Hallo iedereen,

Haal regelmatig wat tips, tricks en tutorials van de site. Vind het leuk om zo wat dingen bij te leren, maar nu toch maar eens een account aangemaakt omdat ik me hier toch maar niet aan waag!
:wink:

Ik heb in mijn processen/opstart venster een programma waarvan ik niet goed weet wat het is, namelijk: tcbhn.exe

Opstart venster: tcbhn onbenkend C:\Users\Marlo\AppData\RoamingBROWSE~1\tcbhn.exe -interval=10 -IEhome=0 -IEsearch=0 enz..

Ik vroeg me af of iemand weet wat het is en hoe ik het kan verwijderen? Las wel iets over "browser companion".. misschien dat het daar iets mee te maken heeft? Heb alvast een logje met hijackthis gemaakt, aangezien jullie daar vaak naar vragen.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:33:12, on 22-12-2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
C:\Users\Marlo\AppData\Roaming\BrowserCompanion\tcbhn.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files\ASUS\TurboV\TurboV.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\BitTorrent\BitTorrent.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Marlo\Downloads\HijackThis.exe
C:\Users\Marlo\AppData\Local\Google\Chrome\Application\chrome.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [TurboV] "C:\Program Files\ASUS\TurboV\TurboV.exe" -b
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [ROC_roc_ssl_v12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [Google Update] "C:\Users\Marlo\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: DVM Meta Data Export Service (MDES) - DeviceVM - C:\ASUS.SYS\CONFIG\DVMExportService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32
vvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater13.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 9053 bytes

Volgens google is het een trojan. Wacht het advies van abraham54 even af.
https://www.google.com/search?q=tcbhn.exe

ah.. dus toch. Zal ik doen, bedankt voor het snelle antwoord alvast

We gaan jouw Windows reinigen.

Hoi Abraham54,

Allereerst bedankt voor je hulp. Hierbij die logs:

JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.2.4 (12.21.2012:3)
OS: Windows 7 Home Premium x64
Ran by Marlo on zo 23-12-2012 at 14:06:58,02
Blog: http://thisisudax.blogspot.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\toolbar\\{95b7759c-8c7f-4bf1-b163-73684a933233}
Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\searchscopes\\DefaultScope
Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\\DefaultScope
Successfully repaired: [Registry Value] hkey_users\.default\software\microsoft\internet explorer\searchscopes\\DefaultScope
Successfully repaired: [Registry Value] hkey_users\s-1-5-18\software\microsoft\internet explorer\searchscopes\\DefaultScope
Successfully repaired: [Registry Value] hkey_users\s-1-5-19\software\microsoft\internet explorer\searchscopes\\DefaultScope
Successfully repaired: [Registry Value] hkey_users\s-1-5-20\software\microsoft\internet explorer\searchscopes\\DefaultScope
Successfully repaired: [Registry Value] hkey_users\S-1-5-21-500485560-426588622-2746000316-1000\software\microsoft\internet explorer\searchscopes\\DefaultScope



~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_local_machine\software\browsercompanion
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\scripthelper.exe
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\tdataprotocol.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\updatebho.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\viprotocol.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\wit4ie.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\protocols\handler\viprotocol
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\s
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\scripthelper.scripthelperapi
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\scripthelper.scripthelperapi.1
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\viprotocol.viprotocolole
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\viprotocol.viprotocolole.1
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}
Successfully deleted: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{95b7759c-8c7f-4bf1-b163-73684a933233}
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{95b7759c-8c7f-4bf1-b163-73684a933233}



~~~ Files

Successfully deleted: [File] C:\eula.1028.txt
Successfully deleted: [File] C:\eula.1031.txt
Successfully deleted: [File] C:\eula.1033.txt
Successfully deleted: [File] C:\eula.1036.txt
Successfully deleted: [File] C:\eula.1040.txt
Successfully deleted: [File] C:\eula.1041.txt
Successfully deleted: [File] C:\eula.1042.txt
Successfully deleted: [File] C:\eula.1049.txt
Successfully deleted: [File] C:\eula.2052.txt
Successfully deleted: [File] C:\install.res.1028.dll
Successfully deleted: [File] C:\install.res.1031.dll
Successfully deleted: [File] C:\install.res.1033.dll
Successfully deleted: [File] C:\install.res.1036.dll
Successfully deleted: [File] C:\install.res.1040.dll
Successfully deleted: [File] C:\install.res.1041.dll
Successfully deleted: [File] C:\install.res.1042.dll
Successfully deleted: [File] C:\install.res.1049.dll
Successfully deleted: [File] C:\install.res.2052.dll
Successfully deleted: [File] C:\install.res.3082.dll



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Marlo\AppData\Roaming\browsercompanion"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on zo 23-12-2012 at 14:10:47,96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

MBAM log

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Databaseversie: v2012.12.23.03

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
Marlo :: M-PC [administrator]

23-12-2012 14:31:48
mbam-log-2012-12-23 (14-31-48).txt

Scantype: Snelle scan
Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
Uitgeschakelde scanopties: P2P
Objecten gescand: 223543
Verstreken tijd: 1 minuut/minuten, 16 seconde(n)

Geheugenprocessen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Registerdata gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Mappen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Bestanden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

(einde)

Je mag met het volgende verder gaan:

[b:5411ce277a]Welk programma[/b:5411ce277a]:

De scan ging snel, hierbij weer de log

ComboFix 12-12-22.02 - Marlo 23-12-2012 16:00:34.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.12279.10238 [GMT 1:00]
Gestart vanuit: c:\users\Marlo\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Nieuw herstelpunt werd aangemaakt
.
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
.
.
(((((((((((((((((((( Bestanden Gemaakt van 2012-11-23 to 2012-12-23 ))))))))))))))))))))))))))))))
.
.
2012-12-23 15:03 . 2012-12-23 15:03 ——– d—–w- c:\users\Default\AppData\Local\temp
2012-12-23 13:18 . 2012-12-23 13:18 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-12-23 13:18 . 2012-09-29 18:54 25928 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-12-23 13:06 . 2012-12-23 13:06 ——– d—–w- c:\windows\ERUNT
2012-12-23 13:06 . 2012-12-23 13:06 ——– d—–w- C:\JRT
2012-12-20 22:58 . 2012-12-16 16:52 46080 —-a-w- c:\windows\system32\atmlib.dll
2012-12-20 22:58 . 2012-12-16 14:40 367616 —-a-w- c:\windows\system32\atmfd.dll
2012-12-20 22:58 . 2012-12-16 14:25 295424 —-a-w- c:\windows\SysWow64\atmfd.dll
2012-12-20 22:58 . 2012-12-16 14:25 34304 —-a-w- c:\windows\SysWow64\atmlib.dll
2012-12-16 19:06 . 2012-12-16 19:06 ——– d—–w- C:\NVIDIA
2012-12-16 14:32 . 2012-12-16 14:32 ——– d—–w- c:\program files (x86)\Phyxion.net
2012-12-15 18:19 . 2012-12-15 18:22 ——– d—–w- c:\users\Marlo\AppData\Local\Darksiders2
2012-12-15 18:13 . 2012-12-15 18:13 ——– d—–w- c:\program files (x86)\THQ
2012-12-12 17:43 . 2012-12-03 15:47 60776 —-a-w- c:\windows\system32\OpenCL.dll
2012-12-12 17:43 . 2012-12-03 15:47 52584 —-a-w- c:\windows\SysWow64\OpenCL.dll
