Logfile of random's system information tool 1.10 (written by random/random)
Run by Tijger at 2015-02-26 11:53:20
Microsoft Windows 7 Home Premium  Service Pack 1
System drive C: has 58 GB (48%) free of 122 GB
Total RAM: 8157 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:54:07, on 26-2-2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.23\trustedadssvc.exe
C:\Windows\SysWOW64\Ctxfihlp.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 8\RealTimeProtector.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Tijger.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: PrivDogExtension - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.23\trustedads.dll
O4 - HKLM\..\Run: [AdobeCEPServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PrivDogService] "C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.23\trustedadssvc.exe"
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.23\trustedads.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions Inc. - C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: GeekBuddyRSP Service (GeekBuddyRSP) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HitmanPro.Alert Service (hmpalertsvc) - SurfRight B.V. - C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Privacy Content Firewall - AdTrustMedia - C:\Program Files\AdTrustMedia\PrivDog\3.0.105.0\PrivDogService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11186 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe"
"C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe" /service
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe" 
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" 
"C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.23\trustedadssvc.exe" 
"C:\Windows\System32\Ctxfihlp.exe" 
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -service
"C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe"
"C:\Program Files\AdTrustMedia\PrivDog\3.0.105.0\PrivDogService.exe"
"C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe" -Embedding
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
WLIDSvcM.exe 3956
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\SysWOW64\CTXFISPI.EXE" -Embedding
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe" 
"C:\Program Files (x86)\IObit\Advanced SystemCare 8\RealTimeProtector.exe" /RunCurUs
"C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe" /DisableUI
C:\Windows\System32\svchost.exe -k secsvcs

taskeng.exe {FEB50371-7ABB-44C6-9C1D-9B5A78A4BBA0}
taskeng.exe {78F48CF6-D275-4426-8E05-94A0F5ABBBA4}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" 
C:\Windows\servicing\TrustedInstaller.exe
"E:\downloads\RSITx64.exe" 
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c 
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler 

=========Mozilla firefox=========

ProfilePath - C:\Users\Tijger\AppData\Roaming\Mozilla\Firefox\Profiles\7s1t9qqb.default

prefs.js - "browser.search.suggest.enabled" -  false
prefs.js - "browser.search.useDBForOrder" -  true
prefs.js - "browser.startup.homepage" -  "https://www.google.nl/"
prefs.js - "keyword.URL" -  "http://nl.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=114576&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll


C:\Users\Tijger\AppData\Roaming\Mozilla\Firefox\Profiles\7s1t9qqb.default\extensions\
iobitascsurfingprotection@iobit.com
searchads@instair.net

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-02-10 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-02-25 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB16E5C3-A9E2-47A2-8EFC-319E775E62CC}]
PrivDog Extension - C:\Program Files\AdTrustMedia\PrivDog\2.1.0.23\trustedads.dll [2014-04-29 1088168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-24 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-02-25 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2015-02-26 669984]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-24 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB16E5C3-A9E2-47A2-8EFC-319E775E62CC}]
PrivDog Extension - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.23\trustedads.dll [2014-04-29 932520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-02-11 1297624]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-09-25 472984]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 8"=C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2015-02-26 2428704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Creative Cloud]
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2013-10-17 2237328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 6]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 7]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
c:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-31 43816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CreativeTaskScheduler]
C:\Program Files (x86)\Creative\Shared Files\CTSched.exe [2015-02-11 53341]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTxfiHlp]
CTXFIHLP.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gbrspcontrol]
C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2013-04-17 1851088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-09-01 152392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-10-14 2793304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Optimizer Pro]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrivDogService]
