Logfile of random's system information tool 1.10 (written by random/random) Run by belgam at 2015-02-07 09:48:46 Microsoft Windows 8.1 System drive C: has 137 GB (72%) free of 190 GB Total RAM: 6029 MB (54% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 9:48:50, on 7/02/2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17416) Boot mode: Normal Running processes: C:\Program Files (x86)\ASUS\Splendid\ACMON.exe C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe C:\Users\belgam\Pictures\TeamViewer.exe C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe C:\Users\belgam\AppData\Local\FluxSoftware\Flux\flux.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Users\belgam\AppData\Roaming\uTorrent\uTorrent.exe C:\Program Files (x86)\ContaCam\ContaCam.exe C:\Users\belgam\AppData\Local\Pokki\Engine\HostAppService.exe C:\Program Files (x86)\ContaCam\microapache\mapache.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files (x86)\Samsung\Kies\Kies.exe C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Users\belgam\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\Program Files (x86)\ContaCam\microapache\mapache.exe C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe C:\Users\belgam\AppData\Local\Pokki\Engine\HostAppService.exe C:\WINDOWS\SysWOW64\ctfmon.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files\trend micro\belgam.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchfix.info/?pid=724&r=2014/12/25&hid=6729491778178713349&lg=EN&cc=BE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchfix.info/?pid=724&r=2014/12/25&hid=6729491778178713349&lg=EN&cc=BE R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: MySafeProxy - {51420F88-4D4A-4042-9509-8D4E1307910E} - C:\Program Files (x86)\XTRM Group\MySafeProxy\Bin\MySafeProxy32.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe O4 - HKLM\..\Run: [DelaypluginInstall] C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe O4 - HKCU\..\Run: [f.lux] "C:\Users\belgam\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [Pokki] "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON O4 - HKCU\..\Run: [TornTv Downloader] C:\Users\belgam\AppData\Roaming\TornTV.com\Torntv Downloader.exe /c=startup O4 - HKCU\..\Run: [uTorrent] "C:\Users\belgam\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED O4 - HKCU\..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log O4 - HKCU\..\Run: [se] C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe /minimized O4 - HKCU\..\Run: [ContaCam] C:\Program Files (x86)\ContaCam\ContaCam.exe O4 - HKCU\..\Run: [IncrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload O4 - HKCU\..\Run: [KiesPDLR.exe] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run O4 - HKUS\S-1-5-21-770656250-4267736114-823061229-1001\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser') O4 - Startup: Dropbox.lnk = belgam\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file) O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file) O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Protocol: WSWSVCUchrome - (no CLSID) - (no file) O20 - AppInit_DLLs: O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files\ASUS\P4G\InsOnSrv.exe O23 - Service: Asus WebStorage Windows Service - Unknown owner - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: MySafeProxy Monitor (MySafeProxyMonitor) - XTRM Group Ltd. - C:\Program Files (x86)\XTRM Group\MySafeProxy\Bin\MySafeProxyMonitor.exe O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) - Reimage® - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Users\belgam\Pictures\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: InstallShield Updater (Updater.exe) - InstallShield - C:\Users\belgam\AppData\Roaming\InstallShield Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 14444 bytes ======Listing Processes====== wininit.exe winlogon.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS "dwm.exe" "C:\WINDOWS\system32\nvvsvc.exe" "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\WINDOWS\system32\nvvsvc.exe -session -first C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted C:\WINDOWS\system32\svchost.exe -k NetworkService "C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe" "C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe" C:\ProgramData\IePluginServices\PluginService.exe -service C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files\ASUS\P4G\InsOnSrv.exe" "C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe" "C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe" "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "C:\Program Files (x86)\XTRM Group\MySafeProxy\Bin\MySafeProxyMonitor.exe" "C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe" "C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe" "C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe" C:\WINDOWS\system32\svchost.exe -k imgsvc "C:\Users\belgam\Pictures\TeamViewer_Service.exe" "C:\Users\belgam\AppData\Roaming\InstallShield Updater\Updater.exe" "C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe" "C:\Program