Logfile of random's system information tool 1.10 (written by random/random)
Run by User1 at 2015-09-08 07:42:00
Microsoft Windows 7 Ultimate  Service Pack 1
System drive C: has 407 GB (88%) free of 461 GB
Total RAM: 3894 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:42:19, on 8/09/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\AVG\AVG2015\avgui.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files\trend micro\User1.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_8DFDA4EDF67BEB42A85E8A6D92071EEF] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6320 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-1c1a-dd42c329b744 /binaryPath="C:\Program Files (x86)\AVG\AVG2015\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 31087264
\??\C:\Windows\system32\conhost.exe "12845859111765020157-1936259714-143029746313490037641262870320-6684964551444811966
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgemca.exe"
atieclxx
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
"C:\Windows\system32\GWX\GWX.exe" 
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9ab68ed6-f037-4319-916c-d593844a2f55 -SystemEventPortName:HostProcess-a63b9e15-1ed9-475e-af1e-792a50fa119b -IoCancelEventPortName:HostProcess-14a0e6be-85b9-46cb-a80b-31a114ea2f0c -NonStateChangingEventPortName:HostProcess-3a718310-c98f-4350-852c-073b6853a7bf -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d88a6302-c767-4005-a81c-7350ff3622db
"C:\Windows\System32\igfxtray.exe" 
"C:\Windows\System32\hkcmd.exe" 
"C:\Windows\System32\igfxpers.exe" 
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
C:\Windows\system32\SearchIndexer.exe /Embedding
ctfmon.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" 
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:192 CREDAT:71937
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:192 CREDAT:71938
C:\Windows\system32\Macromed\Flash\FlashUtil64_18_0_0_232_ActiveX.exe -Embedding
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Users\User1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8EOYA9YJ\RSITx64[1].exe" 
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe  
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c 
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler 

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-01-10 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-01-10 392984]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-01-10 417560]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-08-26 55100016]
"GoogleChromeAutoLaunch_8DFDA4EDF67BEB42A85E8A6D92071EEF"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-01-21 843592]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2015-08-24 3775912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-01-10 390656]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-09-05 09:32:19 ----SHD---- C:\Config.Msi
2015-09-03 07:02:30 ----D---- C:\Users\User1\AppData\Roaming\Wise Registry Cleaner
2015-09-02 07:14:30 ----D---- C:\Users\User1\AppData\Roaming\Thunderbird
2015-09-02 07:14:16 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2015-09-01 09:21:53 ----D---- C:\Users\User1\AppData\Roaming\ParetoLogic
2015-09-01 09:21:53 ----D---- C:\Users\User1\AppData\Roaming\DriverCure
2015-09-01 09:21:42 ----D---- C:\ProgramData\ParetoLogic
2015-09-01 08:23:51 ----D---- C:\Users\User1\AppData\Roaming\ImgBurn
2015-08-30 14:01:34 ----D---- C:\Users\User1\AppData\Roaming\Windows Live Writer
2015-08-30 13:43:12 ----D---- C:\Program Files (x86)\Microsoft
2015-08-29 14:32:43 ----SHD---- C:\$RECYCLE.BIN
2015-08-29 14:29:21 ----D---- C:\Windows\Temp
2015-08-29 14:29:21 ----A---- C:\Windows\zoek-delete.exe
2015-08-29 09:12:18 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2015-08-29 09:12:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2015-08-29 09:12:16 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2015-08-29 09:12:16 ----A---- C:\Windows\system32\d3dx10_42.dll
2015-08-29 09:11:03 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2015-08-29 09:11:03 ----A---- C:\Windows\system32\d3dx9_32.dll
2015-08-29 06:51:30 ----D---- C:\Program Files\Microsoft Silverlight
2015-08-28 09:07:31 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-08-28 09:04:12 ----D---- C:\Program Files\Windows Live
2015-08-28 09:00:20 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-08-27 17:00:59 ----D---- C:\AdwCleaner
2015-08-26 13:25:29 ----D---- C:\Users\User1\AppData\Roaming\vlc
