Logfile of random's system information tool 1.10 (written by random/random) Run by JP at 2015-01-11 10:43:53 Microsoft Windows 8.1 System drive C: has 338 GB (74%) free of 456 GB Total RAM: 5914 MB (47% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:43:57, on 11-1-2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.16518) Boot mode: Normal Running processes: C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\WINDOWS\SysWOW64\ctfmon.exe C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files\trend micro\JP.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPCON13/8 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.nl/?gws_rd=ssl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll O2 - BHO: PriceFountain - {b608cc98-54de-4775-96c9-097de398500c} - C:\Users\JP\AppData\Local\PriceFountain\PriceFountainIE.dll (file missing) O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [YouCam Service] "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe O4 - HKLM\..\Run: [Registry Helper] "C:\Program Files (x86)\Registry Helper\RegistryHelper.Exe" /boot O4 - HKCU\..\Run: [SkyDrive] "C:\Users\JP\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe O4 - HKCU\..\Run: [Power2GoExpress8] "C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe" O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe O4 - HKCU\..\Run: [MyDriveConnect.exe] "C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe" O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [EPLTarget\P0000000000000001] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIJCE.EXE /EPT "EPLTarget\P0000000000000001" /M "XP-600 Series" /EF "HKCU" O4 - HKCU\..\Run: [pricefountainw.exe] C:\Users\JP\AppData\Local\PriceFountain\pricefountainw.exe HKEY_CURRENT_USER Software\PriceFountain O4 - Startup: Dropbox.lnk = JP\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: Verzenden naar OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE O4 - Global Startup: iSCTsysTray.lnk = C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing) O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: BrcmSetSecurity - Intel - C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\Windows\system32\EscSvc64.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - c:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: @oem26.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing) O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\Windows\SysWOW64\irstrtsv.exe O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe O23 - Service: Intel(R) Update Manager (iumsvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - c:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - c:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - c:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- End of file - 15574 bytes ======Listing Processes====== c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-0659-ee45d4b0c74a /binaryPath="C:\Program Files (x86)\AVG\AVG2015\" wininit.exe winlogon.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS "dwm.exe" C:\WINDOWS\system32\atiesrxx.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k LocalService atieclxx C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted C:\WINDOWS\system32\Hpservice.exe "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\system32\WLANExt.exe 826451843296 \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE" C:\WINDOWS\system32\svchost.exe -k apphost "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service "C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe" dashost.exe {b65df7a0-1c48-4a22-addff5d018674c02} "c:\Program