Logfile of random's system information tool 1.10 (written by random/random) Run by Jozef Van Ingelgem at 2015-06-24 07:31:06 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 66 GB (54%) free of 123 GB Total RAM: 8169 MB (59% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 7:31:14, on 24/06/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17840) Boot mode: Normal Running processes: C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Users\Jozef Van Ingelgem\AppData\Roaming\BitTorrent\BitTorrent.exe C:\Program Files (x86)\PrintKey2000\Printkey2000.exe C:\Program Files (x86)\WinZip\WZQKPICK.EXE C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\Program Files (x86)\ShowMyPCService\tvnserver.exe C:\Windows\SysWOW64\ctfmon.exe C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe C:\Program Files\Microsoft Office 15\root\office15\OUTLOOK.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files\trend micro\Jozef Van Ingelgem.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1433745595&z=0732a91f5b51cf466fbf792g4zcc2ccm6z9w0w3t6o&from=wpc&uid=WDCXWD10EARX-00N0YB0_WD-WCC0T004022940229 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1433745595&z=0732a91f5b51cf466fbf792g4zcc2ccm6z9w0w3t6o&from=wpc&uid=WDCXWD10EARX-00N0YB0_WD-WCC0T004022940229 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1433745595&z=0732a91f5b51cf466fbf792g4zcc2ccm6z9w0w3t6o&from=wpc&uid=WDCXWD10EARX-00N0YB0_WD-WCC0T004022940229&q={searchTerms} R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1433745595&z=0732a91f5b51cf466fbf792g4zcc2ccm6z9w0w3t6o&from=wpc&uid=WDCXWD10EARX-00N0YB0_WD-WCC0T004022940229&q={searchTerms} R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1433745595&z=0732a91f5b51cf466fbf792g4zcc2ccm6z9w0w3t6o&from=wpc&uid=WDCXWD10EARX-00N0YB0_WD-WCC0T004022940229 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files (x86)\ShowMyPCService\tvnserver.exe" -controlservice -slave O4 - HKCU\..\Run: [BitTorrent] "C:\Users\Jozef Van Ingelgem\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Verzenden naar OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE O4 - Global Startup: Printkey2000.lnk = C:\Program Files (x86)\PrintKey2000\Printkey2000.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files (x86)\WinZip\WZQKPICK.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4c\RpcAgentSrv.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: TightVNC Server (tvnserver) - GlavSoft LLC. - C:\Program Files (x86)\ShowMyPCService\tvnserver.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 10407 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-e305-7f5cbf4cb916 /binaryPath="C:\Program Files (x86)\AVG\AVG2015\" %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" winlogon.exe "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\System32\spoolsv.exe C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\AVG\AVG2015\avgfws.exe" "C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe" "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service C:\Windows\System32\svchost.exe -k utcsvc "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe" C:\Windows\system32\IProsetMonitor.exe "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 8e83edc1-c59b-4dc0-b605-903967c4dc0e 1 "C:\Program Files (x86)\ShowMyPCService\tvnserver.exe" -service \??\C:\Windows\system32\conhost.exe "2107645236-152146112-272689188-788058982527288601773483468-10295086124949566 "C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe" "C:\Program Files (x86)\AVG\AVG2015\avgemca.exe" "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-98be6e7b-9a3b-466a-ab9f-6f149fa2fa76 -SystemEventPortName:HostProcess-5b698f2a-f465-412d-a4bc-61208f9e88b3 -IoCancelEventPortName:HostProcess-1cf0957e-391a-4ffb-bee1-b65a55fd20ef -NonStateChangingEventPortName:HostProcess-8a41b30c-b818-4c83-9b3c-879c7571885d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c6bcf72e-da42-4bc2-a3aa-a385c19174a3 -DeviceGroupId: "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-3fb9ff2f-9013-43f3-b0f7-07304d5a1398 -SystemEventPortName:HostProcess-98c9f2cc-e778-4a5a-b479-68049e54f00c -IoCancelEventPortName:HostProcess-409243cc-7e88-4d28-bee7-655e6c58554e -NonStateChangingEventPortName:HostProcess-5b21b87a-df77-4f72-8770-e5e26f8d3723 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0ce84c8e-b776-4698-aa47-8bbc83e96ecf -DeviceGroupId:WpdFsGroup "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp \??\C:\Windows\system32\conhost.exe "17890955091477314962-198409308-197056523816855694228165518096682781271876072632 "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Users\Jozef Van Ingelgem\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED "C:\Program Files (x86)\PrintKey2000\Printkey2000.exe" "C:\Program Files (x86)\WinZip\WZQKPICK.EXE" "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" "C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE" /tsr "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY "C:\Program Files (x86)\ShowMyPCService\tvnserver.exe" -controlservice -slave C:\Windows\system32\SearchIndexer.exe /Embedding "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 "C:\Program Files\Windows Media Player\wmpnetwk.exe" ctfmon.exe "C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe" C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\servicing\TrustedInstaller.exe "C:\Program Files\Microsoft Office 15\root\office15\OUTLOOK.EXE" "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE" C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-dedb-1a66a193b44b /binaryPath="C:\Program Files (x86)\AVG\AVG2015" "C:\Program Files\Internet Explorer\iexplore.exe" http://track.pc-helpforum.be/track/click/30483147/www.pc-helpforum.be?p=eyJzIjoieWFodHE1VDF3X2t4Q0I1STNzSElCUjc5ZWFBIiwidiI6MSwicCI6IntcInVcIjozMDQ4MzE0NyxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnBjLWhlbHBmb3J1bS5iZVxcXC90b3BpY1xcXC81ODc0Ni1nZWhhY2t0LWRvb3Itb3BsaWNodGVyXFxcLz92aWV3PWdldG5ld3Bvc3RcIixcImlkXCI6XCI3OGQzNmQ0MmY0N2M0MzQ0YjRmYTMwNTA2NTcxODAxOFwiLFwidXJsX2lkc1wiOltcImM1ZWNmNWE0YTY3MGIxZmIwNTc0YjJjNjk0NDBlY2JjMTNlNjk4MWVcIl19In0 "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5960 CREDAT:267521 /prefetch:2 "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2630948308-2327925756-1973525456-10004_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2630948308-2327925756-1973525456-10004 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1" "C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524 C:\Windows\system32\wbem\wmiprvse.exe "C:\temp\RSITx64.exe" C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF} ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\AdvancedDriverUpdater.job - C:\Program Files (x86)\Advanced Driver Updater\adu.exe scan C:\Windows\tasks\AdvancedDriverUpdater_UPDATES.job - C:\Program Files (x86)\Advanced Driver Updater\adu.exe -updatecheck C:\Windows\tasks\Bidaily Synchronize Task[973b].job - c:\programdata\{931da5c4-fd49-2444-931d-da5c4fd49713}\austrian.airports.1.2.exe --startup=1 --single C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\Jozef Van Ingelgem\AppData\Roaming\Mozilla\Firefox\Profiles\d9hzt5vq.default [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision] "Description"=NVIDIA stereo images plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming] "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-05-02 219296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-04-14 886488] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-14 2334936] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-04-14 710872] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [] "ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-06-03 1571696] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-06-03 2754704] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-01-22 13874392] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "BitTorrent"=C:\Users\Jozef Van Ingelgem\AppData\Roaming\BitTorrent\BitTorrent.exe [2015-05-07 1696104] "AdobeBridge"= [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2013-08-12 115048] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2015-06-05 3727824] "AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992] "SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] "tvncontrol"=C:\Program Files (x86)\ShowMyPCService\tvnserver.exe [2013-11-21 815704] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Printkey2000.lnk - C:\Program Files (x86)\PrintKey2000\Printkey2000.exe WinZip Quick Pick.lnk - C:\Program Files (x86)\WinZip\WZQKPICK.EXE C:\Users\Jozef Van Ingelgem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Verzenden naar OneNote.lnk - C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SMPCHelper] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tvnserver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=lvcod64.