Spyware op pc

[swake]

Dag Eddy. Ga eens naar start> Configuratiescherm > Beveiligingscentrum.
Is MSE daar ingeschakeld of niet?
In de opstart, lopende processen of Services is van MSE niets te vinden.

 

[roxy]

Ik heb de virusscanner uitgeschakeld en de DDS uitgevoerd, hier de 2 logs:

DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31
Run by Eddy at 20:27:33 on 2012-04-13
Microsoft Windows 7 Professional 6.1.7601.1.1252.32.1043.18.3895.1482 [GMT 2:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\SysWOW64\CTsvcCDA.EXE
C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
D:\Programs\ISP monitor\isp.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\ClocX\ClocX.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Firetrust\MailWasher\MailWasherPro.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\SkypeMate\SkypeMate.exe
C:\Program Files (x86)\Sony\MD Simple Burner\NetMDSB.exe
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\prevhost.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = https://login.live.com/login.srf?wa...x&lc=2067&id=64855&mkt=nl-be&cbcxt=mai&snsc=1
uDefault_Page_URL = hxxp://ts.fujitsu.com
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
BHO: Virtual Storage Mount Notification: {5ff49fe8-b332-4cb9-b102-fb6951629e55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: Aanmeldhulp voor Windows Live ID: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [ISPMonitor] D:\Programs\ISP monitor\isp.exe
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
mRun: [<NO NAME>]
mRun: [ClocX] C:\Program Files (x86)\ClocX\ClocX.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
StartupFolder: C:\Users\Eddy\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\startup\MAILWA~1.LNK - C:\Program Files (x86)\Firetrust\MailWasher\MailWasherPro.exe
StartupFolder: C:\Users\Eddy\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\startup\SKYPEM~1.LNK - C:\Program Files (x86)\SkypeMate\SkypeMate.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} - hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15101/CTSUEng.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} - hxxp://virusscanner.telenet.be/fscax.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPID.cab
TCP: DhcpNameServer = 195.130.131.133 192.168.6.1
TCP: Interfaces\{3B0D4960-8E85-4CFC-BD91-3336A1C62B4C} : DhcpNameServer = 195.130.131.133 192.168.6.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll
STS: Virtual Storage Mount Notification: {5ff49fe8-b332-4cb9-b102-fb6951629e55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
{3049C3E9-B461-4BC5-8870-4C09146192CA}
{5FF49FE8-B332-4CB9-B102-FB6951629E55}
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
{9030D464-4C02-4ABF-8ECC-5164760863C6}
{AA58ED58-01DD-4d91-8333-CF10577473F7}
{DBC80044-A445-435b-BC74-9C25C1C588A9}
{2318C2B1-4965-11d4-9B18-009027A5CD4F}
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
mRun-x64: [(standaard)]
mRun-x64: [ClocX] C:\Program Files (x86)\ClocX\ClocX.exe
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