Files (x86)\AVG\AVG2015\avgemca.exe" C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-6c14-5c0c869cf953 /binaryPath="C:\Program Files (x86)\AVG\AVG2015\" "C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe" "C:\Program Files\ASUS\P4G\InsOnWMI.exe" "C:\Program Files (x86)\ASUS\Splendid\ACMON.exe" taskhostex.exe "C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe" "C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe" "C:\Program Files\ASUS\P4G\BatteryLife.exe" C:\WINDOWS\Explorer.EXE KBFiltr.exe C:\WINDOWS\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" "C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" "C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe" "C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe" "C:\Users\belgam\Pictures\TeamViewer.exe" "C:\Users\belgam\Pictures\tv_w32.exe" --action hooks --log C:\Users\belgam\Pictures\TeamViewer9_Logfile.log "C:\Users\belgam\Pictures\tv_x64.exe" --action hooks --log C:\Users\belgam\Pictures\TeamViewer9_Logfile.log "C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe" C:\WINDOWS\system32\SearchIndexer.exe /Embedding C:\Windows\System32\skydrive.exe -Embedding "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 "C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3 "C:\Windows\System32\igfxtray.exe" "C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe" "C:\Windows\System32\hkcmd.exe" "C:\Users\belgam\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun "C:\Users\belgam\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON "C:\Users\belgam\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED "C:\Program Files (x86)\ContaCam\ContaCam.exe" "C:\Users\belgam\AppData\Local\Pokki\Engine\HostAppService.exe" "C:\Program Files (x86)\ContaCam\microapache\mapache.exe" -f "C:/Users/belgam/AppData/Roaming/Contaware/ContaCam/httpd_conf.txt" \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe" /c "C:\Windows\System32\SettingSyncHost.exe" -Embedding "C:\Program Files (x86)\Samsung\Kies\Kies.exe" /preload "C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" Run "C:\Users\belgam\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY "C:\Program Files (x86)\ContaCam\microapache\mapache.exe" -d "C:/Program Files (x86)/ContaCam/microapache" -f C:/Users/belgam/AppData/Roaming/Contaware/ContaCam/httpd_conf.txt "C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe" "C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe" -Embedding "C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" "C:\Users\belgam\AppData\Local\Pokki\Engine\HostAppService.exe" --type=renderer --disable-breakpad --disable-desktop-notifications --disable-logging --disable-speech-input --lang=en-US --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/14/OneClickSignIn/BlueOnWhite/Prefetch/ContentPrefetchPrefetchOn/Prerender/PrerenderNoUse/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetchingLearning/SpeculativePrefetchingLearningEnabled/Test0PercentDefault/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_08/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/default/WarmSocketImpact/last_accessed_socket/ --noerrdialogs --disable-client-side-phishing-detection --disable-bundled-ppapi-flash --channel="1256.2.1726678880\753892311" /prefetch:3 ctfmon.exe "C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Users\belgam\AppData\Local\Pokki\Engine\StartMenuIndexer.exe" "C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe" "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" "C:\Program Files (x86)\Nero\Update\NASvc.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17499_x64__8wekyb3d8bbwe\glcnd.exe" -ServerName:Microsoft.Reader.AppXtszmc7avrx02s7n8gch63tzwg517wd9k.mca C:\Windows\System32\RuntimeBroker.exe -Embedding "C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store dashost.exe {dd0c5ae3-e9d2-41db-920663757ca495b9} "C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe" "C:\Program Files\WindowsApps\Microsoft.HelpAndTips_6.3.9654.20559_x64__8wekyb3d8bbwe\HelpAndTips.exe" -ServerName:HelpAndTips.AppX7tj3zfy1mhcnhm5rxvtkhek45d9qdafs.mca taskeng.exe {62CCA4E9-1D81-4A0F-BDD9-3B90113550C3} "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="8760.0.788330885\106198237" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,39 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3308 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="ChromeSuggestions/Mixed/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/DevHQPAllowMatchInTLDR2/PasswordGeneration/Disabled/QUIC/EnabledNoTLP/RememberCertificateErrorDecisions/Default/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/On/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_61/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="8760.1.344157181\1723607116" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="8760.4.141757885\1179154471" --ppapi-flash-args=enable_hw_video_decode=1 --lang=nl --ignored=" --type=renderer " /prefetch:-632637702 