Files\Intel\WiFi\bin\EvtEng.exe" "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe" C:\Windows\SysWOW64\irstrtsv.exe "C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe" "c:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe" C:\WINDOWS\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe" "c:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe" "C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe" C:\Windows\system32\EscSvc64.exe "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe" "C:\Program Files (x86)\AVG\AVG2015\avgemca.exe" C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet "C:\WINDOWS\TEMP\irstrtsv\scrncap.exe" taskhostex.exe "C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe" "C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe" C:\WINDOWS\Explorer.EXE "C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe" "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server C:\WINDOWS\system32\SearchIndexer.exe /Embedding /QuitInfo:0000000000000A94;0000000000000A98; /loadhooks /Parent:000000000000142c C:\Windows\System32\skydrive.exe -Embedding C:\Windows\System32\RuntimeBroker.exe -Embedding "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding "C:\Windows\System32\igfxpers.exe" "C:\WINDOWS\system32\igfxsrvc.exe" -Embedding "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" "C:\Windows\System32\spool\drivers\x64\3\E_IATIJCE.EXE" /EPT "EPLTarget\P0000000000000001" /M "XP-600 Series" /EF "HKCU" "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY ctfmon.exe "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe" "C:\Program Files (x86)\iTunes\iTunesHelper.exe" "C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe" "C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe" "c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe" "C:\Program Files\iPod\bin\iPodService.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6964.0.1130483053\247777495" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,17,38 --gpu-vendor-id=0x8086 --gpu-device-id=0x0a16 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3379 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/QUIC/Disabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_77/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="6964.2.139228283\827361179" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/QUIC/Disabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_77/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="6964.3.747780312\479613139" /prefetch:673131151 "C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" /byrunkey "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe" "C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe" "C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe" "C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe" "C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="6964.7.577688061\1347653970" --ppapi-flash-args=enable_hw_video_decode=1 --lang=nl --ignored=" --type=renderer " /prefetch:-632637702 "C:\Windows\System32\SettingSyncHost.exe" -Embedding "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/Disabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_77/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="6964.23.773289263\263721378" /prefetch:673131151 "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\WINDOWS\system32\SearchFilterHost.exe" 0 584 588 596 65536 592 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/Disabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_77/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="6964.25.2021828215\774060026" /prefetch:673131151 "C:\Users\JP\Downloads\RSITx64 (2).exe" ======Scheduled tasks folder====== C:\WINDOWS\tasks\124fe3ac-968b-402c-a36d-a5f8561c5dec-1.job - C:\Program Files (x86)\CinPlus-2.4cV03.01\CinPlus-2.4cV03.01-codedownloader.exe /rawdata=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 C:\WINDOWS\tasks\124fe3ac-968b-402c-a36d-a5f8561c5dec-2.job - C:\Program Files (x86)\CinPlus-2.4cV03.01\124fe3ac-968b-402c-a36d-a5f8561c5dec-2.exe /rawdata=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 C:\WINDOWS\tasks\124fe3ac-968b-402c-a36d-a5f8561c5dec-3.job - C:\Program Files (x86)\CinPlus-2.4cV03.01\124fe3ac-968b-402c-a36d-a5f8561c5dec-3.exe /rawdata=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 C:\WINDOWS\tasks\124fe3ac-968b-402c-a36d-a5f8561c5dec-5.job - C:\Program Files (x86)\CinPlus-2.4cV03.01\124fe3ac-968b-402c-a36d-a5f8561c5dec-5.exe /rawdata=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 C:\WINDOWS\tasks\124fe3ac-968b-402c-a36d-a5f8561c5dec-5_user.job - C:\Program Files (x86)\CinPlus-2.4cV03.01\124fe3ac-968b-402c-a36d-a5f8561c5dec-5.exe /rawdata=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 C:\WINDOWS\tasks\124fe3ac-968b-402c-a36d-a5f8561c5dec-6.job - C:\Program Files (x86)\CinPlus-2.4cV03.01\124fe3ac-968b-402c-a36d-a5f8561c5dec-6.exe /rawdata=E9G8OqUCRXpKkezFr7qJK9oKF+TebQf8KqZvYwa37zzTz52v+CToR7x90Iugjn+ME0qWmfMD4+taEGRn17GaoEUpaOM5KWtir5mOfJWKo4Kv29eI8EQryui93IdrVpDwfVwfzLtyW9qJ5inYSwzHNuCCMBQ4lgMA6ZN1H7a7/wOk608ruFsvfJN4jCYgGH97zZPK+cWa6XW7PN/v057zTeEeRA+yJtPEGk0RyevY+WHCe+wgu/A7A5rjxa22tGUzDaqMqZt3eJY63qPAO0L2fAwP087AxBNTR3uqGgYxQdE4ycyPYXzTc6Hu0QUzk5hJvnxEDdiYIn0E5gjN/tbIZEzN3Jl7/jSSHD4eBDsPuq6+fhapdJMOpG8g7Ddckq8aoCj+BOfl8fCQF9wfK2rQQHYOQvyNREMvm/5jNrDbsWYcRplHt2MbQQyFcZ36TdJE4wYmqeZJvpAyuNCV5wSyDufGCVAKSmuSxPLhoxwG0DK1VAEVjRSG1v345JbCiMu3TkKO576/oflw69FSoyluB8mWmumPYuORyy5JEDN16rwUF1Uv2W6ByECngCs5TVvecD7e4EcPX6kW+iipQyTiymjPG6CHe6fBgVWi7/u3K9xykgenZaUEFuP8WRIZbflNd4e8lALPCK6PD2rcaMK9imCdQpINym5u7OVeWuiUw1EbmUFF2drujNzYXjZVOeURR/NCP1wiIary9pEs/rUj8neAi+HGyYwYAhS5AbFA/cygOddH722LypjdfsTn544lXznXMpnsbtAhJAo9CyTq/AdHzg6lhCE6C9Tie9VXlYFNeLuw5DD5AYZyvhc9gccAGpdyBoUAn7oF83zduCzpW4otB0HeN1+KPqG/Jc5Q4FVGAHwuBIk0nc2PVsbIAw+LF2sHBa9CdX4KAyK/whq3nOKgbEJ3V/92H40GVlNOc1kghi8c1I4URRBJ84Lgu1n8LLn0EUf9WQB/Op0Uw7NtTO5EzTX2G/ignNwtSva5muli09LoIXihbbLr/htBk95EqO/NEfCFMT5JSaoWfRajNgmdnpYQng4VsLKkC1ojd4Vu9tfFBbFV4pZorvsyZusqin/IW4CagZji069FP4l9+2MTkmGpxJMtCiAOO8zcPucoxtx8aORO6HUXo0e1JZM82izz0PxrJJhMx7Rmpz81oS3AkHBWg/v4Kl6oJWBViKkgHBzimf5p1Uq38y2JF1MGalq4xP2e63bu3PRhCNT2Tm9WLtXk6frItU8CfNSR/KDPbjv6W2yJHjFK/UrxLXFz0tprxKTQBj7HcG31KzXW6GkK8YHlo6dwHslGO8NcHpeOJejKJtSrVXlu3oGYaSOjDJ5kAwiLoYJUV2Gne5IibpusxNPyL72BgNyin7ed9yCzeXcOZqXb5/ptyM+GBFSK9tZQ7OXCDMAIeD28GZJRKaRgas2VgxzQKCQneD7rX8PAnyeElWURDh0D6aE5fjivogB5wKBKFXI4OOLGz2JeGbnVxWrEP+aIfshat+FwbDDlEzYhIptTARcdZ/1veGKlmIzv+884LD1CkWrnZux1vIQYXWV++xLurl0wWHXx1r7htBYGhBwwfHC1xPGZMBQkrcLrdC7+jDRcv0F3QBpqfgi+byBWg3iP24JCIO2VqcuUDC+bxxkFhVax0T5c0ukesCWdUyit62q2rAT7s5CWdBabFdGLFpco0yTvfbU4lvAzouz5yR+orQpEE7EnPDzTLsTl5tWB1yh8vqiINQPbJqjgq6t5A0WxHGRS/OKe09CrXO2fNh7Ow0O6Tndi0JnSQYLY1Fv3THR95pP+SUhPYXpZwKHwZuJ0YJiUqlpGnhWLYjeQPa0EXwy6ii2Wio4o1nZXrZE7PodpJgzsLePpLSO4gxAK9GGmCsec8AN5axLPEudnaPZTFS8erGfNPtwrAZwje2L6JWBVoeJil7tO5xJ4jFo2SwIq7Iyx2YlhGUks73/xHKUeUOI5N+KuHdYUyeVyqXHrdKfkGZ7KjBPj19VbvJnLPfSnTZa6SrvRtX7+mdF3WQgO6ZFmGOOZyRSvLkiuklBPFy/45MsPJ7UbF9LimOLv2SlkRMnEPA1S6wY7c0CjsNiutHa1fygmgUgM9/dglvWpsiEIgNVrnHj+w9czeHhVrNE1NHHkAL7exeoyGasq9tLoCfwmtDMWXLJe4WW3WMv58kI8OuRvIBcjthg3WWdAL3I5Vq8Fuv1/QqaHOtxAucgzMxqMja9BmRhZ5iMYGThMcFDZL4nVGGHGMhWcNyeoPW2d/FZaPAgk5tLPVqr9D02uOWFvU8kj2jTQ/yM1xEgzJ+xtx/egtBoIugLWsK7LAzNWiMlo2WkhuwL9mEcXAMEpDQH1ERQGbZecSj47B8moiNtSzXakezZ4kJooAg9Rzg6SYR4d5E27RNUbhDVlzGPsWU9TY4zBtOCxRehULuvJx9D9LiT3cIS2HWvp3J8WQQhOedH2z0cWaadqVypgBWH8eGo0g2QzGbOA1yNmXZoG4An7XX+X2OW/ot4BwFQLKA0w7FwAzLbm1dQJ0An90jqysqEcbz3Y3EGH