SSODL-X64: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll
STS-X64: {5FF49FE8-B332-4CB9-B102-FB6951629E55}: Virtual Storage Mount Notification
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Eddy\AppData\Roaming\Mozilla\Firefox\Profiles\c8ef5hq3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.deredactie.be/cm/vrtnieuws
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=302398&p=
FF - component: C:\Program Files (x86)\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll
FF - component: C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: C:\Users\Eddy\AppData\Roaming\Mozilla\Firefox\Profiles\c8ef5hq3.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_228.dll
.
---- FIREFOX POLICIES ----
FF - user.js: extentions.y2layers.installId - 6fcb1165-f8a8-4b1c-bf00-7278eef76b3e
FF - user.js: extentions.y2layers.defaultEnableAppsList - DropDownDeals,BestVideoDownloader,EzLooker,TwitTube,TopRelatedTopics,Buzzdock,
.
FF - user.js: extensions.autoDisableScopes - 14
FF - user.js: security.csp.enable - false
.
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R1 cbfs3;cbfs3;\??\C:\Windows\system32\drivers\cbfs3.sys --> C:\Windows\system32\drivers\cbfs3.sys [?]
R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys --> C:\Windows\system32\DRIVERS\MpFilter.sys [?]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
R2 Fabs;FABS - Helping agent for MAGIX media database;C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-8-27 1253376]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-4-10 654408]
R2 TomTomHOMEService;TomTomHOMEService;C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-1-23 92592]
R2 UMVPFSrv;UMVPFSrv;C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-1-18 450848]
R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-7-13 2320920]
R3 anvsnddrv;AnvSoft Virtual Sound Device;C:\Windows\system32\drivers\anvsnddrv.sys --> C:\Windows\system32\drivers\anvsnddrv.sys [?]
R3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;C:\Windows\system32\DRIVERS\e1k62x64.sys --> C:\Windows\system32\DRIVERS\e1k62x64.sys [?]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 LVUVC64;Logitech Webcam C100(UVC);C:\Windows\system32\DRIVERS\lvuvc64.sys --> C:\Windows\system32\DRIVERS\lvuvc64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\system32\DRIVERS\MpNWMon.sys --> C:\Windows\system32\DRIVERS\MpNWMon.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Updateservice (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-7-13 135664]
S2 ISPMonitorSrv;ISP Monitor;C:\Program Files (x86)\ISP Monitor\ISPMonitorSrv.exe [2010-1-16 36864]
S3 ACSSCR;ACR38 Smart Card Reader;C:\Windows\system32\DRIVERS\a38usb.sys --> C:\Windows\system32\DRIVERS\a38usb.sys [?]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-4-4 253088]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-7-13 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-7-13 79360]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-8-7 3276800]
S3 gupdatem;Google Update-service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-7-13 135664]