2015-08-24 14:01:35 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-08-24 14:01:35 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-08-24 14:01:35 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-24 14:01:35 ----A---- C:\Windows\system32\davclnt.dll
2015-08-24 14:01:33 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-08-24 14:01:33 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-08-24 14:01:33 ----A---- C:\Windows\system32\msxml6.dll
2015-08-24 14:01:33 ----A---- C:\Windows\system32\msxml3.dll
2015-08-24 14:01:32 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-08-24 14:01:32 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-08-24 14:01:32 ----A---- C:\Windows\system32\msxml6r.dll
2015-08-24 14:01:32 ----A---- C:\Windows\system32\msxml3r.dll
2015-08-24 14:01:27 ----A---- C:\Windows\system32\iertutil.dll
2015-08-24 14:01:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-08-24 14:01:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-08-24 14:01:26 ----A---- C:\Windows\system32\vbscript.dll
2015-08-24 14:01:26 ----A---- C:\Windows\system32\urlmon.dll
2015-08-24 14:01:25 ----A---- C:\Windows\system32\wininet.dll
2015-08-24 14:01:24 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-08-24 14:01:24 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-08-24 14:01:24 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-08-24 14:01:24 ----A---- C:\Windows\system32\msrating.dll
2015-08-24 14:01:23 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-08-24 14:01:23 ----A---- C:\Windows\system32\jsproxy.dll
2015-08-24 06:49:16 ----SD---- C:\Windows\SYSWOW64\GWX
2015-08-24 06:49:16 ----SD---- C:\Windows\system32\GWX
2015-08-24 06:41:20 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-24 06:41:20 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-23 21:11:19 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2015-08-23 21:11:06 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-23 21:11:06 ----A---- C:\Windows\system32\drivers\mwac.sys
2015-08-23 21:11:06 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2015-08-23 21:11:06 ----A---- C:\Windows\system32\drivers\mbam.sys
2015-08-23 20:02:01 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-23 20:02:00 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-23 20:02:00 ----A---- C:\Windows\system32\ntdll.dll
2015-08-23 20:02:00 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-23 20:01:59 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-08-23 20:01:59 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-08-23 20:01:58 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-08-23 20:01:58 ----A---- C:\Windows\system32\schannel.dll
2015-08-23 20:01:58 ----A---- C:\Windows\system32\kerberos.dll
2015-08-23 20:01:57 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-08-23 20:01:57 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-08-23 20:01:57 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-08-23 20:01:57 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-08-23 20:01:57 ----A---- C:\Windows\system32\wow64win.dll
2015-08-23 20:01:57 ----A---- C:\Windows\system32\msv1_0.dll
2015-08-23 20:01:57 ----A---- C:\Windows\system32\KernelBase.dll
2015-08-23 20:01:57 ----A---- C:\Windows\system32\kernel32.dll
2015-08-23 20:01:57 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-08-23 20:01:57 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-08-23 20:01:56 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-08-23 20:01:56 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-08-23 20:01:56 ----A---- C:\Windows\system32\wow64.dll
2015-08-23 20:01:56 ----A---- C:\Windows\system32\winsrv.dll
2015-08-23 20:01:56 ----A---- C:\Windows\system32\sysmain.dll
2015-08-23 20:01:56 ----A---- C:\Windows\system32\ncrypt.dll
2015-08-23 20:01:56 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-08-23 20:01:56 ----A---- C:\Windows\system32\adtschema.dll
2015-08-23 20:01:55 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-08-23 20:01:55 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-08-23 20:01:55 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-08-23 20:01:55 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-08-23 20:01:55 ----A---- C:\Windows\system32\wdigest.dll
2015-08-23 20:01:55 ----A---- C:\Windows\system32\TSpkg.dll
2015-08-23 20:01:55 ----A---- C:\Windows\system32\srcore.dll
2015-08-23 20:01:55 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-08-23 20:01:55 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-23 20:01:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-08-23 20:01:55 ----A---- C:\Windows\system32\conhost.exe
