Logfile of random's system information tool 1.10 (written by random/random) Run by Yolan at 2015-07-17 23:38:22 Microsoft Windows 8.1 Pro System drive C: has 554 GB (55%) free of 1007 GB Total RAM: 12286 MB (72% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:38:29, on 17/07/2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17840) Boot mode: Normal Running processes: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Program Files (x86)\TeamViewer\TeamViewer.exe C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Users\Yolan\AppData\Roaming\Spotify\SpotifyWebHelper.exe C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe C:\Users\Yolan\AppData\Local\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Overwolf\Overwolf.exe C:\Users\Yolan\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe C:\Users\Yolan\AppData\Roaming\Spotify\SpotifyCrashService.exe C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe C:\Program Files (x86)\PuTTY\pageant.exe C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe C:\Users\Yolan\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Common Files\Overwolf\0.86.89.0\OverwolfHelper.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files\trend micro\Yolan.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={BB4FFFCB-A0B1-4BE6-9894-17709D1C7BBE}&mid=cf287e8616b447d2a1d4252442f079db-4d4e250b3fbff50b28e323856c7698c1c7fa8840&lang=en&ds=AVG&coid=avgtbavg&cmpid=0215tb&pr=sa&d=2014-08-11 19:07:51&v=18.3.0.885&pid=safeguard&sg=&sap=hp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O1 - Hosts: 168.235.67.185 irc.cg O1 - Hosts: 192.95.29.215 logon.cg O1 - Hosts: 168.235.67.18 ts.cg O1 - Hosts: 167.114.68.183 web.cg O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [vmware-tray.exe] "C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe" O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [HP Photosmart 6520 series (NET)] "C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2841525R05TZ:NW" -scfn "HP Photosmart 6520 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [MyImgur] C:\MyImgur\MyImgur x64.exe O4 - HKCU\..\Run: [Viber] "C:\Users\Yolan\AppData\Local\Viber\Viber.exe" StartMinimized O4 - HKCU\..\Run: [Voobly] "C:\Program Files (x86)\Voobly\voobly.exe" --startup O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Yolan\AppData\Roaming\Spotify\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [Spotify] "C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Yolan\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c O4 - HKCU\..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent O4 - Startup: Dropbox.lnk = Yolan\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe O4 - Startup: Inktwaarschuwingen controleren - HP Photosmart 6520 series (Network).lnk = ? O4 - Startup: Monitor Ink Alerts - HP Photosmart 6520 series (Network).lnk = ? O4 - Startup: openvpn-gui.exe - Shortcut.lnk = C:\Program Files\OpenVPN\bin\openvpn-gui.exe O4 - Startup: pageant.exe - Shortcut.lnk = C:\Program Files (x86)\PuTTY\pageant.exe O4 - Startup: thunderbird.exe - Snelkoppeling.lnk = C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe O8 - Extra context menu item: Clip bookmark - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0 O8 - Extra context menu item: Clip image - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4 O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3 O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1 O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: New note - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - (no file) O9 - Extra button: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: *.clonewarsadventures.com O15 - Trusted Zone: *.freerealms.com O15 - Trusted Zone: *.soe.com O15 - Trusted Zone: *.sony.com O17 - HKLM\System\CCS\Services\Tcpip\..\{02C3C160-474A-494D-8F35-4FF1935A5074}: NameServer = 195.130.130.11,195.130.130.139 O17 - HKLM\System\CCS\Services\Tcpip\..\{07C0C14F-F721-4F77-A9E7-9FA3F0BD1741}: NameServer = 8.8.8.8,8.8.4.4 O17 - HKLM\System\CS1\Services\Tcpip\..\{02C3C160-474A-494D-8F35-4FF1935A5074}: NameServer = 195.130.130.11,195.130.130.139 O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing) O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing) O23 - Service: OpenVPN Service (OpenVPNService) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Service KMSELDI - @ByELDI - C:\Program Files\KMSpico\Service_KMS.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe O23 - Service: VMware Workstation Server (VMwareHostd) - Unknown owner - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe O23 - Service: VNC Server (vncserver) - RealVNC Ltd - C:\Program Files\RealVNC\VNC Server\vncservice.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 17708 bytes ======Listing Processes====== wininit.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS "C:\WINDOWS\system32\nvvsvc.exe" "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service C:\WINDOWS\System32\svchost.exe -k utcsvc dashost.exe {a9c8523f-6c55-4754-af1f3c2a0159fc11} "C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe" "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe" "C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe" "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" C:\WINDOWS\SysWOW64\PnkBstrA.exe "C:\Program Files\KMSpico\Service_KMS.exe" C:\WINDOWS\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe" C:\WINDOWS\SysWOW64\vmnat.exe C:\WINDOWS\SysWOW64\vmnetdhcp.exe "C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe" "C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe" C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-54456ae7-90c3-4eda-bd6c-1145f99ee12d -SystemEventPortName:HostProcess-89cf1354-dc71-4dea-b8a8-624766f11d9c -IoCancelEventPortName:HostProcess-baed102e-0c9d-4eb6-bb7f-1758e43e7cfe -NonStateChangingEventPortName:HostProcess-8da4b749-9abc-4fe6-960d-a39ae711f011 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f80560d7-a8cc-4ad4-9a73-70acb9d135f4 -DeviceGroupId:WpdFsGroup C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-58f5493b-8f1c-4cd9-91b7-b41cf3fb43cc -SystemEventPortName:HostProcess-24c0cab8-df71-4a93-a1d7-c3a10c72d814 -IoCancelEventPortName:HostProcess-0276ba80-7993-4d81-b041-e21c23437326 -NonStateChangingEventPortName:HostProcess-1645128a-2048-41ac-8eb7-ef8e0bb0f6e9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:7b866376-2ff2-421b-bb10-f178418de1f2 -DeviceGroupId:WudfDefaultDevicePool "C:\Program Files\iPod\bin\iPodService.exe" C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\WINDOWS\system32\SearchIndexer.exe /Embedding C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\System32\WinLogon.exe -SpecialSession -hiberboot "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe16_ Global\UsGthrCtrlFltPipeMssGthrPipe16 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\WINDOWS\system32\nvvsvc.exe -session "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray "C:\Program Files (x86)\TeamViewer\TeamViewer.exe" C:\WINDOWS\Explorer.EXE C:\WINDOWS\SysWOW64\DllHost.exe /Processid:{B366DEBE-645B-43A5-B865-DDD82C345492} taskhostex.exe "C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log "C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" c19ffd17-9aa9-4934-87c6-a826c3e9cce1 1 "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp \??\C:\WINDOWS\system32\conhost.exe 0x4 \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\Windows\System32\skydrive.exe -Embedding "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "C:\Program Files\Logitech Gaming Software\LCore.exe" /minimized C:\Windows\System32\RuntimeBroker.exe -Embedding "C:\Program Files\iTunes\iTunesHelper.exe" "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice "C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2841525R05TZ:NW" -scfn "HP Photosmart 6520 series (NET)" -AutoStart 1 "C:\MyImgur\MyImgur x64.exe" "C:\Users\Yolan\AppData\Roaming\Spotify\SpotifyWebHelper.exe" "C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized "C:\Users\Yolan\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c "C:\WINDOWS\system32\GWX\GWX.exe" "C:\Program Files (x86)\Overwolf\Overwolf.exe" -silent "C:\Users\Yolan\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup "C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" "C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe" taskeng.exe {03A93B6B-0009-4D00-AA2E-025A118427E9} "C:\WINDOWS\system32\RunDll32.exe" "C:\Program Files\HP\HP Photosmart 6520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN2841525R05TZ;CONNECTION=NW;MONITOR=1; "C:\Users\Yolan\AppData\Roaming\Spotify\SpotifyCrashService.exe" "C:\WINDOWS\system32\RunDll32.exe" "C:\Program Files\HP\HP Photosmart 6520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN2841525R05TZ;CONNECTION=NW;MONITOR=1; "C:\Program Files\Microsoft Office\Office15\MsoSync.exe" "C:\Program Files\OpenVPN\bin\openvpn-gui.exe "C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe" "C:\Program Files (x86)\PuTTY\pageant.exe" C:\Users\Yolan\Dropbox\privkey.ppk C:\Users\Yolan\Dropbox\respen.ppk "C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe" "C:\Windows\System32\SettingSyncHost.exe" -Embedding "C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicator.exe" openvpn --config "kimsufi.ovpn" --service 14f000001c2c 0 --log "C:\Program Files\OpenVPN\log\kimsufi.log" --auth-retry interact --management 127.0.0.1 25340 stdin --management-query-passwords --management-hold \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe" "C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe" "C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe" "C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe" "C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicatorCom.exe" -Embedding "C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe" "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac "C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --channel="4240.0.129608991\1431723218" --no-sandbox --disable-d3d11 --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.9.133 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40,48 --gpu-vendor-id=0x10de --gpu-device-id=0x1244 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5330 --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.9.133 /prefetch:822062411 "C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --force-device-scale-factor=1 --no-sandbox --enable-deferred-image-decoding --lang=en-US --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.9.133 --disable-spell-checking --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4240 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4240.1.196411871\1103899502" /prefetch:673131151 C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding C:\WINDOWS\system32\wbem\wmiprvse.exe taskhost.exe $(Arg0) rundll32.exe WSClient.dll,RefreshBannedAppsList C:\Users\Yolan\AppData\Local\Microsoft\OneDrive\OneDrive.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4064.0.1858658624\1653949819" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,21,44,53 --gpu-vendor-id=0x10de --gpu-device-id=0x1244 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5330 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/BackgroundRendererProcesses/Disallow2/BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Enabled_V3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4064 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="4064.1.1785786685\777846617" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/BackgroundRendererProcesses/Disallow2/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Enabled_V3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4064 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="4064.2.529380930\1699821413" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/*BackgroundRendererProcesses/Disallow2/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Enabled_V3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4064 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="4064.3.1759864231\1425860844" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/*BackgroundRendererProcesses/Disallow2/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Enabled_V3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4064 