5466b7555d89a293c50\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d77eafc89b58f5466b7555d89a293c50\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\c1e58a266d600248f08dca600457e346\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    - 2011-11-21 02:23 . 2011-11-21 02:23 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\c1e58a266d600248f08dca600457e346\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    - 2011-11-21 02:23 . 2011-11-21 02:23 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\9f1ca68fbcefac4ef4f13e5f5604ad82\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\9f1ca68fbcefac4ef4f13e5f5604ad82\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\8260ae5a7d4a7e7cd907c958858da284\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    - 2011-11-21 02:23 . 2011-11-21 02:23 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\8260ae5a7d4a7e7cd907c958858da284\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\371120a0816ba5ce909b8e1341da376f\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    - 2011-11-21 02:23 . 2011-11-21 02:23 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\371120a0816ba5ce909b8e1341da376f\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    - 2011-11-21 02:10 . 2011-11-21 02:10 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\e6aabbfb38a14559712fdf51064ff3a1\Microsoft.VisualC.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\e6aabbfb38a14559712fdf51064ff3a1\Microsoft.VisualC.ni.dll
    + 2011-11-24 02:14 . 2011-11-24 02:14 66048 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\a9a494047cfbd13fd4a155c77a258a0a\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
    - 2011-11-21 02:14 . 2011-11-21 02:14 66048 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\a9a494047cfbd13fd4a155c77a258a0a\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
    - 2011-11-21 02:14 . 2011-11-21 02:14 64000 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\90b3ba2f1de795690641228b63586965\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
    + 2011-11-24 02:14 . 2011-11-24 02:14 64000 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\90b3ba2f1de795690641228b63586965\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
    + 2011-11-24 02:13 . 2011-11-24 02:13 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\866c57c6e58cbe8249b36f21ec8ac18a\Microsoft.MediaCenter.iTv.Hosting.ni.dll
    - 2011-11-21 02:13 . 2011-11-21 02:13 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\866c57c6e58cbe8249b36f21ec8ac18a\Microsoft.MediaCenter.iTv.Hosting.ni.dll
    - 2011-11-21 02:14 . 2011-11-21 02:14 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\584f193ae53236bf55cd78b246214d83\LoadMxf.ni.exe
    + 2011-11-24 02:14 . 2011-11-24 02:14 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\584f193ae53236bf55cd78b246214d83\LoadMxf.ni.exe
    + 2011-11-24 02:13 . 2011-11-24 02:13 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\50cda8ab4cd566b222342c3da14302d3\ehiUPnP.ni.dll
    - 2011-11-21 02:13 . 2011-11-21 02:13 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\50cda8ab4cd566b222342c3da14302d3\ehiUPnP.ni.dll
    + 2011-11-24 02:13 . 2011-11-24 02:13 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\fae9950502b5464108feda9d64ebea78\ehiTVMSMusic.ni.dll
    - 2011-11-21 02:13 . 2011-11-21 02:13 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\fae9950502b5464108feda9d64ebea78\ehiTVMSMusic.ni.dll
    - 2011-11-21 02:13 . 2011-11-21 02:13 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\7de9a8137a33d06dad01c8405d960037\dfsvc.ni.exe
    + 2011-11-24 02:13 . 2011-11-24 02:13 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\7de9a8137a33d06dad01c8405d960037\dfsvc.ni.exe
    - 2011-11-21 02:10 . 2011-11-21 02:10 33280 c:\windows\assembly\NativeImages_v2.0.50727_64\AuditPolicyGPManage#\320d4f45d6463976ce238f654e706926\AuditPolicyGPManagedStubs.Interop.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 33280 c:\windows\assembly\NativeImages_v2.0.50727_64\AuditPolicyGPManage#\320d4f45d6463976ce238f654e706926\AuditPolicyGPManagedStubs.Interop.ni.dll
    - 2011-11-21 02:10 . 2011-11-21 02:10 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\d301e1d96d4f39f15482db09206f1fb1\Accessibility.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\d301e1d96d4f39f15482db09206f1fb1\Accessibility.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\bb1d36ae26e7cadf563061596682e747\UIAutomationProvider.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\bb1d36ae26e7cadf563061596682e747\UIAutomationProvider.ni.dll
    - 2011-11-21 02:07 . 2011-11-21 02:07 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\de6cc37afc2bb3ea973c29211f0b21d8\System.Windows.Presentation.ni.dll
    + 2011-11-24 02:07 . 2011-11-24 02:07 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\de6cc37afc2bb3ea973c29211f0b21d8\System.Windows.Presentation.ni.dll
    + 2011-11-24 02:07 . 2011-11-24 02:07 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\813e44ed9fb1cc60fa0ddc7a8d790a0a\System.Web.DynamicData.Design.ni.dll
    - 2011-11-21 02:07 . 2011-11-21 02:07 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\813e44ed9fb1cc60fa0ddc7a8d790a0a\System.Web.DynamicData.Design.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\d0ed41e7dcb1be4a43a76e47de276d94\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\d0ed41e7dcb1be4a43a76e47de276d94\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\32d21563937263ee3ae9eecfa59fdc3d\System.AddIn.Contract.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\32d21563937263ee3ae9eecfa59fdc3d\System.AddIn.Contract.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\af072bb984952ba5e573ca93cc0cad44\PresentationFontCache.ni.exe
    + 2011-11-24 02:06 . 2011-11-24 02:06 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\af072bb984952ba5e573ca93cc0cad44\PresentationFontCache.ni.exe
    + 2011-11-24 02:06 . 2011-11-24 02:06 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\7681b87de3ecee06390331f0fab14c93\PresentationCFFRasterizer.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\7681b87de3ecee06390331f0fab14c93\PresentationCFFRasterizer.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\a38f8e60cdbca2d158d8daaea9577934\napcrypt.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\a38f8e60cdbca2d158d8daaea9577934\napcrypt.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\0067507e3305266a72358b51bdd5dd86\Microsoft.WSMan.Runtime.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\0067507e3305266a72358b51bdd5dd86\Microsoft.WSMan.Runtime.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\f7a51d8e344dda4d7f38e1b824cd83ad\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\f7a51d8e344dda4d7f38e1b824cd83ad\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ed12245481e36d8cc238876bd79b1e6c\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ed12245481e36d8cc238876bd79b1e6c\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\e5e22edbc2a34b9d9a166dbbaf7379ff\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\e5e22edbc2a34b9d9a166dbbaf7379ff\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ca1daccfdb3f0bff3bd0062644a539bf\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ca1daccfdb3f0bff3bd0062644a539bf\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\afe4d94d07a22c70106c859139cb314a\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\afe4d94d07a22c70106c859139cb314a\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\62e68252fc137a55d2d39fe0d5093599\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\62e68252fc137a55d2d39fe0d5093599\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    + 2011-11-24 02:06 . 2011-11-24 02:06 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\508857b730c4edea8eca42b3d435ef82\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
    - 2011-11-21 02:06 . 2011-11-21 02:06 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\508857b730c4edea8eca42b3d435ef82\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