S3 IntcDAud;Intel(R) Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
S3 LVPr2M64;Logitech LVPr2M64 Driver;C:\Windows\system32\DRIVERS\LVPr2M64.sys --> C:\Windows\system32\DRIVERS\LVPr2M64.sys [?]
S3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys --> C:\Windows\system32\DRIVERS\NisDrvWFP.sys [?]
S3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-4-27 288272]
S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2012-04-13 18:20:59 8669240 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DF7FED59-3C28-42D8-B933-085C9D994B32}\mpengine.dll
2012-04-13 11:54:20 388096 ----a-r- C:\Users\Eddy\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-04-13 11:54:19 -------- d-----w- C:\Program Files (x86)\Trend Micro
2012-04-13 08:48:50 -------- d-----w- C:\Users\Eddy\AppData\Local\{45B3C6C8-8353-4BF0-8151-CF3FED794E26}
2012-04-13 08:48:49 -------- d-----w- C:\Users\Eddy\AppData\Local\{A800C1B4-CFF4-4AB2-8986-BFFA17C18E63}
2012-04-13 08:47:48 -------- d-----w- C:\Windows\nl
2012-04-13 08:44:32 89944 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a5605ef51cd195101\DSETUP.dll
2012-04-13 08:44:32 537432 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a5605ef51cd195101\DXSETUP.exe
2012-04-13 08:44:32 1801048 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a5605ef51cd195101\dsetup32.dll
2012-04-13 08:40:21 -------- d-----w- C:\Users\Eddy\AppData\Local\{361ABDC5-AA07-4A3E-B5F0-BCD93031BFDB}
2012-04-12 20:40:07 -------- d-----w- C:\Users\Eddy\AppData\Local\{1018401F-5675-436F-9FA5-6CBB6146EF07}
2012-04-12 19:15:31 -------- d-----w- C:\Users\Eddy\AppData\Roaming\PC Tools
2012-04-12 19:11:34 -------- d-----w- C:\Program Files (x86)\PC Tools
2012-04-12 19:09:34 251528 ----a-w- C:\Windows\System32\drivers\PCTSD64.sys
2012-04-12 19:09:32 -------- d-----w- C:\Program Files (x86)\Common Files\PC Tools
2012-04-12 19:08:14 -------- d-----w- C:\ProgramData\PC Tools
2012-04-12 19:08:12 -------- d-----w- C:\Users\Eddy\AppData\Roaming\TestApp
2012-04-12 07:07:26 -------- d-----w- C:\Users\Eddy\AppData\Local\{5F2402F2-DC73-4567-8AB9-0D8282692A4E}
2012-04-11 17:02:06 223760 ----a-w- C:\Windows\SysWow64\CbFsNetRdr3.dll
2012-04-11 17:02:06 191504 ----a-w- C:\Windows\System32\CbFsMntNtf3.dll
2012-04-11 17:02:06 158224 ----a-w- C:\Windows\SysWow64\CbFsMntNtf3.dll
2012-04-11 17:02:06 142352 ----a-w- C:\Windows\System32\CbFsNetRdr3.dll
2012-04-11 17:02:05 349072 ----a-w- C:\Windows\System32\drivers\cbfs3.sys
2012-04-11 17:02:03 -------- d-----w- C:\Program Files (x86)\Wuala CBFS
2012-04-11 16:58:15 -------- d-----w- C:\Users\Eddy\AppData\Roaming\Wuala
2012-04-11 16:58:15 -------- d-----w- C:\Users\Eddy\AppData\Local\Wuala
2012-04-11 10:29:12 81408 ----a-w- C:\Windows\System32\imagehlp.dll
2012-04-11 10:29:12 23408 ----a-w- C:\Windows\System32\drivers\fs_rec.sys
2012-04-11 10:29:12 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll
2012-04-11 10:29:11 5120 ----a-w- C:\Windows\SysWow64\wmi.dll
2012-04-11 10:29:11 5120 ----a-w- C:\Windows\System32\wmi.dll