C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedadssvc.exe [2013-11-15 525480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-08-30 766208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [1999-11-04 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~3\Office\OSA9.EXE [1999-02-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Start GeekBuddy.lnk]
C:\PROGRA~2\Comodo\GEEKBU~1\launcher.exe [2013-04-17 49352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tijger^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Magician.lnk]
C:\PROGRA~2\SAMSUN~1\SAMSUN~1.EXE [2013-08-14 4351392]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AdobeCEPServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [2013-06-05 1039240]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]
""= []
"PrivDogService"=C:\Program Files (x86)\AdTrustMedia\PrivDog\2.1.0.23\trustedadssvc.exe [2014-04-29 663208]
"CTxfiHlp"=CTXFIHLP.EXE []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-02-25 5227112]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"MSVideo"=vfwwdm32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-02-26 11:53:34 ----D---- C:\Program Files\trend micro
2015-02-26 11:53:20 ----D---- C:\rsit
2015-02-26 11:37:34 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-02-25 23:50:40 ----D---- C:\Users\Tijger\AppData\Roaming\AVAST Software
2015-02-25 23:50:11 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2015-02-25 23:50:11 ----A---- C:\Windows\system32\drivers\aswStm.sys
2015-02-25 23:50:11 ----A---- C:\Windows\system32\drivers\aswSP.sys
2015-02-25 23:50:10 ----A---- C:\Windows\system32\drivers\aswsnx.sys
2015-02-25 23:50:10 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2015-02-25 23:50:10 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2015-02-25 23:50:10 ----A---- C:\Windows\system32\drivers\aswmonflt.sys
2015-02-25 23:50:10 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2015-02-25 23:50:10 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2015-02-25 23:50:04 ----A---- C:\Windows\system32\aswBoot.exe
2015-02-25 23:50:02 ----A---- C:\Windows\avastSS.scr
2015-02-25 23:50:00 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2015-02-25 23:49:31 ----D---- C:\Program Files\AVAST Software
2015-02-25 23:38:48 ----SD---- C:\Windows\SYSWOW64\Microsoft
2015-02-20 20:41:13 ----D---- C:\Program Files (x86)\SABnzbd
2015-02-11 22:39:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-02-11 22:39:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-11 22:39:29 ----A---- C:\Windows\system32\jscript9diag.dll
2015-02-11 22:39:29 ----A---- C:\Windows\system32\jscript9.dll
2015-02-11 20:03:54 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-02-11 20:03:54 ----A---- C:\Windows\system32\wdi.dll
2015-02-11 20:03:54 ----A---- C:\Windows\system32\powertracker.dll
2015-02-11 20:03:54 ----A---- C:\Windows\system32\perftrack.dll
2015-02-11 12:55:47 ----D---- C:\Program Files (x86)\Opera
2015-02-11 00:47:45 ----D---- C:\Program Files (x86)\Wondershare
2015-02-11 00:27:22 ----D---- C:\Program Files (x86)\MSECache
2015-02-10 23:56:36 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-02-10 23:56:36 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-02-10 23:56:36 ----A---- C:\Windows\system32\schannel.dll
2015-02-10 23:56:36 ----A---- C:\Windows\system32\kerberos.dll
2015-02-10 23:56:35 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-02-10 23:56:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-02-10 23:56:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-02-10 23:56:35 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-02-10 23:56:35 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-02-10 23:56:35 ----A---- C:\Windows\system32\wdigest.dll
2015-02-10 23:56:35 ----A---- C:\Windows\system32\TSpkg.dll
2015-02-10 23:56:35 ----A---- C:\Windows\system32\ncrypt.dll
2015-02-10 23:56:35 ----A---- C:\Windows\system32\msv1_0.dll
2015-02-10 23:56:35 ----A---- C:\Windows\system32\credssp.dll
2015-02-10 23:56:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-02-10 23:56:31 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-02-10 23:56:31 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-02-10 23:56:31 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-02-10 23:56:31 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-02-10 23:56:31 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-02-10 23:56:30 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-10 23:56:30 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-10 23:56:30 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-10 23:56:30 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-02-10 23:56:30 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-10 23:56:30 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-02-10 23:56:30 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-10 23:56:30 ----A---- C:\Windows\system32\iernonce.dll
