Logfile of random's system information tool 1.10 (written by random/random) Run by Gebruiker at 2015-08-07 11:19:41 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 81 GB (53%) free of 153 GB Total RAM: 2018 MB (40% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:20:03, on 7-8-2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17909) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Windows\system32\igfxsrvc.exe C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE C:\Windows\PixArt\Pac207\Monitor.exe C:\Program Files\File Association Helper\FAHWindow.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe C:\Program Files\Trusteer\Rapport\bin\RapportService.exe C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Windows\system32\GWX\GWX.exe C:\Program Files\Common Files\Java\Java Update\jucheck.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Gebruiker\Downloads\RSIT.exe C:\Program Files\trend micro\Gebruiker.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missing O1 - Hosts: 0.0.0.1 mssplus.mcafee.com O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe O4 - HKLM\..\Run: [FAHConsole] C:\Program Files\File Association Helper\FAHConsole.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user') O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe -- End of file - 6341 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-2690800931-1078553500-2598438441-1000Core.job - C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-2690800931-1078553500-2598438441-1000UA.job - C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\eywjyma1.default [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 18.0.0.209 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\Windows\system32\Adobe\Director\np32dsw_1202122.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/EPPEX] "Description"=Canon Easy-PhotoPrint EX "Path"=C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0] "Description"=Picasa3 plugin "Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.45.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}] Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08 202144] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-07 460384] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-07 172640] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08 1619352] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 141848] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 173592] "Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 150552] "MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 981688] "CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2516296] "CanonSolutionMenuEx"=C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112] "Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488] "FAHConsole"=C:\Program Files\File Association Helper\FAHConsole.exe [2014-01-28 616632] "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-04-30 334896] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Dropbox Update"=C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-14 134512] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2009-09-23 218112] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-08-07 11:19:41 ----D---- C:\rsit 2015-08-07 10:58:51 ----D---- C:\Program Files\Mozilla Firefox 2015-07-28 08:59:21 ----A---- C:\Windows\system32\generaltel.dll 2015-07-28 08:59:20 ----A---- C:\Windows\system32\invagent.dll 2015-07-28 08:59:20 ----A---- C:\Windows\system32\devinv.dll 2015-07-28 08:59:20 ----A---- C:\Windows\system32\appraiser.dll 2015-07-28 08:59:20 ----A---- C:\Windows\system32\aeinv.dll 2015-07-28 08:59:20 ----A---- C:\Windows\system32\acmigration.dll 2015-07-28 08:59:19 ----A---- C:\Windows\system32\CompatTelRunner.exe 2015-07-28 08:59:19 ----A---- C:\Windows\system32\aepdu.dll 2015-07-24 01:28:33 ----D---- C:\Program Files\McAfee Security Scan 2015-07-21 03:42:31 ----A---- C:\Windows\system32\lpk.dll 2015-07-21 03:42:31 ----A---- C:\Windows\system32\fontsub.dll 2015-07-21 03:42:31 ----A---- C:\Windows\system32\dciman32.dll 2015-07-21 03:42:31 ----A---- C:\Windows\system32\atmlib.dll 2015-07-21 03:42:31 ----A---- C:\Windows\system32\atmfd.dll 2015-07-15 10:31:23 ----A---- C:\Windows\system32\win32k.sys 2015-07-15 10:31:19 ----A---- C:\Windows\system32\msv1_0.dll 2015-07-15 10:31:19 ----A---- C:\Windows\system32\kerberos.dll 2015-07-15 10:31:19 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2015-07-15 10:31:18 ----A---- C:\Windows\system32\wdigest.dll 2015-07-15 10:31:18 ----A---- C:\Windows\system32\TSpkg.dll 2015-07-15 10:31:18 ----A---- C:\Windows\system32\sspicli.dll 2015-07-15 10:31:18 ----A---- C:\Windows\system32\schannel.dll 2015-07-15 10:31:18 ----A---- C:\Windows\system32\rpcrt4.dll 2015-07-15 10:31:18 ----A---- C:\Windows\system32\ncrypt.dll 2015-07-15 10:31:18 ----A---- C:\Windows\system32\lsass.exe 2015-07-15 10:31:18 ----A---- C:\Windows\system32\lsasrv.dll 2015-07-15 10:31:18 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2015-07-15 10:31:18 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2015-07-15 10:31:18 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-07-15 10:31:18 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-07-15 10:31:18 ----A---- C:\Windows\system32\cryptbase.dll 2015-07-15 10:31:18 ----A---- C:\Windows\system32\auditpol.exe 2015-07-15 10:31:17 ----A---- C:\Windows\system32\sspisrv.dll 2015-07-15 10:31:17 ----A---- C:\Windows\system32\secur32.dll 2015-07-15 10:31:17 ----A---- C:\Windows\system32\msobjs.dll 2015-07-15 10:31:17 ----A---- C:\Windows\system32\msaudite.dll 2015-07-15 10:31:17 ----A---- C:\Windows\system32\credssp.dll 2015-07-15 10:31:17 ----A---- C:\Windows\system32\adtschema.dll 2015-07-15 10:31:08 ----A---- C:\Windows\system32\msi.dll 2015-07-15 10:31:07 ----A---- C:\Windows\system32\msimsg.dll 2015-07-15 10:31:07 ----A---- C:\Windows\system32\msihnd.dll 2015-07-15 10:31:07 ----A---- C:\Windows\system32\msiexec.exe 2015-07-15 10:31:07 ----A---- C:\Windows\system32\consent.exe 2015-07-15 10:31:07 ----A---- C:\Windows\system32\authui.dll 2015-07-15 10:31:07 ----A---- C:\Windows\system32\appinfo.dll 2015-07-15 10:30:50 ----A---- C:\Windows\system32\ole32.dll 2015-07-15 10:30:45 ----A---- C:\Windows\system32\gdi32.dll 2015-07-15 10:30:42 ----A---- C:\Windows\system32\wintrust.dll 2015-07-15 10:30:42 ----A---- C:\Windows\system32\cryptsvc.dll 2015-07-15 10:30:42 ----A---- C:\Windows\system32\cryptnet.dll 2015-07-15 10:30:42 ----A---- C:\Windows\system32\crypt32.dll 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wuwebv.dll 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wups2.dll 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wups.dll 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wudriver.dll 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wucltux.dll 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wuauclt.exe 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wuapp.exe 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wuapi.dll 2015-07-15 10:30:30 ----A---- C:\Windows\system32\wu.upgrade.ps.dll 2015-07-15 10:30:29 ----A---- C:\Windows\system32\wuaueng.dll 2015-07-15 10:30:29 ----A---- C:\Windows\system32\WinSetupUI.dll 2015-07-15 10:30:18 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll 2015-07-15 10:30:18 ----A---- C:\Windows\system32\rdpcorets.dll 2015-07-15 10:30:17 ----A---- C:\Windows\system32\cewmdm.dll 2015-07-15 10:30:12 ----A---- C:\Windows\system32\jscript9diag.dll 2015-07-15 10:30:12 ----A---- C:\Windows\system32\jscript9.dll 2015-07-15 10:30:11 ----A---- C:\Windows\system32\urlmon.dll 2015-07-15 10:30:11 ----A---- C:\Windows\system32\ieui.dll 2015-07-15 10:30:10 ----A---- C:\Windows\system32\ieframe.dll 2015-07-15 10:30:09 ----A---- C:\Windows\system32\mshtml.dll 2015-07-15 10:30:08 ----A---- C:\Windows\system32\iertutil.dll 2015-07-15 10:30:06 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-15 10:30:06 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-07-15 10:30:06 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-07-15 10:30:06 ----A---- C:\Windows\system32\ie4uinit.exe 2015-07-15 10:30:05 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-15 10:30:05 ----A---- C:\Windows\system32\iernonce.dll 2015-07-15 10:30:05 ----A---- C:\Windows\system32\iedkcs32.dll 2015-07-15 10:30:04 ----A---- C:\Windows\system32\jsproxy.dll 2015-07-15 10:30:04 ----A---- C:\Windows\system32\ieUnatt.exe 2015-07-15 10:30:04 ----A---- C:\Windows\system32\ieapfltr.dll 2015-07-15 10:30:04 ----A---- C:\Windows\system32\dxtmsft.dll 2015-07-15 10:30:03 ----A---- C:\Windows\system32\msfeeds.dll 2015-07-15 10:30:02 ----A---- C:\Windows\system32\msrating.dll 2015-07-15 10:30:02 ----A---- C:\Windows\system32\iesetup.dll 2015-07-15 10:30:00 ----A---- C:\Windows\system32\wininet.dll 2015-07-15 10:30:00 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-07-15 10:29:59 ----A---- C:\Windows\system32\dxtrans.dll 2015-07-15 10:29:56 ----A---- C:\Windows\system32\mshtmled.dll 2015-07-15 10:29:55 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-07-15 10:29:54 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-07-15 10:29:50 ----A---- C:\Windows\system32\jscript.dll 2015-07-15 10:29:48 ----A---- C:\Windows\system32\vbscript.dll 2015-07-10 15:42:36 ----HD---- C:\$Windows.