2012-04-11 10:29:11 220672 ----a-w- C:\Windows\System32\wintrust.dll
2012-04-11 10:29:11 172544 ----a-w- C:\Windows\SysWow64\wintrust.dll
2012-04-11 08:58:58 -------- d-----w- C:\Users\Eddy\AppData\Local\{C6F810DD-7CF8-4A8C-AE52-F36CC5F84110}
2012-04-10 20:58:43 -------- d-----w- C:\Users\Eddy\AppData\Local\{17CC3877-E5DB-4AD3-9A04-6CFCD958CE1C}
2012-04-10 08:58:30 -------- d-----w- C:\Users\Eddy\AppData\Local\{E08C8D19-82BB-439C-A2F1-F4119BB6915E}
2012-04-09 20:58:16 -------- d-----w- C:\Users\Eddy\AppData\Local\{F4686EE5-C852-4D67-B140-11E0C51FEE14}
2012-04-09 07:21:50 -------- d-----w- C:\Users\Eddy\AppData\Local\{19FF6BB2-6484-4683-8D97-4C3A12411EA6}
2012-04-08 19:17:34 -------- d-----w- C:\Users\Eddy\AppData\Local\{20A36254-0599-4495-9C69-DDA4F48F0B9A}
2012-04-08 07:05:58 -------- d-----w- C:\Users\Eddy\AppData\Local\{10189A49-C6C7-4A54-A451-6898CEB35100}
2012-04-07 15:53:56 -------- d-----w- C:\Users\Eddy\AppData\Local\GHISLER
2012-04-07 15:50:06 545 ----a-w- C:\Windows\UC.PIF
2012-04-07 15:50:06 545 ----a-w- C:\Windows\RAR.PIF
2012-04-07 15:50:06 545 ----a-w- C:\Windows\PKZIP.PIF
2012-04-07 15:50:06 545 ----a-w- C:\Windows\PKUNZIP.PIF
2012-04-07 15:50:06 545 ----a-w- C:\Windows\NOCLOSE.PIF
2012-04-07 15:50:06 545 ----a-w- C:\Windows\LHA.PIF
2012-04-07 15:50:06 545 ----a-w- C:\Windows\ARJ.PIF
2012-04-07 15:50:06 -------- d-----w- C:\Users\Eddy\AppData\Roaming\GHISLER
2012-04-07 15:50:06 -------- d-----w- C:\totalcmd
2012-04-07 09:18:04 -------- d-----w- C:\Users\Eddy\AppData\Local\{B2814EBD-F81C-4039-B852-778A024ABD78}
2012-04-06 21:17:46 -------- d-----w- C:\Users\Eddy\AppData\Local\{028696BA-38AE-48D3-BA8E-CF576CD302D3}
2012-04-06 07:58:36 -------- d-----w- C:\Users\Eddy\AppData\Local\{29E17460-C03A-4B7E-97B0-F344F5CF4EDF}
2012-04-05 19:58:16 -------- d-----w- C:\Users\Eddy\AppData\Local\{94883947-4C1B-465F-BFE2-442AA2CA8F20}
2012-04-05 07:09:22 -------- d-----w- C:\Users\Eddy\AppData\Local\{E2909245-C0F2-4F38-8AEC-56B8D8108E52}
2012-04-04 19:08:57 -------- d-----w- C:\Users\Eddy\AppData\Local\{5F2F2E19-A25C-41A0-83C7-F9B49F32BF09}
2012-04-04 17:05:24 33872 ----a-w- C:\Windows\System32\drivers\anvsnddrv.sys
2012-04-04 17:05:08 -------- d-----w- C:\Program Files (x86)\AnvSoft
2012-04-04 07:38:04 8766112 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
2012-04-04 07:08:32 -------- d-----w- C:\Users\Eddy\AppData\Local\{8AF61E0A-D392-4637-A289-DCA29D8156E0}
2012-04-04 07:04:41 418464 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-04-03 19:08:06 -------- d-----w- C:\Users\Eddy\AppData\Local\{F96FFAA0-2728-4C38-9D75-8233287EE21B}
2012-04-03 07:08:04 -------- d-----w- C:\Users\Eddy\AppData\Local\{82FD96C1-0D67-4B92-8FCE-AFBDD0CBB587}
2012-04-02 08:46:07 -------- d-----w- C:\Users\Eddy\AppData\Local\{AB682558-F2AF-4183-9CF4-A8215E08A686}
2012-04-01 20:45:53 -------- d-----w- C:\Users\Eddy\AppData\Local\{CFC9C62E-A849-4D6D-B250-3666D577169F}
2012-04-01 07:10:43 -------- d-----w- C:\Users\Eddy\AppData\Local\{16C00CA0-E8F3-4D5C-944A-8E2456774AA7}
2012-03-31 07:48:53 -------- d-----w- C:\Users\Eddy\AppData\Local\{73F07DE3-DF17-4A52-A814-C620002ED047}