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Mixed/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/DevHQPAllowMatchInTLDR2/PasswordGeneration/Disabled/QUIC/EnabledNoTLP/RememberCertificateErrorDecisions/Default/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/On/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/group_01/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_61/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/default/UMAInitialMetricsTiming/Enabled/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="8760.5.306455065\958688275" /prefetch:673131151 "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\WINDOWS\system32\SearchFilterHost.exe" 0 580 584 592 65536 588 "C:\Users\belgam\Downloads\RSITx64.exe" C:\WINDOWS\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\WINDOWS\tasks\InstallShield Updater.job - C:\WINDOWS\system32\wscript.exe //nologo //E:jscript //B "C:\Users\belgam\AppData\Roaming\InstallShield Updater\updater.ini" C:\WINDOWS\tasks\LRWC.job - C:\Users\belgam\AppData\Roaming\LRWC.exe /infocmdline=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 C:\WINDOWS\tasks\QWEDJU.job - C:\Users\belgam\AppData\Roaming\QWEDJU.exe /infocmdline=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 C:\WINDOWS\tasks\WKWYI.job - C:\Users\belgam\AppData\Roaming\WKWYI.exe /infocmdline=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 C:\WINDOWS\tasks\XPEQGO.job - C:\Users\belgam\AppData\Roaming\XPEQGO.exe /infocmdline=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 ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51420F88-4D4A-4042-9509-8D4E1307910E}] MySafeProxy - C:\Program Files (x86)\XTRM Group\MySafeProxy\Bin\MySafeProxy64.dll [2014-10-18 414200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-07-22 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51420F88-4D4A-4042-9509-8D4E1307910E}] MySafeProxy - C:\Program Files (x86)\XTRM Group\MySafeProxy\Bin\MySafeProxy32.dll [2014-10-18 368120] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25 460712] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-07-22 194504] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25 172968] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-07-22 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-07-22 194504] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-03-26 13449288] "RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-03-08 1278024] "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128] "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032] "Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "f.lux"=C:\Users\belgam\AppData\Local\FluxSoftware\Flux\flux.exe [2013-10-23 1017224] "swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2014-07-21 39408] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30877280] "Pokki"=C:\Users\belgam\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe [2015-01-31 10355528] "TornTv Downloader"=C:\Users\belgam\AppData\Roaming\TornTV.com\Torntv Downloader.exe /c=startup [] "uTorrent"=C:\Users\belgam\AppData\Roaming\uTorrent\uTorrent.exe [2014-12-23 1272144] "LiveSupport"=C:\Program Files (x86)\LiveSupport\LiveSupport.exe /noshow /log [] "se"=C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe /minimized [] "ContaCam"=C:\Program Files (x86)\ContaCam\ContaCam.exe [2014-11-03 10897920] "IncrediMail"=C:\Program Files (x86)\IncrediMail\bin\IncMail.exe [2014-12-06 367016] "KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2015-01-14 1565504] "KiesPDLR.exe"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-01-14 845120] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03 40336] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128] "ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-04-26 3187360] "ASUSWebStorage"=C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784] "RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-07-13 93296] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2014-12-18 3667472] "KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2015-01-14 311616] "Wondershare Helper Compact.exe"=C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2014-10-31 2072928] "DelaypluginInstall"=C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [] "DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [] C:\Users\belgam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\belgam\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=" " [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip] "Debugger="tasklist.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro] "Debugger="tasklist.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera] "Debugger="tasklist.