2015-08-23 20:01:54 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-08-23 20:01:54 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-08-23 20:01:54 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-08-23 20:01:54 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-08-23 20:01:54 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-08-23 20:01:54 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-08-23 20:01:54 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-08-23 20:01:54 ----A---- C:\Windows\system32\sspisrv.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\sspicli.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\srclient.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\smss.exe
2015-08-23 20:01:54 ----A---- C:\Windows\system32\secur32.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\rstrui.exe
2015-08-23 20:01:54 ----A---- C:\Windows\system32\ntvdm64.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\msaudite.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\lsass.exe
2015-08-23 20:01:54 ----A---- C:\Windows\system32\csrsrv.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\cryptbase.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\credssp.dll
2015-08-23 20:01:54 ----A---- C:\Windows\system32\auditpol.exe
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-23 20:01:53 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-23 20:01:53 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-08-23 20:01:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-08-23 20:01:53 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-08-23 20:01:53 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-08-23 20:01:53 ----A---- C:\Windows\system32\wow64cpu.dll
2015-08-23 20:01:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-23 20:01:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-23 20:01:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-23 20:01:52 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-23 20:01:52 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-23 20:01:52 ----A---- C:\Windows\SYSWOW64\user.exe
2015-08-23 20:01:52 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-08-23 20:01:52 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-08-23 20:01:52 ----A---- C:\Windows\system32\msobjs.dll
2015-08-23 20:01:52 ----A---- C:\Windows\system32\apisetschema.dll
2015-08-23 19:33:21 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-08-23 19:33:21 ----A---- C:\Windows\system32\wdi.dll
2015-08-23 19:33:21 ----A---- C:\Windows\system32\powertracker.dll
2015-08-23 19:33:21 ----A---- C:\Windows\system32\perftrack.dll
2015-08-23 19:33:10 ----A---- C:\Windows\system32\drivers\cng.sys
2015-08-23 19:32:46 ----A---- C:\Windows\system32\invagent.dll
2015-08-23 19:32:46 ----A---- C:\Windows\system32\generaltel.dll
2015-08-23 19:32:46 ----A---- C:\Windows\system32\devinv.dll
2015-08-23 19:32:46 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-08-23 19:32:46 ----A---- C:\Windows\system32\appraiser.dll
2015-08-23 19:32:46 ----A---- C:\Windows\system32\aitstatic.exe
2015-08-23 19:32:46 ----A---- C:\Windows\system32\aepic.dll
2015-08-23 19:32:46 ----A---- C:\Windows\system32\aeinv.dll
2015-08-23 19:32:46 ----A---- C:\Windows\system32\acmigration.dll
2015-08-23 19:32:45 ----A---- C:\Windows\system32\aepdu.dll
2015-08-23 19:32:44 ----A---- C:\Windows\system32\services.exe
2015-08-23 19:32:38 ----A---- C:\Windows\system32\wmp.dll
2015-08-23 19:32:36 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-08-23 19:32:35 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-08-23 19:32:35 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-08-23 19:32:35 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-08-23 19:32:35 ----A---- C:\Windows\system32\spwmp.dll
2015-08-23 19:32:35 ----A---- C:\Windows\system32\dxmasf.dll
2015-08-23 19:32:34 ----A---- C:\Windows\system32\wmploc.DLL
2015-08-23 19:32:30 ----A---- C:\Windows\system32\mstscax.dll
2015-08-23 19:32:29 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-08-23 19:32:29 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-08-23 19:32:29 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2015-08-23 19:32:29 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-23 19:32:29 ----A---- C:\Windows\system32\aaclient.dll
2015-08-23 19:32:12 ----A---- C:\Windows\system32\UtcResources.dll
2015-08-23 19:32:12 ----A---- C:\Windows\system32\diagtrack.dll