2012-03-30 19:48:39 -------- d-----w- C:\Users\Eddy\AppData\Local\{C7860CC5-0C3B-431B-ABBA-91E9E81B244B}
2012-03-30 07:38:22 -------- d-----w- C:\Users\Eddy\AppData\Local\{08E12E6E-0950-4B03-AF80-D322D2106528}
2012-03-29 19:38:06 -------- d-----w- C:\Users\Eddy\AppData\Local\{4FE96C49-319A-4F7C-BA61-86935D51CF13}
2012-03-29 07:25:25 -------- d-----w- C:\Users\Eddy\AppData\Local\{FB377020-5EA2-4E07-BE80-E82BC2516287}
2012-03-28 19:25:09 -------- d-----w- C:\Users\Eddy\AppData\Local\{0A2B9587-AD5C-4926-8798-0A6EC8250D6B}
2012-03-28 19:24:57 -------- d-----w- C:\Users\Eddy\AppData\Local\{FB7A9881-4AC1-4DF5-BCA1-E709A60D7397}
2012-03-28 07:24:40 -------- d-----w- C:\Users\Eddy\AppData\Local\{5328F335-B101-433F-8466-0308A9D5D099}
2012-03-28 07:24:32 -------- d-----w- C:\Users\Eddy\AppData\Local\{63FD0688-C2F0-4630-8628-98DBBBA6F042}
2012-03-27 19:16:26 -------- d-----w- C:\Users\Eddy\AppData\Local\{36E903FF-618D-4955-B740-3C603FDF80AA}
2012-03-27 19:16:14 -------- d-----w- C:\Users\Eddy\AppData\Local\{27A73EB4-C1E9-4242-A004-95270EE5D787}
2012-03-27 07:16:10 -------- d-----w- C:\Users\Eddy\AppData\Local\{FDEB29A5-3E0E-4596-B3A8-246BD0F5638F}
2012-03-27 07:16:10 -------- d-----w- C:\Users\Eddy\AppData\Local\{7FC1E549-0FC8-45F1-BEE6-8DD67889C1E9}
2012-03-26 19:07:25 -------- d-----w- C:\Users\Eddy\AppData\Local\{467EB1B1-8BE1-417C-95D8-E1720F6D96F1}
2012-03-26 19:07:13 -------- d-----w- C:\Users\Eddy\AppData\Local\{F364C3F4-384F-46B7-A048-B8A4E7084AB9}
2012-03-26 07:07:10 -------- d-----w- C:\Users\Eddy\AppData\Local\{D69A07F9-34A6-4B87-B50C-92C976D326A6}
2012-03-26 07:07:09 -------- d-----w- C:\Users\Eddy\AppData\Local\{5CBAE950-7EC5-462B-BA12-11E6D7E79C22}
2012-03-25 08:12:18 -------- d-----w- C:\Users\Eddy\AppData\Local\{7F606757-4267-48A6-9983-999EEA45A430}
2012-03-25 08:12:06 -------- d-----w- C:\Users\Eddy\AppData\Local\{7C4367C2-C39E-43A3-A2E0-ABBE644086CF}
2012-03-24 20:11:57 -------- d-----w- C:\Users\Eddy\AppData\Local\{29F82BFE-C520-495C-8B5F-11A737628C29}
2012-03-24 20:11:45 -------- d-----w- C:\Users\Eddy\AppData\Local\{42DAF1E2-E5F5-43FC-9C88-61A116061E16}
2012-03-24 08:11:43 -------- d-----w- C:\Users\Eddy\AppData\Local\{EFB65F76-B4A3-4E39-9854-60223742FA77}
2012-03-24 08:11:36 -------- d-----w- C:\Users\Eddy\AppData\Local\{E8EE7A42-4FEA-4D30-B7B7-9971E5DF577D}
2012-03-23 08:19:21 -------- d-----w- C:\Users\Eddy\AppData\Local\{9DFC152E-5874-4EB5-9745-197B96B78CC7}
2012-03-23 08:19:09 -------- d-----w- C:\Users\Eddy\AppData\Local\{98D5E162-D9DE-4D71-ADE3-F63D85632C80}
2012-03-22 20:18:53 -------- d-----w- C:\Users\Eddy\AppData\Local\{8A30E675-35EE-4CCD-8C49-72C3EEFD1413}
2012-03-22 20:18:41 -------- d-----w- C:\Users\Eddy\AppData\Local\{B6B4F2BF-9A6E-4177-BB35-0C23AA241108}
2012-03-22 08:18:26 -------- d-----w- C:\Users\Eddy\AppData\Local\{3C0BEE17-B14D-40E5-8E07-CBC13D58D403}
2012-03-22 08:18:14 -------- d-----w- C:\Users\Eddy\AppData\Local\{8B89D6E9-B2EA-47FC-AAAC-7D1018C5F5C6}
2012-03-21 20:17:58 -------- d-----w- C:\Users\Eddy\AppData\Local\{9E117BE1-06E1-4903-90C2-E2A63E61AD36}
