Logfile of random's system information tool 1.10 (written by random/random) Run by Ewoud at 2015-05-25 16:43:19 Microsoft Windows 8.1 System drive C: has 249 GB (54%) free of 465 GB Total RAM: 6028 MB (67% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:43:27, on 25/05/2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17416) Boot mode: Normal Running processes: C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe C:\Program Files (x86)\VideoLAN\VLC\vlc.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera_crashreporter.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe C:\Program Files\trend micro\Ewoud.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=nl-BE&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fwww.google.com&OSP=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3D%7BsearchTerms%7D R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: SaveNewaAppzz - {0645edd9-d279-4fdf-9b8b-4c4be2702370} - C:\Program Files (x86)\SaveNewaAppzz\4VJOJMy7YPe3Qo.dll O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: FUnn2SaVe - {8DE6B49E-B457-4E78-959F-A8D7B6C66F84} - C:\Program Files (x86)\FUnn2SaVe\2AmMkd53w2Il6B.dll O2 - BHO: DeigiSSaveoRa - {AD4602EE-425D-47B2-8328-FDB05F1E3BC0} - C:\Program Files (x86)\DeigiSSaveoRa\LGr42y1IsGb5kN.dll O2 - BHO: SpaccECCoouponApp - {c118175e-3c0b-4929-81fa-5fe07d082da4} - C:\Program Files (x86)\SpaccECCoouponApp\qcDQWHEHqfZcA6.dll O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL O2 - BHO: BitSAver - {fb8baab0-a54e-4319-827e-7ce231b6c85b} - C:\Program Files (x86)\BitSAver\PqerCe9dlBYe1x.dll O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Ewoud\AppData\Roaming\Spotify\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\WINDOWS\system32\mfevtps.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: TOSHIBA HDD Protection (Thpsrv) - Unknown owner - C:\windows\system32\ThpSrv.exe (file missing) O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing) O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Teco\TecoService.exe O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12676 bytes ======Listing Processes====== wininit.exe winlogon.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS "C:\WINDOWS\system32\nvvsvc.exe" "dwm.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\WINDOWS\system32\nvvsvc.exe -session -first C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork "C:\WINDOWS\system32\rundll32.exe" "c:\Program Files (x86)\RelayDefender\RelayDefender.dll",serv "C:\WINDOWS\system32\rundll32.exe" "c:\Program Files (x86)\RelayDefender\RelayDefender.dll",serv "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" C:\WINDOWS\System32\svchost.exe -k utcsvc dashost.exe {fe9e9ad1-8646-4773-80f34301acd6eb9d} "C:\WINDOWS\system32\rundll32.exe" "c:\Program Files (x86)\StormSaver\StormSaver.dll",serv "C:\WINDOWS\system32\rundll32.exe" "c:\Program Files (x86)\StormSaver\StormSaver.dll",serv "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe" "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" "C:\WINDOWS\system32\mfevtps.exe" "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" C:\windows\system32\ThpSrv.exe C:\Windows\system32\TODDSrv.exe "C:\Program Files\TOSHIBA\Teco\TecoService.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 1aa4e941-8159-43a6-988b-2cd7d840cf6d 1 \??\C:\WINDOWS\system32\conhost.exe 0x4 taskhostex.exe C:\WINDOWS\Explorer.EXE "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\system32\SearchIndexer.exe /Embedding C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet C:\Windows\System32\skydrive.exe -Embedding "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe" /f="C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_PS3D.zip" /h "C:\Program Files\TOSHIBA\Teco\TecoResident.exe" "C:\Windows\System32\SettingSyncHost.exe" -Embedding "C:\Windows\System32\igfxtray.exe" "C:\WINDOWS\system32\igfxsrvc.exe" -Embedding "C:\Windows\System32\hkcmd.exe" "C:\Windows\System32\igfxpers.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Windows\System32\StikyNot.exe" "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\Nero\Update\NASvc.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe" "C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe" "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "C:\Users\Ewoud\Desktop\Ewoud\Muziek\Anne Lee - Two Times Lyrics.mp3" C:\WINDOWS\system32\DllHost.exe /Processid:{3AD05575-8857-4850-9277-11B85BDB8E09} "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --ran-launcher "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --ran-launcher /crash-reporter-parent-id=5556 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=gpu-process --channel="5556.0.1165038460\694645314" --enable-proprietary-media-types-playback --crash-reporter-pid=6612 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,20,43 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3345 --enable-proprietary-media-types-playback --crash-reporter-pid=6612 