2012-12-12 17:43 . 2012-07-03 15:25 31080 —-a-w- c:\windows\system32
vhdap64.dll
2012-12-12 17:43 . 2012-07-03 15:25 189288 —-a-w- c:\windows\system32\drivers
vhda64v.sys
2012-12-11 20:13 . 2012-12-17 20:54 281688 —-a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-12-11 20:13 . 2012-12-11 20:13 ——– d—–w- c:\users\Marlo\AppData\Local\PunkBuster
2012-12-11 20:13 . 2012-12-11 20:13 ——– d—–w- c:\programdata\Orbit
2012-12-11 20:12 . 2012-12-19 20:30 ——– d—–w- c:\users\Marlo\AppData\Local\Ubisoft Game Launcher
2012-12-11 20:07 . 2012-12-17 20:53 281688 —-a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-12-11 20:02 . 2012-12-19 20:31 ——– d—–w- c:\program files (x86)\Ubisoft
2012-12-11 16:32 . 2012-12-11 16:32 ——– d—–w- c:\users\Marlo\AppData\Roaming\Malwarebytes
2012-12-11 16:32 . 2012-12-11 16:32 ——– d—–w- c:\programdata\Malwarebytes
2012-12-09 20:13 . 2012-12-09 20:13 ——– d—–w- c:\program files (x86)\FTL
2012-12-05 19:33 . 2012-12-05 19:33 ——– d—–w- C:\My Works
2012-12-05 16:00 . 2012-12-05 16:00 ——– d—–w- c:\program files (x86)\Cyberlink
2012-12-05 16:00 . 2012-12-05 16:00 ——– d—–w- c:\program files\CyberLink
2012-12-05 15:59 . 2012-12-05 15:59 ——– d—–w- c:\programdata\CLSK
2012-12-05 14:39 . 2012-12-05 14:39 ——– d—–w- c:\program files\7-Zip
2012-12-05 13:53 . 2012-12-05 16:04 ——– d—–w- c:\users\Public\CyberLink
2012-12-05 13:51 . 2012-12-05 19:33 ——– d—–w- c:\users\Marlo\AppData\Roaming\CyberLink
2012-12-05 13:51 . 2012-12-05 19:27 ——– d—–w- c:\programdata\CyberLink
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin7.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin6.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin5.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin4.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin3.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin2.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin.dll
2012-12-05 13:50 . 2012-12-05 13:50 ——– d—–w- c:\program files (x86)\QuickTime
2012-12-03 22:37 . 2012-12-03 22:37 ——– d—–w- c:\program files (x86)\BRS
2012-12-03 22:37 . 2012-09-19 17:06 19131904 ——w- c:\windows\SysWow64\rapture3d_oal.dll
2012-12-03 22:37 . 2012-12-03 22:37 ——– d—–w- c:\program files (x86)\OpenAL
2012-12-02 23:36 . 2012-12-02 23:36 ——– d—–w- c:\users\Marlo\AppData\Roaming\digipen
2012-12-02 23:36 . 2012-12-02 23:36 ——– d—–w- c:\users\Marlo\AppData\Local\digipen
2012-12-02 23:35 . 2012-12-02 23:35 ——– d—–w- c:\program files (x86)\Digipen
2012-11-30 21:43 . 2012-11-30 21:43 438632 —-a-w- c:\windows\SysWow64
vStreaming.exe
2012-11-28 20:56 . 2012-12-02 18:35 ——– d—–w- c:\users\Marlo\AppData\Roaming\.minecraft
2012-11-28 00:07 . 2012-11-28 00:06 916456 —-a-w- c:\windows\system32\deployJava1.dll
2012-11-28 00:07 . 2012-11-28 00:06 289768 —-a-w- c:\windows\system32\javaws.exe
2012-11-28 00:07 . 2012-11-28 00:06 1034216 —-a-w- c:\windows\system32
pDeployJava1.dll
2012-11-28 00:06 . 2012-11-28 00:06 189416 —-a-w- c:\windows\system32\javaw.exe
2012-11-28 00:06 . 2012-11-28 00:06 188904 —-a-w- c:\windows\system32\java.exe
2012-11-28 00:06 . 2012-11-28 00:06 108008 —-a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-11-28 00:06 . 2012-11-28 00:06 ——– d—–w- c:\program files\Java
2012-11-27 19:11 . 2012-11-27 19:11 ——– d—–w- C:\c5a64c1e933e638124b1e77b4c10
2012-11-27 19:11 . 2012-11-27 19:11 ——– d—–w- C:\a2758aaf805c07f9245e95
2012-11-27 19:10 . 2012-11-27 19:10 ——– d—–w- C:\3b02b42c37512709df93cd65
2012-11-27 19:10 . 2012-11-27 19:10 ——– d—–w- C:\23fa4bd987c1932bb79ce32a
2012-11-27 19:09 . 2012-11-27 19:09 ——– d—–w- C:\b9219784f07378efa049
2012-11-27 19:05 . 2012-11-27 19:05 ——– d—–w- C:\6822f21bbaa8a4ff42
2012-11-27 13:00 . 2012-11-27 13:00 ——– d—–w- c:\program files (x86)\Common Files\Skype
2012-11-27 13:00 . 2012-11-27 13:00 ——– d—–r- c:\program files (x86)\Skype
2012-11-26 16:54 . 2012-11-26 16:54 ——– d—–w- c:\users\Marlo\AppData\Roaming\Hive Cluster
2012-11-26 16:15 . 2012-11-26 16:18 ——– d—–w- c:\users\Marlo\AppData\Roaming\Braid
.
.
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-03 22:37 . 2012-08-29 19:19 466456 —-a-w- c:\windows\system32\wrap_oal.dll
2012-12-03 22:37 . 2012-08-29 19:19 444952 ——w- c:\windows\SysWow64\wrap_oal.dll
2012-12-03 22:37 . 2012-08-29 19:19 122904 —-a-w- c:\windows\system32\OpenAL32.dll
2012-12-03 22:37 . 2012-08-29 19:19 109080 ——w- c:\windows\SysWow64\OpenAL32.dll
2012-11-16 20:50 . 2012-11-16 20:50 821736 ——w- c:\windows\SysWow64
pDeployJava1.dll
2012-11-16 20:50 . 2012-11-16 20:50 746984 ——w- c:\windows\SysWow64\deployJava1.dll
2012-11-08 20:50 . 2012-08-29 19:44 30568 —-a-w- c:\windows\system32\drivers\avgtpx64.sys
2012-10-22 12:02 . 2012-10-22 12:02 154464 —-a-w- c:\windows\system32\drivers\avgidsdrivera.sys
2012-10-15 18:01 . 2012-10-15 18:01 7261256 ——w- c:\windows\SysWow64\SpoonUninstall.exe
2012-10-15 02:48 . 2012-10-15 02:48 63328 —-a-w- c:\windows\system32\drivers\avgidsha.sys
2012-10-05 02:32 . 2012-10-05 02:32 111456 —-a-w- c:\windows\system32\drivers\avgmfx64.sys
2012-10-04 16:45 . 2012-12-12 13:30 44032 —-a-w- c:\windows\apppatch\acwow64.dll
2012-10-02 01:30 . 2012-10-02 01:30 185696 —-a-w- c:\windows\system32\drivers\avgldx64.sys
2012-09-25 22:39 . 2012-11-16 01:10 95744 —-a-w- c:\windows\system32\synceng.dll
2012-09-25 21:55 . 2012-11-16 01:10 78336 —-a-w- c:\windows\SysWow64\synceng.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2012-12-03 1354736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2009-06-05 1310720]
"TurboV"="c:\program files\ASUS\TurboV\TurboV.exe" [2009-10-20 5516800]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-11-08 997320]
"ROC_roc_ssl_v12"="c:\program files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" [2012-08-29 1020512]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-11-06 3143800]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-09-29 766536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-06 5814392]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 appliand;Applian Network Service;c:\windows\system32\DRIVERS\appliand.sys [2011-06-26 33888]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-04-25 52736]
R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-08-30 1255736]
R3 WSDScan;Ondersteuning voor WSD-scan via UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-10-05 111456]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800]
S0 mv61xx;mv61xx;c:\windows\system32\DRIVERS\mv61xx.sys [2009-05-11 178728]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2012-11-08 30568]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-20 283200]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-08-19 90112]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
S2 MDES;DVM Meta Data Export Service;c:\asus.sys\CONFIG\DVMExportService.exe [2009-02-18 315392]
S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe [2012-11-30 382824]
S2 vToolbarUpdater13.2.0;vToolbarUpdater13.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe [2012-11-08 711112]
S3 appliandMP;appliandMP;c:\windows\system32\DRIVERS\appliand.sys [2011-06-26 33888]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-05-20 393728]
.
.
Inhoud van de 'Gedeelde Taken' map
.
2012-12-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-500485560-426588622-2746000316-1000Core.job
- c:\users\Marlo\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-29 20:12]
.
2012-12-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-500485560-426588622-2746000316-1000UA.job
- c:\users\Marlo\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-29 20:12]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]
.
——- Bijkomende Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.nl/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 62.179.104.196 213.46.228.196
.
- - - - ORPHANS VERWIJDERD - - - -
.
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
.
.
