Logfile of random's system information tool 1.10 (written by random/random)
Run by jonas at 2015-02-20 14:48:54
Microsoft Windows 7 Home Premium  Service Pack 1
System drive C: has 37 GB (53%) free of 69 GB
Total RAM: 2009 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:48:57, on 20/02/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal

Running processes:
C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe
C:\windows\system32\taskhost.exe
C:\windows\system32\taskeng.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\windows\system32\igfxext.exe
C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Norton Management\Engine\3.2.2.12\ccSvcHst.exe
C:\PROGRA~1\MICROS~2\wkcalrem.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\jonas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VK1UAFWI\RSIT.exe
C:\windows\system32\DllHost.exe
C:\Program Files\trend micro\jonas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Norton Identity Protection - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON SX100 Series] C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE /FU "C:\windows\TEMP\E_SF4D9.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} (Symantec Configuration Class) - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlcm.cab
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Emsisoft Anti-Malware 7.0 - Service (a2AntiMalware) - Emsisoft GmbH - C:\Program Files\Emsisoft Anti-Malware\a2service.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IHProtect Service - XTab system - C:\Program Files\XTab\ProtectService.exe
O23 - Service: Norton Management (MCLIENT) - Symantec Corporation - C:\Program Files\Norton Management\Engine\3.2.2.12\ccSvcHst.exe
O23 - Service: Norton Identity Safe (NCO) - Symantec Corporation - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe
O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6815 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe  
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe  /c 
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler 
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3328793180-4141964508-2228772626-1001Core.job - C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe  /c 
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3328793180-4141964508-2228772626-1001UA.job - C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler 
C:\windows\tasks\Wise Registry Cleaner Schedule Task.job - C:\Program Files\Wise\Wise Registry Cleaner\WiseRegCleaner.exe  -a 

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB4C7833-A6EC-433f-B9FE-6B14B1A2F836}]
Norton Identity Protection - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll [2014-09-20 655200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2014-02-20 669504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
{A13C2648-91D4-4bf3-BC6D-0079707C4389} - Norton Identity Safe Toolbar - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll [2014-09-20 655200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2014-06-16 12021464]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2014-03-11 138808]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2014-03-11 172088]
"Persistence"=C:\windows\system32\igfxpers.exe [2014-03-11 173624]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 978520]
"gmsd_be_65"= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"EPSON SX100 Series"=C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE [2008-02-05 188928]
"Google Update"=C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-19 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APLangApp]
C:\Program Files\AnyPC Client\APLangApp.exe [2009-10-20 13312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2009-06-03 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\emsisoft anti-malware]
C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [2015-02-12 4997872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX100 Series]
C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE [2008-02-05 188928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-19 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 978520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive]