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --crash-reporter-pid=6612 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5556 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5556.2.409903894\1736769419" /prefetch:673131151 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=6612 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5556 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5556.3.1839271453\74284985" /prefetch:673131151 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=6612 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5556 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5556.4.973101795\2134737830" /prefetch:673131151 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=6612 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5556 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5556.5.911359177\373206646" /prefetch:673131151 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=6612 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5556 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5556.6.550756318\376133773" /prefetch:673131151 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=6612 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5556 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5556.7.1684249233\1966045908" /prefetch:673131151 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --crash-reporter-pid=6612 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5556 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5556.8.2063929735\2063625468" /prefetch:673131151 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=plugin --plugin-path="C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll" --disable-direct-npapi-requests --lang=nl --channel="5556.10.966375040\1529592677" --enable-proprietary-media-types-playback --crash-reporter-pid=6612 /prefetch:-390060480 "C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --crash-reporter-pid=6612 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5556 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5556.11.569947903\42281460" /prefetch:673131151 "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe23_ Global\UsGthrCtrlFltPipeMssGthrPipe23 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\WINDOWS\system32\SearchFilterHost.exe" 0 572 576 584 65536 580 "C:\Users\Ewoud\Desktop\RSITx64.exe" ======Scheduled tasks folder====== C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-61257816-1822129765-3410232597-1002Core1cf276852005880.job - C:\Users\Ewoud\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0645edd9-d279-4fdf-9b8b-4c4be2702370}] SaveNewaAppzz - C:\Program Files (x86)\SaveNewaAppzz\4VJOJMy7YPe3Qo.x64.dll [2015-04-19 909312] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31 219296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8DE6B49E-B457-4E78-959F-A8D7B6C66F84}] FUnn2SaVe - C:\Program Files (x86)\FUnn2SaVe\2AmMkd53w2Il6B.x64.dll [2015-05-21 891904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AD4602EE-425D-47B2-8328-FDB05F1E3BC0}] DeigiSSaveoRa - C:\Program Files (x86)\DeigiSSaveoRa\LGr42y1IsGb5kN.x64.dll [2015-05-21 891904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c118175e-3c0b-4929-81fa-5fe07d082da4}] SpaccECCoouponApp - C:\Program Files (x86)\SpaccECCoouponApp\qcDQWHEHqfZcA6.x64.dll [2015-04-12 908288] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2015-04-14 2334936] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fb8baab0-a54e-4319-827e-7ce231b6c85b}] BitSAver - C:\Program Files (x86)\BitSAver\PqerCe9dlBYe1x.x64.dll [2015-04-19 909312] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0645edd9-d279-4fdf-9b8b-4c4be2702370}] SaveNewaAppzz - C:\Program Files (x86)\SaveNewaAppzz\4VJOJMy7YPe3Qo.dll [2015-04-19 838144] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31 153760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8DE6B49E-B457-4E78-959F-A8D7B6C66F84}] FUnn2SaVe - C:\Program Files (x86)\FUnn2SaVe\2AmMkd53w2Il6B.dll [2015-05-21 822272] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AD4602EE-425D-47B2-8328-FDB05F1E3BC0}] DeigiSSaveoRa - C:\Program Files (x86)\DeigiSSaveoRa\LGr42y1IsGb5kN.dll [2015-05-21 822272] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c118175e-3c0b-4929-81fa-5fe07d082da4}] SpaccECCoouponApp - C:\Program Files (x86)\SpaccECCoouponApp\qcDQWHEHqfZcA6.dll [2015-04-12 835584] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2015-04-14 1729752] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fb8baab0-a54e-4319-827e-7ce231b6c85b}] BitSAver - C:\Program Files (x86)\BitSAver\PqerCe9dlBYe1x.dll [2015-04-19 838144] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-12-10 13261456] "SRS Premium Sound 3D"=C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2012-10-22 2172816] "TCrdMain"=C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2012-08-31 2609064] "TecoResident"=C:\Program Files\TOSHIBA\Teco\TecoResident.exe [2012-08-14 