~BT ======List of files/folders modified in the last 1 month====== 2015-08-07 11:19:58 ----D---- C:\Windows\Prefetch 2015-08-07 11:19:52 ----D---- C:\Program Files\trend micro 2015-08-07 11:12:16 ----D---- C:\Windows\Temp 2015-08-07 11:11:48 ----D---- C:\Program Files\Mozilla Maintenance Service 2015-08-07 11:11:47 ----RD---- C:\Program Files 2015-08-06 22:50:08 ----D---- C:\Windows\System32 2015-08-06 22:50:08 ----D---- C:\Windows\inf 2015-08-06 22:50:08 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-08-06 22:47:45 ----D---- C:\Users\Gebruiker\AppData\Roaming\Dropbox 2015-08-06 22:45:38 ----D---- C:\Windows\system32\config 2015-08-05 12:11:47 ----SHD---- C:\System Volume Information 2015-08-01 09:53:20 ----D---- C:\ProgramData\CanonIJPLM 2015-07-29 00:27:12 ----D---- C:\Windows\Panther 2015-07-28 23:55:19 ----D---- C:\Windows\Logs 2015-07-28 10:12:01 ----SD---- C:\Windows\system32\CompatTel 2015-07-28 08:58:45 ----D---- C:\Windows\winsxs 2015-07-28 08:58:23 ----D---- C:\Windows\SoftwareDistribution 2015-07-26 08:53:21 ----SD---- C:\Windows\system32\GWX 2015-07-24 01:28:33 ----D---- C:\ProgramData\McAfee Security Scan 2015-07-20 21:21:05 ----D---- C:\Windows\rescache 2015-07-20 09:57:08 ----SHD---- C:\Windows\Installer 2015-07-20 09:57:08 ----SHD---- C:\Config.Msi 2015-07-20 09:30:11 ----D---- C:\Windows\system32\Tasks 2015-07-16 17:58:09 ----D---- C:\Windows\system32\nl-NL 2015-07-16 17:58:09 ----D---- C:\Windows\system32\drivers 2015-07-16 17:58:04 ----D---- C:\Windows\system32\wbem 2015-07-16 17:58:04 ----D---- C:\Windows\system32\appraiser 2015-07-16 17:58:04 ----D---- C:\Windows\AppPatch 2015-07-16 17:58:02 ----D---- C:\Windows\PolicyDefinitions 2015-07-16 17:58:00 ----D---- C:\Windows\system32\en-US 2015-07-16 17:58:00 ----D---- C:\Program Files\Internet Explorer 2015-07-16 01:28:44 ----D---- C:\Windows\system32\MRT 2015-07-16 01:22:26 ----D---- C:\ProgramData\Microsoft Help 2015-07-15 10:29:23 ----D---- C:\Windows\system32\catroot2 2015-07-14 22:07:13 ----D---- C:\Users\Gebruiker\AppData\Roaming\Adobe 2015-07-14 15:48:21 ----D---- C:\Program Files\Common Files\Adobe 2015-07-14 15:48:19 ----D---- C:\Program Files\Adobe 2015-07-14 15:47:52 ----D---- C:\ProgramData\Adobe 2015-07-14 15:44:16 ----A---- C:\Windows\system32\FlashPlayerApp.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 245096] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368] R0 RapportHades;RapportHades; C:\Windows\System32\Drivers\RapportHades.sys [2015-06-02 68280] R0 RapportKELL;RapportKELL; C:\Windows\System32\Drivers\RapportKELL.sys [2015-06-02 218264] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440] R1 RapportCerberus_1412112;RapportCerberus_1412112; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus32_1412112.sys [2015-06-30 531416] R1 RapportEI;RapportEI; \??\C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys [2015-06-02 280088] R1 RapportPG;RapportPG; \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys [2015-06-02 337176] R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6232.sys [2011-10-14 231640] R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2009-09-19 45184] R3 IFXTPM;IFXTPM; C:\Windows\system32\DRIVERS\IFXTPM.SYS [2008-07-23 44800] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888] S3 cleanhlp;cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-05-04 114904] S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 95408] S3 PAC207;SoC PC-Camera; C:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304] S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 30720] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 49664] S3 usb_rndisx;USB RNDIS-adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 15872] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104] R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 22216] R2 RapportMgmtService;Rapport Management Service; C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe [2015-06-02 2222360] S2 19c32c90;SystemPatch; c:\Program Files\SystemPatch\SystemPatch.dll,serv [] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608] S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-12-11 315496] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14 268976] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-06-19 102912] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [2015-06-26 235696] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-07 148136] S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 284504] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-25 1343400] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] -----------------EOF-----------------