2012-03-21 20:17:57 -------- d-----w- C:\Users\Eddy\AppData\Local\{E66A5BF6-B618-4F88-9837-C915EAAFE115}
2012-03-21 08:14:54 -------- d-----w- C:\Users\Eddy\AppData\Local\{1D8B7FF2-2C0F-43C3-BB49-E7398EDBC0E3}
2012-03-21 08:14:53 -------- d-----w- C:\Users\Eddy\AppData\Local\{A153FD32-4A22-4D7B-A7EF-E28F9EF37660}
2012-03-20 20:09:29 -------- d-----w- C:\Users\Eddy\AppData\Local\{ABFE28EA-FFFF-4CF0-8DCE-8C667C188F77}
2012-03-20 20:09:17 -------- d-----w- C:\Users\Eddy\AppData\Local\{8A7897A4-DD50-4D4C-884F-8E1A1B3F4001}
2012-03-20 08:09:14 -------- d-----w- C:\Users\Eddy\AppData\Local\{961A5FA0-831F-414A-A6BF-918239081372}
2012-03-20 08:09:13 -------- d-----w- C:\Users\Eddy\AppData\Local\{A2E9C47D-F9D4-45AB-95F2-1C21F94E7135}
2012-03-19 16:46:00 -------- d-----w- C:\Program Files (x86)\Firetrust
2012-03-19 10:33:12 -------- d-----w- C:\Users\Eddy\AppData\Local\{09F92361-D070-49E1-8C18-74A91B16C5A4}
2012-03-19 10:33:06 -------- d-----w- C:\Users\Eddy\AppData\Local\{88B47B55-22CA-4591-B049-0E7D744501D6}
2012-03-18 08:21:16 -------- d-----w- C:\Users\Eddy\AppData\Local\{64809747-8A09-485D-A4C0-5C748E92016E}
2012-03-18 08:21:15 -------- d-----w- C:\Users\Eddy\AppData\Local\{E655B945-B9A0-42B7-B92F-744E185E8F40}
2012-03-17 22:20:52 592824 ----a-w- C:\Program Files (x86)\Mozilla Firefox\gkmedias.dll
2012-03-17 22:20:52 44472 ----a-w- C:\Program Files (x86)\Mozilla Firefox\mozglue.dll
2012-03-17 10:47:10 -------- d-----w- C:\Users\Eddy\AppData\Local\{C534891C-487F-4B53-B2B4-E4123413D834}
2012-03-17 10:46:58 -------- d-----w- C:\Users\Eddy\AppData\Local\{2C937601-8A31-4C92-AF48-E02F54ECA125}
2012-03-16 22:46:44 -------- d-----w- C:\Users\Eddy\AppData\Local\{F257D886-0E1F-4AA0-97AC-FCFE5746B0AE}
2012-03-16 22:46:43 -------- d-----w- C:\Users\Eddy\AppData\Local\{72A1DD0C-3340-4954-BE44-9D05EF0A3EAC}
2012-03-16 08:15:12 -------- d-----w- C:\Users\Eddy\AppData\Local\{47D7593E-E82D-4E3C-8221-30287DD5B8AF}
2012-03-16 08:15:11 -------- d-----w- C:\Users\Eddy\AppData\Local\{DAB7D93A-5575-41E5-9ACD-799E2C8D117E}
2012-03-15 09:37:33 -------- d-----w- C:\Users\Eddy\AppData\Local\{30251EAC-08EF-46E1-B693-1B35E0D5148E}
2012-03-15 09:37:21 -------- d-----w- C:\Users\Eddy\AppData\Local\{655421C8-F8A1-4795-B9B2-E0BB929E594F}
2012-03-14 21:37:06 -------- d-----w- C:\Users\Eddy\AppData\Local\{C42747FB-E1E8-495C-BA46-58480D3D987A}
2012-03-14 21:36:54 -------- d-----w- C:\Users\Eddy\AppData\Local\{BAB88A96-1576-4893-A46A-D418E58CF264}
.
==================== Find3M ====================
.
2012-04-13 17:39:01 70304 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-04 13:56:40 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-03-08 16:50:28 49016 ----a-w- C:\Windows\SysWow64\sirenacm.dll
2012-03-08 16:37:20 302448 ----a-w- C:\Windows\WLXPGSS.SCR
2012-03-06 06:53:37 5559152 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-03-06 05:59:47 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-03-06 05:59:41 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-02-28 06:56:48 2311168 ----a-w- C:\Windows\System32\jscript9.dll