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="4064.4.978273502\684068867" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/*BackgroundRendererProcesses/Disallow2/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Enabled_V3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4064 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="4064.5.1666662639\1019846710" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/*BackgroundRendererProcesses/Disallow2/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Enabled_V3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4064 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="4064.8.1571801885\1478863487" /prefetch:673131151 "C:\Program Files (x86)\Common Files\Overwolf\0.86.89.0\OverwolfHelper.exe" "path=C:\Program Files (x86)\Overwolf\0.86.89.0\OWExplorerLauncher.dll "C:\Program Files (x86)\Common Files\Overwolf\0.86.89.0\OverwolfHelper64.exe" "path=C:\Program Files (x86)\Overwolf\0.86.89.0\x64\OWExplorerLauncher.dll C:\WINDOWS\WinStore\WSHost.exe -Embedding "C:\WINDOWS\system32\SearchFilterHost.exe" 0 568 572 580 65536 576 "C:\WINDOWS\system32\cleanmgr.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/*BackgroundRendererProcesses/Disallow2/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Enabled_V3/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=4064 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="4064.10.1828911887\1521540931" /prefetch:673131151 C:\WINDOWS\System32\svchost.exe -k WerSvcGroup "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server "C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel "C:\Users\Yolan\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\WINDOWS\tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}.job - C:\ProgramData\cis676A.exe --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82} C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1232012375-3126933594-740197005-1000Core.job - C:\Users\Yolan\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1232012375-3126933594-740197005-1000UA.job - C:\Users\Yolan\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d092ea5ec826c.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\Yolan\AppData\Roaming\Mozilla\Firefox\Profiles\c6tzdwag.default prefs.js - "browser.search.useDBForOrder" - true prefs.js - "browser.startup.homepage" - "about:home" prefs.js - "keyword.URL" - "" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 18.0.0.209 Plugin "Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.6.2] "Description"= "Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.7.0] "Description"= "Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.0\npbattlelog.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.45.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@live.heroesandgenerals.com/npretox] "Description"=Heroes & Generals downloader "Path"=C:\Program Files (x86)\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0] "Description"=Microsoft Lync Plug-in for Firefox "Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision] "Description"=NVIDIA stereo images plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming] "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 18.0.0.209 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.6.2] "Description"= "Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.7.0] "Description"= "Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.7.0\npbattlelogx64.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL C:\Program Files (x86)\Mozilla Firefox\plugins\ npMeetingJoinPluginOC.dll nppdf32.dll npqtplugin.dll npqtplugin2.dll npqtplugin3.dll npqtplugin4.dll npqtplugin5.dll QuickTimePlugin.class ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-06-25 219304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2015-06-16 2335448] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-06-25 153768] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{432dd630-7e03-4c97-9d62-b99f52df4fc2}] Microsoft Web Test Recorder 12.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05 71520] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-19 460712] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}] Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-04-02 629256] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2015-06-16 1730264] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-19 172968] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Launch LCore"=C:\Program Files\Logitech Gaming Software\LCore.exe [2014-04-15 10396440] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392] "InstallerLauncher"=C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe /run:C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe [] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-03-17 169768] "COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [] "CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}"=C:\ProgramData\cis676A.exe [2015-04-20 3420888] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-05-23 2754704] "ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2015-05-23 1571696] "egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2015-01-28 5595848] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HP Photosmart 6520 series (NET)"=C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416] "MyImgur"=C:\MyImgur\MyImgur x64.exe [2014-05-13 7548416] "AdobeBridge"= [] "Viber"=C:\Users\Yolan\AppData\Local\Viber\Viber.exe [2015-06-10 80035536] "Voobly"=C:\Program Files (x86)\Voobly\voobly.exe [2015-04-22 159744] "Spotify Web Helper"=C:\Users\Yolan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-07-14 2008632] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2015-03-31 5585136] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-06-02 28785280] "Spotify"=C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe [2015-07-14 7334968] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-04-23 