    - 2011-11-21 02:05 . 2011-11-21 02:05 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5011901c735997d46243e3a90e8bd736\Microsoft.Vsa.ni.dll
    + 2011-11-24 02:05 . 2011-11-24 02:05 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5011901c735997d46243e3a90e8bd736\Microsoft.Vsa.ni.dll
    + 2011-11-24 02:04 . 2011-11-24 02:04 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\3cb6023aa6ab962babcee9c0ec8991de\Microsoft.VisualC.ni.dll
    - 2011-11-21 02:03 . 2011-11-21 02:03 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\3cb6023aa6ab962babcee9c0ec8991de\Microsoft.VisualC.ni.dll
    + 2011-11-24 02:05 . 2011-11-24 02:05 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\cf3cab157883d19e2fb460518c26f6e7\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
    - 2011-11-21 02:05 . 2011-11-21 02:05 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\cf3cab157883d19e2fb460518c26f6e7\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
    - 2011-11-21 02:05 . 2011-11-21 02:05 39936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\4879f5496d8e920dc19c97e53db253d2\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
    + 2011-11-24 02:05 . 2011-11-24 02:05 39936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\4879f5496d8e920dc19c97e53db253d2\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
    - 2011-11-21 02:05 . 2011-11-21 02:05 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aac5bc888c15c2630ea22e517e4e19f8\Microsoft.Build.Framework.ni.dll
    + 2011-11-24 02:05 . 2011-11-24 02:05 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aac5bc888c15c2630ea22e517e4e19f8\Microsoft.Build.Framework.ni.dll
    - 2011-11-21 02:05 . 2011-11-21 02:05 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4ee55572f0f54a71e24fe3fec094968b\Microsoft.Build.Framework.ni.dll
    + 2011-11-24 02:05 . 2011-11-24 02:05 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4ee55572f0f54a71e24fe3fec094968b\Microsoft.Build.Framework.ni.dll
    - 2011-11-21 02:04 . 2011-11-21 02:04 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\e6e4bd9a47848b93cd2dd8a688968741\ehiUserXp.ni.dll
    + 2011-11-24 02:05 . 2011-11-24 02:05 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\e6e4bd9a47848b93cd2dd8a688968741\ehiUserXp.ni.dll
    - 2011-11-21 02:04 . 2011-11-21 02:04 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\94a173b39fa90956937b41c775ac66d7\dfsvc.ni.exe
    + 2011-11-24 02:05 . 2011-11-24 02:05 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\94a173b39fa90956937b41c775ac66d7\dfsvc.ni.exe
    + 2011-11-24 02:04 . 2011-11-24 02:04 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\AuditPolicyGPManage#\06b63c6e22871790da6705df56a896dc\AuditPolicyGPManagedStubs.Interop.ni.dll
    - 2011-11-21 02:03 . 2011-11-21 02:03 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\AuditPolicyGPManage#\06b63c6e22871790da6705df56a896dc\AuditPolicyGPManagedStubs.Interop.ni.dll
    + 2011-11-24 02:04 . 2011-11-24 02:04 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\31fce331fded94dd06627603f6fe4562\Accessibility.ni.dll
    - 2011-11-21 02:03 . 2011-11-21 02:03 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\31fce331fded94dd06627603f6fe4562\Accessibility.ni.dll
    - 2011-11-21 02:17 . 2011-11-21 02:17 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2011-11-21 17:51 . 2011-11-21 17:51 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2011-11-21 17:51 . 2011-11-21 17:51 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2011-11-21 02:17 . 2011-11-21 02:17 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2011-11-21 02:07 . 2011-11-21 02:07 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\2d01a98c567028c2aa3f58b71581c708\dfsvc.ni.exe
    + 2011-11-24 02:08 . 2011-11-24 02:08 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\2d01a98c567028c2aa3f58b71581c708\dfsvc.ni.exe
    + 2010-10-02 17:04 . 2011-11-23 17:23 469248 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
    - 2009-07-14 02:36 . 2011-11-21 02:21 635990 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2011-11-21 17:55 635990 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2011-11-21 17:55 113968 c:\windows\system32\perfc009.dat
    - 2009-07-14 02:36 . 2011-11-21 02:21 113968 c:\windows\system32\perfc009.dat
    + 2009-07-14 05:30 . 2011-11-21 17:39 143360 c:\windows\system32\DriverStore\infstrng.dat
    - 2009-07-14 05:30 . 2011-11-20 18:37 143360 c:\windows\system32\DriverStore\infstrng.dat
    - 2009-07-14 05:30 . 2011-11-20 18:37 143360 c:\windows\system32\DriverStore\infstor.dat
    + 2009-07-14 05:30 . 2011-11-21 17:39 143360 c:\windows\system32\DriverStore\infstor.dat
    - 2009-07-14 05:01 . 2011-11-21 02:16 351004 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2009-07-14 05:01 . 2011-11-21 17:50 351004 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2011-11-21 02:03 . 2011-11-21 02:03 971264 c:\windows\assembly\temp\1IHJU2O8JZ\System.Configuration.ni.dll
    + 2011-11-24 02:25 . 2011-11-24 02:25 322048 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\6c332f5c8c795f7e5415d94bf1d68b0b\WindowsFormsIntegration.ni.dll
    - 2011-11-21 02:31 . 2011-11-21 02:31 322048 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\6c332f5c8c795f7e5415d94bf1d68b0b\WindowsFormsIntegration.ni.dll
    + 2011-11-24 02:22 . 2011-11-24 02:22 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\21b0a1645439e2c615a317dc4cca191d\UIAutomationTypes.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\21b0a1645439e2c615a317dc4cca191d\UIAutomationTypes.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\792559a31b651ec7c2d5da9847961736\UIAutomationProvider.ni.dll
    + 2011-11-24 02:22 . 2011-11-24 02:22 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\792559a31b651ec7c2d5da9847961736\UIAutomationProvider.ni.dll
    - 2011-11-21 02:31 . 2011-11-21 02:31 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\0b326be8df8a20d09e9eb8e827c7258c\UIAutomationClient.ni.dll
    + 2011-11-24 02:25 . 2011-11-24 02:25 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\0b326be8df8a20d09e9eb8e827c7258c\UIAutomationClient.ni.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 525824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\c767821a3004226d67edf155d5737083\System.Xml.Linq.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 525824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\c767821a3004226d67edf155d5737083\System.Xml.Linq.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 254976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\a7fe785edf8113c49b5fa6adcb537408\System.Windows.Input.Manipulations.ni.dll
    + 2011-11-24 02:22 . 2011-11-24 02:22 254976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\a7fe785edf8113c49b5fa6adcb537408\System.Windows.Input.Manipulations.ni.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\0cad532e2fb59585cc790c3fe656e64f\System.Transactions.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\0cad532e2fb59585cc790c3fe656e64f\System.Transactions.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 280576 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\ee501cc4420ce53f2ded79b3ad798c90\System.ServiceProcess.ni.dll
    - 2011-11-21 02:31 . 2011-11-21 02:31 280576 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\ee501cc4420ce53f2ded79b3ad798c90\System.ServiceProcess.ni.dll
    - 2011-11-21 02:31 . 2011-11-21 02:31 107520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\e3cbf844da8dbc1190d37abc30570e29\System.ServiceModel.Channels.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 107520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\e3cbf844da8dbc1190d37abc30570e29\System.ServiceModel.Channels.ni.dll
    - 2011-11-21 02:31 . 2011-11-21 02:31 507904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\4b2c5b2baad543993991af8e6e347964\System.ServiceModel.Routing.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 507904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\4b2c5b2baad543993991af8e6e347964\System.ServiceModel.Routing.ni.dll
