Logfile of random's system information tool 1.10 (written by random/random)
Run by Gebruiker at 2015-02-09 10:26:04
Microsoft Windows 8.1 
System drive C: has 66 GB (57%) free of 114 GB
Total RAM: 7845 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:26:18, on 9/02/2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
J:\EagleGet\EGMonitor.exe
C:\Program Files (x86)\InternetOff\InternetOff.exe
J:\EagleGet\EagleGet.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\AVG\AVG2015\avgui.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Gebruiker.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hln.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O1 - Hosts: 5.45.78.80 www.google-analytics.com.
O1 - Hosts: 5.45.78.80 google-analytics.com.
O1 - Hosts: 5.45.78.80 connect.facebook.net.
O1 - Hosts: 107.181.174.68 www.google-analytics.com.
O1 - Hosts: 107.181.174.68 google-analytics.com.
O1 - Hosts: 107.181.174.68 connect.facebook.net.
O2 - BHO: bteagleget.com - {1E871FF8-029C-4732-8AA7-39E3D3872057} - J:\EagleGet\eagleSniffer.dll
O2 - BHO: Afmelden voor advertentiecookie - {8E425EB4-ADBD-4816-B1E8-49BB9DECF034} - C:\Program Files (x86)\Google\Advertising Cookie Opt-out\opt_out.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [InternetOff] C:\Program Files (x86)\InternetOff\InternetOff.exe
O4 - HKCU\..\Run: [Edtion] regsvr32.exe C:\Users\Gebruiker\AppData\Local\Edtion\luafar3.dll
O4 - HKCU\..\Run: [EagleGet] J:\EagleGet\Eagleget.exe -V
O4 - HKCU\..\Run: [Edtion Update] regsvr32.exe C:\Users\Gebruiker\AppData\Local\Edtion\NetIOMetaWeblog.dll
O4 - HKCU\..\Run: [Ufmedia] C:\Windows\SysWOW64\regsvr32.exe C:\Users\Gebruiker\AppData\Local\Ajworks\CNBP_250.DLL
O4 - HKCU\..\Run: [Edtion Tray] regsvr32.exe C:\Users\Gebruiker\AppData\Local\Edtion\jabber.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Download all links with EagleGet - res://J:\EagleGet\IEGraberBHO.dll/202
O8 - Extra context menu item: Download with EagleGet - res://J:\EagleGet\IEGraberBHO.dll/201
O8 - Extra context menu item: Foto in PhotoME openen... - J:\PhotoMEBeta\iemenuext.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/be/Core/Player/2020PlayerAX_IKEA_Win32.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8718928D-CBEB-45EA-A621-800A9249001D}: NameServer = 8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{9EBE8193-ACC4-41B5-8C80-5AAD001C3292}: NameServer = 8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{8718928D-CBEB-45EA-A621-800A9249001D}: NameServer = 8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8,8.8.8.8
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - K:\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: egGetSvc - Unknown owner - J:\EagleGet\EGMonitor.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Internet Off Service (InternetOffService) - Unknown owner - C:\Program Files (x86)\InternetOff\IOffSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9987 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\Program Files (x86)\InternetOff\IOffSvc.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe"
"J:\EagleGet\EGMonitor.exe" /svc
"C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgemca.exe"
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k HPService
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6971346d-de81-48bb-92ef-1bb6cdcf00cd -SystemEventPortName:HostProcess-5fdf8256-8288-4cca-970d-d3a7e9d75a67 -IoCancelEventPortName:HostProcess-533e7079-2cfa-4205-b45c-70acfd7dcdab -NonStateChangingEventPortName:HostProcess-5c2123c1-d249-4666-94ff-a71e75f18697 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:cafaddcd-7c6b-40ac-b35f-36faf6144a41 -DeviceGroupId:WpdFsGroup
C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-f355-0507a3f2364e /binaryPath="C:\Program Files (x86)\AVG\AVG2015\"
"K:\Elements 11 Organizer\PhotoshopElementsFileAgent.exe"
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
taskhost.exe $(Arg0)
dashost.exe {a64e4adb-e7f3-42fe-873509d60f142056}

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
 -hiberboot
"J:\EagleGet\EGMonitor.exe" /rm
taskhostex.exe 
C:\WINDOWS\Explorer.EXE
igfxEM.exe 
igfxHK.exe 
igfxTray.exe 
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
KHALMNPR.EXE /API
"C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" 
"C:\Program Files (x86)\InternetOff\InternetOff.exe" 
"J:\EagleGet\EagleGet.exe" -V
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe" 
"C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
ctfmon.exe
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" 
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\Internet Explorer\iexplore.exe" 
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3768 CREDAT:267521 /prefetch:2
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart C5200 series#1408096983" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
C:\WINDOWS\System32\svchost.exe -k HPZ12
"C:\WINDOWS\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3768 CREDAT:1971594 /prefetch:2