C:\WINDOWS\tasks\124fe3ac-968b-402c-a36d-a5f8561c5dec-7.job - C:\Program Files (x86)\CinPlus-2.4cV03.01\124fe3ac-968b-402c-a36d-a5f8561c5dec-7.exe /rawdata=DmKyINTRPjOXSNJLQpkryJ/0w9DhYko3XBKJqW4ZJqTdsBA0OWLCK0ntEz9ESnWERQF506dB3S50d6yNuuJ+yFhTZz6BluGP9FQxKehOXhoRrLLTFkqVN6tgSXQWKcwt5a6HkdJz6skKAc/DOF6KB0h5abdjNuQ0uxFQD6/K+NFDczb/4w9YYP3Pq1BKFtHDRSszXTxJHy0rAjblVcT7xdiHqyYKRQXcbhGcIDpq676vLjGU/sJvwv0ByUbPy/yj92eTTZhVIJ/q/nMu9Y0IeLtyxIOUgBVc0Ed00VPUiPedwks0vzbzBgBgCWBUIOuqjoaBWHlU+2TW1TEJTWoEeLQRIdjjqqAHY9X4wO9IbiXIPuIyOyV4FCTttCa+hFkt84v4c6Ih9qRfHqIooHOr+pggGwQTWy8xKt5wXSOv2mS1sc83JEDTp74wQseS3fRuT7B08Ab3rhUyyEqIlxYQKphG7I7cb5L+L9GZNq3e1pgU89RQeWV1fjmKAfGKU0EvQ1Wuqf6tt0TkrDxaPscas7ATVN/MNLvkkNUwuCoYFPylnh1ESxqnLzL/AnPs3NIhwTk2o6RbpCYSWNoXEquWbSdU7ljbM28BffZEsu96wdJ5ziLIiyJ5mcuk7uOxlOUeXez1yKXJPKMwYh6+SyCYpYzbvEHfF77If/K3ov0KGFvEPeSoaXUlWOB2XEc3ueqxaSkEwejjXTPVoxMD0iufZfeVhkfwuM//IhvaTAKHPuiEdlRv+qyfnUEKGaAY6t4g5zKDKHeagWkPHiw1fH15QvSrbbxO2OTu7hCIAqadW9Q+XDMgzpcQCwGpLyD2u69hH7F1buls4M9Ri9IzvM4hw5ultSxm9kZW1dejc/8dAH94SQQLYLJmsxJo463uB+UvSsk6dEXk+EL3c5y3e/IUq4D+p2XYdMHx2ArRWvt42gB1hXT34Ke1D6Hui7agyrXI7Iq/etFLF+wGvUJ7gadBt9fVtNjKZmSVZGFqMq6vsR02wuE8fsik/HE/HIJWEunqEsLwQ4i8icHwggEVUiBPJZK6aCT7kKO76FQdlEA+tta1WyIM4AiKxvuVxvrXRS3Qq8/VBo4GoFEuMzDu2NBGwbisgwIJxL5opnLU6kyracdt9K66YO+V0B9stehjv1WNRDh+HEQV/pGv4wsdZgzV+EGSOFIJLm7zZDsA8AQpMS9BwCKVA+wkPbKHorah8y105eVPBqOnP13oI63Qproc3G2fYuskyvZNUNrzvuVm1viz1gR+yLF1SdUGvtEK4WTLgOIQWqiZwYIu+XRdyIMrb63MGl6vOBj/bNCSowAYdqHTJoPDM1RBJ/0t16hHMAjNxP41bea08ymC5/ULi5xmRpmuZEddcUSJuzzw0L3VMri2WZ7KF1PBT1p7Vb1uFJkf6ZmsiGK+7W9PZbQ9JsF1kHJPDLeCKEnEErZLO6HlN6OrBuRjSFJlEOkHJ8h+ACeB5I/ruUqId5xHude7tS8hzyDy9o69kYzas0MjuuoLgXi5SkBrX8Ux+/1zmRajdKO+pNyCsgy2bDX4I995Yj4gW1wSVogYuZHl/IzNiDkskEDdVRU/D7UK6i6YTd9BiLai4VPaeaHvYe8rGnpWzu5qW56JU47Ejr9WhsOa5LlAhsL5gS9OLr69G2FUL9CJWhcX+68xnzNOSVo+KpiwI7diceWRmRwKTjBoou47U+UD2KBHmLHINx7ZVCEn1ILAsJY5++0C1PzEYBYG6dNEY16IS5fhQJ22EHALcXKuMkI7IYmYPZM1NBUPddUGcenqIXt3nNraBlqD9rpJrjBZ1k7WGrIrfFSUGkhJqUoCc6fG4BmOkc3HGdRzdAbvN90P3LAb2R4uUgla2GGiwe4yuZ4dDm8xPq2in66CVmblPde8dDwKMHuKnVDcO4uhn6FobqWOSPyFCWqdpoWzat2eTYSxS1azevi1IyolKKhBSBjQY4hL+tj9LThuT2UNo4o3N+Lh0TUiVMSCVNQM2ttwhFQJy47YVMhy+QkPUneS+6xIiroLrORM5ZxMDeypfzKKIBBuhFkx49gUY5KvGig9H3OuygaC2hm+HDnZjkdP8CJY3/nCDnHJwfPObO1SFikSGm+T3EBPfjkqdsfErG9RIqOs5Bep2qwgnnGvKduXCUv4Dqxfo1bDTYgUMe2rEPUg8cdn5vOFk6LP7tNHLh0SVB+Y8w7uwHZnN/KxvsHP/5vOc7gwN7RGBzL0rez/IDBu9yU7SuzUVmU7UoyyTuJs29wdY6eaS8J6UbcpTD8MhCWwqH4tqsDWoOWEjMMOnC/HeQatP25cGeXWkA2GXDGYSTiNWAodqNYv83yNenReRwzutyCq4IN0XEhHSyoHDR5XGOnddTO/EkdDVSKSBKemjjL6ww== C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\WINDOWS\tasks\HPCeeScheduleForJP.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJP (null) C:\WINDOWS\tasks\Price Fountain.job - C:\Users\JP\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE /Check C:\WINDOWS\tasks\VBZI.job - C:\Users\JP\AppData\Roaming\VBZI.exe /infocmdline=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 ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-11-04 218784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-11-12 2334928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201CF130-E29C-4E5C-A73F-CD197DEFA6AE}] E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b608cc98-54de-4775-96c9-097de398500c}] PriceFountain - C:\Users\JP\AppData\Local\PriceFountain\PriceFountainIE.