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "aux5"=wdmaud.drv "MSVideo"=vfwwdm32.dll "MSVideo8"=VfWWDM32.dll "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux"=wdmaud.drv "wave7"=wdmaud.drv "midi7"=wdmaud.drv "mixer7"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-06-24 07:31:06 ----D---- C:\rsit 2015-06-24 07:31:06 ----D---- C:\Program Files\trend micro 2015-06-23 12:50:11 ----D---- C:\Program Files\SiSoftware 2015-06-23 12:39:43 ----A---- C:\siw_debug.txt 2015-06-23 12:38:42 ----D---- C:\Program Files (x86)\SIW 2011 Home Edition 2015-06-23 07:51:18 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\nvopencl.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\nvinit.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\NvIFR.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\NvFBC.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll 2015-06-23 07:49:22 ----A---- C:\Windows\SYSWOW64\nvcuda.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvumdshimx.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvopencl.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvoglv64.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvoglshim64.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvinitx.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\NvIFR64.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvhdap64.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\NvFBC64.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvdispgenco6435330.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvdispco6435330.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvd3dumx.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvcuvid.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\nvcuda.dll 2015-06-23 07:49:22 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys 2015-06-23 07:49:22 ----A---- C:\Windows\system32\drivers\nvhda64v.sys 2015-06-23 07:49:21 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll 2015-06-23 07:49:21 ----A---- C:\Windows\system32\nvcompiler.dll 2015-06-23 07:44:56 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll 2015-06-23 07:44:56 ----A---- C:\Windows\system32\drivers\nvvad64v.sys 2015-06-22 15:57:57 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-06-22 15:29:02 ----A---- C:\Windows\system32\drivers\TVMonitor.sys 2015-06-22 15:09:32 ----D---- C:\Program Files (x86)\Google 2015-06-22 15:00:00 ----D---- C:\Users\Jozef Van Ingelgem\AppData\Roaming\TeamViewer 2015-06-22 14:59:55 ----D---- C:\Program Files (x86)\TeamViewer 2015-06-22 14:54:26 ----D---- C:\Program Files (x86)\ShowMyPCService 2015-06-21 17:40:10 ----D---- C:\Program Files (x86)\WinImage 2015-06-20 17:58:37 ----A---- C:\Windows\iun506.exe 2015-06-18 14:57:28 ----D---- C:\Program Files (x86)\WinZip 2015-06-15 13:57:32 ----D---- C:\Program Files (x86)\Microsoft Games 2015-06-13 08:55:08 ----D---- C:\Program Files\Common Files\AV 2015-06-10 14:12:08 ----D---- C:\Users\Jozef Van Ingelgem\AppData\Roaming\SimpleFiles 2015-06-10 07:38:40 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-06-10 07:38:40 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-06-10 07:38:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-06-10 07:38:40 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2015-06-10 07:38:40 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-06-10 07:38:40 ----A---- C:\Windows\system32\iernonce.dll 2015-06-10 07:38:40 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-06-10 07:38:40 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-06-10 07:38:40 ----A---- C:\Windows\system32\ie4uinit.exe 2015-06-10 07:38:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-06-10 07:38:39 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-06-10 07:38:39 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-06-10 