    + 2011-11-24 02:20 . 2011-11-24 02:20 939520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\bd4e7dba4c1d18de2bb92f050691f714\System.Security.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 939520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\bd4e7dba4c1d18de2bb92f050691f714\System.Security.ni.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 376320 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\93ee99e5061f73f7e0d64e28e72acdd8\System.Runtime.Serialization.Formatters.Soap.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 376320 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\93ee99e5061f73f7e0d64e28e72acdd8\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 987648 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\3ae7f226fe2de56b8a1417d52ed51029\System.Runtime.Remoting.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 987648 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\3ae7f226fe2de56b8a1417d52ed51029\System.Runtime.Remoting.ni.dll
    + 2011-11-24 02:20 . 2011-11-24 02:20 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\97a9eaf09596eebab9ed3e17546ae804\System.Numerics.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\97a9eaf09596eebab9ed3e17546ae804\System.Numerics.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 930304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\41d449b0be8ff6b6dc9174313db88459\System.Net.ni.dll
    - 2011-11-21 02:30 . 2011-11-21 02:30 930304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\41d449b0be8ff6b6dc9174313db88459\System.Net.ni.dll
    - 2011-11-21 02:30 . 2011-11-21 02:30 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\f8aa02fc7b4467081e19e35a5601f518\System.Messaging.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\f8aa02fc7b4467081e19e35a5601f518\System.Messaging.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\4fc188ed573c4a57a0287938986f6a1c\System.Management.Instrumentation.ni.dll
    - 2011-11-21 02:30 . 2011-11-21 02:30 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\4fc188ed573c4a57a0287938986f6a1c\System.Management.Instrumentation.ni.dll
    - 2011-11-21 02:30 . 2011-11-21 02:30 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\0cca1aa68edcb1f5ee92fc8aaa2c7d51\System.IO.Log.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\0cca1aa68edcb1f5ee92fc8aaa2c7d51\System.IO.Log.ni.dll
    - 2011-11-21 02:30 . 2011-11-21 02:30 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\80d06aff25a9994a00f2976a1cb06733\System.IdentityModel.Selectors.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\80d06aff25a9994a00f2976a1cb06733\System.IdentityModel.Selectors.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\df0ac9043e9b88bcafa5b378994d8365\System.EnterpriseServices.Wrapper.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\df0ac9043e9b88bcafa5b378994d8365\System.EnterpriseServices.Wrapper.dll
    + 2011-11-24 02:20 . 2011-11-24 02:20 511488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\ce5254e2408f77d6a09d30508f8dd52a\System.Dynamic.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 511488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\ce5254e2408f77d6a09d30508f8dd52a\System.Dynamic.ni.dll
    - 2011-11-21 02:30 . 2011-11-21 02:30 628736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\6048f7c3071c23536b976d262c34fae1\System.DirectoryServices.Protocols.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 628736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\6048f7c3071c23536b976d262c34fae1\System.DirectoryServices.Protocols.ni.dll
    - 2011-11-21 02:30 . 2011-11-21 02:30 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\80d5d1a7442173fc59c419b8d1c647ff\System.Device.ni.dll
    + 2011-11-24 02:24 . 2011-11-24 02:24 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\80d5d1a7442173fc59c419b8d1c647ff\System.Device.ni.dll
    + 2011-11-24 02:23 . 2011-11-24 02:23 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\33038b29c486ff870f23a6b37e5b9d11\System.Data.DataSetExtensions.ni.dll
    - 2011-11-21 02:29 . 2011-11-21 02:29 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\33038b29c486ff870f23a6b37e5b9d11\System.Data.DataSetExtensions.ni.dll
    + 2011-11-24 02:23 . 2011-11-24 02:23 181248 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c509822f920d2613ab999e6148ab8099\System.Configuration.Install.ni.dll
    - 2011-11-21 02:29 . 2011-11-21 02:29 181248 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c509822f920d2613ab999e6148ab8099\System.Configuration.Install.ni.dll
    + 2011-11-24 02:23 . 2011-11-24 02:23 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\e0dc7e5bc5e66268387e19c10727a030\System.ComponentModel.DataAnnotations.ni.dll
    - 2011-11-21 02:29 . 2011-11-21 02:29 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\e0dc7e5bc5e66268387e19c10727a030\System.ComponentModel.DataAnnotations.ni.dll
    - 2011-11-21 02:29 . 2011-11-21 02:29 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\55d507e7cc2017d6eed82527df1e910a\System.AddIn.ni.dll
    + 2011-11-24 02:22 . 2011-11-24 02:22 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\55d507e7cc2017d6eed82527df1e910a\System.AddIn.ni.dll
    - 2011-11-21 02:29 . 2011-11-21 02:29 553472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\0a65293a0732eaeb538fb5d9accafe92\System.Activities.DurableInstancing.ni.dll
    + 2011-11-24 02:22 . 2011-11-24 02:22 553472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\0a65293a0732eaeb538fb5d9accafe92\System.Activities.DurableInstancing.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 430080 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\7597686f1c999b6491518ff47508acdf\SMSvcHost.ni.exe
    + 2011-11-24 02:19 . 2011-11-24 02:19 430080 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\7597686f1c999b6491518ff47508acdf\SMSvcHost.ni.exe
    + 2011-11-24 02:21 . 2011-11-24 02:21 184832 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\53d186939a3367ce3b37c84464370ca6\SMDiagnostics.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 184832 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\53d186939a3367ce3b37c84464370ca6\SMDiagnostics.ni.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 387584 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\eb1dae468677366538f99b623e7a7018\PresentationFramework.Royale.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 387584 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\eb1dae468677366538f99b623e7a7018\PresentationFramework.Royale.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 745984 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\1e80fa78c14d8cac7feaa1d70ffb0a38\PresentationFramework.Luna.ni.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 745984 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\1e80fa78c14d8cac7feaa1d70ffb0a38\PresentationFramework.Luna.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 331264 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\196d1a63ee35811bd9ce868bc70273a7\PresentationFramework.Classic.ni.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 331264 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\196d1a63ee35811bd9ce868bc70273a7\PresentationFramework.Classic.ni.dll
    - 2011-11-21 02:28 . 2011-11-21 02:28 555520 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\039366972f5ad8f34025c5aed57c1929\PresentationFramework.Aero.ni.dll