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-05-28 7188552] "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-12-21 391128] "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-12-21 771544] "Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-12-21 770520] "Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2014-03-05 690008] "BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2013-09-19 7818040] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-12-16 21720] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "SkyDrive"=C:\Users\JP\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2014-10-13 277672] "iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2014-10-17 43816] "Power2GoExpress8"=C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe [2013-08-05 1713416] "ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2014-10-17 43816] "MyDriveConnect.exe"=C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [2014-03-17 473464] "TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2014-06-05 248176] "EPLTarget\P0000000000000001"=C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIJCE.EXE [2012-02-29 283232] "pricefountainw.exe"=C:\Users\JP\AppData\Local\PriceFountain\pricefountainw.exe HKEY_CURRENT_USER Software\PriceFountain [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-05-18 642816] "YouCam Service"=C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2013-05-22 267224] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2014-11-09 3653136] "EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2012-04-02 1058912] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176] "iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888] "AccelerometerSysTrayApplet"=C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [2014-04-01 126240] "HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2014-10-09 509192] "Registry Helper"=C:\Program Files (x86)\Registry Helper\RegistryHelper.Exe /boot [] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup iSCTsysTray.lnk - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe C:\Users\JP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\JP\AppData\Roaming\Dropbox\bin\Dropbox.exe Verzenden naar OneNote.lnk - C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2013-12-21 624640] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CMWFP] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ColorMedia] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "VIDC.YUY2"=msyuv.dll "vidc.i420"=iyuv_32.dll "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "VIDC.YVYU"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "VIDC.UYVY"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.msvc"=msvidc32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-01-11 10:32:33 ----D---- C:\Program Files\trend micro 2015-01-11 10:32:32 ----D---- C:\rsit 2015-01-10 14:30:55 ----A---- C:\WINDOWS\system32\WPRO_41_2001woem.tmp 2015-01-08 15:32:48 ----N---- C:\WINDOWS\system32\MpSigStub.exe 2015-01-08 14:06:01 ----D---- C:\ProgramData\AVG 2015-01-07 23:35:29 ----D---- C:\70d9359c767284b30a 2015-01-07 11:36:33 ----D---- C:\Users\JP\AppData\Roaming\vlc 2015-01-03 14:19:33 ----D---- C:\ProgramData\Sun 2015-01-03 14:18:43 ----D---- C:\ProgramData\Oracle 2015-01-03 14:14:49 ----D---- C:\Program Files (x86)\globalUpdate 2015-01-03 14:13:31 ----D---- C:\ProgramData\Registry Helper 2015-01-03 14:13:30 ----D---- C:\ProgramData\PicColorData 2015-01-03 14:13:18 ----A---- C:\WINDOWS\SYSWOW64\ColorMediaOff.ini 2015-01-03 14:13:18 ----A---- C:\WINDOWS\SYSWOW64\ColorMedia.ini 2015-01-03 14:13:18 ----A---- C:\WINDOWS\system32\ColorMediaOff.ini 2015-01-03 14:13:13 ----D---- C:\ProgramData\C5A3BB37E7764FD69BB3D8A75A7BB3E1 