2012-02-28 06:49:56 1390080 ----a-w- C:\Windows\System32\wininet.dll
2012-02-28 06:48:57 1493504 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-02-28 06:42:55 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-02-28 01:18:55 1799168 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-02-28 01:11:21 1427456 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-02-28 01:11:07 1127424 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-02-28 01:03:16 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-02-17 06:38:26 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2012-02-17 05:34:22 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2012-02-17 04:58:24 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-02-17 04:57:32 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2012-02-16 22:05:39 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-02-10 06:36:07 1544192 ----a-w- C:\Windows\System32\DWrite.dll
2012-02-10 05:38:43 1077248 ----a-w- C:\Windows\SysWow64\DWrite.dll
2012-02-03 04:34:34 3145728 ----a-w- C:\Windows\System32\win32k.sys
2012-01-31 12:44:20 279656 ------w- C:\Windows\System32\MpSigStub.exe
2012-01-25 06:38:39 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-01-25 06:38:38 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-01-25 06:33:30 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
.
============= FINISH: 20:28:02,61 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 13/07/2010 14:30:05
System Uptime: 13/04/2012 16:52:17 (4 hours ago)
.
Motherboard: FUJITSU | | D2912-A1
Processor: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz | CPU | 2926/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 100 GiB total, 42,525 GiB free.
D: is FIXED (NTFS) - 364 GiB total, 245,917 GiB free.
E: is CDROM ()
F: is FIXED (NTFS) - 229 GiB total, 194,669 GiB free.
G: is FIXED (NTFS) - 229 GiB total, 116,159 GiB free.
H: is FIXED (NTFS) - 240 GiB total, 45,456 GiB free.
I: is Removable
J: is FIXED (NTFS) - 1863 GiB total, 1653,792 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP657: 13/04/2012 10:44:40 - Windows Live Essentials
RP658: 13/04/2012 10:45:43 - DirectX is geïnstalleerd.
RP659: 13/04/2012 10:45:56 - DirectX is geïnstalleerd.
RP660: 13/04/2012 10:46:09 - WLSetup
RP661: 13/04/2012 13:54:02 - Installed HiJackThis
.
==== Installed Programs ======================
.
1ClickDownload
ACDSee 8
Adobe AIR
Adobe Reader X (10.1.2) - Nederlands
Any Video Converter Ultimate 4.3.6
Apple Application Support
Apple Software Update
Applian FLV and Media Player 3.1.1.12
ArcSoft MediaImpression 2
BitTorrent 4.4.1
BorderMaker
CameraHelperMsi
CDBurnerXP
ClocX (1.5b1)
Compatibiliteitspakket voor het 2007 Microsoft Office system
Cool Edit Pro 2.1
Corel Verwijderen-wizard
CorelDRAW Essentials 4
CorelDRAW Essentials 4 - Content
CorelDRAW Essentials 4 - Draw
CorelDRAW Essentials 4 - Filters
CorelDRAW Essentials 4 - ICA
CorelDRAW Essentials 4 - IPM - No VBA
CorelDRAW Essentials 4 - Lang BR
CorelDRAW Essentials 4 - Lang DE
CorelDRAW Essentials 4 - Lang EN