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3768 CREDAT:3085788 /prefetch:2
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3768 CREDAT:1381827 /prefetch:2
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe51_ Global\UsGthrCtrlFltPipeMssGthrPipe51 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" 
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 580 588 65536 584 
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1033252319-1798021727-3399454392-100152_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1033252319-1798021727-3399454392-100152 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"  "1"
C:\WINDOWS\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding
"C:\Users\Gebruiker\Desktop\RSITx64.exe" 
taskeng.exe {EB25721F-5843-467D-8552-FA102369636B}
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\G2MUpdateTask-S-1-5-21-1033252319-1798021727-3399454392-1001.job - C:\Users\Gebruiker\AppData\Local\Citrix\GoToMeeting\2273\g2mupdate.exe 
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E425EB4-ADBD-4816-B1E8-49BB9DECF034}]
Afmelden voor advertentiecookie - C:\Program Files\Google\Advertising Cookie Opt-out\opt_out.dll [2013-01-10 490448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}]
Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19 433944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E871FF8-029C-4732-8AA7-39E3D3872057}]
EGet Class - J:\EagleGet\eagleSniffer.dll [2014-10-03 446976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E425EB4-ADBD-4816-B1E8-49BB9DECF034}]
Afmelden voor advertentiecookie - C:\Program Files (x86)\Google\Advertising Cookie Opt-out\opt_out.dll [2013-01-10 309200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}]
Logitech SetPoint - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19 364824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19 557768]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2014-05-19 3100440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2014-08-07 688984]
"InternetOff"=C:\Program Files (x86)\InternetOff\InternetOff.exe [2013-10-07 3158328]
"Edtion"=regsvr32.exe C:\Users\Gebruiker\AppData\Local\Edtion\luafar3.dll []
"EagleGet"=J:\EagleGet\Eagleget.exe [2014-10-03 1777664]
"Edtion Update"=regsvr32.exe C:\Users\Gebruiker\AppData\Local\Edtion\NetIOMetaWeblog.dll []
"Ufmedia"=C:\Windows\SysWOW64\regsvr32.exe [2013-08-22 17408]
"Edtion Tray"=regsvr32.exe C:\Users\Gebruiker\AppData\Local\Edtion\jabber.dll []
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2015-01-06 3674576]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]
"AdobeCS5.5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [2011-01-12 1523360]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2014-03-24 66328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "J:\Adobe Dreamweaver CS5.5\Adobe Dreamweaver CS5.5\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2015-02-09 10:26:04 ----D---- C:\rsit
2015-02-09 10:26:04 ----D---- C:\Program Files\trend micro
2015-01-18 13:25:14 ----A---- C:\WINDOWS\system32\aspnet_counters.dll
2015-01-18 13:25:13 ----A---- C:\WINDOWS\SYSWOW64\aspnet_counters.dll
2015-01-18 13:03:27 ----D---- C:\Users\Gebruiker\AppData\Roaming\TuneUp Software
2015-01-18 13:03:19 ----D---- C:\ProgramData\Canneverbe Limited
2015-01-18 12:22:50 ----D---- C:\Users\Gebruiker\AppData\Roaming\Garmin
2015-01-14 10:18:31 ----A---- C:\WINDOWS\system32\profsvc.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\werdiagcontroller.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\wermgr.exe
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\WerFault.exe
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\wer.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\nlasvc.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\nlaapi.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\ncsi.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\Faultrep.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\EncDump.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\ci.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\AudioSes.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\AudioEng.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 10:18:30 ----A---- C:\WINDOWS\system32\audiodg.exe
2015-01-10 13:19:12 ----D---- C:\Program Files\ePaperPress