07:38:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-06-10 07:38:39 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2015-06-10 07:38:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-06-10 07:38:39 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-06-10 07:38:38 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-06-10 07:38:38 ----A---- C:\Windows\system32\urlmon.dll 2015-06-10 07:38:38 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-06-10 07:38:38 ----A---- C:\Windows\system32\msfeeds.dll 2015-06-10 07:38:38 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-06-10 07:38:38 ----A---- C:\Windows\system32\iedkcs32.dll 2015-06-10 07:38:38 ----A---- C:\Windows\system32\dxtrans.dll 2015-06-10 07:38:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-06-10 07:38:37 ----A---- C:\Windows\system32\iesetup.dll 2015-06-10 07:38:37 ----A---- C:\Windows\system32\ieapfltr.dll 2015-06-10 07:38:36 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-06-10 07:38:36 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-06-10 07:38:36 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-06-10 07:38:36 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-06-10 07:38:36 ----A---- C:\Windows\system32\vbscript.dll 2015-06-10 07:38:36 ----A---- C:\Windows\system32\jsproxy.dll 2015-06-10 07:38:36 ----A---- C:\Windows\system32\ieUnatt.exe 2015-06-10 07:38:36 ----A---- C:\Windows\system32\iertutil.dll 2015-06-10 07:38:35 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-06-10 07:38:35 ----A---- C:\Windows\system32\mshtmled.dll 2015-06-10 07:38:35 ----A---- C:\Windows\system32\jscript.dll 2015-06-10 07:38:35 ----A---- C:\Windows\system32\ieui.dll 2015-06-10 07:38:35 ----A---- C:\Windows\system32\ieframe.dll 2015-06-10 07:38:35 ----A---- C:\Windows\system32\dxtmsft.dll 2015-06-10 07:38:34 ----A---- C:\Windows\system32\wininet.dll 2015-06-10 07:38:34 ----A---- C:\Windows\system32\msrating.dll 2015-06-10 07:38:34 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-06-10 07:38:34 ----A---- C:\Windows\system32\jscript9diag.dll 2015-06-10 07:38:34 ----A---- C:\Windows\system32\jscript9.dll 2015-06-10 07:38:33 ----A---- C:\Windows\system32\mshtml.dll 2015-06-10 07:37:00 ----A---- C:\Windows\system32\wmp.dll 2015-06-10 07:36:59 ----A---- C:\Windows\SYSWOW64\wmploc.DLL 2015-06-10 07:36:59 ----A---- C:\Windows\SYSWOW64\wmp.dll 2015-06-10 07:36:59 ----A---- C:\Windows\SYSWOW64\spwmp.dll 2015-06-10 07:36:59 ----A---- C:\Windows\SYSWOW64\dxmasf.dll 2015-06-10 07:36:59 ----A---- C:\Windows\system32\spwmp.dll 2015-06-10 07:36:59 ----A---- C:\Windows\system32\dxmasf.dll 2015-06-10 07:36:58 ----A---- C:\Windows\system32\wmploc.DLL 2015-06-10 07:36:55 ----A---- C:\Windows\SYSWOW64\comctl32.dll 2015-06-10 07:36:55 ----A---- C:\Windows\system32\comctl32.dll 2015-06-10 07:36:54 ----A---- C:\Windows\system32\win32k.sys 2015-06-10 07:36:53 ----A---- C:\Windows\SYSWOW64\wow32.dll 2015-06-10 07:36:53 ----A---- C:\Windows\SYSWOW64\setup16.exe 2015-06-10 07:36:53 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2015-06-10 07:36:53 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2015-06-10 07:36:53 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2015-06-10 07:36:53 ----A---- C:\Windows\system32\wow64win.dll 2015-06-10 07:36:53 ----A---- C:\Windows\system32\wow64cpu.dll 2015-06-10 07:36:53 ----A---- C:\Windows\system32\wow64.dll 2015-06-10 07:36:53 ----A---- C:\Windows\system32\winsrv.dll 2015-06-10 07:36:53 ----A---- C:\Windows\system32\ntvdm64.dll 2015-06-10 07:36:53 ----A---- C:\Windows\system32\KernelBase.dll 2015-06-10 07:36:53 ----A---- C:\Windows\system32\kernel32.dll 2015-06-10 07:36:53 ----A---- C:\Windows\system32\conhost.exe 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-06-10 07:36:52 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-06-10 07:36:52 ----A---- C:\Windows\SYSWOW64\user.exe 2015-06-10 07:36:52 ----A---- C:\Windows\SYSWOW64\instnm.exe 2015-06-09 16:47:41 ----D---- C:\ProgramData\Navigraph 2015-06-09 13:53:14 ----D---- C:\Users\Jozef Van Ingelgem\AppData\Roaming\InstallShield 2015-06-08 08:40:07 ----D---- C:\Windows\SYSWOW64\X86 2015-06-08 08:40:07 ----D---- C:\Windows\SYSWOW64\AMD64 2015-06-08 08:39:06 ----D---- C:\ProgramData\6766640397500309965 