169896] "TSleepSrv"=C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [2012-08-05 1548952] "TODDMain"=C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [2012-08-05 213136] "TosWaitSrv"=C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [2012-07-11 356776] "ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2015-05-01 1570672] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-05-01 2685072] "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-11-04 391128] "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-11-04 771032] "Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-11-04 770008] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-28 2774256] "InstallerLauncher"=C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe /run:C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe [] "Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"=C:\Users\Ewoud\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-04-26 2020920] "RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2014-10-29 479744] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-08-02 155488] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=" ,C:\WINDOWS\system32\nvinitx.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2013-11-04 623616] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsScanner] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "EnableLinkedConnections"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "VIDC.YUY2"=msyuv.dll "vidc.i420"=iyuv_32.dll "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "VIDC.YVYU"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "VIDC.UYVY"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.msvc"=msvidc32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2015-05-25 16:43:19 ----D---- C:\rsit 2015-05-21 17:52:07 ----D---- C:\Program Files (x86)\New Tab Clock 2015-05-21 17:51:42 ----D---- C:\Program Files (x86)\DeigiSSaveoRa 2015-05-21 17:51:31 ----D---- C:\Program Files (x86)\FUnn2SaVe 2015-05-21 17:51:22 ----D---- C:\Program Files (x86)\RandomPricee 2015-05-15 08:46:46 ----D---- C:\WINDOWS\SYSWOW64\NV 2015-05-15 08:46:46 ----D---- C:\WINDOWS\system32\NV 2015-05-14 19:34:17 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-05-14 19:34:17 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-05-14 11:01:13 ----D---- C:\Program Files\Defraggler 2015-05-14 10:54:13 ----A---- C:\WINDOWS\system32\nvdispgenco6435012.dll 2015-05-14 10:54:13 ----A---- C:\WINDOWS\system32\nvdispco6435012.dll 2015-05-14 10:54:13 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys 2015-05-14 10:54:13 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys 2015-05-14 10:54:12 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\nvopencl.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\nvoglv64.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\nvoglshim64.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\NvIFR64.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\NvFBC64.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\nvd3dumx.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\nvcuvid.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\nvcuda.dll 2015-05-14 10:54:12 ----A---- C:\WINDOWS\system32\nvcompiler.dll 2015-05-14 10:54:11 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll 2015-05-14 10:54:11 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll 2015-05-13 10:55:35 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS 2015-05-13 10:55:03 ----A---- C:\WINDOWS\system32\dwmcore.dll 2015-05-13 10:55:02 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll 2015-05-13 10:54:59 ----AC---- C:\WINDOWS\system32\drivers\bthhfenum.sys 2015-05-13 10:54:24 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll 2015-05-13 10:54:24 ----A---- C:\WINDOWS\system32\schannel.dll 2015-05-13 10:54:22 ----A---- C:\WINDOWS\system32\drivers\ahcache.sys 2015-05-13 10:54:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll 2015-05-13 10:54:21 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2015-05-13 10:54:20 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll 2015-05-13 10:53:34 ----A---- C:\WINDOWS\system32\mshtml.dll 2015-05-13 10:53:30 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2015-05-13 10:53:23 ----A---- C:\WINDOWS\system32\ieframe.dll 2015-05-13 10:53:19 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll 2015-05-13 10:53:16 ----A---- C:\WINDOWS\system32\jscript9.dll 2015-05-13 10:53:13 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll 2015-05-13 10:53:12 ----A---- C:\WINDOWS\system32\wininet.dll 2015-05-13 10:53:11 ----A---- C:\WINDOWS\system32\iertutil.dll 2015-05-13 10:53:10 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll 2015-05-13 10:53:09 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll 2015-05-13 10:53:08 ----A---- C:\WINDOWS\system32\urlmon.dll 2015-05-13 10:53:07 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll 2015-05-13 10:53:06 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll 2015-05-13 