C:\Users\jonas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2014-04-24 257224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2014-12-11 30877280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]
C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2008-01-04 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-12-03 218408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut]
C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [2009-07-21 210216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^jonas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Schermopname en Snel starten.lnk]
 []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2013-12-09 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro36]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro36.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\windows\System32\Notepad.exe %1
.js - open - C:\windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-02-19 17:20:50 ----D---- C:\Program Files\BeID Minidriver
2015-02-19 17:20:49 ----D---- C:\Program Files\Mozilla Firefox
2015-02-19 17:20:49 ----D---- C:\Program Files\Belgium Identity Card
2015-02-12 07:59:06 ----A---- C:\windows\system32\wdi.dll
2015-02-12 07:59:06 ----A---- C:\windows\system32\powertracker.dll
2015-02-12 07:59:06 ----A---- C:\windows\system32\perftrack.dll
2015-02-12 07:41:00 ----A---- C:\windows\system32\jscript9diag.dll
2015-02-12 07:41:00 ----A---- C:\windows\system32\jscript9.dll
2015-02-11 08:29:22 ----A---- C:\windows\system32\sspisrv.dll
2015-02-11 08:29:22 ----A---- C:\windows\system32\sspicli.dll
2015-02-11 08:29:22 ----A---- C:\windows\system32\secur32.dll
2015-02-11 08:29:22 ----A---- C:\windows\system32\msobjs.dll
2015-02-11 08:29:22 ----A---- C:\windows\system32\msaudite.dll
2015-02-11 08:29:22 ----A---- C:\windows\system32\lsass.exe
2015-02-11 08:29:22 ----A---- C:\windows\system32\lsasrv.dll
2015-02-11 08:29:22 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2015-02-11 08:29:22 ----A---- C:\windows\system32\drivers\ksecdd.sys
2015-02-11 08:29:22 ----A---- C:\windows\system32\drivers\cng.sys
2015-02-11 08:29:22 ----A---- C:\windows\system32\auditpol.exe
2015-02-11 08:29:22 ----A---- C:\windows\system32\adtschema.dll
2015-02-11 08:28:39 ----A---- C:\windows\system32\win32k.sys
2015-02-11 08:28:03 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 08:28:03 ----A---- C:\windows\system32\ieetwproxystub.dll
2015-02-11 08:28:03 ----A---- C:\windows\system32\ieetwcollector.exe
2015-02-11 08:28:02 ----A---- C:\windows\system32\urlmon.dll
2015-02-11 08:28:02 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2015-02-11 08:28:02 ----A---- C:\windows\system32\jsproxy.dll
2015-02-11 08:28:02 ----A---- C:\windows\system32\iernonce.dll
2015-02-11 08:28:02 ----A---- C:\windows\system32\iedkcs32.dll
2015-02-11 08:28:02 ----A---- C:\windows\system32\ie4uinit.exe
2015-02-11 08:28:01 ----A---- C:\windows\system32\msfeeds.dll
2015-02-11 08:28:01 ----A---- C:\windows\system32\ieUnatt.exe
2015-02-11 08:28:01 ----A---- C:\windows\system32\ieapfltr.dll
2015-02-11 08:28:01 ----A---- C:\windows\system32\dxtmsft.dll
2015-02-11 08:27:59 ----A---- C:\windows\system32\wininet.dll
2015-02-11 08:27:59 ----A---- C:\windows\system32\msrating.dll
2015-02-11 08:27:59 ----A---- C:\windows\system32\iesetup.dll
2015-02-11 08:27:59 ----A---- C:\windows\system32\ieetwcollectorres.dll
2015-02-11 08:27:57 ----A---- C:\windows\system32\ieui.dll
2015-02-11 08:27:57 ----A---- C:\windows\system32\dxtrans.dll
2015-02-11 08:27:56 ----A---- C:\windows\system32\ieframe.dll
2015-02-11 08:27:50 ----A---- C:\windows\system32\mshtmled.dll
2015-02-11 08:27:49 ----A---- C:\windows\system32\mshtmlmedia.dll
2015-02-11 08:27:49 ----A---- C:\windows\system32\MshtmlDac.dll
2015-02-11 08:27:48 ----A---- C:\windows\system32\iertutil.dll
2015-02-11 08:27:47 ----A---- C:\windows\system32\mshtml.dll
2015-02-11 08:27:46 ----A---- C:\windows\system32\vbscript.dll
2015-02-11 08:27:33 ----A---- C:\windows\system32\appraiser.dll
2015-02-11 08:27:32 ----A---- C:\windows\system32\generaltel.dll
2015-02-11 08:27:31 ----A---- C:\windows\system32\invagent.dll
2015-02-11 08:27:31 ----A---- C:\windows\system32\aeinv.dll
2015-02-11 08:27:30 ----A---- C:\windows\system32\devinv.dll
2015-02-11 08:27:30 ----A---- C:\windows\system32\aitstatic.exe