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "VIDC.YUY2"=msyuv.dll "vidc.i420"=lvcod64.dll "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "VIDC.YVYU"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "VIDC.UYVY"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.msvc"=msvidc32.dll "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "aux2"=wdmaud.drv "MSVideo"=vfwwdm32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-02-07 09:39:14 ----D---- C:\rsit 2015-02-07 09:39:14 ----D---- C:\Program Files\trend micro 2015-02-02 08:12:58 ----A---- C:\WINDOWS\system32\drivers\ssudmdm.sys 2015-02-02 08:12:57 ----A---- C:\WINDOWS\system32\drivers\ssudbus.sys 2015-02-02 08:08:36 ----D---- C:\Program Files (x86)\MarkAny 2015-01-14 08:37:18 ----A---- C:\WINDOWS\system32\profsvc.dll 2015-01-14 08:37:17 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll 2015-01-14 08:37:17 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe 2015-01-14 08:37:17 ----A---- C:\WINDOWS\system32\nlasvc.dll 2015-01-14 08:37:17 ----A---- C:\WINDOWS\system32\nlaapi.dll 2015-01-14 08:37:17 ----A---- C:\WINDOWS\system32\ncsi.dll 2015-01-14 08:37:17 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys 2015-01-14 08:37:17 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys 2015-01-14 08:37:16 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe 2015-01-14 08:37:16 ----A---- C:\WINDOWS\SYSWOW64\wer.dll 2015-01-14 08:37:16 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll 2015-01-14 08:37:16 ----A---- C:\WINDOWS\system32\WerFault.exe 2015-01-14 08:37:16 ----A---- C:\WINDOWS\system32\wer.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe 2015-01-14 08:37:15 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe 2015-01-14 08:37:15 ----A---- C:\WINDOWS\SYSWOW64\werdiagcontroller.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\wermgr.exe 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\Faultrep.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\EncDump.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\ci.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\audiosrv.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\AudioSes.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\AudioEng.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-01-14 08:37:15 ----A---- C:\WINDOWS\system32\audiodg.exe 2015-01-13 09:37:07 ----D---- C:\Users\belgam\AppData\Roaming\Bluefive software 2015-01-13 09:33:11 ----D---- C:\Program Files (x86)\PIXresizer 2015-01-13 09:33:11 ----A---- C:\WINDOWS\SYSWOW64\ccrpbds6.dll 2015-01-12 12:21:03 ----D---- C:\Users\belgam\AppData\Roaming\Contaware 2015-01-12 12:21:03 ----D---- C:\ContaCam 2015-01-12 12:20:49 ----D---- C:\Program Files (x86)\ContaCam ======List of files/folders modified in the last 1 month====== 2015-02-07 09:48:42 ----D---- C:\Users\belgam\AppData\Roaming\uTorrent 2015-02-07 09:46:44 ----D---- C:\WINDOWS\Temp 2015-02-07 09:45:45 ----D---- C:\ProgramData\MFAData 2015-02-07 09:39:23 ----D---- C:\WINDOWS\Prefetch 2015-02-07 09:39:14 ----RD---- C:\Program Files 2015-02-07 09:02:01 ----D---- C:\WINDOWS\system32\sru 2015-02-07 08:08:26 ----D---- C:\WINDOWS\Microsoft.NET 2015-02-07 08:01:58 ----HD---- C:\Program Files\WindowsApps 2015-02-07 08:01:58 ----D---- C:\WINDOWS\AppReadiness 2015-02-07 07:45:09 ----D---- C:\WINDOWS\system32\config 2015-02-07 07:29:35 ----D---- C:\Users\belgam\AppData\Roaming\Dropbox 2015-02-07 07:27:00 ----RD---- C:\WINDOWS\System32 2015-02-07 07:26:39 ----D---- C:\ProgramData\NVIDIA 2015-02-06 12:00:05 ----D---- C:\WINDOWS\system32\Tasks 2015-02-06 09:07:44 ----D---- C:\WINDOWS\WinSxS 2015-02-06 09:07:44 ----D---- C:\WINDOWS\SysWOW64 2015-02-06 09:07:44 ----D---- C:\WINDOWS\CbsTemp 2015-02-05 12:21:08 ----D---- C:\Users\belgam\AppData\Roaming\Skype 2015-02-04 20:38:49 ----SHD---- C:\System Volume Information 2015-02-04 18:13:03 ----D---- C:\WINDOWS\Inf 2015-02-04 18:12:00 ----D---- C:\WINDOWS\system32\catroot 2015-02-04 07:45:02 ----SHD---- C:\WINDOWS\Installer 2015-02-04 07:40:23 ----RD---- C:\Program Files (x86) 2015-02-04 07:40:20 ----D---- C:\WINDOWS\Tasks 2015-02-03 20:31:19 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe 2015-02-02 08:14:01 ----D---- C:\WINDOWS\system32\DriverStore 2015-02-02 08:13:33 ----D---- C:\WINDOWS\system32\drivers 2015-02-01 17:40:21 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2015-01-28 05:57:02 ----D---- C:\Users\belgam\AppData\Roaming\NCH Software 2015-01-25 08:12:05 ----D---- C:\ProgramData\Oracle 2015-01-25 08:11:58 ----D---- C:\Program Files (x86)\Java 2015-01-25 08:11:35 ----D---- C:\Program Files (x86)\Common Files 2015-01-25 08:11:05 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll 2015-01-23 07:51:07 ----D---- C:\WINDOWS\system32\catroot2 2015-01-19 18:44:31 ----D---- C:\Windows 2015-01-17 06:53:01 ----D---- C:\WINDOWS\SoftwareDistribution 2015-01-17 06:08:02 ----D---- C:\WINDOWS\debug 2015-01-17 05:55:33 ----D---- C:\Users\belgam\AppData\Roaming\Vso 2015-01-17 05:55:27 ----D---- C:\WINDOWS\Logs 2015-01-15 13:45:32 ----A---- C:\WINDOWS\Reimage.ini 2015-01-15 08:20:22 ----D---- C:\WINDOWS\system32\MRT 2015-01-15 08:08:00 ----A---- C:\WINDOWS\system32\MRT.exe 2015-01-14 21:22:09 ----D---- C:\WINDOWS\system32\CodeIntegrity 2015-01-13 07:44:15 ----SD---- C:\Users\belgam\AppData\Roaming\Microsoft 2015-01-10 09:52:03 ----D---- C:\Program Files (x86)\globalUpdate 2015-01-10 09:41:44 ----D---- C:\Program Files (x86)\AGEIA Technologies ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2014-11-18 