2015-08-23 19:32:09 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-08-23 19:32:09 ----A---- C:\Windows\system32\tdh.dll
2015-08-23 19:32:09 ----A---- C:\Windows\system32\advapi32.dll
2015-08-23 19:32:08 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2015-08-23 19:32:08 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2015-08-23 19:32:08 ----A---- C:\Windows\SYSWOW64\sechost.dll
2015-08-23 19:32:08 ----A---- C:\Windows\SYSWOW64\logman.exe
2015-08-23 19:32:08 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-08-23 19:32:08 ----A---- C:\Windows\system32\typeperf.exe
2015-08-23 19:32:08 ----A---- C:\Windows\system32\tracerpt.exe
2015-08-23 19:32:08 ----A---- C:\Windows\system32\sechost.dll
2015-08-23 19:32:08 ----A---- C:\Windows\system32\relog.exe
2015-08-23 19:32:08 ----A---- C:\Windows\system32\logman.exe
2015-08-23 19:32:07 ----A---- C:\Windows\SYSWOW64\relog.exe
2015-08-23 19:32:07 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2015-08-23 19:32:07 ----A---- C:\Windows\system32\diskperf.exe
2015-08-23 19:31:45 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-08-23 19:31:39 ----A---- C:\Windows\system32\mf.dll
2015-08-23 19:31:37 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-08-23 19:31:37 ----A---- C:\Windows\system32\drmv2clt.dll
2015-08-23 19:31:36 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-08-23 19:31:36 ----A---- C:\Windows\system32\quartz.dll
2015-08-23 19:31:36 ----A---- C:\Windows\system32\msscp.dll
2015-08-23 19:31:35 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-08-23 19:31:35 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-08-23 19:31:35 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-08-23 19:31:35 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-08-23 19:31:35 ----A---- C:\Windows\system32\winload.exe
2015-08-23 19:31:35 ----A---- C:\Windows\system32\pcasvc.dll
2015-08-23 19:31:35 ----A---- C:\Windows\system32\cryptui.dll
2015-08-23 19:31:35 ----A---- C:\Windows\system32\audiosrv.dll
2015-08-23 19:31:34 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-08-23 19:31:34 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2015-08-23 19:31:34 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-08-23 19:31:34 ----A---- C:\Windows\system32\blackbox.dll
2015-08-23 19:31:34 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-08-23 19:31:33 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-08-23 19:31:33 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-08-23 19:31:33 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-08-23 19:31:33 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-08-23 19:31:33 ----A---- C:\Windows\system32\qdvd.dll
2015-08-23 19:31:33 ----A---- C:\Windows\system32\msnetobj.dll
2015-08-23 19:31:33 ----A---- C:\Windows\system32\mfplat.dll
2015-08-23 19:31:33 ----A---- C:\Windows\system32\evr.dll
2015-08-23 19:31:33 ----A---- C:\Windows\system32\AudioSes.dll
2015-08-23 19:31:33 ----A---- C:\Windows\system32\audiodg.exe
2015-08-23 19:31:32 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-08-23 19:31:32 ----A---- C:\Windows\system32\pcadm.dll
2015-08-23 19:31:32 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2015-08-23 19:31:32 ----A---- C:\Windows\system32\AudioEng.dll
2015-08-23 19:31:31 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-08-23 19:31:31 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-08-23 19:31:31 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-08-23 19:31:31 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-08-23 19:31:31 ----A---- C:\Windows\system32\rrinstaller.exe
2015-08-23 19:31:31 ----A---- C:\Windows\system32\mfps.dll
2015-08-23 19:31:30 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-08-23 19:31:30 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-08-23 19:31:29 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-08-23 19:31:29 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-08-23 19:31:29 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-08-23 19:31:29 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-08-23 19:31:29 ----A---- C:\Windows\system32\pcawrk.exe
2015-08-23 19:31:29 ----A---- C:\Windows\system32\pcalua.exe
2015-08-23 19:31:29 ----A---- C:\Windows\system32\mfpmp.exe
2015-08-23 19:31:29 ----A---- C:\Windows\system32\EncDump.dll
2015-08-23 19:31:29 ----A---- C:\Windows\system32\cryptsp.dll
2015-08-23 19:31:29 ----A---- C:\Windows\system32\appidsvc.dll
2015-08-23 19:31:29 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-08-23 19:31:29 ----A---- C:\Windows\system32\appidapi.dll