2015-01-03 14:13:10 ----D---- C:\ProgramData\PicColor Utility 2015-01-03 14:12:56 ----D---- C:\Users\JP\AppData\Roaming\PriceFountain 2014-12-21 05:00:29 ----SHD---- C:\found.002 2014-12-21 05:00:29 ----SHD---- C:\found.001 2014-12-21 05:00:29 ----SHD---- C:\found.000 2014-12-15 16:26:29 ----A---- C:\WINDOWS\system32\poqexec.exe 2014-12-15 16:26:27 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe ======List of files/folders modified in the last 1 month====== 2015-01-11 10:41:16 ----D---- C:\WINDOWS\Prefetch 2015-01-11 10:40:57 ----D---- C:\WINDOWS\Temp 2015-01-11 10:32:33 ----RD---- C:\Program Files 2015-01-11 10:20:50 ----D---- C:\WINDOWS\system32\config 2015-01-11 10:16:53 ----RD---- C:\WINDOWS\System32 2015-01-11 10:16:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2015-01-11 10:15:54 ----D---- C:\ProgramData\MFAData 2015-01-11 10:15:15 ----D---- C:\WINDOWS\AppReadiness 2015-01-11 10:15:08 ----HD---- C:\Program Files\WindowsApps 2015-01-11 10:11:36 ----D---- C:\WINDOWS\system32\Tasks 2015-01-11 10:10:48 ----D---- C:\WINDOWS\Minidump 2015-01-11 10:10:47 ----D---- C:\Windows 2015-01-10 15:30:07 ----D---- C:\WINDOWS\Microsoft.NET 2015-01-10 15:00:00 ----D---- C:\WINDOWS\system32\sru 2015-01-10 11:28:55 ----RD---- C:\Program Files (x86) 2015-01-10 10:58:56 ----D---- C:\WINDOWS\CbsTemp 2015-01-09 21:05:37 ----D---- C:\WINDOWS\WinSxS 2015-01-09 21:05:35 ----D---- C:\WINDOWS\system32\SecureBootUpdates 2015-01-09 18:16:47 ----D---- C:\WINDOWS\system32\wdi 2015-01-09 18:14:06 ----D---- C:\WINDOWS\Tasks 2015-01-09 17:12:38 ----SHD---- C:\WINDOWS\Installer 2015-01-09 17:12:38 ----SHD---- C:\Config.Msi 2015-01-09 17:12:38 ----D---- C:\Program Files (x86)\Common Files 2015-01-09 17:12:26 ----D---- C:\WINDOWS\SysWOW64 2015-01-09 17:11:51 ----SHD---- C:\System Volume Information 2015-01-08 14:06:01 ----HD---- C:\ProgramData 2015-01-08 12:27:53 ----D---- C:\Users\JP\AppData\Roaming\Dropbox 2015-01-07 23:35:49 ----D---- C:\WINDOWS\debug 2015-01-07 11:28:14 ----D---- C:\WINDOWS\system32\NDF 2015-01-07 11:17:58 ----A---- C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2015-01-07 11:15:29 ----D---- C:\WINDOWS\SoftwareDistribution 2015-01-06 12:31:12 ----D---- C:\WINDOWS\Inf 2015-01-03 16:14:56 ----D---- C:\WINDOWS\Logs 2015-01-03 14:35:40 ----D---- C:\WINDOWS\system32\drivers 2015-01-03 14:35:40 ----D---- C:\Program Files (x86)\Adobe 2015-01-03 14:35:32 ----D---- C:\ProgramData\AVG2015 2014-12-25 17:03:34 ----RSD---- C:\WINDOWS\assembly 2014-12-25 16:33:03 ----D---- C:\SWSetup 2014-12-23 11:27:13 ----D---- C:\Program Files (x86)\Epson Software 2014-12-23 09:36:52 ----D---- C:\ProgramData\regid.1991-06.com.microsoft 2014-12-23 09:35:44 ----D---- C:\Program Files\Microsoft Office 15 2014-12-17 14:02:37 ----D---- C:\WINDOWS\system32\FxsTmp 2014-12-15 16:07:07 ----D---- C:\WINDOWS\system32\catroot2 ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 amdkmpfd;@oem9.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2013-04-10 35936] R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2014-06-18 190744] R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2014-07-18 313624] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2014-10-05 124184] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2014-06-18 31512] R0 hpdskflt;@oem26.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2013-03-01 30520] R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-22 644968] R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2014-06-18 153368] R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2014-10-29 263960] R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2014-08-28 243480] R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2014-09-24 277784] R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712] R3 Accelerometer;@oem26.