8204056] "Dropbox Update"=C:\Users\Yolan\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-12 134512] "Overwolf"=C:\Program Files (x86)\Overwolf\Overwolf.exe [2015-06-21 41200] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-03-17 60712] "HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208] ""= [] "SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] "AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312] "vmware-tray.exe"=C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [2013-10-18 111696] "amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-11-28 421888] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-23 1022152] C:\Users\Yolan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Yolan\AppData\Roaming\Dropbox\bin\Dropbox.exe EvernoteClipper.lnk - C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe Inktwaarschuwingen controleren - HP Photosmart 6520 series (Network).lnk - C:\WINDOWS\system32\RunDll32.exe Monitor Ink Alerts - HP Photosmart 6520 series (Network).lnk - C:\WINDOWS\system32\RunDll32.exe openvpn-gui.exe - Shortcut.lnk - C:\Program Files\OpenVPN\bin\openvpn-gui.exe pageant.exe - Shortcut.lnk - C:\Program Files (x86)\PuTTY\pageant.exe thunderbird.exe - Snelkoppeling.lnk - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "PromptOnSecureDesktop"=0 "ConsentPromptBehaviorAdmin"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "AllowLegacyWebView"=1 "AllowUnhashedWebView"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "VIDC.YUY2"=msyuv.dll "vidc.i420"=iyuv_32.dll "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "VIDC.YVYU"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "VIDC.UYVY"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.msvc"=msvidc32.dll "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave9"=wdmaud.drv "midi9"=wdmaud.drv "mixer9"=wdmaud.drv "aux3"=wdmaud.drv "wave8"=wdmaud.drv "midi8"=wdmaud.drv "mixer8"=wdmaud.drv "wave7"=wdmaud.drv "midi7"=wdmaud.drv "mixer7"=wdmaud.drv "msacm.vorbis"=vorbis.acm "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe","%1" ======List of files/folders created in the last 1 month====== 2015-07-17 23:38:22 ----D---- C:\rsit 2015-07-16 20:19:35 ----A---- C:\WINDOWS\SYSWOW64\rascfg.dll 2015-07-16 20:19:35 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys 2015-07-16 20:19:35 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys 2015-07-16 20:19:34 ----A---- C:\WINDOWS\system32\rascfg.dll 2015-07-16 20:15:45 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-07-16 20:15:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll 2015-07-16 20:15:44 ----A---- C:\WINDOWS\system32\SyncEngine.dll 2015-07-16 20:15:43 ----A---- C:\WINDOWS\system32\mfplat.dll 2015-07-16 20:15:43 ----A---- C:\WINDOWS\system32\drivers\netio.sys 2015-07-16 20:15:42 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\SYSWOW64\QSVRMGMT.DLL 2015-07-16 20:15:42 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\WSDApi.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\WinSCard.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\vpnike.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\spoolsv.exe 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\SkyDrive.exe 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\QSVRMGMT.DLL 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\IKEEXT.DLL 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys 2015-07-16 20:15:42 ----A---- C:\WINDOWS\system32\dnsrslvr.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\SYSWOW64\WinSCard.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\SYSWOW64\QSHVHOST.DLL 2015-07-16 20:15:41 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\WSDMon.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\VSSVC.exe 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\vssapi.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\untfs.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\rasapi32.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\QSHVHOST.DLL 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\nshwfp.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\drivers\pdc.sys 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\drivers\dam.sys 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\dnsapi.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\DevicePairing.dll 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\BFE.DLL 2015-07-16 20:15:41 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\SYSWOW64\rasser.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\SYSWOW64\rasmxs.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\SYSWOW64\rasdiag.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL 2015-07-16 20:15:40 ----A---- C:\WINDOWS\SYSWOW64\eventcls.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\system32\vsstrace.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\system32\rasser.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\system32\rasmxs.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\system32\rasdiag.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL 2015-07-16 20:15:40 ----A---- C:\WINDOWS\system32\eventcls.dll 2015-07-16 20:15:40 ----A---- C:\WINDOWS\splwow64.exe 2015-07-16 20:15:34 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll 2015-07-16 20:15:34 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2015-07-16 20:15:34 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll 2015-07-16 20:15:34 ----A---- C:\WINDOWS\system32\MDMAgent.exe 2015-07-16 20:15:30 ----A---- C:\WINDOWS\system32\sppwinob.dll 2015-07-16 20:15:30 ----A---- C:\WINDOWS\system32\sppsvc.exe 2015-07-16 20:15:30 ----A---- C:\WINDOWS\system32\sppobjs.dll 2015-07-16 20:15:18 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2015-07-15 20:40:30 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll 2015-07-15 20:40:30 ----A---- C:\WINDOWS\SYSWOW64\wups.dll 2015-07-15 20:40:30 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll 2015-07-15 20:40:30 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe 2015-07-15 20:40:30 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wuwebv.