2015-02-10 23:56:30 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-10 23:56:29 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-02-10 23:56:29 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-10 23:56:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-02-10 23:56:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-02-10 23:56:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-02-10 23:56:28 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-10 23:56:28 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-10 23:56:28 ----A---- C:\Windows\system32\urlmon.dll
2015-02-10 23:56:28 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-10 23:56:28 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-02-10 23:56:28 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-10 23:56:28 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-10 23:56:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-10 23:56:27 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-10 23:56:27 ----A---- C:\Windows\system32\iesetup.dll
2015-02-10 23:56:27 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-10 23:56:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-10 23:56:26 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-10 23:56:26 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-02-10 23:56:26 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-10 23:56:26 ----A---- C:\Windows\system32\iertutil.dll
2015-02-10 23:56:25 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-02-10 23:56:25 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-10 23:56:25 ----A---- C:\Windows\system32\ieui.dll
2015-02-10 23:56:25 ----A---- C:\Windows\system32\ieframe.dll
2015-02-10 23:56:25 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-10 23:56:24 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-02-10 23:56:24 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-10 23:56:23 ----A---- C:\Windows\system32\wininet.dll
2015-02-10 23:56:23 ----A---- C:\Windows\system32\vbscript.dll
2015-02-10 23:56:23 ----A---- C:\Windows\system32\msrating.dll
2015-02-10 23:56:23 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-02-10 23:56:22 ----A---- C:\Windows\system32\mshtml.dll
2015-02-10 23:56:09 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-10 23:56:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-10 23:56:07 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-02-10 23:56:07 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-10 23:56:07 ----A---- C:\Windows\system32\sspicli.dll
2015-02-10 23:56:07 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-10 23:56:07 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-10 23:56:07 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-10 23:56:07 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-10 23:56:07 ----A---- C:\Windows\system32\auditpol.exe
2015-02-10 23:56:07 ----A---- C:\Windows\system32\adtschema.dll
2015-02-10 23:56:06 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-02-10 23:56:06 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-02-10 23:56:06 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-02-10 23:56:06 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-10 23:56:06 ----A---- C:\Windows\system32\sspisrv.dll
2015-02-10 23:56:06 ----A---- C:\Windows\system32\secur32.dll
2015-02-10 23:56:06 ----A---- C:\Windows\system32\msobjs.dll
2015-02-10 23:56:06 ----A---- C:\Windows\system32\msaudite.dll
2015-02-10 23:56:06 ----A---- C:\Windows\system32\lsass.exe
2015-02-10 23:56:04 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-02-10 23:56:04 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-10 23:55:55 ----A---- C:\Windows\system32\scesrv.dll
2015-02-10 23:55:54 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-10 23:55:53 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-02-10 23:55:53 ----A---- C:\Windows\system32\crypt32.dll
2015-02-10 23:55:43 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-10 23:55:42 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-02-10 23:55:42 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-02-10 23:55:42 ----A---- C:\Windows\system32\srcore.dll
2015-02-10 23:55:42 ----A---- C:\Windows\system32\rstrui.exe
2015-02-10 23:55:41 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-02-10 23:55:41 ----A---- C:\Windows\system32\srclient.dll
2015-02-10 23:55:34 ----A---- C:\Windows\system32\win32k.sys
2015-02-05 13:31:01 ----D---- C:\Program Files (x86)\Audacity

======List of files/folders modified in the last 1 month======

2015-02-26 11:54:03 ----D---- C:\Windows\Temp
2015-02-26 11:53:34 ----D---- C:\Program Files
2015-02-26 11:51:40 ----D---- C:\Windows\system32\config
2015-02-26 11:51:36 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-26 11:39:19 ----D---- C:\Windows\System32
2015-02-26 11:39:19 ----D---- C:\Windows\inf
2015-02-26 11:39:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-02-26 11:37:37 ----D---- C:\Windows\system32\catroot2
2015-02-26 11:37:34 ----RD---- C:\Program Files (x86)
2015-02-26 11:34:28 ----D---- C:\Users\Tijger\AppData\Roaming\AdTrustMedia
2015-02-26 11:34:27 ----D---- C:\ProgramData\Adtrustmedia
2015-02-26 11:34:19 ----D---- C:\Windows
2015-02-26 11:32:51 ----SHD---- C:\System Volume Information
2015-02-26 11:32:04 ----D---- C:\Windows\system32\Tasks