10:53:06 ----A---- C:\WINDOWS\system32\jscript.dll 2015-05-13 10:53:05 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll 2015-05-13 10:53:05 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll 2015-05-13 10:53:05 ----A---- C:\WINDOWS\system32\vbscript.dll 2015-05-13 10:53:03 ----A---- C:\WINDOWS\system32\msfeeds.dll 2015-05-13 10:53:03 ----A---- C:\WINDOWS\system32\ie4uinit.exe 2015-05-13 10:53:02 ----A---- C:\WINDOWS\system32\mshtmled.dll 2015-05-13 10:52:59 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll 2015-05-13 10:52:58 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll 2015-05-13 10:52:58 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll 2015-05-13 10:52:57 ----A---- C:\WINDOWS\system32\ieui.dll 2015-05-13 10:52:56 ----A---- C:\WINDOWS\system32\dxtrans.dll 2015-05-13 10:52:55 ----A---- C:\WINDOWS\system32\inseng.dll 2015-05-13 10:52:54 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll 2015-05-13 10:52:54 ----A---- C:\WINDOWS\system32\webcheck.dll 2015-05-13 10:52:54 ----A---- C:\WINDOWS\system32\iepeers.dll 2015-05-13 10:52:54 ----A---- C:\WINDOWS\system32\iedkcs32.dll 2015-05-13 10:52:53 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll 2015-05-13 10:52:52 ----A---- C:\WINDOWS\system32\inetcomm.dll 2015-05-13 10:52:51 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll 2015-05-13 10:52:51 ----A---- C:\WINDOWS\system32\ieapfltr.dll 2015-05-13 10:52:49 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll 2015-05-13 10:51:01 ----A---- C:\WINDOWS\system32\UtcResources.dll 2015-05-13 10:51:00 ----A---- C:\WINDOWS\system32\diagtrack.dll 2015-05-13 10:49:48 ----A---- C:\WINDOWS\system32\drivers\cng.sys 2015-05-13 10:49:47 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll 2015-05-13 10:49:47 ----A---- C:\WINDOWS\system32\lsasrv.dll 2015-05-13 10:49:47 ----A---- C:\WINDOWS\system32\certcli.dll 2015-05-13 10:49:38 ----A---- C:\WINDOWS\SYSWOW64\sdbinst.exe 2015-05-13 10:49:38 ----A---- C:\WINDOWS\system32\sdbinst.exe 2015-05-13 10:49:17 ----A---- C:\WINDOWS\system32\wevtsvc.dll 2015-05-13 10:49:11 ----AC---- C:\WINDOWS\system32\drivers\sdbus.sys 2015-05-13 10:49:11 ----AC---- C:\WINDOWS\system32\drivers\dumpsd.sys 2015-05-13 10:49:11 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll 2015-05-13 10:49:11 ----A---- C:\WINDOWS\system32\SRH.dll 2015-05-13 10:49:09 ----A---- C:\WINDOWS\system32\dbgeng.dll 2015-05-13 10:49:08 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll 2015-05-13 10:49:08 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll 2015-05-13 10:49:08 ----A---- C:\WINDOWS\system32\dbghelp.dll 2015-05-13 10:48:58 ----A---- C:\WINDOWS\system32\services.exe 2015-05-13 10:48:53 ----A---- C:\WINDOWS\system32\wpdshext.dll 2015-05-13 10:48:52 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll 2015-05-13 10:48:39 ----A---- C:\WINDOWS\system32\dpapisrv.dll 2015-05-13 10:48:35 ----A---- C:\WINDOWS\system32\drivers\udfs.sys 2015-05-13 10:48:34 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll 2015-05-13 10:48:32 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll 2015-05-13 10:48:09 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll 2015-05-13 10:48:09 ----A---- C:\WINDOWS\system32\win32k.sys 2015-05-13 10:48:09 ----A---- C:\WINDOWS\system32\FntCache.dll 2015-05-13 10:48:09 ----A---- C:\WINDOWS\system32\DWrite.dll 2015-05-13 10:06:38 ----D---- C:\Program Files (x86)\DigiCouppon 2015-05-13 10:06:31 ----D---- C:\Program Files (x86)\AllCheApiParaice 2015-05-13 10:06:26 ----D---- C:\Program Files (x86)\Omnifinder 2015-05-13 10:06:05 ----D---- C:\Program Files (x86)\ENjoyCoiUpon 2015-05-12 15:35:09 ----D---- C:\Program Files (x86)\SaVeLots 2015-05-12 15:35:00 ----D---- C:\Program Files (x86)\NickelBlock 2015-05-12 15:34:37 ----D---- C:\Program Files (x86)\TakeTheCouPon 2015-05-12 15:34:28 ----D---- C:\Program Files (x86)\TTakETheCoupon 2015-05-09 21:43:49 ----D---- C:\Program Files (x86)\BiTSauver 2015-05-09 21:43:38 ----D---- C:\Program Files (x86)\FFinDaBestDeal 2015-05-09 21:43:30 ----D---- C:\Program Files (x86)\DOwnSave 2015-05-09 21:43:24 ----D---- C:\Program Files (x86)\Bookmark Checker 2015-04-25 09:55:07 ----D---- C:\Program Files\ImageJ 2015-04-19 16:53:36 ----D---- C:\Program Files (x86)\Facebook Social Plugin 2015-04-19 16:53:10 ----D---- C:\Program Files (x86)\BitSAver 2015-04-19 16:52:56 ----D---- C:\Program Files (x86)\SaveNewaAppzz 2015-04-19 16:52:49 ----D---- C:\Program Files (x86)\AallSSaVer 2015-04-17 18:36:19 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-04-17 11:06:22 ----D---- C:\ProgramData\Red AdBlocker 2015-04-16 00:01:38 ----D---- C:\WINDOWS\system32\appraiser 2015-04-15 17:01:33 ----A---- C:\WINDOWS\system32\ntoskrnl.exe 2015-04-15 17:01:32 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll 2015-04-15 17:01:32 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll 2015-04-15 17:01:32 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll 2015-04-15 17:01:32 ----A---- C:\WINDOWS\system32\wow64.dll 2015-04-15 17:01:32 ----A---- C:\WINDOWS\system32\tracerpt.exe 2015-04-15 17:01:32 ----A---- C:\WINDOWS\system32\tdh.dll 2015-04-15 17:01:32 ----A---- C:\WINDOWS\system32\sechost.dll 2015-04-15 17:01:32 ----A---- C:\WINDOWS\system32\ntdll.dll 2015-04-15 17:01:32 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll 2015-04-15 17:01:31 ----A---- C:\WINDOWS\SYSWOW64\tracerpt.exe 2015-04-15 17:01:31 ----A---- C:\WINDOWS\system32\wow64cpu.dll 2015-04-15 17:01:31 ----A---- C:\WINDOWS\system32\msctf.dll 2015-04-15 17:01:30 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll 2015-04-15 17:01:29 ----A---- C:\WINDOWS\system32\lsm.dll 2015-04-15 17:00:29 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll 2015-04-15 17:00:29 ----A---- C:\WINDOWS\system32\pku2u.dll 2015-04-15 17:00:23 ----A---- C:\WINDOWS\system32\drivers\http.sys 2015-04-15 17:00:14 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll 2015-04-15 17:00:14 ----A---- C:\WINDOWS\system32\drivers\clfs.sys 2015-04-15 17:00:14 ----A---- C:\WINDOWS\system32\clfsw32.dll 2015-04-15 17:00:11 ----A---- C:\WINDOWS\system32\wucltux.dll 2015-04-15 17:00:11 ----A---- C:\WINDOWS\system32\wuaueng.dll 2015-04-15 17:00:11 ----A---- C:\WINDOWS\system32\wuauclt.exe 2015-04-15 17:00:11 ----A---- C:\WINDOWS\system32\wuapi.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\system32\wuwebv.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\system32\wups2.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\system32\wups.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\system32\wu.upgrade.ps.dll 2015-04-15 17:00:10 ----A---- C:\WINDOWS\system32\WinSetupUI.dll 2015-04-15 17:00:09 ----A---- C:\WINDOWS\SYSWOW64\wups.dll 2015-04-15 17:00:09 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe 2015-04-15 17:00:09 ----A---- C:\WINDOWS\system32\wudriver.dll 2015-04-15 17:00:09 ----A---- C:\WINDOWS\system32\wuapp.exe 2015-04-15 17:00:09 ----A---- C:\WINDOWS\system32\storewuauth.dll 2015-04-15 16:59:59 ----A---- C:\WINDOWS\system32\invagent.dll 2015-04-15 16:59:59 ----A---- C:\WINDOWS\system32\generaltel.dll 2015-04-15 16:59:59 ----A---- C:\WINDOWS\system32\devinv.dll 2015-04-15 16:59:59 ----A---- C:\WINDOWS\system32\appraiser.dll 2015-04-15 16:59:59 ----A---- C:\WINDOWS\system32\aepic.dll 2015-04-15 16:59:59 ----A---- C:\WINDOWS\system32\aepdu.dll 2015-04-15 16:59:59 ----A---- C:\WINDOWS\system32\aeinv.dll 2015-04-15 16:59:59 ----A---- C:\WINDOWS\system32\acmigration.dll 2015-04-12 15:08:59 ----D---- C:\ProgramData\{1fb6c819-5afc-fa40-1fb6-6c8195af2065} 2015-04-12 15:03:03 ----D---- C:\Program Files (x86)\StormSaver 2015-04-12 15:02:30 ----D---- C:\Program Files (x86)\Cricwaves 2015-04-12 15:02:04 ----D---- C:\Program Files (x86)\AAddToThis 2015-04-12 15:01:44 ----D---- C:\Program Files (x86)\ActiveCoupon 2015-04-12 15:01:20 ----D---- C:\Program Files (x86)\SpaccECCoouponApp 2015-04-04 13:41:07 ----SD---- C:\WINDOWS\SYSWOW64\GWX 2015-04-04 13:41:07 ----SD---- C:\WINDOWS\system32\GWX 2015-03-27 00:25:46 ----A---- C:\WINDOWS\system32\nvdispgenco6434788.dll 2015-03-27 00:25:46 ----A---- C:\WINDOWS\system32\nvdispco6434788.dll 2015-03-19 22:38:51 ----D---- C:\ProgramData\{75f793fa-9371-fa0e-75f7-793fa9374fea} 2015-03-11 17:13:48 ----A---- C:\WINDOWS\SYSWOW64\calc.exe 2015-03-11 17:13:48 ----A---- C:\WINDOWS\system32\calc.exe 2015-03-11 17:13:43 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys 2015-03-11 17:13:43 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys 2015-03-11 17:13:42 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll 2015-03-11 17:13:42 ----A---- C:\WINDOWS\system32\winshfhc.dll 2015-03-11 17:13:42 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys 2015-03-11 17:13:30 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll 2015-03-11 17:13:30 ----A---- C:\WINDOWS\system32\SHCore.dll 2015-03-11 17:13:25 ----A---- C:\WINDOWS\system32\photowiz.dll 2015-03-11 17:13:24 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll 2015-03-11 17:13:23 ----A---- C:\WINDOWS\system32\msftedit.dll 2015-03-11 17:13:22 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll 2015-03-11 17:13:20 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll 2015-03-11 17:13:20 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll 2015-03-11 17:13:20 ----A---- C:\WINDOWS\system32\atmlib.dll 2015-03-11 17:13:20 ----A---- C:\WINDOWS\system32\atmfd.dll 2015-03-11 17:13:18 ----A---- C:\WINDOWS\system32\localspl.dll 2015-03-11 17:13:18 ----A---- C:\WINDOWS\system32\drivers\ndis.sys 2015-03-11 17:13:17 ----A---- C:\WINDOWS\system32\win32spl.dll 2015-03-11 17:13:16 ----AC---- C:\WINDOWS\system32\drivers\rfcomm.sys 2015-03-11 17:13:16 ----AC---- C:\WINDOWS\system32\drivers\hidbth.sys 2015-03-11 17:13:14 ----A---- C:\WINDOWS\SYSWOW64\mfc42u.dll 2015-03-11 17:13:14 ----A---- C:\WINDOWS\SYSWOW64\mfc42.dll 2015-03-11 17:13:14 ----A---- C:\WINDOWS\SYSWOW64\atlthunk.dll 2015-03-11 17:13:14 ----A---- C:\WINDOWS\system32\mfc42u.dll 