"ImagePath"="\"c:\program files\CyberLink\Shared files\RichVideo64.exe\"\00Z
[\]^_Æ\00\00Æ\00\00\00\00HIJKLMNO\00\00\00\00\00\00\00\00\03\00\00\00|}~Æ\00\00Æ\00\00\00\00`\00\00\00\00\00\00\00\00‘’“"
.
.
——————— VERGRENDELDE REGISTER SLEUTELS ———————
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Voltooingstijd: 2012-12-23 16:04:19
ComboFix-quarantined-files.txt 2012-12-23 15:04
.
Pre-Run: 34.503.794.688 bytes beschikbaar
Post-Run: 34.392.846.336 bytes beschikbaar
.
- - End Of File - - 77E945C76AF766F936E070DD51CEAA2F

Open een nieuw kladblok (of anders: notepad) bestand, via "Start\Alle programma’s\Bureau-accessoires\[b:10265fb27b]Kladblok (of Notepad)[/b:10265fb27b]".

Kopieer en plak de volgende (vetgedrukte, blauwe tekst) in het lege kladblokvenstervenster


[b:10265fb27b]

Toen ik het txt bestand erin sleepte zij die na een paar seconden "er is een update beschikbaar voor combofix". Dat gedaan. Hierbij weer de log:

ComboFix 12-12-23.01 - Marlo 23-12-2012 17:07:33.2.8 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.12279.10193 [GMT 1:00]
Gestart vanuit: c:\users\Marlo\Desktop\ComboFix.exe
gebruikte Opdracht switches :: c:\users\Marlo\Desktop\CFScript.txt
AV: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG Anti-Virus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((( Bestanden Gemaakt van 2012-11-23 to 2012-12-23 ))))))))))))))))))))))))))))))
.
.
2012-12-23 16:10 . 2012-12-23 16:10 ——– d—–w- c:\users\Default\AppData\Local\temp
2012-12-23 13:18 . 2012-12-23 13:18 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-12-23 13:18 . 2012-09-29 18:54 25928 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-12-23 13:06 . 2012-12-23 13:06 ——– d—–w- c:\windows\ERUNT
2012-12-23 13:06 . 2012-12-23 13:06 ——– d—–w- C:\JRT
2012-12-20 22:58 . 2012-12-16 16:52 46080 —-a-w- c:\windows\system32\atmlib.dll
2012-12-20 22:58 . 2012-12-16 14:40 367616 —-a-w- c:\windows\system32\atmfd.dll
2012-12-20 22:58 . 2012-12-16 14:25 295424 —-a-w- c:\windows\SysWow64\atmfd.dll
2012-12-20 22:58 . 2012-12-16 14:25 34304 —-a-w- c:\windows\SysWow64\atmlib.dll
2012-12-16 19:06 . 2012-12-16 19:06 ——– d—–w- C:\NVIDIA
2012-12-16 14:32 . 2012-12-16 14:32 ——– d—–w- c:\program files (x86)\Phyxion.net
2012-12-15 18:19 . 2012-12-15 18:22 ——– d—–w- c:\users\Marlo\AppData\Local\Darksiders2
2012-12-15 18:13 . 2012-12-15 18:13 ——– d—–w- c:\program files (x86)\THQ
2012-12-12 17:43 . 2012-12-03 15:47 60776 —-a-w- c:\windows\system32\OpenCL.dll
2012-12-12 17:43 . 2012-12-03 15:47 52584 —-a-w- c:\windows\SysWow64\OpenCL.dll
2012-12-12 17:43 . 2012-07-03 15:25 31080 —-a-w- c:\windows\system32
vhdap64.dll
2012-12-12 17:43 . 2012-07-03 15:25 189288 —-a-w- c:\windows\system32\drivers
vhda64v.sys
2012-12-11 20:13 . 2012-12-17 20:54 281688 —-a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-12-11 20:13 . 2012-12-11 20:13 ——– d—–w- c:\users\Marlo\AppData\Local\PunkBuster
2012-12-11 20:13 . 2012-12-11 20:13 ——– d—–w- c:\programdata\Orbit
2012-12-11 20:12 . 2012-12-19 20:30 ——– d—–w- c:\users\Marlo\AppData\Local\Ubisoft Game Launcher
2012-12-11 20:07 . 2012-12-17 20:53 281688 —-a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-12-11 20:02 . 2012-12-19 20:31 ——– d—–w- c:\program files (x86)\Ubisoft
2012-12-11 16:32 . 2012-12-11 16:32 ——– d—–w- c:\users\Marlo\AppData\Roaming\Malwarebytes
2012-12-11 16:32 . 2012-12-11 16:32 ——– d—–w- c:\programdata\Malwarebytes
2012-12-09 20:13 . 2012-12-09 20:13 ——– d—–w- c:\program files (x86)\FTL
2012-12-05 19:33 . 2012-12-05 19:33 ——– d—–w- C:\My Works
2012-12-05 16:00 . 2012-12-05 16:00 ——– d—–w- c:\program files (x86)\Cyberlink
2012-12-05 16:00 . 2012-12-05 16:00 ——– d—–w- c:\program files\CyberLink
2012-12-05 15:59 . 2012-12-05 15:59 ——– d—–w- c:\programdata\CLSK
2012-12-05 14:39 . 2012-12-05 14:39 ——– d—–w- c:\program files\7-Zip
2012-12-05 13:53 . 2012-12-05 16:04 ——– d—–w- c:\users\Public\CyberLink
2012-12-05 13:51 . 2012-12-05 19:33 ——– d—–w- c:\users\Marlo\AppData\Roaming\CyberLink
2012-12-05 13:51 . 2012-12-05 19:27 ——– d—–w- c:\programdata\CyberLink
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin7.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin6.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin5.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin4.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin3.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin2.dll
2012-12-05 13:50 . 2012-12-05 13:50 159744 —-a-w- c:\program files (x86)\Internet Explorer\Plugins
pqtplugin.dll
2012-12-05 13:50 . 2012-12-05 13:50 ——– d—–w- c:\program files (x86)\QuickTime
2012-12-03 22:37 . 2012-12-03 22:37 ——– d—–w- c:\program files (x86)\BRS
2012-12-03 22:37 . 2012-09-19 17:06 19131904 ——w- c:\windows\SysWow64\rapture3d_oal.dll
2012-12-03 22:37 . 2012-12-03 22:37 ——– d—–w- c:\program files (x86)\OpenAL
2012-12-02 23:36 . 2012-12-02 23:36 ——– d—–w- c:\users\Marlo\AppData\Roaming\digipen
2012-12-02 23:36 . 2012-12-02 23:36 ——– d—–w- c:\users\Marlo\AppData\Local\digipen
2012-12-02 23:35 . 2012-12-02 23:35 ——– d—–w- c:\program files (x86)\Digipen
2012-11-30 21:43 . 2012-11-30 21:43 438632 —-a-w- c:\windows\SysWow64
vStreaming.exe
2012-11-28 20:56 . 2012-12-02 18:35 ——– d—–w- c:\users\Marlo\AppData\Roaming\.minecraft
2012-11-28 00:07 . 2012-11-28 00:06 916456 —-a-w- c:\windows\system32\deployJava1.dll
2012-11-28 00:07 . 2012-11-28 00:06 289768 —-a-w- c:\windows\system32\javaws.exe
2012-11-28 00:07 . 2012-11-28 00:06 1034216 —-a-w- c:\windows\system32
pDeployJava1.dll
2012-11-28 00:06 . 2012-11-28 00:06 189416 —-a-w- c:\windows\system32\javaw.exe
2012-11-28 00:06 . 2012-11-28 00:06 188904 —-a-w- c:\windows\system32\java.exe
2012-11-28 00:06 . 2012-11-28 00:06 108008 —-a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2012-11-28 00:06 . 2012-11-28 00:06 ——– d—–w- c:\program files\Java
2012-11-27 19:11 . 2012-11-27 19:11 ——– d—–w- C:\c5a64c1e933e638124b1e77b4c10
2012-11-27 19:11 . 2012-11-27 19:11 ——– d—–w- C:\a2758aaf805c07f9245e95
2012-11-27 19:10 . 2012-11-27 19:10 ——– d—–w- C:\3b02b42c37512709df93cd65
2012-11-27 19:10 . 2012-11-27 19:10 ——– d—–w- C:\23fa4bd987c1932bb79ce32a
2012-11-27 19:09 . 2012-11-27 19:09 ——– d—–w- C:\b9219784f07378efa049
2012-11-27 19:05 . 2012-11-27 19:05 ——– d—–w- C:\6822f21bbaa8a4ff42
2012-11-27 13:00 . 2012-11-27 13:00 ——– d—–w- c:\program files (x86)\Common Files\Skype
2012-11-27 13:00 . 2012-11-27 13:00 ——– d—–r- c:\program files (x86)\Skype
2012-11-26 16:54 . 2012-11-26 16:54 ——– d—–w- c:\users\Marlo\AppData\Roaming\Hive Cluster
2012-11-26 16:15 . 2012-11-26 16:18 ——– d—–w- c:\users\Marlo\AppData\Roaming\Braid
.