CorelDRAW Essentials 4 - Lang ES
CorelDRAW Essentials 4 - Lang FR
CorelDRAW Essentials 4 - Lang IT
CorelDRAW Essentials 4 - Lang NL
CorelDRAW Essentials 4 - PHOTO-PAINT
CorelDRAW Essentials 4 - Windows Shell Extension
Creative ALchemy
Creative Audio Control Panel
Creative MediaSource
Creative MediaSource 5
Creative Software AutoUpdate
Creative Sound Blaster Properties x64 Edition
Creative WaveStudio 7
D3DX10
DivX Setup
DVD Decrypter (Remove Only)
erLT
Firebird SQL Server - MAGIX Edition
FLAC to MP3 Converter 6.0.0
FLV Player 2.0 (build 25)
Google Chrome
Google Earth Plug-in
Google Toolbar for Internet Explorer
Google Update Helper
HiJackThis
ImagXpress
Intel(R) Control Center
Intel(R) Management Engine Components
Intel(R) Processor Graphics
ioDesktop
ISP Monitor
Java Auto Updater
Java(TM) 6 Update 31
Junk Mail filter update
Licensing Service Install
Logitech-webcamsoftware
Logitech Vid HD
LWS Facebook
LWS Gallery
LWS Help_main
LWS Launcher
LWS Motion Detection
LWS Pictures And Video
LWS Twitter
LWS Video Mask Maker
LWS Webcam Software
LWS WLM Plugin
LWS YouTube Plugin
MailWasherPro
Malwarebytes Anti-Malware versie 1.61.0.1400
MD Simple Burner 2.0.05
Medieval CUE Splitter
Microsoft Office File Validation Add-In
Microsoft Office Standard Editie 2003
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Windows Media Video 9 VCM
Monkey's Audio
MozBackup 1.4.10
Mozilla Firefox 11.0 (x86 nl)
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB973685)
neroxml
OpenMG Limited Patch 4.7-07-14-05-01
OpenMG Secure Module 4.7.00
Outlook Backup v3.9.1
pdfforge Toolbar v4.6
PIXresizer 1.0.8
QuickTime
RAR Password Recovery v1.1 RC16 (remove only)
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
Realtek High Definition Audio Driver
RealUpgrade 1.1
Search Results Toolbar
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2478663)
Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2518870)
Skype™ 5.6
Spelling Dictionaries Support For Adobe Reader 9
Spotify
SystemDiagnostics
TomTom HOME 2.8.3.2499
TomTom HOME Visual Studio Merge Modules
Total Commander (Remove or Repair)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
VC80CRTRedist - 8.0.50727.4053
VLC media player 2.0.1
Winamp
Winamp Applicatie Detect
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Media Player Firefox Plugin
WinRAR archiver
Wuala
Wuala CBFS
Zilla JPG To PDF Converter 2.0
.
==== End Of File ===========================

 

[roxy]

Ja Swake, in het Configuratiescherm > Beveiligingscentrum is MSE ingeschakeld..

 

[swake]

Dat ziet er allemaal goed uit.
Wat ik je wel zou aanraden is om adobe reader bij te werken met de laatste updates. Waarschijnlijk is het virus via dat lek op de computer geraakt.
Je mag nu ook DDS en bijhorende logs van de computer verwijderen.

 

[roxy]

Hey Swake, wel bedankt voor de hulp ...
Ed

 

[smollie]

Als je dan toch een DDS-logje vraagt, warom laat je dan de lege mappen van deze type C:\Users\Eddy\AppData\Local\{45B3C6C8-8353-4BF0-8151-CF3FED794E26} niet allemoal verwijdern ? Die zijn toch nutteloos, Swake ?