2015-02-26 11:23:13 ----D---- C:\Program Files (x86)\IObit
2015-02-26 11:18:40 ----D---- C:\Users\Tijger\AppData\Roaming\Thunderbird
2015-02-26 09:38:13 ----D---- C:\Windows\system32\drivers
2015-02-26 09:38:13 ----D---- C:\Windows\Speech
2015-02-26 09:31:28 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-25 23:50:29 ----D---- C:\Windows\system32\DriverStore
2015-02-25 23:49:31 ----D---- C:\ProgramData\AVAST Software
2015-02-25 23:42:54 ----D---- C:\Windows\SoftwareDistribution
2015-02-25 23:38:48 ----D---- C:\Windows\SysWOW64
2015-02-25 22:46:57 ----D---- C:\Windows\system32\NDF
2015-02-25 22:40:03 ----D---- C:\Users\Tijger\AppData\Roaming\HpUpdate
2015-02-25 22:39:57 ----D---- C:\ProgramData\Mozilla
2015-02-25 22:30:01 ----D---- C:\Program Files (x86)\Creative
2015-02-25 22:26:20 ----D---- C:\Users\Tijger\AppData\Roaming\Creative
2015-02-25 22:25:09 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-02-25 17:57:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-02-25 17:57:03 ----RD---- C:\Users
2015-02-25 17:54:07 ----D---- C:\Windows\Downloaded Program Files
2015-02-25 15:03:41 ----D---- C:\Windows\winsxs
2015-02-24 23:35:10 ----D---- C:\ProgramData\ProductData
2015-02-24 10:04:23 ----SHD---- C:\Windows\Installer
2015-02-13 11:24:32 ----D---- C:\Windows\rescache
2015-02-12 21:41:13 ----D---- C:\Users\Tijger\AppData\Roaming\Easy Watermark Studio Lite
2015-02-11 23:26:00 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-11 23:26:00 ----D---- C:\Windows\system32\en-US
2015-02-11 20:11:01 ----D---- C:\Windows\tracing
2015-02-11 16:28:38 ----D---- C:\ProgramData\Creative
2015-02-11 16:21:24 ----D---- C:\Program Files\Creative
2015-02-11 16:21:12 ----HD---- C:\Program Files (x86)\Creative Installation Information
2015-02-11 16:21:05 ----D---- C:\Program Files (x86)\Common Files
2015-02-11 16:20:19 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2015-02-11 16:20:19 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2015-02-11 16:20:19 ----A---- C:\Windows\system32\wrap_oal.dll
2015-02-11 16:20:19 ----A---- C:\Windows\system32\OpenAL32.dll
2015-02-11 16:20:08 ----A---- C:\Windows\SYSWOW64\cttele32.dll
2015-02-11 16:20:08 ----A---- C:\Windows\system32\cttele64.dll
2015-02-11 16:14:43 ----D---- C:\Windows\debug
2015-02-11 10:10:25 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-02-11 09:28:57 ----HD---- C:\ProgramData
2015-02-11 09:27:46 ----D---- C:\Program Files (x86)\Microsoft Office
2015-02-11 00:28:15 ----SD---- C:\Users\Tijger\AppData\Roaming\Microsoft
2015-02-11 00:01:41 ----D---- C:\Windows\SYSWOW64\nl-NL
2015-02-11 00:01:41 ----D---- C:\Windows\system32\nl-NL
2015-02-11 00:01:41 ----D---- C:\Program Files\Internet Explorer
2015-02-11 00:01:41 ----D---- C:\Program Files (x86)\Internet Explorer
2015-02-11 00:01:30 ----D---- C:\ProgramData\Package Cache
2015-02-10 23:57:27 ----D---- C:\Windows\system32\MRT
2015-02-10 23:57:23 ----D---- C:\Windows\Tasks
2015-02-10 23:57:03 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2015-02-10 23:54:34 ----A---- C:\Windows\system32\MRT.exe
2015-02-10 23:52:45 ----D---- C:\Windows\system32\wbem
2015-02-10 23:52:20 ----D---- C:\Windows\system32\wfp
2015-02-10 23:52:18 ----D---- C:\Windows\system32\CodeIntegrity
2015-02-10 23:52:18 ----D---- C:\Windows\AppCompat
2015-02-10 23:52:18 ----D---- C:\Users\Tijger\AppData\Roaming\ProductData
2015-02-10 23:52:17 ----D---- C:\Users\Tijger\AppData\Roaming\IObit
2015-02-10 23:52:16 ----D---- C:\ProgramData\IObit
2015-02-10 23:52:14 ----D---- C:\Program Files (x86)\TSR Soft
2015-02-10 23:52:13 ----D---- C:\Program Files (x86)\HP
2015-02-10 23:52:13 ----D---- C:\Program Files (x86)\Easy Watermark Studio Lite
2015-02-10 23:52:09 ----D---- C:\Windows\registration
2015-01-31 15:59:59 ----D---- C:\ProgramData\DVD Shrink
2015-01-30 13:27:46 ----A---- C:\Windows\system32\cmdcsr.dll
2015-01-30 13:27:46 ----A---- C:\Windows\system32\cmdcsr(39).dll
2015-01-30 13:27:45 ----A---- C:\Windows\SYSWOW64\guard32.dll
2015-01-30 13:27:45 ----A---- C:\Windows\SYSWOW64\guard32(41).dll
2015-01-30 13:27:45 ----A---- C:\Windows\system32\guard64.dll
2015-01-30 13:27:45 ----A---- C:\Windows\system32\guard64(40).dll
2015-01-30 13:27:41 ----A---- C:\Windows\system32\cmdvrt64.dll
2015-01-30 13:27:39 ----A---- C:\Windows\system32\cmdkbd64.dll
2015-01-30 13:27:35 ----A---- C:\Windows\SYSWOW64\cmdvrt32.dll
2015-01-30 13:27:34 ----A---- C:\Windows\SYSWOW64\cmdkbd32.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 asahci64;asahci64; C:\Windows\system32\DRIVERS\asahci64.sys [2011-09-21 49760]
R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2015-02-25 449936]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-02-25 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-02-25 267632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2014-12-29 21184]
R1 admnfd;admnfd; \??\C:\Windows\system32\Drivers\admnfd.sys [2014-12-04 49496]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2015-02-25 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-02-25 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-02-25 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-02-25 436624]