    + 2011-11-24 02:21 . 2011-11-24 02:21 555520 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\039366972f5ad8f34025c5aed57c1929\PresentationFramework.Aero.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 289280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\162188f24710473e90f7327869e0715d\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2011-11-24 02:20 . 2011-11-24 02:20 289280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\162188f24710473e90f7327869e0715d\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\85e60ede22b298d7e5fcc17757f74ef1\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-11-24 02:20 . 2011-11-24 02:20 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\85e60ede22b298d7e5fcc17757f74ef1\Microsoft.Transactions.Bridge.Dtc.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\4f99fd1b2d217c9950b0e7c053b9e906\CustomMarshalers.ni.dll
    + 2011-11-24 02:19 . 2011-11-24 02:19 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\4f99fd1b2d217c9950b0e7c053b9e906\CustomMarshalers.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\11f340731d6cd696ae7b8b6351702cbe\WindowsFormsIntegration.ni.dll
    - 2011-11-21 02:10 . 2011-11-21 02:10 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\11f340731d6cd696ae7b8b6351702cbe\WindowsFormsIntegration.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\8d3a679adab2761b52ffbb45c9c3a424\UIAutomationTypes.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\8d3a679adab2761b52ffbb45c9c3a424\UIAutomationTypes.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\0335e0194e209f69c3bd7104f3072818\UIAutomationClient.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\0335e0194e209f69c3bd7104f3072818\UIAutomationClient.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\c829c221dcccf40edbd75a0db8677d8a\System.Xml.Linq.ni.dll
    - 2011-11-21 02:07 . 2011-11-21 02:07 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\c829c221dcccf40edbd75a0db8677d8a\System.Xml.Linq.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\004e12aad2006c3e9b30c08d52f8785b\System.Windows.Input.Manipulations.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\004e12aad2006c3e9b30c08d52f8785b\System.Windows.Input.Manipulations.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\801e4d0a25c5afb1288c890f9e71257a\System.Transactions.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\801e4d0a25c5afb1288c890f9e71257a\System.Transactions.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\0af5485ccb0e43dd200f9e21f5eb60bd\System.ServiceProcess.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\0af5485ccb0e43dd200f9e21f5eb60bd\System.ServiceProcess.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\cfb228e35c0876d643008f616a8e132f\System.ServiceModel.Routing.ni.dll
    + 2011-11-24 02:10 . 2011-11-24 02:10 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\cfb228e35c0876d643008f616a8e132f\System.ServiceModel.Routing.ni.dll
    + 2011-11-24 02:01 . 2011-11-24 02:01 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\fb35b1630e65c1d381dc193e8eeafd11\System.Security.ni.dll
    - 2011-11-21 02:01 . 2011-11-21 02:01 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\fb35b1630e65c1d381dc193e8eeafd11\System.Security.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\dd02eb52dead028e9ca47004a0ef6811\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\dd02eb52dead028e9ca47004a0ef6811\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 762368 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\1aad834c96402d8cb42631dcbcb14848\System.Runtime.Remoting.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 762368 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\1aad834c96402d8cb42631dcbcb14848\System.Runtime.Remoting.ni.dll
    + 2011-11-24 02:01 . 2011-11-24 02:01 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\17c29c52d52ff0b9b348b54037329bd0\System.Numerics.ni.dll
    - 2011-11-21 02:01 . 2011-11-21 02:01 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\17c29c52d52ff0b9b348b54037329bd0\System.Numerics.ni.dll
    + 2011-11-24 02:09 . 2011-11-24 02:09 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\772b52e4ac8936b913fe017d909c75e4\System.Net.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\772b52e4ac8936b913fe017d909c75e4\System.Net.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\800c19289623b452a4681765004a6593\System.Messaging.ni.dll
    + 2011-11-24 02:09 . 2011-11-24 02:09 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\800c19289623b452a4681765004a6593\System.Messaging.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\0d9d8caf2b678f6163062213fbebba79\System.Management.Instrumentation.ni.dll
    + 2011-11-24 02:09 . 2011-11-24 02:09 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\0d9d8caf2b678f6163062213fbebba79\System.Management.Instrumentation.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\f3dae22180575540ae1cce1dc3310ec8\System.IO.Log.ni.dll
    + 2011-11-24 02:09 . 2011-11-24 02:09 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\f3dae22180575540ae1cce1dc3310ec8\System.IO.Log.ni.dll
    + 2011-11-24 02:09 . 2011-11-24 02:09 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\29722312a1eb3d003a4b1d13a99ce7a2\System.IdentityModel.Selectors.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\29722312a1eb3d003a4b1d13a99ce7a2\System.IdentityModel.Selectors.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\3543c115bdc594a29a010e8a9ce20b55\System.EnterpriseServices.Wrapper.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\3543c115bdc594a29a010e8a9ce20b55\System.EnterpriseServices.Wrapper.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\3543c115bdc594a29a010e8a9ce20b55\System.EnterpriseServices.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\3543c115bdc594a29a010e8a9ce20b55\System.EnterpriseServices.ni.dll
    - 2011-11-21 02:01 . 2011-11-21 02:01 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\082c3497e9f012c0609b8140d158f472\System.Dynamic.ni.dll
    + 2011-11-24 02:01 . 2011-11-24 02:01 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\082c3497e9f012c0609b8140d158f472\System.Dynamic.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\cf4c1eab5c582c8b3240df27a1571014\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-11-24 02:09 . 2011-11-24 02:09 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\cf4c1eab5c582c8b3240df27a1571014\System.DirectoryServices.AccountManagement.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\2bb5db827de2910b7ab3b83b402edbd1\System.DirectoryServices.Protocols.ni.dll
    + 2011-11-24 02:09 . 2011-11-24 02:09 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\2bb5db827de2910b7ab3b83b402edbd1\System.DirectoryServices.Protocols.ni.dll
    - 2011-11-21 02:09 . 2011-11-21 02:09 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\eb2b27bc25184cd6878192ce2af5d37a\System.Device.ni.dll
    + 2011-11-24 02:09 . 2011-11-24 02:09 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\eb2b27bc25184cd6878192ce2af5d37a\System.Device.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\0861be947a9873ce65c95ad6306dc4b8\System.Data.DataSetExtensions.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\0861be947a9873ce65c95ad6306dc4b8\System.Data.DataSetExtensions.ni.dll
    - 2011-11-21 02:01 . 2011-11-21 02:01 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\671b30d14bd0da4964983a5cf900c3e8\System.Configuration.ni.dll
    + 2011-11-24 02:01 . 2011-11-24 02:01 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\671b30d14bd0da4964983a5cf900c3e8\System.Configuration.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\bfcf802a51a71bdb239e504eac1b2343\System.Configuration.Install.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\bfcf802a51a71bdb239e504eac1b2343\System.Configuration.Install.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\75be7916fe8bb0db3fa194b8d6ef9d9b\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\75be7916fe8bb0db3fa194b8d6ef9d9b\System.ComponentModel.DataAnnotations.ni.dll
    - 2011-11-21 02:02 . 2011-11-21 02:02 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\17f12751c9580e91ea42f174b10d0720\System.ComponentModel.Composition.ni.dll
    + 2011-11-24 02:02 . 2011-11-24 02:02 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\17f12751c9580e91ea42f174b10d0720\System.ComponentModel.Composition.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\0f1bafb387e3571c1b75bf5f3dbc7d41\System.AddIn.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\0f1bafb387e3571c1b75bf5f3dbc7d41\System.AddIn.ni.dll