.
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-03 22:37 . 2012-08-29 19:19 466456 —-a-w- c:\windows\system32\wrap_oal.dll
2012-12-03 22:37 . 2012-08-29 19:19 444952 ——w- c:\windows\SysWow64\wrap_oal.dll
2012-12-03 22:37 . 2012-08-29 19:19 122904 —-a-w- c:\windows\system32\OpenAL32.dll
2012-12-03 22:37 . 2012-08-29 19:19 109080 ——w- c:\windows\SysWow64\OpenAL32.dll
2012-11-16 20:50 . 2012-11-16 20:50 821736 ——w- c:\windows\SysWow64
pDeployJava1.dll
2012-11-16 20:50 . 2012-11-16 20:50 746984 ——w- c:\windows\SysWow64\deployJava1.dll
2012-11-08 20:50 . 2012-08-29 19:44 30568 —-a-w- c:\windows\system32\drivers\avgtpx64.sys
2012-10-22 12:02 . 2012-10-22 12:02 154464 —-a-w- c:\windows\system32\drivers\avgidsdrivera.sys
2012-10-15 18:01 . 2012-10-15 18:01 7261256 ——w- c:\windows\SysWow64\SpoonUninstall.exe
2012-10-15 02:48 . 2012-10-15 02:48 63328 —-a-w- c:\windows\system32\drivers\avgidsha.sys
2012-10-05 02:32 . 2012-10-05 02:32 111456 —-a-w- c:\windows\system32\drivers\avgmfx64.sys
2012-10-04 16:45 . 2012-12-12 13:30 44032 —-a-w- c:\windows\apppatch\acwow64.dll
2012-10-02 01:30 . 2012-10-02 01:30 185696 —-a-w- c:\windows\system32\drivers\avgldx64.sys
2012-09-25 22:39 . 2012-11-16 01:10 95744 —-a-w- c:\windows\system32\synceng.dll
2012-09-25 21:55 . 2012-11-16 01:10 78336 —-a-w- c:\windows\SysWow64\synceng.dll
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
—- Directory of C:\23fa4bd987c1932bb79ce32a —-
.
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.pl-pl.mui
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.pt-br.mui
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.pt-pt.mui
2008-05-19 19:50 . 2008-05-19 19:50 82432 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ro-ro.mui
2008-05-19 19:50 . 2008-05-19 19:50 78848 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ru-ru.mui
2008-05-19 19:50 . 2008-05-19 19:50 81920 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.sk-sk.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.sl-si.mui
2008-05-19 19:50 . 2008-05-19 19:50 82944 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.sr-latn-cs.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.sv-se.mui
2008-05-19 19:50 . 2008-05-19 19:50 74752 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.th-th.mui
2008-05-19 19:50 . 2008-05-19 19:50 77312 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.tr-tr.mui
2008-05-19 19:50 . 2008-05-19 19:50 79360 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.uk-ua.mui
2008-05-19 19:50 . 2008-05-19 19:50 86528 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.vi-vn.mui
2008-05-19 19:50 . 2008-05-19 19:50 35328 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.zh-cn.mui
2008-05-19 19:50 . 2008-05-19 19:50 34816 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.zh-tw.mui
2008-05-19 19:50 . 2008-05-19 19:50 4445184 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsi.dll
2008-05-19 19:50 . 2008-05-19 19:50 95744 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsiexec.exe
2008-05-19 19:50 . 2008-05-19 19:50 332800 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsihnd.dll
2008-05-19 19:50 . 2008-05-19 19:50 2560 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll
2008-05-19 19:50 . 2008-05-19 19:50 77824 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ar-sa.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.bg-bg.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ca-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.cs-cz.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.da-dk.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.de-de.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.el-gr.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.en-us.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.es-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.et-ee.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.eu-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.fi-fi.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.fr-fr.mui
2008-05-19 19:50 . 2008-05-19 19:50 73728 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.he-il.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.hr-hr.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.hu-hu.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.it-it.mui
2008-05-19 19:50 . 2008-05-19 19:50 61440 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ja-jp.mui
2008-05-19 19:50 . 2008-05-19 19:50 57344 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ko-kr.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.lt-lt.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.lv-lv.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.nb-no.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.nl-nl.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.pl-pl.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.pt-br.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.pt-pt.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ro-ro.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.ru-ru.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.sk-sk.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.sl-si.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.sv-se.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.th-th.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.tr-tr.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.uk-ua.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.vi-vn.mui
2008-05-19 19:50 . 2008-05-19 19:50 45056 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.zh-cn.mui
2008-05-19 19:50 . 2008-05-19 19:50 45056 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsimsg.dll.zh-tw.mui
2008-05-19 19:50 . 2008-05-19 19:50 18944 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\wow\wmsisip.dll
2008-05-19 19:50 . 2008-05-19 19:50 236032 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msiexec.exe
2008-05-19 19:50 . 2008-05-19 19:50 1084416 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msihnd.dll
2008-05-19 19:50 . 2008-05-19 19:50 2560 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll
2008-05-19 19:50 . 2008-05-19 19:50 77312 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.nb-no.mui
2008-05-19 19:50 . 2008-05-19 19:50 87552 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.nl-nl.mui
2008-05-19 19:50 . 2008-05-19 19:50 62464 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msisip.dll
2008-05-19 19:50 . 2008-05-19 19:50 8109568 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msi.dll
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.bg-bg.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ca-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 80896 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.cs-cz.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.da-dk.mui
2008-05-19 19:50 . 2008-05-19 19:50 93696 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.de-de.mui
2008-05-19 19:50 . 2008-05-19 19:50 93696 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.el-gr.mui
2008-05-19 19:50 . 2008-05-19 19:50 75776 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.en-us.mui
2008-05-19 19:50 . 2008-05-19 19:50 87552 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.es-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 75264 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.et-ee.mui
2008-05-19 19:50 . 2008-05-19 19:50 84992 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.eu-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 77824 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.fi-fi.mui
2008-05-19 19:50 . 2008-05-19 19:50 91136 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.fr-fr.mui
2008-05-19 19:50 . 2008-05-19 19:50 64512 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.he-il.mui
2008-05-19 19:50 . 2008-05-19 19:50 81408 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.hr-hr.mui
2008-05-19 19:50 . 2008-05-19 19:50 82944 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.hu-hu.mui
2008-05-19 19:50 . 2008-05-19 19:50 90624 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.it-it.mui
2008-05-19 19:50 . 2008-05-19 19:50 50688 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ja-jp.mui
2008-05-19 19:50 . 2008-05-19 19:50 48128 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ko-kr.mui
2008-05-19 19:50 . 2008-05-19 19:50 78848 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.lt-lt.mui
2008-05-19 19:50 . 2008-05-19 19:50 80384 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.lv-lv.mui
2008-05-19 19:50 . 2008-05-19 19:50 67584 —-a-w- c:\23fa4bd987c1932bb79ce32a\sp2qfe\msimsg.dll.ar-sa.mui
.
—- Directory of C:\3b02b42c37512709df93cd65 —-
.