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2013-03-01 43320] R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2013-12-12 12521472] R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2013-12-12 617472] R3 AMPPAL;@oem12.inf,%AMPPAL.SVCDESC%;Intel(r) Centrino(r) Wireless Bluetooth(r) + High Speed Virtuele adapter; C:\WINDOWS\System32\drivers\AMPPAL.sys [2013-05-01 165344] R3 ApfiltrService;@oem44.inf,%Filter.SvcDesc%;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2014-03-05 501040] R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2013-08-22 53248] R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2013-08-22 224768] R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth-apparaat (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2013-08-22 118272] R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2013-11-14 81920] R3 btmaux;@oem17.inf,%BTMAUX.ServiceDesc%;Intel Bluetooth Auxiliary Service; C:\WINDOWS\system32\DRIVERS\btmaux.sys [2013-07-22 140600] R3 btmhsf;btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [2013-09-05 1390904] R3 clwvd;@oem21.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\WINDOWS\system32\DRIVERS\clwvd.sys [2013-03-05 41408] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 ibtusb;@oem49.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R) 4.0 + HS-adapter; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2014-03-12 119240] R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-12-21 4216320] R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\WINDOWS\system32\DRIVERS\ikbevent.sys [2013-04-15 21048] R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\WINDOWS\system32\DRIVERS\imsevent.sys [2013-04-15 21048] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-05-29 3432776] R3 irstrtdv;@oem1.inf,%Irstrt.DispName%;Intel(R) Rapid Start Technology Driver; C:\WINDOWS\System32\drivers\irstrtdv.sys [2014-04-23 20192] R3 ISCT;@oem34.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2013-04-15 46568] R3 iwdbus;@oem40.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-12-15 27032] R3 MEIx64;@oem22.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2014-04-26 99288] R3 NETwNb64;@oem67.inf,___ %NIC_Service_DispName_WINB_64%;___ Intel(R) Wireless adapter stuurprogramma onder Windows 8.1 64 Bit; C:\WINDOWS\system32\DRIVERS\NETwbw02.sys [2014-07-22 3488744] R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2013-11-14 167424] R3 RTL8168;@oem15.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2014-04-23 830680] R3 usb3Hub;@oem25.inf,%usb3Hub.SVCDESC%;UoIP Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [2013-05-28 206744] R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB-videoapparaat (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224] S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2013-09-04 20496] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2013-11-14 1200640] S3 dg_ssudbus;@oem33.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800] S3 intaud_WaveExtensible;@oem39.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-12-15 39320] S3 IntcDAud;@oem7.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-05-22 452088] S3 NETwNe64;@oem26.inf,%NIC_Service_DispName_WIN8_64%;Intel(R) Wireless adapter stuurprogramma onder Windows 8 64 Bit; C:\WINDOWS\system32\DRIVERS\Netwew02.sys [2013-10-08 3648480] S3 RTSPER;@oem3.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [2013-05-09 408136] S3 ssudmdm;@oem41.