======List of files/folders modified in the last 1 month======

2015-02-09 10:26:04 ----RD---- C:\Program Files
2015-02-09 10:26:01 ----D---- C:\WINDOWS\Prefetch
2015-02-09 10:23:17 ----D---- C:\WINDOWS\Temp
2015-02-09 10:00:00 ----D---- C:\WINDOWS\system32\sru
2015-02-09 09:15:02 ----D---- C:\WINDOWS\SoftwareDistribution
2015-02-09 09:15:02 ----D---- C:\Windows
2015-02-09 09:10:40 ----D---- C:\WINDOWS\Inf
2015-02-09 09:08:15 ----D---- C:\ProgramData\MFAData
2015-02-09 08:12:59 ----D---- C:\WINDOWS\Microsoft.NET
2015-02-09 07:45:05 ----RD---- C:\WINDOWS\System32
2015-02-09 07:45:05 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-08 21:56:09 ----D---- C:\WINDOWS\AppReadiness
2015-02-08 10:34:46 ----SHD---- C:\System Volume Information
2015-02-07 11:26:05 ----SHD---- C:\WINDOWS\Installer
2015-02-07 11:26:05 ----HD---- C:\Config.Msi
2015-02-07 11:21:09 ----RD---- C:\Program Files (x86)
2015-02-07 11:21:08 ----D---- C:\WINDOWS\Tasks
2015-02-07 11:02:59 ----D---- C:\WINDOWS\system32\config
2015-02-06 23:05:55 ----HD---- C:\Program Files\WindowsApps
2015-02-06 23:05:49 ----D---- C:\WINDOWS\WinSxS
2015-02-06 23:05:49 ----D---- C:\WINDOWS\SysWOW64
2015-02-06 23:05:49 ----D---- C:\WINDOWS\CbsTemp
2015-02-05 23:39:29 ----SD---- C:\Users\Gebruiker\AppData\Roaming\Microsoft
2015-02-05 13:03:34 ----D---- C:\WINDOWS\debug
2015-02-03 20:31:19 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-01-29 11:22:40 ----A---- C:\Users\Gebruiker\AppData\Roaming\ShiftN.ini
2015-01-22 00:36:28 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-01-18 13:03:37 ----D---- C:\Users\Gebruiker\AppData\Roaming\Logitech
2015-01-18 13:03:34 ----D---- C:\Users\Gebruiker\AppData\Roaming\PTGui
2015-01-18 13:03:33 ----D---- C:\Users\Gebruiker\AppData\Roaming\uTorrent
2015-01-18 13:03:33 ----D---- C:\Users\Gebruiker\AppData\Roaming\Google
2015-01-18 13:03:33 ----D---- C:\Users\Gebruiker\AppData\Roaming\2BrightSparks
2015-01-18 13:03:32 ----D---- C:\Users\Gebruiker\AppData\Roaming\Anthropics
2015-01-18 13:03:32 ----D---- C:\AdwCleaner
2015-01-18 13:03:30 ----D---- C:\Users\Gebruiker\AppData\Roaming\Adobe
2015-01-18 13:03:28 ----D---- C:\Users\Gebruiker\AppData\Roaming\canon
2015-01-18 13:03:19 ----HD---- C:\ProgramData
2015-01-18 12:54:00 ----D---- C:\WINDOWS\system32\Tasks
2015-01-18 12:22:47 ----D---- C:\ProgramData\Adobe
2015-01-17 11:33:54 ----D---- C:\ProgramData\DxO Labs
2015-01-17 11:33:16 ----D---- C:\WINDOWS\system32\drivers
2015-01-15 00:29:59 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-01-14 10:55:28 ----D---- C:\WINDOWS\system32\MRT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2014-11-18 203544]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2014-07-18 313624]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2014-10-05 124184]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2014-06-18 31512]
R0 PxHlpa64;PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]
R0 Wof;Windows Overlay File System Filter Driver; C:\WINDOWS\system32\drivers\Wof.sys [2014-03-13 157016]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2014-06-18 153368]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2014-12-08 260888]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2014-08-28 243480]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2014-09-24 277784]
R3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Stuurprogramma I voor Intel(R) PRO/1000 PCI Express-netwerkverbinding; C:\WINDOWS\system32\DRIVERS\e1i63x64.sys [2013-06-18 460288]
R3 eagleGet;eagleGet; C:\WINDOWS\System32\Drivers\eagleGet.sys [2014-09-22 79696]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-05-20 3791872]
R3 iwdbus;@oem3.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-05-06 27032]
R3 LHidFilt;@oem21.inf,%LHidFilt.SvcDesc%;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2014-03-19 76568]
R3 LMouFilt;@oem23.inf,%LMouFilt.SvcDesc%;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2014-03-19 59160]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2013-09-04 20496]
S3 dot4;@oem9.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem10.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\WINDOWS\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem9.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 intaud_WaveExtensible;@oem2.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-05-06 38296]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys []
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11; K:\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2015-01-06 3440080]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2015-01-06 309232]
R2 egGetSvc;egGetSvc; J:\EagleGet\EGMonitor.exe [2014-10-03 230400]
R2 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-08-07 438616]
R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-05-20 314696]
R2 InternetOffService;Internet Off Service; C:\Program Files (x86)\InternetOff\IOffSvc.exe [2013-10-07 1603896]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-14 116648]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-05-20 278344]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-14 116648]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2014-03-24 357144]

-----------------EOF-----------------