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.pl-pl.mui
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.pt-br.mui
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.pt-pt.mui
2008-05-19 19:50 . 2008-05-19 19:50 82432 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ro-ro.mui
2008-05-19 19:50 . 2008-05-19 19:50 78848 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ru-ru.mui
2008-05-19 19:50 . 2008-05-19 19:50 81920 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.sk-sk.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.sl-si.mui
2008-05-19 19:50 . 2008-05-19 19:50 82944 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.sr-latn-cs.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.sv-se.mui
2008-05-19 19:50 . 2008-05-19 19:50 74752 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.th-th.mui
2008-05-19 19:50 . 2008-05-19 19:50 77312 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.tr-tr.mui
2008-05-19 19:50 . 2008-05-19 19:50 79360 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.uk-ua.mui
2008-05-19 19:50 . 2008-05-19 19:50 86528 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.vi-vn.mui
2008-05-19 19:50 . 2008-05-19 19:50 35328 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.zh-cn.mui
2008-05-19 19:50 . 2008-05-19 19:50 34816 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.zh-tw.mui
2008-05-19 19:50 . 2008-05-19 19:50 4445184 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsi.dll
2008-05-19 19:50 . 2008-05-19 19:50 95744 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsiexec.exe
2008-05-19 19:50 . 2008-05-19 19:50 332800 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsihnd.dll
2008-05-19 19:50 . 2008-05-19 19:50 2560 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll
2008-05-19 19:50 . 2008-05-19 19:50 77824 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ar-sa.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.bg-bg.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ca-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.cs-cz.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.da-dk.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.de-de.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.el-gr.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.en-us.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.es-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.et-ee.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.eu-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.fi-fi.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.fr-fr.mui
2008-05-19 19:50 . 2008-05-19 19:50 73728 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.he-il.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.hr-hr.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.hu-hu.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.it-it.mui
2008-05-19 19:50 . 2008-05-19 19:50 61440 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ja-jp.mui
2008-05-19 19:50 . 2008-05-19 19:50 57344 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ko-kr.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.lt-lt.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.lv-lv.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.nb-no.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.nl-nl.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.pl-pl.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.pt-br.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.pt-pt.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ro-ro.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.ru-ru.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.sk-sk.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.sl-si.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.sv-se.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.th-th.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.tr-tr.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.uk-ua.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.vi-vn.mui
2008-05-19 19:50 . 2008-05-19 19:50 45056 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.zh-cn.mui
2008-05-19 19:50 . 2008-05-19 19:50 45056 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsimsg.dll.zh-tw.mui
2008-05-19 19:50 . 2008-05-19 19:50 18944 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\wow\wmsisip.dll
2008-05-19 19:50 . 2008-05-19 19:50 236032 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msiexec.exe
2008-05-19 19:50 . 2008-05-19 19:50 1084416 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msihnd.dll
2008-05-19 19:50 . 2008-05-19 19:50 2560 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll
2008-05-19 19:50 . 2008-05-19 19:50 77312 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.nb-no.mui
2008-05-19 19:50 . 2008-05-19 19:50 87552 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.nl-nl.mui
2008-05-19 19:50 . 2008-05-19 19:50 62464 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msisip.dll
2008-05-19 19:50 . 2008-05-19 19:50 8109568 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msi.dll
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.bg-bg.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ca-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 80896 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.cs-cz.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.da-dk.mui
2008-05-19 19:50 . 2008-05-19 19:50 93696 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.de-de.mui
2008-05-19 19:50 . 2008-05-19 19:50 93696 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.el-gr.mui
2008-05-19 19:50 . 2008-05-19 19:50 75776 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.en-us.mui
2008-05-19 19:50 . 2008-05-19 19:50 87552 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.es-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 75264 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.et-ee.mui
2008-05-19 19:50 . 2008-05-19 19:50 84992 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.eu-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 77824 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.fi-fi.mui
2008-05-19 19:50 . 2008-05-19 19:50 91136 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.fr-fr.mui
2008-05-19 19:50 . 2008-05-19 19:50 64512 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.he-il.mui
2008-05-19 19:50 . 2008-05-19 19:50 81408 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.hr-hr.mui
2008-05-19 19:50 . 2008-05-19 19:50 82944 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.hu-hu.mui
2008-05-19 19:50 . 2008-05-19 19:50 90624 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.it-it.mui
2008-05-19 19:50 . 2008-05-19 19:50 50688 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ja-jp.mui
2008-05-19 19:50 . 2008-05-19 19:50 48128 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ko-kr.mui
2008-05-19 19:50 . 2008-05-19 19:50 78848 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.lt-lt.mui
2008-05-19 19:50 . 2008-05-19 19:50 80384 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.lv-lv.mui
2008-05-19 19:50 . 2008-05-19 19:50 67584 —-a-w- c:\3b02b42c37512709df93cd65\sp2qfe\msimsg.dll.ar-sa.mui
.
—- Directory of C:\6822f21bbaa8a4ff42 —-
.
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.pl-pl.mui
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.pt-br.mui
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.pt-pt.mui
2008-05-19 19:50 . 2008-05-19 19:50 82432 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ro-ro.mui
2008-05-19 19:50 . 2008-05-19 19:50 78848 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ru-ru.mui
2008-05-19 19:50 . 2008-05-19 19:50 81920 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.sk-sk.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.sl-si.mui
2008-05-19 19:50 . 2008-05-19 19:50 82944 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.sr-latn-cs.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.sv-se.mui
2008-05-19 19:50 . 2008-05-19 19:50 74752 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.th-th.mui
2008-05-19 19:50 . 2008-05-19 19:50 77312 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.tr-tr.mui
2008-05-19 19:50 . 2008-05-19 19:50 79360 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.uk-ua.mui
2008-05-19 19:50 . 2008-05-19 19:50 86528 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.vi-vn.mui
2008-05-19 19:50 . 2008-05-19 19:50 35328 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.zh-cn.mui
2008-05-19 19:50 . 2008-05-19 19:50 34816 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.zh-tw.mui
2008-05-19 19:50 . 2008-05-19 19:50 4445184 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsi.dll
2008-05-19 19:50 . 2008-05-19 19:50 95744 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsiexec.exe
2008-05-19 19:50 . 2008-05-19 19:50 332800 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsihnd.dll
2008-05-19 19:50 . 2008-05-19 19:50 2560 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll
2008-05-19 19:50 . 2008-05-19 19:50 77824 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ar-sa.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.bg-bg.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ca-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.cs-cz.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.da-dk.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.de-de.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.el-gr.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.en-us.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.es-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.et-ee.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.eu-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.fi-fi.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.fr-fr.mui
2008-05-19 19:50 . 2008-05-19 19:50 73728 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.he-il.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.hr-hr.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.hu-hu.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.it-it.mui
2008-05-19 19:50 . 2008-05-19 19:50 61440 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ja-jp.mui
2008-05-19 19:50 . 2008-05-19 19:50 57344 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ko-kr.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.lt-lt.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.lv-lv.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.nb-no.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.nl-nl.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.pl-pl.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.pt-br.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.pt-pt.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ro-ro.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.ru-ru.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.sk-sk.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.sl-si.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.sv-se.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.th-th.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.tr-tr.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.uk-ua.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.vi-vn.mui
2008-05-19 19:50 . 2008-05-19 19:50 45056 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.zh-cn.mui
2008-05-19 19:50 . 2008-05-19 19:50 45056 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsimsg.dll.zh-tw.mui
2008-05-19 19:50 . 2008-05-19 19:50 18944 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\wow\wmsisip.dll
2008-05-19 19:50 . 2008-05-19 19:50 236032 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msiexec.exe
2008-05-19 19:50 . 2008-05-19 19:50 1084416 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msihnd.dll
2008-05-19 19:50 . 2008-05-19 19:50 2560 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll
2008-05-19 19:50 . 2008-05-19 19:50 77312 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.nb-no.mui
2008-05-19 19:50 . 2008-05-19 19:50 87552 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.nl-nl.mui
2008-05-19 19:50 . 2008-05-19 19:50 62464 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msisip.dll
2008-05-19 19:50 . 2008-05-19 19:50 8109568 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msi.dll
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.bg-bg.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ca-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 80896 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.cs-cz.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.da-dk.mui
2008-05-19 19:50 . 2008-05-19 19:50 93696 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.de-de.mui
2008-05-19 19:50 . 2008-05-19 19:50 93696 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.el-gr.mui
2008-05-19 19:50 . 2008-05-19 19:50 75776 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.en-us.mui
2008-05-19 19:50 . 2008-05-19 19:50 87552 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.es-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 75264 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.et-ee.mui
2008-05-19 19:50 . 2008-05-19 19:50 84992 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.eu-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 77824 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.fi-fi.mui
2008-05-19 19:50 . 2008-05-19 19:50 91136 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.fr-fr.mui
2008-05-19 19:50 . 2008-05-19 19:50 64512 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.he-il.mui
2008-05-19 19:50 . 2008-05-19 19:50 81408 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.hr-hr.mui
2008-05-19 19:50 . 2008-05-19 19:50 82944 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.hu-hu.mui
2008-05-19 19:50 . 2008-05-19 19:50 90624 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.it-it.mui
2008-05-19 19:50 . 2008-05-19 19:50 50688 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ja-jp.mui
2008-05-19 19:50 . 2008-05-19 19:50 48128 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ko-kr.mui
2008-05-19 19:50 . 2008-05-19 19:50 78848 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.lt-lt.mui
2008-05-19 19:50 . 2008-05-19 19:50 80384 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.lv-lv.mui
2008-05-19 19:50 . 2008-05-19 19:50 67584 —-a-w- c:\6822f21bbaa8a4ff42\sp2qfe\msimsg.dll.ar-sa.mui
.