R1 browserMon;browserMon; C:\Windows\system32\DRIVERS\browserMon.sys [2015-02-24 20728]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-01-30 20184]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2015-01-30 792648]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2015-01-30 45880]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2014-12-22 26528]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2015-01-30 104608]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-02-25 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-02-25 87912]
R2 hmpalert;HitmanPro.Alert Support Driver; \??\C:\Windows\system32\drivers\hmpalert.sys [2014-04-09 93144]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-08-31 12528640]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-08-30 618496]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-11-03 130536]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-11-03 395752]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-07-05 96256]
R3 CT20XUT.SYS;CT20XUT.SYS; C:\Windows\System32\drivers\CT20XUT.SYS [2014-03-01 205080]
R3 ctac32k;Creative AC3 Software Decoder; C:\Windows\system32\drivers\ctac32k.sys [2014-03-01 582936]
R3 ctaud2k;Creative Audio Driver (WDM); C:\Windows\system32\drivers\ctaud2k.sys [2014-03-01 689048]
R3 CTEXFIFX.SYS;CTEXFIFX.SYS; C:\Windows\System32\drivers\CTEXFIFX.SYS [2014-03-01 1419544]
R3 CTHWIUT.SYS;CTHWIUT.SYS; C:\Windows\System32\drivers\CTHWIUT.SYS [2014-03-01 97048]
R3 ctprxy2k;Creative Proxy Driver; C:\Windows\system32\drivers\ctprxy2k.sys [2014-03-01 18200]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\Windows\system32\drivers\ctsfm2k.sys [2014-03-01 215320]
R3 emupia;E-mu Plug-in Architecture Driver; C:\Windows\system32\drivers\emupia2k.sys [2014-03-01 120600]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 ha20x2k;Creative 20X HAL Driver; C:\Windows\system32\drivers\ha20x2k.sys [2014-03-01 1564440]
R3 LVPr2M64;Logitech LVPr2M64 Driver; C:\Windows\system32\DRIVERS\LVPr2M64.sys [2009-10-07 30232]
R3 ManyCam;ManyCam Virtual Webcam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [2012-10-11 44928]
R3 mcaudrv_simple;ManyCam Virtual Microphone; C:\Windows\system32\drivers\mcaudrv_x64.sys [2013-01-31 28160]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 ossrv;Creative OS Services Driver; C:\Windows\system32\drivers\ctoss2k.sys [2014-03-01 181528]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-02-03 677480]
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-02-25 116728]
S3 CT20XUT;CT20XUT; C:\Windows\system32\drivers\CT20XUT.SYS [2014-03-01 205080]
S3 CTEXFIFX;CTEXFIFX; C:\Windows\system32\drivers\CTEXFIFX.SYS [2014-03-01 1419544]
S3 CTHWIUT;CTHWIUT; C:\Windows\system32\drivers\CTHWIUT.SYS [2014-03-01 97048]
S3 LVPr2Mon;LVPr2M64 Driver; C:\Windows\system32\DRIVERS\LVPr2M64.sys [2009-10-07 30232]
S3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2009-10-07 327704]
S3 LVUVC64;Logitech QuickCam S7500(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2009-10-07 6379288]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2014-12-29 34848]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2014-12-29 23016]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-07-28 54784]
S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2014-12-29 23048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-25 81088]
R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [2015-02-26 815392]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-08-30 239616]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-08-28 43336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-02-25 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2015-02-25 104416]
R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CLPSLauncher;COMODO LPS Launcher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [2013-04-17 70344]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-02-11 7618952]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2015-02-11 286720]
R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-05-24 1840128]
R2 GeekBuddyRSP;GeekBuddyRSP Service; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2013-04-17 1851088]
R2 hmpalertsvc;HitmanPro.Alert Service; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [2014-04-09 1876816]
R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2014-12-29 344896]
R2 LVPrcS64;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 191000]
R2 Privacy Content Firewall;Privacy Content Firewall; C:\Program Files\AdTrustMedia\PrivDog\3.0.105.0\PrivDogService.exe [2015-02-24 2059392]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-10 116648]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-02-10 2724128]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-02-11 2265304]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2015-02-11 79360]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2011-04-26 2702848]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-10 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-10 114688]
S3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2014-09-01 640840]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-25 148080]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-20 1255736]
S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------