203544] R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2014-07-18 313624] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2014-10-05 124184] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2014-06-18 31512] R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-01-14 652784] R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-09-05 30496] R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536] R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2014-06-18 153368] R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2014-12-08 260888] R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2014-08-28 243480] R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2014-09-24 277784] R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680] R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416] R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2013-03-12 17152] R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256] R3 ATP;@oem9.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-04-29 65784] R3 HIDSwitch;@oem11.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2012-05-31 21152] R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-03-26 3376200] R3 IntcDAud;@oem4.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-05-02 442368] R3 iwdbus;@oem26.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-22 26008] R3 kbfiltr;@oem12.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992] R3 MEIx64;@oem6.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-01-23 64624] R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-09-05 11273504] R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT-stuurprogramma; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360] R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912] S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2013-09-04 20496] S3 dg_ssudbus;@oem59.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-10-13 110336] S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [] S3 intaud_WaveExtensible;@oem25.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-22 39320] S3 LVRS64;@oem30.inf,%lvrs.SrvDesc%;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs64.sys [2012-10-26 351520] S3 LVUVC64;@oem32.inf,%PID_0825_DD%(UVC);Logitech HD Webcam C270(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc64.sys [2012-10-26 4758176] S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2014-09-08 82816] S3 RSUSBSTOR;@oem10.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2012-06-13 252048] S3 ssudmdm;@oem62.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-10-13 206080] S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Stuurprogramma voor USB-audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-03-18 121088] S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB-videoapparaat (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088] R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2013-01-15 107320] R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files\ASUS\P4G\InsOnSrv.exe [2013-04-29 277120] R2 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192] R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2014-12-18 3432976] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2014-12-18 298080] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520] R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-04-24 227904] R2 IePluginServices;IePlugin Services; C:\ProgramData\IePluginServices\PluginService.exe [2014-08-11 694784] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-12-10 732160] R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-01-25 167736] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-01-25 364856] R2 MySafeProxyMonitor;MySafeProxy Monitor; C:\Program Files (x86)\XTRM Group\MySafeProxy\Bin\MySafeProxyMonitor.exe [2014-10-18 1355768] R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2014-07-15 786256] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2013-08-29 920864] R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256] R2 ReimageRealTimeProtector;Reimage Real Time Protector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2015-01-14 7410024] R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2014-10-13 743688] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-08-29 414496] R2 TeamViewer9;TeamViewer 9; C:\Users\belgam\Pictures\TeamViewer_Service.exe [2014-09-12 4799760] R2 Updater.exe;InstallShield Updater; C:\Users\belgam\AppData\Roaming\InstallShield Updater\Updater.exe [2015-01-01 37376] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-21 116648] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04 267440] S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696] S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-08-14 203344] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-21 116648] S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-07-21 194032] S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 803872] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] -----------------EOF-----------------