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wups2.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wups.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wudriver.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wucltux.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wuaueng.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wuauclt.exe 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wuapp.exe 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\wuapi.dll 2015-07-15 20:40:29 ----A---- C:\WINDOWS\system32\WinSetupUI.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll 2015-07-15 20:40:23 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\system32\vbscript.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\system32\jscript.dll 2015-07-15 20:40:22 ----A---- C:\WINDOWS\system32\inetcomm.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\wininet.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\webcheck.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\msrating.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\mshtmled.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\MshtmlDac.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\msfeeds.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\ieui.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\iepeers.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\ieapfltr.dll 2015-07-15 20:40:21 ----A---- C:\WINDOWS\system32\dxtrans.dll 2015-07-15 20:40:20 ----A---- C:\WINDOWS\system32\actxprxy.dll 2015-07-15 20:40:16 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll 2015-07-15 20:40:16 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2015-07-15 20:40:16 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll 2015-07-15 20:40:16 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll 2015-07-15 20:40:15 ----A---- C:\WINDOWS\system32\urlmon.dll 2015-07-15 20:40:15 ----A---- C:\WINDOWS\system32\mshtml.dll 2015-07-15 20:40:15 ----A---- C:\WINDOWS\system32\iertutil.dll 2015-07-15 20:40:15 ----A---- C:\WINDOWS\system32\ieframe.dll 2015-07-15 20:14:45 ----D---- C:\Users\Yolan\AppData\Roaming\Hulubulu 2015-07-15 20:14:32 ----D---- C:\Program Files (x86)\Advanced Renamer 2015-07-15 19:17:48 ----D---- C:\Program Files (x86)\pidgin-otr 2015-07-15 18:49:02 ----A---- C:\WINDOWS\system32\perfi013.dat 2015-07-15 18:49:01 ----A---- C:\WINDOWS\system32\perfh013.dat 2015-07-15 18:49:01 ----A---- C:\WINDOWS\system32\perfd013.dat 2015-07-15 18:49:01 ----A---- C:\WINDOWS\system32\perfc013.dat 2015-07-15 18:47:13 ----D---- C:\WINDOWS\SYSWOW64\nl 2015-07-15 18:47:13 ----D---- C:\WINDOWS\nl-NL 2015-07-15 18:47:09 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer 2015-07-15 18:47:09 ----D---- C:\WINDOWS\SYSWOW64\drivers\nl-NL 2015-07-15 18:47:00 ----D---- C:\WINDOWS\system32\nl 2015-07-15 18:46:48 ----D---- C:\WINDOWS\system32\drivers\nl-NL 2015-07-15 18:31:11 ----A---- C:\WINDOWS\system32\invagent.dll 2015-07-15 18:31:11 ----A---- C:\WINDOWS\system32\generaltel.dll 2015-07-15 18:31:11 ----A---- C:\WINDOWS\system32\devinv.dll 2015-07-15 18:31:11 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe 2015-07-15 18:31:11 ----A---- C:\WINDOWS\system32\appraiser.dll 2015-07-15 18:31:11 ----A---- C:\WINDOWS\system32\aeinv.dll 2015-07-15 18:31:11 ----A---- C:\WINDOWS\system32\acmigration.dll 2015-07-15 18:31:10 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll 2015-07-15 18:31:10 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\shell32.dll 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\profsvc.dll 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\drivers\sermouse.sys 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys 2015-07-15 18:31:10 ----A---- C:\WINDOWS\system32\aepdu.dll 2015-07-15 18:31:09 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll 2015-07-15 18:31:09 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll 2015-07-15 18:31:08 ----A---- C:\WINDOWS\system32\win32k.sys 2015-07-15 18:31:08 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys 2015-07-15 18:31:07 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll 2015-07-15 18:31:07 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-15 18:31:07 ----A---- C:\WINDOWS\SYSWOW64\authui.dll 2015-07-15 18:31:07 ----A---- C:\WINDOWS\system32\WSShared.dll 2015-07-15 18:31:07 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-15 18:31:07 ----A---- C:\WINDOWS\system32\msi.dll 2015-07-15 18:31:07 ----A---- C:\WINDOWS\system32\authui.dll 2015-07-15 18:31:06 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe 2015-07-15 18:31:06 ----A---- C:\WINDOWS\SYSWOW64\msi.dll 2015-07-15 18:31:06 ----A---- C:\WINDOWS\system32\msiexec.exe 2015-07-15 18:31:05 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll 2015-07-15 18:31:05 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll 2015-07-15 18:31:05 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll 2015-07-15 18:31:05 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\rpcrt4.dll 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\msv1_0.dll 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\lsasrv.dll 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\kerberos.dll 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys 2015-07-15 18:31:05 ----A---- C:\WINDOWS\system32\certcli.dll 2015-07-15 18:31:04 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll 2015-07-15 18:31:04 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll 2015-07-15 18:31:04 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll 2015-07-15 18:31:04 ----A---- C:\WINDOWS\system32\audiosrv.dll 2015-07-15 18:31:04 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-07-15 18:31:04 ----A---- C:\WINDOWS\system32\atmlib.dll 2015-07-15 18:31:04 ----A---- C:\WINDOWS\system32\atmfd.dll 2015-07-15 18:30:43 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll 2015-07-15 18:30:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll 2015-07-15 18:30:43 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-07-15 