2015-03-11 17:13:14 ----A---- C:\WINDOWS\system32\mfc42.dll 2015-03-11 17:13:14 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll 2015-03-11 17:13:13 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll 2015-03-11 17:13:11 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll 2015-03-11 17:13:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-03-11 17:13:11 ----A---- C:\WINDOWS\system32\WSShared.dll 2015-03-11 17:13:11 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-03-11 17:13:09 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll 2015-03-11 17:13:09 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll 2015-03-11 17:13:08 ----A---- C:\WINDOWS\SYSWOW64\authui.dll 2015-03-11 17:13:08 ----A---- C:\WINDOWS\system32\authui.dll 2015-03-11 17:13:00 ----A---- C:\WINDOWS\system32\ubpm.dll 2015-03-11 17:13:00 ----A---- C:\WINDOWS\system32\rdpudd.dll 2015-03-11 17:13:00 ----A---- C:\WINDOWS\system32\rdpcorets.dll 2015-03-11 17:12:59 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll 2015-03-11 17:12:59 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll 2015-03-11 17:12:59 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll 2015-03-11 17:12:59 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll 2015-03-11 17:12:59 ----A---- C:\WINDOWS\system32\eapphost.dll 2015-03-11 17:12:59 ----A---- C:\WINDOWS\system32\eappgnui.dll 2015-03-11 17:12:59 ----A---- C:\WINDOWS\system32\eappcfg.dll 2015-03-11 17:12:59 ----A---- C:\WINDOWS\system32\eapp3hst.dll 2015-03-11 17:12:33 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll 2015-03-11 17:12:33 ----A---- C:\WINDOWS\system32\MshtmlDac.dll 2015-03-11 17:12:33 ----A---- C:\WINDOWS\system32\jscript9diag.dll 2015-03-11 17:12:32 ----A---- C:\WINDOWS\system32\actxprxy.dll 2015-03-11 17:12:28 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll 2015-03-11 17:12:28 ----A---- C:\WINDOWS\system32\WMPhoto.dll 2015-03-11 17:12:27 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll 2015-03-11 17:12:27 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll 2015-03-11 17:12:25 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll 2015-03-11 17:12:25 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe 2015-03-11 17:12:25 ----A---- C:\WINDOWS\system32\shell32.dll 2015-03-11 17:12:25 ----A---- C:\WINDOWS\explorer.exe 2015-03-11 17:12:24 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll 2015-03-11 17:12:24 ----A---- C:\WINDOWS\system32\MrmCoreR.dll 2015-03-11 17:12:24 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe 2015-03-06 14:16:43 ----D---- C:\Program Files (x86)\MinnimumPrice ======List of files/folders modified in the last 3 months====== 2015-05-25 16:43:23 ----D---- C:\Program Files\trend micro 2015-05-25 16:43:02 ----D---- C:\WINDOWS\Prefetch 2015-05-25 16:20:35 ----RD---- C:\Program Files (x86) 2015-05-25 16:00:00 ----D---- C:\WINDOWS\system32\sru 2015-05-25 09:59:44 ----D---- C:\WINDOWS\Temp 2015-05-25 09:54:09 ----D---- C:\WINDOWS\Microsoft.NET 2015-05-25 09:53:38 ----HD---- C:\Program Files\WindowsApps 2015-05-25 09:53:32 ----D---- C:\WINDOWS\AppReadiness 2015-05-25 09:35:04 ----A---- C:\WINDOWS\SYSWOW64\log.txt 2015-05-24 23:42:41 ----D---- C:\WINDOWS\system32\catroot2 2015-05-24 23:42:36 ----D---- C:\Program Files (x86)\Steam 2015-05-21 17:52:12 ----D---- C:\ProgramData\6797405915030296871 2015-05-20 22:27:13 ----D---- C:\Users\Ewoud\AppData\Roaming\vlc 2015-05-20 20:19:20 ----D---- C:\WINDOWS\Inf 2015-05-20 13:08:57 ----D---- C:\Program Files (x86)\Opera 2015-05-20 13:08:56 ----D---- C:\WINDOWS\system32\Tasks 2015-05-18 19:05:00 ----SHD---- C:\System Volume Information 2015-05-18 13:06:46 ----D---- C:\dBGS 2015-05-18 11:33:47 ----D---- C:\Users\Ewoud\AppData\Roaming\Azureus 2015-05-18 04:25:49 ----D---- C:\WINDOWS\system32\config 2015-05-18 03:24:07 ----SHD---- C:\WINDOWS\Installer 2015-05-18 03:19:31 ----D---- C:\WINDOWS\Tasks 2015-05-17 15:21:45 ----RD---- C:\WINDOWS\System32 2015-05-17 15:21:45 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2015-05-16 11:49:16 ----D---- C:\WINDOWS\system32\DriverStore 2015-05-16 11:36:02 ----D---- C:\WINDOWS\rescache 2015-05-16 10:30:21 ----D---- C:\WINDOWS\WinSxS 2015-05-15 23:08:46 ----D---- C:\WINDOWS\SysWOW64 2015-05-15 23:08:45 ----D---- C:\WINDOWS\system32\drivers 2015-05-15 23:08:44 ----RD---- C:\WINDOWS\ImmersiveControlPanel 2015-05-15 20:13:37 ----D---- C:\WINDOWS\system32\AdvancedInstallers 2015-05-15 20:13:35 ----RSD---- C:\WINDOWS\Fonts 2015-05-15 20:12:32 ----D---- C:\WINDOWS\CbsTemp 2015-05-15 09:57:35 ----RSD---- C:\WINDOWS\assembly 2015-05-15 08:44:34 ----D---- C:\Windows 2015-05-14 22:36:14 ----D---- C:\Program Files\Internet Explorer 2015-05-14 22:36:14 ----D---- C:\Program Files (x86)\Internet Explorer 2015-05-14 22:36:13 ----D---- C:\WINDOWS\apppatch 2015-05-14 22:34:33 ----D---- C:\ProgramData\Microsoft Help 2015-05-14 22:34:04 ----D---- C:\WINDOWS\system32\MRT 2015-05-14 22:29:26 ----D---- C:\WINDOWS\debug 2015-05-14 22:29:24 ----A---- C:\WINDOWS\system32\MRT.exe 2015-05-14 22:25:16 ----A---- C:\WINDOWS\win.ini 2015-05-14 19:29:01 ----D---- C:\Program Files\Windows Journal 2015-05-14 11:02:00 ----D---- C:\Program Files\Speccy 2015-05-14 11:01:13 ----RD---- C:\Program Files 2015-05-14 10:57:23 ----D---- C:\ProgramData\NVIDIA 2015-05-13 13:00:52 ----D---- C:\Program Files\Microsoft Silverlight 2015-05-13 13:00:52 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2015-05-11 14:38:32 ----D---- C:\WINDOWS\SoftwareDistribution 2015-05-05 19:59:54 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe 2015-05-03 16:29:07 ----SD---- C:\Users\Ewoud\AppData\Roaming\Microsoft 2015-05-01 18:51:27 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll 2015-05-01 18:51:27 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll 2015-05-01 18:50:57 ----A---- C:\WINDOWS\system32\nvspcap64.dll 2015-05-01 18:50:57 ----A---- C:\WINDOWS\system32\nvspbridge64.dll 2015-04-27 09:08:35 ----D---- C:\Users\Ewoud\AppData\Roaming\Spotify 2015-04-26 18:15:21 ----D---- C:\Program Files (x86)\Google 2015-04-17 11:06:22 ----HD---- C:\ProgramData 2015-04-16 18:09:40 ----D---- C:\Users\Ewoud\AppData\Roaming\DVDVideoSoft 2015-04-16 12:19:16 ----D---- C:\WINDOWS\AppCompat 2015-04-16 00:01:40 ----D---- C:\WINDOWS\SYSWOW64\nl-NL 2015-04-16 00:01:40 ----D---- C:\WINDOWS\system32\nl-NL 2015-04-16 00:01:39 ----SD---- C:\WINDOWS\system32\CompatTel 2015-04-16 00:01:38 ----SD---- C:\ProgramData\Microsoft 2015-04-16 00:01:38 ----D---- C:\WINDOWS\system32\wbem 2015-04-15 17:04:52 ----D---- C:\ProgramData\{9665163a-448e-fb36-9665-5163a44858e9} 2015-04-13 15:53:47 ----D---- C:\Users\Ewoud\AppData\Roaming\Skype 2015-04-09 02:58:18 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll 2015-04-09 02:58:18 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll 2015-04-09 02:58:18 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll 2015-04-09 02:58:18 ----A---- C:\WINDOWS\system32\nvumdshimx.dll 2015-04-09 02:58:18 ----A---- C:\WINDOWS\system32\nvinitx.dll 2015-04-09 02:58:18 ----A---- C:\WINDOWS\system32\nvapi64.dll 2015-04-08 23:30:18 ----A---- C:\WINDOWS\system32\nvsvc64.dll 2015-04-08 23:30:18 ----A---- C:\WINDOWS\system32\nvcpl.dll 2015-04-08 23:30:14 ----A---- C:\WINDOWS\system32\nvvsvc.exe 2015-04-08 23:30:14 ----A---- C:\WINDOWS\system32\nvsvcr.dll 2015-04-08 23:30:14 ----A---- C:\WINDOWS\system32\nvshext.dll 2015-04-08 23:30:14 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll 2015-04-08 23:30:14 ----A---- C:\WINDOWS\system32\nv3dappshext.dll 2015-04-08 23:30:13 ----A---- C:\WINDOWS\system32\nvmctray.dll 2015-04-04 13:42:24 ----D---- C:\WINDOWS\Logs 2015-03-31 18:06:54 ----D---- C:\Users\Ewoud\AppData\Roaming\Vso 2015-03-31 18:06:53 ----D---- C:\WINDOWS\ModemLogs 2015-03-30 09:42:06 ----D---- C:\WINDOWS\system32\NDF 2015-03-27 00:26:44 ----D---- C:\Program Files\NVIDIA Corporation 2015-03-13 04:03:50 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll 2015-03-12 00:39:29 ----RD---- C:\WINDOWS\ToastData 2015-03-12 00:39:28 ----D---- C:\Program Files\Windows Defender 2015-03-12 00:39:27 ----D---- C:\Program Files (x86)\Windows Defender 2015-03-12 00:39:22 ----D---- C:\WINDOWS\WinStore 2015-03-06 14:16:46 ----D---- C:\Program Files (x86)\Fuun2Save 2015-03-06 14:16:46 ----D---- C:\Program Files (x86)\Fun2Seavea 2015-03-03 15:17:35 ----N---- C:\WINDOWS\system32\MpSigStub.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-31 645952] R0 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2014-10-06 782968] R0 mfewfpk;McAfee Inc. mfewfpk; C:\WINDOWS\system32\drivers\mfewfpk.sys [2014-10-06 344176] R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2015-04-09 31376] R0 Thpdrv;TOSHIBA HDD Protection Driver; C:\WINDOWS\system32\DRIVERS\thpdrv.sys [2012-07-28 48512] R0 Thpevm;@oem17.inf,%Thpevm.SvcDesc%;TOSHIBA HDD Protection - Shock Sensor Driver; C:\WINDOWS\System32\drivers\Thpevm.SYS [2012-06-26 18304] R0 tos_sps64;@oem18.inf,%SERVICE_DESC_amd64%;TOSHIBA tos_sps64 Service; C:\WINDOWS\System32\drivers\tos_sps64.sys [2012-06-18 499096] R0 TVALZ;@oem22.inf,%TVALZ.SvcDesc%;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\WINDOWS\System32\drivers\TVALZ_O.SYS [2013-08-15 32832] R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680] R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver; C:\WINDOWS\system32\DRIVERS\TVALZFL.sys [2012-07-22 16768] R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920] R3 dtscsibus;DAEMON Tools Virtual SCSI Bus; C:\WINDOWS\system32\DRIVERS\dtscsibus.sys [2014-11-29 29696] R3 FwLnk;@oem2.inf,%DiskServiceDesc%;FwLnk Driver; C:\WINDOWS\System32\drivers\FwLnk.sys [2012-07-10 9216] R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-11-04 4195840] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-12-10 3242896] R3 IntcDAud;@oem28.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528] R3 iwdbus;@oem50.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-10-18 27032] R3 L1C;@oem38.