2015-06-08 08:37:53 ----D---- C:\ProgramData\{931da5c4-fd49-2444-931d-da5c4fd49713} 2015-06-02 12:38:01 ----A---- C:\Windows\system32\nvdispgenco6435306.dll 2015-06-02 12:38:01 ----A---- C:\Windows\system32\nvdispco6435306.dll 2015-06-02 12:33:44 ----D---- C:\ProgramData\boost_interprocess 2015-05-28 08:32:32 ----A---- C:\Windows\system32\drivers\SWDUMon.sys ======List of files/folders modified in the last 1 month====== 2015-06-24 07:31:06 ----RD---- C:\Program Files 2015-06-24 07:29:27 ----D---- C:\temp 2015-06-24 07:29:21 ----D---- C:\Users\Jozef Van Ingelgem\AppData\Roaming\BitTorrent 2015-06-24 07:28:46 ----D---- C:\Windows\Temp 2015-06-24 07:28:45 ----D---- C:\ProgramData\MFAData 2015-06-24 07:25:59 ----RSD---- C:\Windows\Fonts 2015-06-24 07:25:46 ----D---- C:\Windows\system32\config 2015-06-24 07:22:34 ----D---- C:\ProgramData\NVIDIA 2015-06-23 21:01:33 ----D---- C:\ProgramData\AVG2015 2015-06-23 21:01:29 ----D---- C:\Windows\SysWOW64 2015-06-23 20:58:27 ----D---- C:\Windows 2015-06-23 20:58:27 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-06-23 20:57:35 ----D---- C:\Windows\System32 2015-06-23 12:50:00 ----SHD---- C:\System Volume Information 2015-06-23 12:38:42 ----RD---- C:\Program Files (x86) 2015-06-23 07:51:40 ----D---- C:\ProgramData\NVIDIA Corporation 2015-06-23 07:51:30 ----D---- C:\Windows\inf 2015-06-23 07:51:17 ----D---- C:\Windows\system32\DriverStore 2015-06-23 07:51:08 ----D---- C:\Windows\system32\drivers 2015-06-22 18:11:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-06-22 15:58:09 ----D---- C:\Users\Jozef Van Ingelgem\AppData\Roaming\Mozilla 2015-06-22 15:20:01 ----SHD---- C:\Windows\Installer 2015-06-22 15:15:47 ----D---- C:\Windows\Tasks 2015-06-22 15:09:37 ----D---- C:\Windows\system32\Tasks 2015-06-22 14:44:44 ----SD---- C:\ProgramData\Microsoft 2015-06-20 11:47:17 ----D---- C:\Windows\Prefetch 2015-06-19 17:31:10 ----D---- C:\Windows\system32\NDF 2015-06-19 16:56:09 ----D---- C:\Users\Jozef Van Ingelgem\AppData\Roaming\Adobe 2015-06-19 12:54:47 ----SD---- C:\Users\Jozef Van Ingelgem\AppData\Roaming\Microsoft 2015-06-19 07:58:41 ----D---- C:\Windows\Microsoft.NET 2015-06-18 18:12:27 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2015-06-18 18:12:20 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-06-18 14:58:37 ----D---- C:\ProgramData\WinZip 2015-06-17 16:35:41 ----HD---- C:\ProgramData 2015-06-17 16:33:14 ----RSD---- C:\Windows\assembly 2015-06-17 16:30:36 ----D---- C:\Windows\SYSWOW64\en-US 2015-06-17 16:30:36 ----D---- C:\Windows\system32\en-US 2015-06-17 16:07:45 ----D---- C:\Program Files (x86)\Common Files 2015-06-17 11:10:27 ----A---- C:\Windows\SYSWOW64\OpenCL.dll 2015-06-17 11:10:27 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll 2015-06-17 11:10:27 ----A---- C:\Windows\SYSWOW64\nvapi.dll 2015-06-17 11:10:27 ----A---- C:\Windows\system32\OpenCL.dll 2015-06-17 11:10:27 ----A---- C:\Windows\system32\nvwgf2umx.dll 2015-06-17 11:10:27 ----A---- C:\Windows\system32\nvhdagenco6420103.dll 2015-06-17 11:10:27 ----A---- C:\Windows\system32\nvapi64.dll 2015-06-17 08:48:17 ----A---- C:\Windows\system32\nvvsvc.exe 2015-06-17 08:48:16 ----A---- C:\Windows\system32\nvsvcr.dll 2015-06-17 08:48:16 ----A---- C:\Windows\system32\nvshext.dll 2015-06-17 08:48:16 ----A---- C:\Windows\system32\nvmctray.dll 2015-06-17 08:48:15 ----A---- C:\Windows\system32\nvsvc64.dll 2015-06-17 08:48:15 ----A---- C:\Windows\system32\nvcpl.dll 2015-06-13 08:55:08 ----D---- C:\Program Files\Common Files 2015-06-12 11:56:49 ----D---- C:\Windows\rescache 2015-06-11 07:25:22 ----D---- C:\Windows\winsxs 2015-06-11 07:24:09 ----D---- C:\Program Files\Windows Media Player 2015-06-11 07:24:09 ----D---- C:\Program Files (x86)\Windows Media Player 2015-06-11 07:24:08 ----D---- C:\Windows\AppPatch 2015-06-11 07:24:08 ----D---- C:\Program Files\Internet Explorer 2015-06-11 07:24:07 ----D---- C:\Windows\SYSWOW64\nl-NL 2015-06-11 07:24:07 ----D---- C:\Windows\system32\nl-NL 2015-06-11 07:24:07 ----D---- C:\Windows\PolicyDefinitions 2015-06-11 07:24:06 ----D---- C:\Program Files (x86)\Internet Explorer 2015-06-10 18:19:31 ----D---- C:\Windows\system32\MRT 2015-06-10 18:17:21 ----A---- C:\Windows\system32\MRT.exe 2015-06-10 07:32:19 ----D---- C:\Windows\system32\catroot2 2015-06-09 13:54:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2015-06-08 18:08:43 ----D---- C:\Users\Jozef Van Ingelgem\AppData\Roaming\Flight1 2015-06-08 17:49:13 ----A---- C:\Windows\iun6002.exe 2015-06-03 23:04:55 ----A---- C:\Windows\SYSWOW64\nvspcap.dll 2015-06-03 23:04:55 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll 2015-06-03 23:04:45 ----A---- C:\Windows\system32\nvspcap64.dll 2015-06-03 23:04:45 ----A---- C:\Windows\system32\nvspbridge64.dll ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2015-05-12 253408] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2015-05-07 378336] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2015-05-12 224224] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2015-03-20 40928] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2015-03-11 162784] R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2015-04-14 67552] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2015-05-19 287200] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2015-04-15 256992] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2015-05-12 281568] R3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2014-03-18 91928] R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2014-05-02 495376] R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2010-08-18 26136] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-03-10 4430808] R3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys [2007-07-19 50072] R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344] R3 MxEFLF;Matrox Extio Lower Function Filter; C:\Windows\system32\DRIVERS\MxEFLF64.sys [2010-11-04 113480] R3 MxEFUF;Matrox Extio Upper Function Filter; C:\Windows\system32\DRIVERS\MxEFUF64.sys [2010-11-04 143688] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2013-08-12 107912] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2013-08-12 226696] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-06-17 204648] R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-06-03 19600] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-05-19 46768] R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V64.SYS [2007-07-19 1213592] R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-02-27 33448] R3 WinUsb;WinUsb-stuurprogramma; C:\Windows\system32\drivers\WinUSB.sys [2010-11-21 41984] S3 MonitorFunction;Driver for Monitor; C:\Windows\system32\DRIVERS\TVMonitor.sys [2015-06-18 16376] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4c\WNt500x64\Sandra.sys [2009-08-07 23112] S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2015-05-28 25608] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-03-07 81088] R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [2015-06-05 1526936] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2015-06-05 3461072] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2015-06-05 312816] R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-04-07 2736824] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-06-03 1152656] R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2015-02-12 262920] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-06-03 1893008] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-06-03 23007376] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-06-17 937616] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-06-17 410768] R2 tvnserver;TightVNC Server; C:\Program Files (x86)\ShowMyPCService\tvnserver.exe [2013-11-21 815704] R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2015-04-22 5132888] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-22 107848] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-23 268976] S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-22 107848] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-05-22 114688] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-26 148080] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-04-22 150600] S3 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP4c\RpcAgentSrv.exe [2009-06-13 68760] S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-05-02 1255736] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] -----------------EOF-----------------