18:30:43 ----A---- C:\WINDOWS\system32\ole32.dll 2015-07-15 18:30:43 ----A---- C:\WINDOWS\system32\gdi32.dll 2015-07-15 18:30:43 ----A---- C:\WINDOWS\system32\fhcpl.dll 2015-07-15 18:30:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll 2015-07-15 18:30:42 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll 2015-07-15 18:30:41 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll 2015-07-15 18:30:41 ----A---- C:\WINDOWS\system32\msftedit.dll 2015-07-15 18:30:41 ----A---- C:\WINDOWS\system32\jscript9.dll 2015-07-15 18:30:41 ----A---- C:\WINDOWS\system32\drivers\storvsp.sys 2015-07-15 18:30:41 ----A---- C:\WINDOWS\system32\apphelp.dll 2015-07-15 18:30:39 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll 2015-07-13 19:04:00 ----D---- C:\WINDOWS\pss 2015-07-13 18:27:21 ----D---- C:\ProgramData\ESET 2015-07-13 18:27:21 ----D---- C:\Program Files\ESET 2015-07-12 14:35:34 ----RHD---- C:\ESD 2015-07-11 13:21:38 ----D---- C:\Program Files (x86)\PCSX2 1.2.1 2015-07-04 16:11:55 ----D---- C:\Users\Yolan\AppData\Roaming\Einsteinium 2015-07-02 13:12:41 ----D---- C:\Users\Yolan\AppData\Roaming\MonetaryUnit 2015-06-29 02:06:27 ----D---- C:\Users\Yolan\AppData\Roaming\Injustice 2015-06-29 01:40:05 ----D---- C:\Users\Yolan\AppData\Roaming\Injustice - Gods Among Us. Ultimate Edition 2015-06-29 00:44:42 ----D---- C:\Users\Yolan\AppData\Roaming\qBittorrent 2015-06-26 01:30:20 ----D---- C:\ProgramData\Auslogics 2015-06-26 01:30:08 ----D---- C:\Program Files (x86)\Auslogics 2015-06-25 20:17:05 ----D---- C:\Users\Yolan\AppData\Roaming\MK10 2015-06-25 19:25:11 ----D---- C:\Users\Yolan\AppData\Roaming\MotioninJoy 2015-06-25 19:25:10 ----A---- C:\WINDOWS\system32\MijFrc.dll 2015-06-25 19:25:09 ----D---- C:\Program Files\MotioninJoy 2015-06-25 19:25:09 ----A---- C:\WINDOWS\system32\drivers\xusb21.sys 2015-06-25 19:25:09 ----A---- C:\WINDOWS\system32\drivers\MijXfilt.sys 2015-06-25 18:44:20 ----D---- C:\Users\Yolan\AppData\Roaming\Assassin's Creed Unity 2015-06-25 18:16:13 ----D---- C:\Users\Yolan\AppData\Roaming\Mortal Kombat X 2015-06-24 18:03:15 ----A---- C:\WINDOWS\SYSWOW64\nvStreaming.exe 2015-06-24 18:00:22 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll 2015-06-24 18:00:22 ----A---- C:\WINDOWS\system32\nvumdshimx.dll 2015-06-24 18:00:22 ----A---- C:\WINDOWS\system32\nvhdap64.dll 2015-06-24 18:00:22 ----A---- C:\WINDOWS\system32\drivers\nvhda64v.sys 2015-06-24 18:00:21 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\nvopencl.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\nvoglv64.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\nvoglshim64.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\nvmcumd.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\nvinitx.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\NvIFR64.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\NvFBC64.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\nvdispgenco6435330.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\nvdispco6435330.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\nvd3dumx.dll 2015-06-24 18:00:21 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys 2015-06-24 18:00:20 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll 2015-06-24 18:00:20 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll 2015-06-24 18:00:20 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll 2015-06-24 18:00:20 ----A---- C:\WINDOWS\system32\nvcuvid.dll 2015-06-24 18:00:20 ----A---- C:\WINDOWS\system32\nvcuda.dll 2015-06-24 18:00:20 ----A---- C:\WINDOWS\system32\nvcompiler.dll 2015-06-22 13:34:50 ----D---- C:\ProgramData\RealVNC-Service 2015-06-22 13:34:37 ----D---- C:\Program Files\RealVNC 2015-06-21 23:23:47 ----D---- C:\Program Files (x86)\Pushbullet 2015-06-18 23:02:22 ----D---- C:\Users\Yolan\AppData\Roaming\MultiBitHD 2015-06-18 22:59:29 ----D---- C:\Program Files\MultiBit HD 2015-06-18 21:00:11 ----D---- C:\Python27 2015-06-18 20:57:28 ----D---- C:\Python34 2015-06-18 20:31:29 ----D---- C:\Users\Yolan\AppData\Roaming\JetBrains 2015-06-18 20:29:39 ----D---- C:\Program Files (x86)\JetBrains ======List of files/folders modified in the last 1 month====== 2015-07-17 23:38:26 ----D---- C:\Program Files\trend micro 2015-07-17 23:37:37 ----D---- C:\WINDOWS\Temp 2015-07-17 23:34:20 ----D---- C:\Users\Yolan\AppData\Roaming\Spotify 2015-07-17 23:34:10 ----D---- C:\Users\Yolan\AppData\Roaming\Dropbox 2015-07-17 23:32:38 ----D---- C:\WINDOWS\Prefetch 2015-07-17 23:31:49 ----D---- C:\WINDOWS\system32\sru 2015-07-17 00:29:36 ----D---- C:\Users\Yolan\AppData\Roaming\.purple 2015-07-17 00:24:35 ----D---- C:\Users\Yolan\AppData\Roaming\ViberPC 2015-07-16 23:20:49 ----SHD---- C:\WINDOWS\Installer 2015-07-16 23:20:48 ----SHD---- C:\Config.Msi 2015-07-16 23:20:17 ----D---- C:\Program Files (x86)\Internet Explorer 2015-07-16 23:19:43 ----D---- C:\WINDOWS\SysWOW64 2015-07-16 23:14:54 ----D---- C:\ProgramData\VMware 2015-07-16 23:14:11 ----D---- C:\ProgramData\NVIDIA 2015-07-16 21:21:23 ----D---- C:\Users\Yolan\AppData\Roaming\TS3Client 2015-07-16 21:19:54 ----D---- C:\WINDOWS\system32\config 2015-07-16 21:10:59 ----D---- C:\WINDOWS\Inf 2015-07-16 21:09:13 ----D---- C:\WINDOWS\WinSxS 2015-07-16 21:05:57 ----RD---- C:\WINDOWS\System32 2015-07-16 21:05:57 ----D---- C:\WINDOWS\system32\drivers 2015-07-16 21:05:55 ----D---- C:\WINDOWS\SYSWOW64\setup 2015-07-16 21:05:55 ----D---- C:\WINDOWS\system32\setup 2015-07-16 21:05:54 ----D---- C:\Windows 2015-07-16 21:05:51 ----D---- C:\WINDOWS\system32\DriverStore 2015-07-16 20:51:55 ----D---- C:\Users\Yolan\AppData\Roaming\vlc 2015-07-16 20:26:09 ----D---- C:\WINDOWS\CbsTemp 2015-07-16 20:25:40 ----D---- C:\WINDOWS\SYSWOW64\nl-NL 2015-07-16 20:25:40 ----D---- C:\WINDOWS\system32\nl-NL 2015-07-16 20:24:27 ----RSD---- C:\WINDOWS\assembly 2015-07-16 20:23:06 ----D---- C:\ProgramData\Microsoft Help 2015-07-16 20:21:51 ----D---- C:\WINDOWS\system32\wbem 2015-07-16 20:21:51 ----D---- C:\WINDOWS\system32\en-US 2015-07-16 20:20:54 ----D---- C:\WINDOWS\SYSWOW64\migration 2015-07-16 20:20:53 ----D---- C:\WINDOWS\system32\migration 