—- Directory of C:\b9219784f07378efa049 —-
.
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.pl-pl.mui
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.pt-br.mui
2008-05-19 19:50 . 2008-05-19 19:50 83456 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.pt-pt.mui
2008-05-19 19:50 . 2008-05-19 19:50 82432 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ro-ro.mui
2008-05-19 19:50 . 2008-05-19 19:50 78848 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ru-ru.mui
2008-05-19 19:50 . 2008-05-19 19:50 81920 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.sk-sk.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.sl-si.mui
2008-05-19 19:50 . 2008-05-19 19:50 82944 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.sr-latn-cs.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.sv-se.mui
2008-05-19 19:50 . 2008-05-19 19:50 74752 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.th-th.mui
2008-05-19 19:50 . 2008-05-19 19:50 77312 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.tr-tr.mui
2008-05-19 19:50 . 2008-05-19 19:50 79360 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.uk-ua.mui
2008-05-19 19:50 . 2008-05-19 19:50 86528 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.vi-vn.mui
2008-05-19 19:50 . 2008-05-19 19:50 35328 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.zh-cn.mui
2008-05-19 19:50 . 2008-05-19 19:50 34816 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.zh-tw.mui
2008-05-19 19:50 . 2008-05-19 19:50 4445184 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsi.dll
2008-05-19 19:50 . 2008-05-19 19:50 95744 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsiexec.exe
2008-05-19 19:50 . 2008-05-19 19:50 332800 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsihnd.dll
2008-05-19 19:50 . 2008-05-19 19:50 2560 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll
2008-05-19 19:50 . 2008-05-19 19:50 77824 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ar-sa.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.bg-bg.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ca-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.cs-cz.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.da-dk.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.de-de.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.el-gr.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.en-us.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.es-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.et-ee.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.eu-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.fi-fi.mui
2008-05-19 19:50 . 2008-05-19 19:50 102400 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.fr-fr.mui
2008-05-19 19:50 . 2008-05-19 19:50 73728 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.he-il.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.hr-hr.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.hu-hu.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.it-it.mui
2008-05-19 19:50 . 2008-05-19 19:50 61440 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ja-jp.mui
2008-05-19 19:50 . 2008-05-19 19:50 57344 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ko-kr.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.lt-lt.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.lv-lv.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.nb-no.mui
2008-05-19 19:50 . 2008-05-19 19:50 98304 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.nl-nl.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.pl-pl.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.pt-br.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.pt-pt.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ro-ro.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.ru-ru.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.sk-sk.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.sl-si.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.sv-se.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.th-th.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.tr-tr.mui
2008-05-19 19:50 . 2008-05-19 19:50 90112 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.uk-ua.mui
2008-05-19 19:50 . 2008-05-19 19:50 94208 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.vi-vn.mui
2008-05-19 19:50 . 2008-05-19 19:50 45056 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.zh-cn.mui
2008-05-19 19:50 . 2008-05-19 19:50 45056 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsimsg.dll.zh-tw.mui
2008-05-19 19:50 . 2008-05-19 19:50 18944 —-a-w- c:\b9219784f07378efa049\sp2qfe\wow\wmsisip.dll
2008-05-19 19:50 . 2008-05-19 19:50 236032 —-a-w- c:\b9219784f07378efa049\sp2qfe\msiexec.exe
2008-05-19 19:50 . 2008-05-19 19:50 1084416 —-a-w- c:\b9219784f07378efa049\sp2qfe\msihnd.dll
2008-05-19 19:50 . 2008-05-19 19:50 2560 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll
2008-05-19 19:50 . 2008-05-19 19:50 77312 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.nb-no.mui
2008-05-19 19:50 . 2008-05-19 19:50 87552 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.nl-nl.mui
2008-05-19 19:50 . 2008-05-19 19:50 62464 —-a-w- c:\b9219784f07378efa049\sp2qfe\msisip.dll
2008-05-19 19:50 . 2008-05-19 19:50 8109568 —-a-w- c:\b9219784f07378efa049\sp2qfe\msi.dll
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.bg-bg.mui
2008-05-19 19:50 . 2008-05-19 19:50 86016 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ca-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 80896 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.cs-cz.mui
2008-05-19 19:50 . 2008-05-19 19:50 79872 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.da-dk.mui
2008-05-19 19:50 . 2008-05-19 19:50 93696 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.de-de.mui
2008-05-19 19:50 . 2008-05-19 19:50 93696 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.el-gr.mui
2008-05-19 19:50 . 2008-05-19 19:50 75776 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.en-us.mui
2008-05-19 19:50 . 2008-05-19 19:50 87552 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.es-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 75264 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.et-ee.mui
2008-05-19 19:50 . 2008-05-19 19:50 84992 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.eu-es.mui
2008-05-19 19:50 . 2008-05-19 19:50 77824 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.fi-fi.mui
2008-05-19 19:50 . 2008-05-19 19:50 91136 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.fr-fr.mui
2008-05-19 19:50 . 2008-05-19 19:50 64512 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.he-il.mui
2008-05-19 19:50 . 2008-05-19 19:50 81408 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.hr-hr.mui
2008-05-19 19:50 . 2008-05-19 19:50 82944 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.hu-hu.mui
2008-05-19 19:50 . 2008-05-19 19:50 90624 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.it-it.mui
2008-05-19 19:50 . 2008-05-19 19:50 50688 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ja-jp.mui
2008-05-19 19:50 . 2008-05-19 19:50 48128 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ko-kr.mui
2008-05-19 19:50 . 2008-05-19 19:50 78848 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.lt-lt.mui
2008-05-19 19:50 . 2008-05-19 19:50 80384 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.lv-lv.mui
2008-05-19 19:50 . 2008-05-19 19:50 67584 —-a-w- c:\b9219784f07378efa049\sp2qfe\msimsg.dll.ar-sa.mui
.
—- Directory of C:\c5a64c1e933e638124b1e77b4c10 —-
.