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] S3 ssudserd;@oem43.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudserd.sys [2014-01-22 206080] S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;USB RNDIS-adapter; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-08-22 20992] S3 USBAAPL64;@oem66.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-08-15 54784] S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704] R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2009-11-18 98208] R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2013-12-12 239616] R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2013-05-01 772064] R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2014-11-09 3488784] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2014-11-09 298080] R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2013-08-26 1137016] R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2013-08-26 1157496] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 BrcmSetSecurity;BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [2013-05-28 101536] R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-09-12 135984] R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-11-12 2449592] R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208] R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc64.exe [2011-12-12 135824] R2 EvtEng;Intel(R) PROSet/Wireless Event Log; c:\Program Files\Intel\WiFi\bin\EvtEng.exe [2014-06-18 632016] R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160] R2 hpsrv;@oem26.inf,%hpservice_desc%;HP Service; C:\WINDOWS\system32\Hpservice.exe [2013-03-01 43320] R2 HPWMISVC;HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2014-10-09 569608] R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-22 15720] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-05-11 733696] R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2014-04-26 131544] R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management;Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [2014-03-12 157128] R2 irstrtsv;Intel(R) Rapid Start Technology Service; C:\Windows\SysWOW64\irstrtsv.exe [2014-04-23 781280] R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2013-04-15 182760] R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-04-26 169432] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-04-26 390616] R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; c:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2014-06-18 154832] R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2013-05-17 245832] R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2014-06-05 93040] R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-06-07 1129760] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880] S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-03 68608] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-21 116648] S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-08-10 50784] S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-12-21 279000] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696] S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-01-03 68608] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-21 116648] S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-05-11 822232] S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28 174368] S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; c:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2014-06-18 265936] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-02-01 150600] -----------------EOF-----------------