    - 2011-11-21 02:08 . 2011-11-21 02:08 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\742dd858317919b757db0d2222c57e7b\System.Activities.DurableInstancing.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\742dd858317919b757db0d2222c57e7b\System.Activities.DurableInstancing.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\7a5c39f61b17e969dfc6c6a7068c49c4\SMSvcHost.ni.exe
    - 2011-11-21 02:07 . 2011-11-21 02:07 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\7a5c39f61b17e969dfc6c6a7068c49c4\SMSvcHost.ni.exe
    - 2011-11-21 02:08 . 2011-11-21 02:08 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\7b4d732795beab50abf3458fa6a267c9\SMDiagnostics.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\7b4d732795beab50abf3458fa6a267c9\SMDiagnostics.ni.dll
    + 2011-11-24 02:02 . 2011-11-24 02:02 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ad343938f98936b70bc6cd92bbef48ee\PresentationFramework.Classic.ni.dll
    - 2011-11-21 02:02 . 2011-11-21 02:02 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ad343938f98936b70bc6cd92bbef48ee\PresentationFramework.Classic.ni.dll
    - 2011-11-21 02:02 . 2011-11-21 02:02 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a7480d52a62e983e9cb6edbd8949960a\PresentationFramework.Luna.ni.dll
    + 2011-11-24 02:02 . 2011-11-24 02:02 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a7480d52a62e983e9cb6edbd8949960a\PresentationFramework.Luna.ni.dll
    - 2011-11-21 02:02 . 2011-11-21 02:02 450560 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9fbc5dc82cbdac4526c57eea5d480c03\PresentationFramework.Aero.ni.dll
    + 2011-11-24 02:02 . 2011-11-24 02:02 450560 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9fbc5dc82cbdac4526c57eea5d480c03\PresentationFramework.Aero.ni.dll
    + 2011-11-24 02:02 . 2011-11-24 02:02 327680 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9542e99f613b7c4b7c28d38ff39b5937\PresentationFramework.Royale.ni.dll
    - 2011-11-21 02:02 . 2011-11-21 02:02 327680 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9542e99f613b7c4b7c28d38ff39b5937\PresentationFramework.Royale.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 219136 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\372dc0b22c0b92aee2d2ebd482671e89\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    - 2011-11-21 02:07 . 2011-11-21 02:07 219136 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\372dc0b22c0b92aee2d2ebd482671e89\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    - 2011-11-21 02:07 . 2011-11-21 02:07 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\1751b025496942925f09bc6409e3a175\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\1751b025496942925f09bc6409e3a175\Microsoft.Transactions.Bridge.Dtc.ni.dll
    - 2011-11-21 02:07 . 2011-11-21 02:07 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\05cdbb716020bb07505b04593ee0f2b0\CustomMarshalers.ni.dll
    + 2011-11-24 02:08 . 2011-11-24 02:08 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\05cdbb716020bb07505b04593ee0f2b0\CustomMarshalers.ni.dll
    - 2011-11-21 02:26 . 2011-11-21 02:26 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\756011e2290f779331336b1659d804e9\WsatConfig.ni.exe
    + 2011-11-24 02:19 . 2011-11-24 02:19 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\756011e2290f779331336b1659d804e9\WsatConfig.ni.exe
    + 2011-11-24 02:19 . 2011-11-24 02:19 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\bdf567eb555bffe4d9f4383b6b97832b\WindowsFormsIntegration.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\bdf567eb555bffe4d9f4383b6b97832b\WindowsFormsIntegration.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\344ac206baaadddc6f7c5fb8ae189b1a\UIAutomationTypes.ni.dll
    - 2011-11-21 02:16 . 2011-11-21 02:16 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\344ac206baaadddc6f7c5fb8ae189b1a\UIAutomationTypes.ni.dll
    - 2011-11-21 02:16 . 2011-11-21 02:16 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\7a61dc7e8c606d1ed2c703cbeae2f8ef\UIAutomationProvider.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\7a61dc7e8c606d1ed2c703cbeae2f8ef\UIAutomationProvider.ni.dll
    + 2011-11-24 02:17 . 2011-11-24 02:17 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\93585639099b0e1b8280eb528fb12c0b\UIAutomationClient.ni.dll
    - 2011-11-21 02:23 . 2011-11-21 02:23 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\93585639099b0e1b8280eb528fb12c0b\UIAutomationClient.ni.dll
    + 2011-11-24 02:19 . 2011-11-24 02:19 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\da4abebb1b165f2d27c5fe5bc6e9ed71\TaskScheduler.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\da4abebb1b165f2d27c5fe5bc6e9ed71\TaskScheduler.ni.dll
    - 2011-11-21 02:24 . 2011-11-21 02:24 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\2b9253e5a2818152f9f1a3b9d7c7ee60\System.Xml.Linq.ni.dll
    + 2011-11-24 02:18 . 2011-11-24 02:18 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\2b9253e5a2818152f9f1a3b9d7c7ee60\System.Xml.Linq.ni.dll
    + 2011-11-24 02:18 . 2011-11-24 02:18 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\5e59963a99fe6b3dfc07b6ecb375b42b\System.Web.Routing.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\5e59963a99fe6b3dfc07b6ecb375b42b\System.Web.Routing.ni.dll
    - 2011-11-21 02:12 . 2011-11-21 02:12 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\d78f9ad8894e441f38d96697bee1d6fa\System.Web.RegularExpressions.ni.dll
    + 2011-11-24 02:12 . 2011-11-24 02:12 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\d78f9ad8894e441f38d96697bee1d6fa\System.Web.RegularExpressions.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\550cf8623da60ebdaf41be0d472886cf\System.Web.Entity.ni.dll
    + 2011-11-24 02:18 . 2011-11-24 02:18 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\550cf8623da60ebdaf41be0d472886cf\System.Web.Entity.ni.dll
    + 2011-11-24 02:18 . 2011-11-24 02:18 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\e97615ac42a73803dbb72feb560dc3f8\System.Web.Entity.Design.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\e97615ac42a73803dbb72feb560dc3f8\System.Web.Entity.Design.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\469736b242d26e3a0df5dea6da3679f4\System.Web.DynamicData.ni.dll
    + 2011-11-24 02:18 . 2011-11-24 02:18 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\469736b242d26e3a0df5dea6da3679f4\System.Web.DynamicData.ni.dll
    + 2011-11-24 02:18 . 2011-11-24 02:18 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\de14c74ae9ddfaae3ecf50a7e4a1f1b0\System.Web.Abstractions.ni.dll
    - 2011-11-21 02:25 . 2011-11-21 02:25 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\de14c74ae9ddfaae3ecf50a7e4a1f1b0\System.Web.Abstractions.ni.dll
    + 2011-11-24 02:11 . 2011-11-24 02:11 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\f15a8af412d84b1fd14fc735fb5834f5\System.Transactions.ni.dll
    - 2011-11-21 02:11 . 2011-11-21 02:11 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\f15a8af412d84b1fd14fc735fb5834f5\System.Transactions.ni.dll
    + 2011-11-24 02:12 . 2011-11-24 02:12 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\8428a82fd82a1ef1d3dab07be67dd78f\System.ServiceProcess.ni.dll
    - 2011-11-21 02:12 . 2011-11-21 02:12 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\8428a82fd82a1ef1d3dab07be67dd78f\System.ServiceProcess.ni.dll
    - 2011-11-21 02:10 . 2011-11-21 02:10 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\a3202e5eeb5c84ca6d5453b50c28e1af\System.Security.ni.dll
    + 2011-11-24 02:11 . 2011-11-24 02:11 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\a3202e5eeb5c84ca6d5453b50c28e1af\System.Security.ni.dll
    + 2011-11-24 02:12 . 2011-11-24 02:12 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\b3b42692707c0f555807def0c4acefe3\System.Runtime.Serializat
  • Vreemd, weer incompleet.