2008-05-21 22:45 . 2008-05-21 22:45 5282816 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msi.dll
2008-05-21 22:45 . 2008-05-21 22:45 124928 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msiexec.exe
2008-05-21 22:45 . 2008-05-21 22:45 502784 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msihnd.dll
2008-05-21 22:45 . 2008-05-21 22:45 2560 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll
2008-05-21 22:45 . 2008-05-21 22:45 67584 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ar-sa.mui
2008-05-21 22:45 . 2008-05-21 22:45 86016 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.bg-bg.mui
2008-05-21 22:45 . 2008-05-21 22:45 86016 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ca-es.mui
2008-05-21 22:45 . 2008-05-21 22:45 80896 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.cs-cz.mui
2008-05-21 22:45 . 2008-05-21 22:45 79872 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.da-dk.mui
2008-05-21 22:45 . 2008-05-21 22:45 93696 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.de-de.mui
2008-05-21 22:45 . 2008-05-21 22:45 93696 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.el-gr.mui
2008-05-21 22:45 . 2008-05-21 22:45 75776 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.en-us.mui
2008-05-21 22:45 . 2008-05-21 22:45 87552 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.es-es.mui
2008-05-21 22:45 . 2008-05-21 22:45 75264 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.et-ee.mui
2008-05-21 22:45 . 2008-05-21 22:45 84992 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.eu-es.mui
2008-05-21 22:45 . 2008-05-21 22:45 77824 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.fi-fi.mui
2008-05-21 22:45 . 2008-05-21 22:45 91136 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.fr-fr.mui
2008-05-21 22:45 . 2008-05-21 22:45 64512 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.he-il.mui
2008-05-21 22:45 . 2008-05-21 22:45 81408 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.hr-hr.mui
2008-05-21 22:45 . 2008-05-21 22:45 82944 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.hu-hu.mui
2008-05-21 22:45 . 2008-05-21 22:45 90624 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.it-it.mui
2008-05-21 22:45 . 2008-05-21 22:45 50688 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ja-jp.mui
2008-05-21 22:45 . 2008-05-21 22:45 48128 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ko-kr.mui
2008-05-21 22:45 . 2008-05-21 22:45 78848 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.lt-lt.mui
2008-05-21 22:45 . 2008-05-21 22:45 80384 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.lv-lv.mui
2008-05-21 22:45 . 2008-05-21 22:45 77312 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.nb-no.mui
2008-05-21 22:45 . 2008-05-21 22:45 87552 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.nl-nl.mui
2008-05-21 22:45 . 2008-05-21 22:45 83456 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.pl-pl.mui
2008-05-21 22:45 . 2008-05-21 22:45 83456 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.pt-br.mui
2008-05-21 22:45 . 2008-05-21 22:45 83456 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.pt-pt.mui
2008-05-21 22:45 . 2008-05-21 22:45 82432 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ro-ro.mui
2008-05-21 22:45 . 2008-05-21 22:45 78848 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.ru-ru.mui
2008-05-21 22:45 . 2008-05-21 22:45 81920 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.sk-sk.mui
2008-05-21 22:45 . 2008-05-21 22:45 79872 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.sl-si.mui
2008-05-21 22:45 . 2008-05-21 22:45 82944 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.sr-latn-cs.mui
2008-05-21 22:45 . 2008-05-21 22:45 79872 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.sv-se.mui
2008-05-21 22:45 . 2008-05-21 22:45 74752 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.th-th.mui
2008-05-21 22:45 . 2008-05-21 22:45 77312 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.tr-tr.mui
2008-05-21 22:45 . 2008-05-21 22:45 79360 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.uk-ua.mui
2008-05-21 22:45 . 2008-05-21 22:45 86528 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.vi-vn.mui
2008-05-21 22:45 . 2008-05-21 22:45 35328 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.zh-cn.mui
2008-05-21 22:45 . 2008-05-21 22:45 34816 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msimsg.dll.zh-tw.mui
2008-05-21 22:45 . 2008-05-21 22:45 24064 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\msisip.dll
2008-05-21 22:45 . 2008-05-21 22:45 4445184 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsi.dll
2008-05-21 22:45 . 2008-05-21 22:45 95744 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsiexec.exe
2008-05-21 22:45 . 2008-05-21 22:45 332800 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsihnd.dll
2008-05-21 22:45 . 2008-05-21 22:45 2560 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll
2008-05-21 22:45 . 2008-05-21 22:45 77824 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ar-sa.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.bg-bg.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ca-es.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.cs-cz.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.da-dk.mui
2008-05-21 22:45 . 2008-05-21 22:45 102400 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.de-de.mui
2008-05-21 22:45 . 2008-05-21 22:45 102400 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.el-gr.mui
2008-05-21 22:45 . 2008-05-21 22:45 86016 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.en-us.mui
2008-05-21 22:45 . 2008-05-21 22:45 98304 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.es-es.mui
2008-05-21 22:45 . 2008-05-21 22:45 86016 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.et-ee.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.eu-es.mui
2008-05-21 22:45 . 2008-05-21 22:45 86016 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.fi-fi.mui
2008-05-21 22:45 . 2008-05-21 22:45 102400 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.fr-fr.mui
2008-05-21 22:45 . 2008-05-21 22:45 73728 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.he-il.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.hr-hr.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.hu-hu.mui
2008-05-21 22:45 . 2008-05-21 22:45 98304 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.it-it.mui
2008-05-21 22:45 . 2008-05-21 22:45 61440 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ja-jp.mui
2008-05-21 22:45 . 2008-05-21 22:45 57344 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ko-kr.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.lt-lt.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.lv-lv.mui
2008-05-21 22:45 . 2008-05-21 22:45 86016 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.nb-no.mui
2008-05-21 22:45 . 2008-05-21 22:45 98304 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.nl-nl.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.pl-pl.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.pt-br.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.pt-pt.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ro-ro.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.ru-ru.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.sk-sk.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.sl-si.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.sr-latn-cs.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.sv-se.mui
2008-05-21 22:45 . 2008-05-21 22:45 86016 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.th-th.mui
2008-05-21 22:45 . 2008-05-21 22:45 86016 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.tr-tr.mui
2008-05-21 22:45 . 2008-05-21 22:45 90112 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.uk-ua.mui
2008-05-21 22:45 . 2008-05-21 22:45 94208 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.vi-vn.mui
2008-05-21 22:45 . 2008-05-21 22:45 45056 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.zh-cn.mui