2015-07-16 20:13:32 ----D---- C:\WINDOWS\system32\catroot2 2015-07-16 18:44:50 ----RD---- C:\Program Files (x86) 2015-07-16 18:44:48 ----D---- C:\WINDOWS\Tasks 2015-07-16 00:15:06 ----D---- C:\WINDOWS\WinStore 2015-07-16 00:15:05 ----D---- C:\WINDOWS\PolicyDefinitions 2015-07-16 00:15:05 ----D---- C:\WINDOWS\apppatch 2015-07-16 00:15:05 ----D---- C:\Program Files\Internet Explorer 2015-07-16 00:15:02 ----RD---- C:\WINDOWS\ToastData 2015-07-16 00:15:02 ----D---- C:\WINDOWS\system32\CodeIntegrity 2015-07-15 20:30:01 ----SD---- C:\WINDOWS\system32\CompatTel 2015-07-15 20:30:01 ----D---- C:\WINDOWS\system32\appraiser 2015-07-15 20:26:39 ----A---- C:\WINDOWS\win.ini 2015-07-15 19:50:08 ----D---- C:\WINDOWS\system32\MRT 2015-07-15 19:49:27 ----SD---- C:\WINDOWS\SYSWOW64\GWX 2015-07-15 19:49:27 ----SD---- C:\WINDOWS\system32\GWX 2015-07-15 19:46:33 ----D---- C:\WINDOWS\debug 2015-07-15 19:17:48 ----D---- C:\Program Files (x86)\Pidgin 2015-07-15 19:07:04 ----D---- C:\WINDOWS\Microsoft.NET 2015-07-15 19:04:05 ----D---- C:\Program Files (x86)\Microsoft Office 2015-07-15 18:59:28 ----D---- C:\Program Files (x86)\MSBuild 2015-07-15 18:58:32 ----D---- C:\Program Files (x86)\Microsoft SQL Server 2015-07-15 18:58:31 ----D---- C:\Program Files\Common Files\microsoft shared 2015-07-15 18:57:54 ----D---- C:\Program Files\Microsoft SQL Server 2015-07-15 18:47:16 ----D---- C:\WINDOWS\servicing 2015-07-15 18:47:16 ----D---- C:\Program Files\Windows Photo Viewer 2015-07-15 18:47:16 ----D---- C:\Program Files\Windows Media Player 2015-07-15 18:47:16 ----D---- C:\Program Files\Windows Mail 2015-07-15 18:47:16 ----D---- C:\Program Files\Windows Journal 2015-07-15 18:47:16 ----D---- C:\Program Files\Windows Defender 2015-07-15 18:47:16 ----D---- C:\Program Files\Common Files\System 2015-07-15 18:47:16 ----D---- C:\Program Files (x86)\Windows Photo Viewer 2015-07-15 18:47:16 ----D---- C:\Program Files (x86)\Windows Media Player 2015-07-15 18:47:16 ----D---- C:\Program Files (x86)\Windows Mail 2015-07-15 18:47:16 ----D---- C:\Program Files (x86)\Windows Defender 2015-07-15 18:47:13 ----D---- C:\WINDOWS\SYSWOW64\winrm 2015-07-15 18:47:13 ----D---- C:\WINDOWS\SYSWOW64\slmgr 2015-07-15 18:47:13 ----D---- C:\WINDOWS\SYSWOW64\oobe 2015-07-15 18:47:09 ----D---- C:\WINDOWS\SYSWOW64\WCN 2015-07-15 18:47:09 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts 2015-07-15 18:47:09 ----D---- C:\WINDOWS\SYSWOW64\MUI 2015-07-15 18:47:09 ----D---- C:\WINDOWS\SYSWOW64\drivers 2015-07-15 18:47:09 ----D---- C:\WINDOWS\SYSWOW64\Dism 2015-07-15 18:47:03 ----D---- C:\WINDOWS\SYSWOW64\wbem 2015-07-15 18:47:03 ----D---- C:\WINDOWS\SYSWOW64\Com 2015-07-15 18:47:02 ----D---- C:\WINDOWS\IME 2015-07-15 18:47:00 ----RD---- C:\WINDOWS\ImmersiveControlPanel 2015-07-15 18:47:00 ----D---- C:\WINDOWS\system32\winrm 2015-07-15 18:47:00 ----D---- C:\WINDOWS\system32\migwiz 2015-07-15 18:46:59 ----D---- C:\WINDOWS\system32\Sysprep 2015-07-15 18:46:59 ----D---- C:\WINDOWS\system32\slmgr 2015-07-15 18:46:59 ----D---- C:\WINDOWS\system32\oobe 2015-07-15 18:46:59 ----D---- C:\WINDOWS\system32\Boot 2015-07-15 18:46:48 ----D---- C:\WINDOWS\system32\WCN 2015-07-15 18:46:48 ----D---- C:\WINDOWS\system32\MUI 2015-07-15 18:46:48 ----D---- C:\WINDOWS\system32\drivers\UMDF 2015-07-15 18:46:48 ----D---- C:\WINDOWS\system32\Dism 2015-07-15 18:46:45 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts 2015-07-15 18:46:42 ----D---- C:\WINDOWS\system32\SystemResetPlatform 2015-07-15 18:46:42 ----D---- C:\WINDOWS\system32\Com 2015-07-15 18:46:42 ----D---- C:\WINDOWS\Help 2015-07-15 18:46:42 ----D---- C:\WINDOWS\FileManager 2015-07-15 18:46:01 ----D---- C:\WINDOWS\SYSWOW64\1033 2015-07-15 18:46:01 ----D---- C:\WINDOWS\system32\1033 2015-07-15 18:38:30 ----D---- C:\Users\Yolan\AppData\Roaming\DAEMON Tools Lite 2015-07-15 18:38:30 ----D---- C:\Program Files (x86)\Steam 2015-07-15 18:38:08 ----D---- C:\WINDOWS\Logs 2015-07-15 18:32:42 ----SHD---- C:\System Volume Information 2015-07-14 23:23:57 ----D---- C:\Users\Yolan\AppData\Roaming\Skype 2015-07-14 19:12:40 ----D---- C:\WINDOWS\AppReadiness 2015-07-14 19:12:39 ----HD---- C:\Program Files\WindowsApps 2015-07-14 18:38:13 ----D---- C:\Users\Yolan\AppData\Roaming\.minecraft 2015-07-14 18:21:25 ----D---- C:\Program Files (x86)\Notepad++ 2015-07-13 23:10:13 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe 2015-07-13 18:27:21 ----RD---- C:\Program Files 2015-07-13 18:27:21 ----HD---- C:\ProgramData 2015-07-12 16:24:46 ----D---- C:\Program Files (x86)\Battle.net 2015-07-12 14:37:47 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2015-07-12 14:13:21 ----D---- C:\Program Files (x86)\TeamViewer 2015-07-08 00:19:32 ----D---- C:\Users\Yolan\AppData\Roaming\mIRC 2015-07-05 12:08:23 ----N---- C:\WINDOWS\system32\MpSigStub.exe 2015-07-03 08:43:04 ----A---- C:\WINDOWS\system32\MRT.exe 2015-06-30 11:07:38 ----D---- C:\Program Files (x86)\Overwolf 2015-06-28 19:29:00 ----D---- C:\WINDOWS\system32\Tasks 2015-06-27 19:57:44 ----D---- C:\ProgramData\Origin 2015-06-26 13:21:01 ----D---- C:\Program Files\Speccy 2015-06-26 00:30:40 ----D---- C:\ProgramData\Orbit 2015-06-24 20:25:26 ----D---- C:\Users\Yolan\AppData\Roaming\VisualAssist 2015-06-24 18:03:50 ----D---- C:\ProgramData\NVIDIA Corporation 2015-06-24 18:00:27 ----D---- C:\ProgramData\boost_interprocess 2015-06-24 16:09:29 ----D---- C:\Program Files\Nexus Mod Manager 2015-06-24 15:05:30 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-06-24 14:54:36 ----D---- C:\Program Files (x86)\SystemRequirementsLab 2015-06-23 20:03:58 ----D---- C:\Users\Yolan\AppData\Roaming\Pandacoin 2015-06-23 01:11:09 ----D---- C:\WINDOWS\LiveKernelReports 2015-06-21 19:06:42 ----D---- C:\tabellen 2015-06-20 00:49:44 ----D---- C:\Program Files (x86)\PandaCoin 2015-06-19 18:59:07 ----D---- C:\Users\Yolan\AppData\Roaming\Dogecoin 2015-06-19 14:20:44 ----D---- C:\WINDOWS\system32\NDF 2015-06-19 00:06:00 ----D---- C:\Users\Yolan\AppData\Roaming\VMware 2015-06-18 23:04:28 ----D---- C:\Program Files (x86)\mIRC ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 edevmon;edevmon; C:\WINDOWS\system32\DRIVERS\edevmon.sys [2015-01-30 241880] R0 vmci;@oem32.inf,%vmci.Service.DispName%;VMware VMCI Bus Driver; C:\WINDOWS\System32\drivers\vmci.sys [2013-10-08 85584] R1 eamonm;eamonm; C:\WINDOWS\system32\DRIVERS\eamonm.sys [2015-01-30 246000] R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2015-01-30 169792] R2 epfwwfpr;epfwwfpr; C:\WINDOWS\system32\DRIVERS\epfwwfpr.sys [2015-01-30 159480] R2 hcmon;VMware hcmon; \??