2015-02-11 08:27:29 ----A---- C:\windows\system32\aepic.dll
2015-02-11 08:27:29 ----A---- C:\windows\system32\aepdu.dll
2015-02-11 08:27:16 ----A---- C:\windows\system32\crypt32.dll
2015-02-11 08:27:06 ----A---- C:\windows\system32\ntoskrnl.exe
2015-02-11 08:27:06 ----A---- C:\windows\system32\ntkrnlpa.exe
2015-02-11 08:26:54 ----A---- C:\windows\system32\scesrv.dll
2015-02-11 08:26:17 ----A---- C:\windows\system32\oleaut32.dll
2015-02-11 08:26:13 ----A---- C:\windows\system32\schannel.dll
2015-02-11 08:26:12 ----A---- C:\windows\system32\wdigest.dll
2015-02-11 08:26:12 ----A---- C:\windows\system32\TSpkg.dll
2015-02-11 08:26:12 ----A---- C:\windows\system32\ncrypt.dll
2015-02-11 08:26:12 ----A---- C:\windows\system32\msv1_0.dll
2015-02-11 08:26:12 ----A---- C:\windows\system32\kerberos.dll
2015-02-11 08:26:11 ----A---- C:\windows\system32\credssp.dll
2015-02-11 08:26:04 ----A---- C:\windows\system32\WindowsCodecs.dll
2015-02-10 16:46:27 ----A---- C:\windows\system32\drivers\{aa2c8716-4fb1-4542-ac48-779c1c32a2a8}Gw.sys
2015-02-10 16:04:34 ----D---- C:\Program Files\surf slide
2015-02-10 16:04:09 ----D---- C:\ProgramData\IHProtectUpDate
2015-02-10 16:03:29 ----D---- C:\Program Files\XTab
2015-02-10 15:48:27 ----D---- C:\ProgramData\Apple
2015-02-09 09:47:31 ----D---- C:\windows\system32\siscardplugins
2015-01-26 09:26:26 ----A---- C:\windows\system32\FlashPlayerApp.exe
2015-01-24 16:55:50 ----A---- C:\windows\system32\javaw.exe
2015-01-24 16:55:50 ----A---- C:\windows\system32\java.exe

======List of files/folders modified in the last 1 month======

2015-02-20 14:48:55 ----D---- C:\Program Files\Trend Micro
2015-02-20 14:48:45 ----D---- C:\windows\Temp
2015-02-20 14:03:07 ----D---- C:\windows\system32\config
2015-02-20 11:00:11 ----D---- C:\windows\system32\FxsTmp
2015-02-20 10:11:02 ----D---- C:\Program Files\Emsisoft Anti-Malware
2015-02-20 09:42:21 ----SHD---- C:\System Volume Information
2015-02-20 09:39:13 ----SHD---- C:\windows\Installer
2015-02-20 09:39:12 ----SHD---- C:\Config.Msi
2015-02-20 09:39:12 ----D---- C:\Program Files\Common Files
2015-02-20 09:39:01 ----D---- C:\Program Files\Java
2015-02-20 09:38:40 ----D---- C:\windows\System32
2015-02-20 09:18:44 ----D---- C:\windows\Tasks
2015-02-20 09:18:44 ----D---- C:\windows\system32\wfp
2015-02-20 09:18:40 ----D---- C:\windows\system32\wbem
2015-02-20 09:18:40 ----D---- C:\Windows
2015-02-20 09:17:40 ----D---- C:\windows\system32\Tasks
2015-02-20 09:17:40 ----D---- C:\windows\system32\DriverStore
2015-02-20 09:17:40 ----D---- C:\windows\system32\catroot2
2015-02-20 09:17:37 ----D---- C:\ProgramData\Norton
2015-02-20 09:17:26 ----D---- C:\windows\registration
2015-02-20 09:17:15 ----HD---- C:\ProgramData
2015-02-20 09:17:14 ----RD---- C:\Program Files
2015-02-19 18:24:45 ----D---- C:\windows\system32\catroot
2015-02-19 17:21:16 ----D---- C:\windows\inf
2015-02-19 17:20:39 ----D---- C:\drivers
2015-02-19 16:08:13 ----D---- C:\windows\rescache
2015-02-19 08:43:47 ----D---- C:\AdwCleaner
2015-02-17 17:09:12 ----D---- C:\Users\jonas\AppData\Roaming\Skype
2015-02-14 17:54:33 ----D---- C:\windows\debug
2015-02-12 08:09:10 ----D---- C:\windows\winsxs
2015-02-12 08:05:37 ----D---- C:\windows\tracing
2015-02-12 07:43:30 ----D---- C:\windows\system32\en-US
2015-02-11 08:48:37 ----D---- C:\windows\system32\nl-NL
2015-02-11 08:48:37 ----D---- C:\windows\system32\drivers
2015-02-11 08:48:35 ----SD---- C:\windows\system32\CompatTel
2015-02-11 08:48:33 ----D---- C:\windows\system32\appraiser
2015-02-11 08:48:25 ----D---- C:\Program Files\Internet Explorer
2015-02-11 08:46:18 ----D---- C:\windows\system32\MRT
2015-02-11 08:40:19 ----A---- C:\windows\system32\MRT.exe
2015-02-11 08:37:48 ----D---- C:\Program Files\Microsoft Security Client
2015-02-10 17:31:06 ----D---- C:\Program Files\Samsung
2015-02-10 16:46:41 ----A---- C:\windows\win.ini
2015-02-10 15:27:49 ----D---- C:\Program Files\Google
2015-02-10 15:24:21 ----D---- C:\ProgramData\Oracle
2015-02-09 14:56:28 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2015-02-01 08:28:39 ----D---- C:\windows\system32\NDF
2015-02-01 07:24:05 ----D---- C:\Users\jonas\AppData\Roaming\Mozilla
2015-01-28 15:50:17 ----D---- C:\Program Files\NortonInstaller
2015-01-26 09:16:50 ----D---- C:\ProgramData\Adobe