2008-05-21 22:45 . 2008-05-21 22:45 45056 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsimsg.dll.zh-tw.mui
2008-05-21 22:45 . 2008-05-21 22:45 18944 —-a-w- c:\c5a64c1e933e638124b1e77b4c10\sp2qfe\wow\wmsisip.dll
.
—- Directory of C:\JRT —-
.
2012-12-23 13:06 . 2012-12-23 13:10 0 —-a-w- c:\jrt\temp
ull.txt
2012-12-23 13:06 . 2012-12-14 20:36 43520 —-a-w- c:\jrt
ircmd.exe
2012-12-23 13:06 . 2012-12-07 16:27 17920 —-a-w- c:\jrt\cut.exe
2012-12-23 13:06 . 2012-12-07 16:27 157696 —-a-w- c:\jrt\erunt\ERUNT.EXE
2012-12-23 13:06 . 2005-02-27 09:40 45056 —-a-w- c:\jrt\choice.exe
2012-12-23 13:06 . 2012-12-07 16:27 2815 —-a-w- c:\jrt\erunt\ERDNTDOS.LOC
2012-12-23 13:06 . 2012-12-07 16:27 3275 —-a-w- c:\jrt\erunt\ERDNTWIN.LOC
2012-12-23 13:06 . 2012-12-07 16:27 4090 —-a-w- c:\jrt\erunt\ERUNT.LOC
2012-12-23 13:06 . 2012-12-14 04:08 1445 —-a-w- c:\jrt\services.dat
2012-12-23 13:06 . 2012-12-07 16:27 163328 —-a-w- c:\jrt\erunt\ERDNT.E_E
2012-12-23 13:06 . 2012-12-07 16:27 525 —-a-w- c:\jrt\regkey_x64.dat
2012-12-23 13:06 . 2012-12-07 16:27 326 —-a-w- c:\jrt\regkey_x86.dat
2012-12-23 13:06 . 2012-12-15 23:17 55 —-a-w- c:\jrt\REGsetup.dat
2012-12-23 13:06 . 2012-12-07 16:27 345 —-a-w- c:\jrt\regvalue_x64.dat
2012-12-23 13:06 . 2012-12-07 16:27 345 —-a-w- c:\jrt\regvalue_x86.dat
2012-12-23 13:06 . 2012-12-22 01:16 511 —-a-w- c:\jrt\FFXPI.dat
2012-12-23 13:06 . 2012-12-16 23:59 678 —-a-w- c:\jrt\FWCLSID.dat
2012-12-23 13:06 . 2012-12-16 21:07 272 —-a-w- c:\jrt\modules.dat
2012-12-23 13:06 . 2012-12-14 04:09 157 —-a-w- c:\jrt\moduleservices.dat
2012-12-23 13:06 . 2012-12-07 16:27 75 —-a-w- c:\jrt\FFplugins.dat
2012-12-23 13:06 . 2012-12-17 00:18 3214 —-a-w- c:\jrt\FFprefs.dat
2012-12-23 13:06 . 2012-12-07 16:27 177 —-a-w- c:\jrt\FFregkey_x64.dat
2012-12-23 13:06 . 2012-12-07 16:27 109 —-a-w- c:\jrt\FFregkey_x86.dat
2012-12-23 13:06 . 2012-12-16 21:17 1101 —-a-w- c:\jrt\FFXML.dat
2012-12-23 13:06 . 2012-12-13 01:18 102 —-a-w- c:\jrt\badAPPINIT.dat
2012-12-23 13:06 . 2012-12-22 03:38 37234 —-a-w- c:\jrt\CLSID.dat
2012-12-23 13:06 . 2012-12-07 16:27 119 —-a-w- c:\jrt\FFbrowsermngr.dat
2012-12-23 13:06 . 2012-12-20 19:56 5967 —-a-w- c:\jrt\FFextensions.dat
2012-12-23 13:06 . 2012-12-07 16:27 625 —-a-w- c:\jrt\askregkey_x64.dat
2012-12-23 13:06 . 2012-12-07 16:27 370 —-a-w- c:\jrt\askregkey_x86.dat
2012-12-23 13:06 . 2012-12-07 16:27 347 —-a-w- c:\jrt\askregvalue_x64.dat
2012-12-23 13:06 . 2012-12-07 16:27 345 —-a-w- c:\jrt\askregvalue_x86.dat
2012-12-23 13:06 . 2012-12-08 10:56 22 —-a-w- c:\jrt\askservices.dat
2012-12-23 13:06 . 2012-12-22 00:10 2438 —-a-w- c:\jrt\askCLSID.dat
2012-12-23 13:06 . 2012-12-16 21:22 1384 —-a-w- c:\jrt\REGhklm_software_wow6432node.cfg
2012-12-23 13:06 . 2012-12-07 16:27 207 —-a-w- c:\jrt\runvalues_x64.cfg
2012-12-23 13:06 . 2012-12-07 16:27 129 —-a-w- c:\jrt\runvalues_x86.cfg
2012-12-23 13:06 . 2012-12-15 21:34 1870 —-a-w- c:\jrt\REGhkcu_software_microsoft.cfg
2012-12-23 13:06 . 2012-12-17 00:01 28391 —-a-w- c:\jrt\REGhklm_software_classes.cfg
2012-12-23 13:06 . 2012-12-15 21:39 1582 —-a-w- c:\jrt\REGhklm_software_microsoft.cfg
2012-12-23 13:06 . 2012-12-16 21:19 2310 —-a-w- c:\jrt\CHR_extensions.cfg
2012-12-23 13:06 . 2012-12-13 20:01 89 —-a-w- c:\jrt\FFwhtlist.cfg
2012-12-23 13:06 . 2012-12-15 21:19 4819 —-a-w- c:\jrt\REGhcr.cfg
2012-12-23 13:06 . 2012-12-15 21:41 1002 —-a-w- c:\jrt\REGhkcu_and_hklm_software.cfg
2012-12-23 13:06 . 2012-12-15 22:26 646 —-a-w- c:\jrt\REGhkcu_software_appdatalow.cfg
2012-12-23 13:06 . 2012-12-07 16:27 174 —-a-w- c:\jrt\CHRregkey_x64.cfg
2012-12-23 13:06 . 2012-12-07 16:27 107 —-a-w- c:\jrt\CHRregkey_x86.cfg
2012-12-23 13:06 . 2012-12-09 05:35 94 —-a-w- c:\jrt\badFOLDERScom.cfg
2012-12-23 13:06 . 2012-12-22 00:33 531 —-a-w- c:\jrt\badFOLDERSstart.cfg
2012-12-23 13:06 . 2012-12-14 03:56 2838 —-a-w- c:\jrt\badvalues.cfg
2012-12-23 13:06 . 2012-12-07 16:27 128 —-a-w- c:\jrt\browsermngr_keys.cfg
2012-12-23 13:06 . 2012-12-08 11:32 94 —-a-w- c:\jrt\browsermngr_values.cfg
2012-12-23 13:06 . 2012-12-22 01:32 10980 —-a-w- c:\jrt\badFOLDERS.cfg
2012-12-23 13:06 . 2005-03-06 13:10 2384 —-a-w- c:\jrt\choice.txt
2012-12-23 13:06 . 2012-12-07 22:52 107 —-a-w- c:\jrt\sednewline.txt
2012-12-23 13:06 . 2012-12-07 16:27 31952 —-a-w- c:\jrt\erunt\README.TXT
2012-12-23 13:06 . 2012-12-19 21:46 9678 —-a-w- c:\jrt\modules.bat
2012-12-23 13:06 . 2012-12-15 22:05 5111 —-a-w- c:\jrt\runvalues.bat
2012-12-23 13:06 . 2012-12-08 10:49 1023 —-a-w- c:\jrt\TDL4.bat
2012-12-23 13:06 . 2012-12-15 18:52 24911 —-a-w- c:\jrt\iexplore.bat
2012-12-23 13:06 . 2012-12-22 03:39 11406 —-a-w- c:\jrt\JRT.bat
2012-12-23 13:06 . 2012-12-08 10:50 12262 —-a-w- c:\jrt\medfos.bat
2012-12-23 13:06 . 2012-12-22 01:36 68061 —-a-w- c:\jrt\misc.bat
2012-12-23 13:06 . 2012-12-07 16:27 1342 —-a-w- c:\jrt\firefoxdefaults.bat
2012-12-23 13:06 . 2012-12-08 10:50 1256 —-a-w- c:\jrt\FWPolicy.bat
2012-12-23 13:06 . 2012-12-22 03:39 13598 —-a-w- c:\jrt\get.bat
2012-12-23 13:06 . 2012-12-08 10:22 732 —-a-w- c:\jrt\ev_clear.bat
2012-12-23 13:06 . 2012-12-15 18:53 205314 —-a-w- c:\jrt\firefox.bat
2012-12-23 13:06 . 2012-12-08 10:49 13618 —-a-w- c:\jrt\chrome.bat
2012-12-23 13:06 . 2012-12-08 10:50 3777 —-a-w- c:\jrt\clsid_keys.bat
2012-12-23 13:06 . 2012-12-08 10:50 5425 —-a-w- c:\jrt\clsid_values.bat
2012-12-23 13:06 . 2012-12-14 07:36 36087 —-a-w- c:\jrt\ask.bat
2012-12-23 13:06 . 2012-12-07 16:27 565 —-a-w- c:\jrt\erunt\ERUNT.EXE.manifest
.
—- Directory of c:\program files (x86)\BRS —-
.
2012-12-03 22:38 . 2012-12-03 22:38 228 —-a-w- c:\program files (x86)\BRS\ufl\9VMMT3G97800.cache\D813322EB7EC08AEA25A18BAA24A1FED.pft
2012-12-03 22:37 . 2012-09-19 17:00 2672715 —-a-w- c:\program files (x86)\BRS\ufl\formatlibrary.pfl
2012-12-03 22:37 . 2012-09-19 17:06 1885696 —-a-w- c:\program files (x86)\BRS\UserLayout.exe
2012-12-03 22:37 . 2012-09-19 16:39 19582 —-a-w- c:\program files (x86)\BRS\changes_rapture3d.txt
2012-12-03 22:37 . 2012-09-19 16:59 2550 —-a-w- c:\program files (x86)\BRS\wxWidgets\wxwidgets_licence.txt
2012-12-03 22:37 . 2012-09-19 16:59 7639 —-a-w- c:\program files (x86)\BRS\wxWidgets\lgpl-3.0.txt
2012-12-03 22:37 . 2010-10-02 14:50 1697 —-a-w- c:\program files (x86)\BRS\rapture3d_game_eula.txt
2012-12-03 22:37 . 2012-07-01 17:45 270280 —-a-w- c:\program files (x86)\BRS\rapture3dgame.chm
2012-12-03 22:37 . 2012-12-03 22:37 840478 —-a-w- c:\program files (x86)\BRS\unins000.exe
2012-12-03 22:37 . 2012-12-03 22:37 2216 —-a-w- c:\program files (x86)\BRS\unins000.dat
.
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2012-12-03 1354736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2009-06-05 1310720]
"TurboV"="c:\program files\ASUS\TurboV\TurboV.exe" [2009-10-20 5516800]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-11-08 997320]
"ROC_roc_ssl_v12"="c:\program files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" [2012-08-29 1020512]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-11-06 3143800]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-06 5814392]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 appliand;Applian Network Service;c:\windows\system32\DRIVERS\appliand.sys [2011-06-26 33888]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-04-25 52736]
R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-08-30 1255736]
R3 WSDScan;Ondersteuning voor WSD-scan via UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-10-05 111456]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800]
S0 mv61xx;mv61xx;c:\windows\system32\DRIVERS\mv61xx.sys [2009-05-11 178728]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2012-11-08 30568]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-20 283200]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-08-19 90112]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
S2 MDES;DVM Meta Data Export Service;c:\asus.sys\CONFIG\DVMExportService.exe [2009-02-18 315392]
S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe [2012-11-30 382824]
S2 vToolbarUpdater13.2.0;vToolbarUpdater13.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\Toolb

Vertel nu eerst hoe het gaat met jouw Windows.