    Doe het volgende maar:

    Zorg ervoor dat alle openstaande webbrowservensters gesloten zijn.
    Open een nieuw kladblok (of anders: notepad) bestand, via "Start\Alle programma’s\Bureau-accessoires\[b:d7e2d4e9cb]Kladblok (of Notepad)[/b:d7e2d4e9cb]". .

    Kopieer en plak de volgende (vetgedrukte, blauwe tekst) in het lege kladblokvenstervenster


    [b:d7e2d4e9cb]
  • het forum accepteert het hele bestand niet?
  • Wow, ik schrok me helemaal kapot.. Combofix herstartte mijn pc maar daarna kon ik echt niets meer starten. Alles was flagged for deletion. Na weer een reboot kon ik weer wat doen.

    Log:


    ComboFix 11-11-24.01 - Sander 24-11-2011 20:04:03.3.2 - x64
    Microsoft Windows 7 Enterprise 6.1.7601.1.1252.31.1033.18.2046.1167 [GMT 1:00]
    Gestart vanuit: c:\users\Sander\Desktop\ComboFix.exe
    gebruikte Opdracht switches :: c:\users\Sander\Desktop\CFScript.txt
    AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
    SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Nieuw herstelpunt werd aangemaakt
    .
    .
    (((((((((((((((((((( Bestanden Gemaakt van 2011-10-24 to 2011-11-24 ))))))))))))))))))))))))))))))
    .
    .
    2011-11-24 19:08 . 2011-11-24 19:08 ——– d—–w- c:\users\Default\AppData\Local\temp
    2011-11-22 17:50 . 2011-11-22 17:50 ——– d—–w- c:\program files (x86)\ESET
    2011-11-21 17:32 . 2011-11-21 17:35 ——– d—–w- c:\windows\system32\appmgmt
    2011-11-20 22:04 . 2011-11-20 22:04 ——– d—–w- c:\users\Sander\AppData\Roaming\Malwarebytes
    2011-11-20 22:04 . 2011-11-20 22:04 ——– d—–w- c:\programdata\Malwarebytes
    2011-11-20 22:04 . 2011-11-20 22:04 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware
    2011-11-20 22:04 . 2011-08-31 16:00 25416 —-a-w- c:\windows\system32\drivers\mbam.sys
    2011-11-20 22:00 . 2011-11-20 22:00 388096 —-a-r- c:\users\Sander\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2011-11-20 21:36 . 2011-11-24 18:50 ——– d—–w- c:\programdata\Spybot - Search & Destroy
    2011-11-20 21:36 . 2011-11-20 21:36 ——– d—–w- c:\program files (x86)\Spybot - Search & Destroy
    2011-11-20 21:19 . 2011-11-20 21:19 ——– d—–w- c:\program files (x86)\Trend Micro
    2011-11-20 21:11 . 2011-06-21 04:09 200976 —-a-w- c:\windows\SysWow64\drivers\tmcomm.sys
    2011-11-20 18:37 . 2011-11-20 18:37 ——– d—–w- c:\users\Sander\AppData\Roaming\Avira
    2011-11-20 18:36 . 2011-09-18 07:39 130760 —-a-w- c:\windows\system32\drivers\avipbb.sys
    2011-11-20 18:36 . 2011-09-15 22:55 97312 —-a-w- c:\windows\system32\drivers\avgntflt.sys
    2011-11-20 18:36 . 2011-09-15 22:55 27760 —-a-w- c:\windows\system32\drivers\avkmgr.sys
    2011-11-20 18:36 . 2011-11-20 18:36 ——– d—–w- c:\programdata\Avira
    2011-11-20 18:36 . 2011-11-20 18:36 ——– d—–w- c:\program files (x86)\Avira
    2011-11-20 14:25 . 2011-11-20 14:25 ——– d—–w- c:\users\Sander\AppData\Local\MetaGeek,_LLC
    2011-11-20 14:15 . 2011-11-20 14:15 ——– d—–w- c:\program files\MetaGeek
    2011-11-19 14:32 . 2011-11-19 14:32 ——– d—–w- c:\users\Sander\AppData\Local\uTorrent
    2011-11-19 14:08 . 2011-11-19 14:08 ——– d—–w- c:\users\Sander\AppData\Roaming\Overlook
    2011-11-19 14:07 . 2011-11-19 14:07 ——– d—–w- c:\program files (x86)\WinPcap
    2011-11-19 14:07 . 2011-11-19 14:07 ——– d—–w- c:\programdata\Overlook
    2011-11-19 14:07 . 2011-11-19 14:07 ——– d—–w- c:\program files (x86)\Overlook Fing 1.4
    2011-11-09 18:13 . 2011-10-01 05:45 886784 —-a-w- c:\program files\Common Files\System\wab32.dll
    2011-11-09 18:13 . 2011-10-01 04:37 708608 —-a-w- c:\program files (x86)\Common Files\System\wab32.dll
    2011-11-09 18:13 . 2011-09-29 16:29 1923952 —-a-w- c:\windows\system32\drivers\tcpip.sys
    2011-11-09 18:13 . 2011-09-29 04:03 3144704 —-a-w- c:\windows\system32\win32k.sys
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-10-03 04:06 . 2011-01-16 15:10 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll
    2011-09-01 05:24 . 2011-10-14 01:01 2309120 —-a-w- c:\windows\system32\jscript9.dll
    2011-09-01 05:17 . 2011-10-14 01:01 1389056 —-a-w- c:\windows\system32\wininet.dll
    2011-09-01 05:12 . 2011-10-14 01:01 2382848 —-a-w- c:\windows\system32\mshtml.tlb
    2011-09-01 02:35 . 2011-10-14 01:01 1798144 —-a-w- c:\windows\SysWow64\jscript9.dll
    2011-09-01 02:28 . 2011-10-14 01:01 1126912 —-a-w- c:\windows\SysWow64\wininet.dll
    2011-09-01 02:22 . 2011-10-14 01:01 2382848 —-a-w- c:\windows\SysWow64\mshtml.tlb
    2011-08-27 05:37 . 2011-10-13 20:16 861696 —-a-w- c:\windows\system32\oleaut32.dll
    2011-08-27 05:37 . 2011-10-13 20:16 331776 —-a-w- c:\windows\system32\oleacc.dll
    2011-08-27 04:26 . 2011-10-13 20:16 571904 —-a-w- c:\windows\SysWow64\oleaut32.dll
    2011-08-27 04:26 . 2011-10-13 20:16 233472 —-a-w- c:\windows\SysWow64\oleacc.dll
    .
    .
    ((((((((((((((((((((((((((((( SnapShot_2011-11-24_17.25.50 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-07-14 05:10 . 2011-11-24 18:50 40186 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
    + 2010-10-02 11:13 . 2011-11-24 18:50 11076 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-677367547-3624079886-4196243676-1000_UserData.bin
    - 2011-11-21 17:51 . 2011-11-21 17:51 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2011-11-24 19:09 . 2011-11-24 19:09 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2011-11-21 17:51 . 2011-11-21 17:51 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2011-11-24 19:09 . 2011-11-24 19:09 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2009-07-14 02:36 . 2011-11-21 17:55 635990 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2011-11-24 18:52 635990 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2011-11-24 18:52 113968 c:\windows\system32\perfc009.dat
    - 2009-07-14 02:36 . 2011-11-21 17:55 113968 c:\windows\system32\perfc009.dat
    - 2009-07-14 05:01 . 2011-11-21 17:50 351004 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2009-07-14 05:01 . 2011-11-24 19:08 351004 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2011-11-24 19:09 . 2011-11-24 19:09 2906528 c:\windows\system32\FNTCACHE.DAT
    - 2011-11-20 18:26 . 2011-11-20 18:26 2906528 c:\windows\system32\FNTCACHE.DAT
    + 2010-10-02 11:15 . 2011-11-24 18:47 3363676 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-677367547-3624079886-4196243676-1000-8192.dat
    .
    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
    2011-02-18 05:12 94208 —-a-w- c:\users\Sander\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