\C:\WINDOWS\system32\drivers\hcmon.sys [2013-10-09 53816] R3 anvsnddrv;@oem18.inf,%anvsnddrv.SvcDesc%;AnvSoft Virtual Sound Device; C:\WINDOWS\system32\drivers\anvsnddrv.sys [2011-11-28 33872] R3 dtlitescsibus;@oem16.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2015-04-28 30352] R3 EuMusDesignVirtualAudioCableWdm;@oem39.inf,%DeviceName% (WDM);Virtual Audio Cable (WDM); C:\WINDOWS\system32\DRIVERS\vrtaucbl.sys [2014-08-10 98464] R3 LGBusEnum;@oem28.inf,%LGBusEnum.SVCDESC%;Logitech GamePanel Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\LGBusEnum.sys [2009-11-24 22408] R3 LGVirHid;@oem29.inf,%LGVirHid.SVCDESC%;Logitech Gamepanel Virtual HID Device Driver; C:\WINDOWS\system32\drivers\LGVirHid.sys [2009-11-24 16008] R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-06-18 25816] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2015-07-17 113880] R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-06-18 64216] R3 MTsensor;@oem12.inf,%ASACPI.DisplayName%;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2013-05-17 17280] R3 netr28ux;@oem7.inf,%Generic.Service.DispName%;Linksys USB Wireless LAN Card Driver for Vista; C:\WINDOWS\system32\DRIVERS\netr28ux.sys [2011-06-08 1600064] R3 NVHDA;@oem60.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-06-17 204648] R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-06-17 11011216] R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-05-23 19600] R3 nvvad_WaveExtensible;@oem64.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-04-03 38032] R3 SensorsSimulatorDriver;@oem18.inf,%WudfSensorsSimulatorDriverDisplayName%;UMDF Reflector service for SensorsSimulatorDriver; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2015-03-10 226304] R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Still Serial Digital Camera Driver; C:\WINDOWS\System32\drivers\serscan.sys [2015-03-09 11776] R3 tap0901;@oem3.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2013-08-22 40664] R3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-03-18 121088] R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2015-03-09 212736] S3 cpuz138;cpuz138; \??\C:\Users\Yolan\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [] S3 dg_ssudbus;@oem8.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800] S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] S3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2015-03-30 44296] S3 MotioninJoyXFilter;@oem67.inf,%MotioninJoyXFilter.ServiceName%;MotioninJoy Virtual Xinput device Filter Driver; C:\WINDOWS\System32\drivers\MijXfilt.sys [2012-05-12 121416] S3 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2014-08-19 36600] S3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360] S3 ssudmdm;@oem41.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] S3 taphss6;@oem43.inf,%DeviceDescription%;Anchorfree HSS VPN Adapter; C:\WINDOWS\system32\DRIVERS\taphss6.sys [2014-05-17 42184] S3 tapoas;@oem33.inf,%DeviceDescription%;TAP Adapter OAS NDIS 6.0; C:\WINDOWS\system32\DRIVERS\tapoas.sys [2014-05-07 26624] S3 TIEHDUSB;@oem47.inf,%ServiceDesc%;TI Core USB Driver; C:\WINDOWS\System32\drivers\tiehdusb.sys [2014-12-02 128512] S3 USBAAPL64;@oem46.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-11-28 54784] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-23 81088] R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-03-17 77128] R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-03-09 38792] R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2015-01-28 1349576] R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-23 1152656] R2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc); C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [2014-12-02 22744] R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-06-18 1871160] R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-05-23 1893008] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-23 23006864] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-06-17 937616] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2014-12-26 76152] R2 Service KMSELDI;Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [2014-10-26 965776] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-06-17 410768] R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-06-18 5495056] R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [2013-10-18 86096] R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696] R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-03-17 643880] S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-30 116648] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14 268976] S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-16 50864] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-03-09 38792] S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2014-05-30 5632] S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-03-31 1277680] S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [2014-12-02 142336] S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-30 116648] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-26 114288] S3 OpenVPNService;OpenVPN Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2014-06-05 37176] S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-06-02 1997168] S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760] S3 OverwolfUpdater;Overwolf Updater Windows SCM; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-06-21 1000688] S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-06-04 837312] S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [2014-12-02 119808] -----------------EOF-----------------