2015-01-24 16:54:25 ----A---- C:\windows\system32\javaws.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-10-13 331288]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2014-11-15 239224]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 {aa2c8716-4fb1-4542-ac48-779c1c32a2a8}Gw;{aa2c8716-4fb1-4542-ac48-779c1c32a2a8}Gw; C:\windows\system32\drivers\{aa2c8716-4fb1-4542-ac48-779c1c32a2a8}Gw.sys [2015-02-09 43152]
R1 A2DDA;A2 Direct Disk Access Support Driver; \??\C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [2013-03-28 22056]
R1 ccSet_MCLIENT;Norton Management Settings Manager; C:\windows\system32\drivers\MCLIENT\0302020.00C\ccSetx86.sys [2012-10-04 134304]
R1 ccSet_NST;Norton Identity Safe Settings Manager; C:\windows\system32\drivers\NST\7DE07080.017\ccSetx86.sys [2013-09-27 127064]
R1 MpKsl687413de;MpKsl687413de; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C73FD719-BF5D-41F0-B991-E9256FA8F4DA}\MpKsl687413de.sys [2015-02-20 39464]
R1 qtsmon;qtsmon; C:\windows\System32\drivers\qtsmon.sys [2010-12-05 72488]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2009-05-28 10752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 a2acc;a2acc; \??\C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [2014-05-22 58200]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2014-03-11 3211264]
R3 cleanhlp;cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [2013-12-07 50200]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2013-12-09 9037312]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2014-06-16 3017112]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\windows\system32\drivers\IntcHdmi.sys [2009-07-10 122880]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 EMVSCARD;EMVSCARD; C:\windows\System32\Drivers\EMVSCARD.sys [2006-12-19 20736]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2012-09-12 49664]
S3 hxctlflt;hxctlflt; C:\windows\System32\Drivers\hxctlflt.sys [2009-02-08 99968]
S3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 95408]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\windows\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\windows\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 SNP2UVC;Hercules Webcam; C:\windows\system32\DRIVERS\snp2uvc.sys [2009-04-22 3482112]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 upperdev;upperdev; C:\windows\system32\DRIVERS\usbser_lowerflt.sys [2011-08-17 8192]
S3 usbscan;Stuurprogramma voor USB-scanner; C:\windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 usbser;USB Modem Driver; C:\windows\system32\drivers\usbser.sys [2013-08-29 28160]
S3 UsbserFilt;UsbserFilt; C:\windows\system32\DRIVERS\usbser_lowerfltj.sys [2011-08-17 8192]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb-stuurprogramma; C:\windows\system32\drivers\WinUSB.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 a2AntiMalware;Emsisoft Anti-Malware 7.0 - Service; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [2015-02-12 4920104]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2007-12-17 143872]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 IHProtect Service;IHProtect Service; C:\Program Files\XTab\ProtectService.exe [2015-01-16 158896]
R2 MCLIENT;Norton Management; C:\Program Files\Norton Management\Engine\3.2.2.12\ccSvcHst.exe [2012-12-05 143928]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 22184]
R2 NCO;Norton Identity Safe; C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe [2014-09-20 130104]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 gupdate;Google Updateservice (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-16 107912]
S2 OberonGameConsoleService;Oberon Media Game Console service; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [2009-08-13 44312]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-16 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-01-12 102912]
S3 MatSvc;@%ProgramFiles%\Microsoft Fix it Center\MatsRes.dll,-9000; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [2011-06-13 267568]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 284472]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-12-01 1343400]
S4 aspnet_state;ASP.NET-statusservice; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-11 45744]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------