    2011-02-18 05:12 94208 —-a-w- c:\users\Sander\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
    2011-02-18 05:12 94208 —-a-w- c:\users\Sander\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-29 98304]
    "LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-05-20 119152]
    "AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
    "Adobe Acrobat Speed Launcher"="d:\adobe\CS4\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
    "Acrobat Assistant 8.0"="d:\adobe\CS4\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
    "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
    "HTC Sync Loader"="c:\program files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-08-22 593920]
    "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-09-23 258512]
    .
    c:\users\Sander\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
    Dropbox.lnk - c:\users\Sander\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-9-2 24183152]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Bluetooth Manager.lnk - c:\program files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2008-3-14 2938184]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
    .
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 136176]
    R2 WLMS;Windows Licensing Monitoring Service;c:\windows\system32\wlms\wlms.exe [x]
    R3 etdrv;etdrv;c:\windows\etdrv.sys [2011-06-29 25640]
    R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-12-26 1038088]
    R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 136176]
    R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2011-06-29 30528]
    R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [x]
    R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [x]
    R3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr28ux.sys [x]
    R3 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
    R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
    R3 SandraAgentSrv;SiSoftware Deployment Agent Service;d:\program files\SiSoftware\SiSoftware Sandra Lite 2011\RpcAgentSrv.exe [2009-08-17 93848]
    R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
    R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
    R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
    R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
    R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
    R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
    R3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x]
    S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
    S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
    S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
    S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-09-23 86224]
    S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x]
    S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2011-08-12 87040]
    S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
    S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
    S3 AmdLLD64;AMD Low Level Device Driver;c:\windows\system32\DRIVERS\AmdLLD64.sys [x]
    S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys [x]
    S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
    .
    .
    Inhoud van de 'Gedeelde Taken' map
    .
    2011-11-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 15:27]
    .
    2011-11-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 15:27]
    .
    2011-11-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-677367547-3624079886-4196243676-1000Core.job
    - c:\users\Sander\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-12 15:27]
    .
    2011-11-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-677367547-3624079886-4196243676-1000UA.job
    - c:\users\Sander\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-12 15:27]
    .
    .
    ——— x86-64 ———–
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
    2011-02-18 05:12 97792 —-a-w- c:\users\Sander\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
    2011-02-18 05:12 97792 —-a-w- c:\users\Sander\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
    2011-02-18 05:12 97792 —-a-w- c:\users\Sander\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
    @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
    2011-02-18 05:12 97792 —-a-w- c:\users\Sander\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-03-12 10134560]
    "Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
    "VX1000"="c:\windows\vVX1000.exe" [2010-05-20 762736]
    .
    ——- Bijkomende Scan ——-
    .
    uLocal Page = c:\windows\system32\blank.htm
    uStart Page = hxxp://www.google.nl/
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyOverride = local
    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
    IE: Converteren naar Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    IE: Doel van koppeling converteren naar Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Doel van koppeling toevoegen aan bestaande PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: Toevoegen aan bestaande PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    TCP: DhcpNameServer = 192.168.1.1
    .
    - - - - ORPHANS VERWIJDERD - - - -
    .
    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
    AddRemove-ESET Online Scanner - c:\program files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
    .
    .
    .
    ——————— VERGRENDELDE REGISTER SLEUTELS ———————
    .
    [HKEY_USERS\S-1-5-21-677367547-3624079886-4196243676-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
    @Denied: (2) (S-1-5-21-677367547-3624079886-4196243676-1000)
    @Denied: (2) (LocalSystem)
    "Progid"="ThunderbirdEML"
    .
    [HKEY_USERS\S-1-5-21-677367547-3624079886-4196243676-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
    @Denied: (2) (LocalSystem)
    "Progid"="WindowsLiveMail.VCard.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    ———————— Andere Aktieve Processen ————————
    .
    c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
    .
    **************************************************************************
    .
    Voltooingstijd: 2011-11-24 20:12:35 - machine werd herstart
    ComboFix-quarantined-files.txt 2011-11-24 19:12
    ComboFix2.txt 2011-11-24 17:27
    ComboFix3.txt 2011-11-21 17:25
    .
    Pre-Run: 3.107.786.752 bytes free
    Post-Run: 2.995.216.384 bytes free
    .
    - - End Of File - - 4337DDC11C50BCDD2336E852D4193DC8
  • Bovenstaand log ziet er goed uit.