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-07-18 130248] R3 MEIx64;@oem26.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784] R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2014-10-06 311600] R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-04-09 10423952] R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-05-01 19600] R3 nvvad_WaveExtensible;@oem102.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-11-22 38032] R3 RSP2STOR;@oem11.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [2012-07-03 269968] R3 RtkBtFilter2;@oem46.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Module; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-11-28 48856] R3 RTWlanE;@oem53.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2014-02-21 3301592] R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2013-08-28 34544] R3 SynTP;@oem63.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-08-28 524528] R3 TDCMDPST;TOSHIBA Writing Engine Filter Driver; C:\WINDOWS\system32\DRIVERS\tdcmdpst.sys [2012-07-25 31184] R3 Thotkey;@oem40.inf,%Thotkey%;Toshiba Hotkey Driver; C:\WINDOWS\System32\drivers\Thotkey.sys [2013-11-01 33168] R3 tosrfec;@oem41.inf,%busenum.SVCDESC%;Bluetooth ACPI; C:\WINDOWS\System32\drivers\tosrfec.sys [2013-11-01 27032] R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736] R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912] S0 mfeelamk;McAfee Inc. mfeelamk; C:\WINDOWS\system32\drivers\mfeelamk.sys [2014-10-06 69344] S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248] S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304] S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth-apparaat (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-10-29 1198080] S3 GPUZ;GPUZ; \??\C:\WINDOWS\TEMP\GPUZ.sys [] S3 intaud_WaveExtensible;@oem49.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-10-18 39320] S3 Linksys_adapter_H;@oem37.inf,%Linksys_adapter_H_Service_DispName%;Linksys Adapter Network Driver; C:\WINDOWS\system32\DRIVERS\AE2500w764.sys [2011-03-29 1254464] S3 mfeapfk;McAfee Inc. mfeapfk; C:\WINDOWS\system32\drivers\mfeapfk.sys [2014-10-06 180272] S3 mferkdet;McAfee Inc. mferkdet; C:\WINDOWS\system32\drivers\mferkdet.sys [2014-10-06 107032] S3 niemrkw;niemrkw; C:\WINDOWS\system32\DRIVERS\niemrkw.sys [2014-08-07 14664] S3 NIEthernetDeviceEnumerator;@oem79.inf,%NIEthernetDeviceEnumerator.ServiceDesc%;NI Ethernet Device Enumerator Driver; C:\WINDOWS\System32\drivers\niede.sys [2012-01-12 38064] S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424] S3 RtkBtFilter;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-11-28 48856] S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792] R2 f44f894e;StormSaver; C:\WINDOWS\syswow64\rundll32.exe [2014-10-29 51200] R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2015-02-21 347200] R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-01 1152656] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-21 635104] R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856] R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 277824] R2 mfevtp;McAfee Validation Trust Protection Service; C:\WINDOWS\system32\mfevtps.exe [2014-10-06 185280] R2 NAUpdate;Nero Update; C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-05-01 1884304] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-01 22997648] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-04-08 936264] R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2012-08-31 201360] R2 Thpsrv;TOSHIBA HDD Protection; C:\windows\system32\ThpSrv.exe [2012-08-03 566696] R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2009-07-28 140632] R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\Teco\TecoService.exe [2012-08-25 291240] R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 365376] R3 TPCHSrv;TPCH Service; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2012-07-28 458152] S2 156c2b3d;RelayDefender; C:\WINDOWS\syswow64\rundll32.exe [2014-10-29 51200] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-26 107848] S2 McShield;McAfee McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [2014-10-06 242448] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15 268464] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792] S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-11-04 279000] S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-10-08 1431888] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-10-08 1044816] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696] S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2013-10-15 520416] S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2015-02-21 265808] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-26 107848] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600] S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-05-15 837824] S3 TMachInfo;TMachInfo; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2012-07-28 53384] -----------------EOF-----------------