    Laat je weten hoe jouw Windos inmiddels draait?
    En die open poort no. 53 - reeds gesloten?
  • Poort 53 staat nog open :-(

    De pc draait overigens prima hoor maar dat was de klacht ook niet.
  • Ik heb port 53 for incoming connections volledig geblokt in de firewall van W7 maar nog krijg ik een open poort via shields up…
  • Schiet mij maar lek.. ik heb de comodo firewall geinstalleerd en die sluit poort 53 ook niet…
  • Ik heb net de in mijn Win7 draaiend Free Armor Online Firewall gecontroleerd wat poorten betreft.

    In mijn Windows blijkt dus dat er geen poort 53 wordt gebruikt.

    Geeft de door jou gebruikte firewall aan welk programma nu via die poort 53 eruit wil of inkomend verkeer wil hebben?
  • Niets… nergens wordt 53 genoemd. Kan jij onderstaande test eens doen?

    https://www.grc.com/x/ne.dll?bh0bkyd2
  • GRC Port Authority Report created on UTC: 2011-11-25 at 19:46:30

    Results from scan of ports: 0-1055

    0 Ports Open
    0 Ports Closed
    1056 Ports Stealth
    ———————
    1056 Ports Tested

    ALL PORTS tested were found to be: STEALTH.

    TruStealth: PASSED - ALL tested ports were STEALTH,
    - NO unsolicited packets were received,
    - NO Ping reply (ICMP Echo) was received.


    ———————————————————————-

    GRC Port Authority Report created on UTC: 2011-11-25 at 20:04:24

    Results from scan of ports: 0, 21-23, 25, 79, 80, 110, 113,
    119, 135, 139, 143, 389, 443, 445,
    1002, 1024-1030, 1720, 5000

    0 Ports Open
    0 Ports Closed
    26 Ports Stealth
    ———————
    26 Ports Tested

    ALL PORTS tested were found to be: STEALTH.


    en de laatste testgegevens:

    Attempting connection to your computer. . .
    Shields UP! is now attempting to contact the Hidden Internet Server within your PC. It is likely that no one has told you that your own personal computer may now be functioning as an Internet Server with neither your knowledge nor your permission. And that it may be serving up all or many of your personal files for reading, writing, modification and even deletion by anyone, anywhere, on the Internet!

    Your Internet port 139 does not appear to exist!
    One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.

    Unable to connect with NetBIOS to your computer.
    All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.


    TruStealth: PASSED - ALL tested ports were STEALTH,
    - NO unsolicited packets were received,
    - NO Ping reply (ICMP Echo) was received.

    ———————————————————————-
  • Dat is de common port scan:

    0 Ports Open
    26 Ports Closed
    0 Ports Stealth
    ———————
    26 Ports Tested

    Die vangt poort 53 niet. Ik deed de all services port scan. Die zag 53 open staan.

    Anyhow, hoe krijg ik mijn poorten stealth en alles dicht? Mijn pc is volgens alle testjes van je schoon toch?
  • Heb je toevallig een router (met ingebouwde DNS)?
  • No router, rechtstreeks aangesloten op de Ziggo Ubee-modem.

    Maar ondertussen is mijn vertrouwen in de Free Armor Online Firewall flink toegenomen!
  • Aanvulling.. ik zie dat mijn pc 192.168.1.50:60682 verbinding zoekt met router 192.168.1.1:53 service SvcHost UDP out..

    Misschien dat je daar wat mee kan.
  • [quote:d6034233b5="Lord Wodan"]Dat is de common port scan:

    0 Ports Open
    26 Ports Closed
    0 Ports Stealth
    ———————
    26 Ports Tested

    Die vangt poort 53 niet. Ik deed de all services port scan. Die zag 53 open staan.

    Anyhow, hoe krijg ik mijn poorten stealth en alles dicht? Mijn pc is volgens alle testjes van je schoon toch?[/quote:d6034233b5]


    Zie mijn aangevulde bericht.

    Ik denk dat jij ook maar de Free Armor Online Firewall moet gaan toepassen.
  • Ik heb een Copperjet Router 1616-2p in mijn windows staat deze inderdaad als DNS ingesteld..
  • Die Poort 53, wordt die mogelijk voor je LAN gebruikt?
  • Niet dat ik weet… Ik heb de DNS IP's in mijn pc nu direct naar het internet gestuurd en niet via 192.168.1.1

    Bedoel jij deze firewall?

    http://www.online-armor.com/products-online-armor-free.php
  • Ook met de free armor staat 53 open..

    Deze klacht is vaker gezien bij Alice Internet

    http://alice.gebruikers.eu/forum/viewthread.php?thread_id=152

    Ik ga dat ding in bridge zetten en mijn router accesspoint het werk laten doen.

Beantwoord deze vraag

Dit is een gearchiveerde pagina. Antwoorden is niet meer mogelijk.