2015-08-23 19:31:28 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-08-23 19:31:26 ----A---- C:\Windows\system32\drivers\appid.sys
2015-08-23 19:31:21 ----A---- C:\Windows\system32\pcaevts.dll
2015-08-23 19:31:19 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-08-23 19:31:19 ----A---- C:\Windows\system32\mferror.dll
2015-08-23 19:30:54 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-08-23 19:30:54 ----A---- C:\Windows\system32\jnwmon.dll
2015-08-23 19:30:54 ----A---- C:\Windows\system32\InkEd.dll
2015-08-23 19:30:28 ----A---- C:\Windows\system32\basesrv.dll
2015-08-23 19:29:51 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-08-23 19:29:51 ----A---- C:\Windows\system32\ubpm.dll
2015-08-23 19:29:45 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2015-08-23 19:29:45 ----A---- C:\Windows\system32\wpdshext.dll
2015-08-23 19:29:37 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-08-23 19:29:37 ----A---- C:\Windows\system32\gdi32.dll
2015-08-23 19:29:30 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2015-08-23 19:29:30 ----A---- C:\Windows\system32\comctl32.dll
2015-08-23 19:29:22 ----A---- C:\Windows\system32\ole32.dll
2015-08-23 19:29:21 ----A---- C:\Windows\SYSWOW64\ole32.dll
2015-08-23 19:29:10 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-08-23 19:29:10 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-08-23 19:29:10 ----A---- C:\Windows\system32\wintrust.dll
2015-08-23 19:29:10 ----A---- C:\Windows\system32\cryptsvc.dll
2015-08-23 19:29:10 ----A---- C:\Windows\system32\cryptnet.dll
2015-08-23 19:29:10 ----A---- C:\Windows\system32\crypt32.dll
2015-08-23 19:29:09 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-08-23 19:29:09 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-08-23 19:28:40 ----A---- C:\Windows\system32\msi.dll
2015-08-23 19:28:40 ----A---- C:\Windows\system32\authui.dll
2015-08-23 19:28:39 ----A---- C:\Windows\SYSWOW64\msi.dll
2015-08-23 19:28:39 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-08-23 19:28:39 ----A---- C:\Windows\system32\msiexec.exe
2015-08-23 19:28:39 ----A---- C:\Windows\system32\consent.exe
2015-08-23 19:28:38 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2015-08-23 19:28:38 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2015-08-23 19:28:38 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2015-08-23 19:28:38 ----A---- C:\Windows\system32\msimsg.dll
2015-08-23 19:28:38 ----A---- C:\Windows\system32\msihnd.dll
2015-08-23 19:28:38 ----A---- C:\Windows\system32\appinfo.dll
2015-08-23 19:28:26 ----A---- C:\Windows\system32\win32k.sys
2015-08-23 19:28:25 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-08-23 19:28:25 ----A---- C:\Windows\system32\FntCache.dll
2015-08-23 19:28:25 ----A---- C:\Windows\system32\DWrite.dll
2015-08-23 19:28:25 ----A---- C:\Windows\system32\atmfd.dll
2015-08-23 19:28:24 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-23 19:28:22 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-08-23 19:28:22 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-08-23 19:28:22 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-08-23 19:28:22 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-08-23 19:28:22 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-08-23 19:28:22 ----A---- C:\Windows\system32\lpk.dll
2015-08-23 19:28:22 ----A---- C:\Windows\system32\fontsub.dll
2015-08-23 19:28:22 ----A---- C:\Windows\system32\dciman32.dll
2015-08-23 19:28:22 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-23 19:28:22 ----A---- C:\Windows\system32\atmlib.dll
2015-08-23 19:28:20 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-23 19:28:20 ----A---- C:\Windows\system32\notepad.exe
2015-08-23 19:28:20 ----A---- C:\Windows\notepad.exe
2015-08-23 19:28:19 ----A---- C:\Windows\system32\rdpcorets.dll
2015-08-23 19:28:18 ----A---- C:\Windows\system32\rdpudd.dll
2015-08-23 19:28:18 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2015-08-23 19:28:17 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-08-23 19:28:17 ----A---- C:\Windows\system32\oleaut32.dll
2015-08-23 19:28:13 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2015-08-23 19:28:13 ----A---- C:\Windows\system32\poqexec.exe
2015-08-23 19:28:12 ----A---- C:\Windows\system32\drivers\stream.sys
2015-08-23 19:28:11 ----A---- C:\Windows\system32\drivers\http.sys
2015-08-23 19:28:10 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-08-23 19:28:10 ----A---- C:\Windows\system32\msctf.dll
2015-08-23 19:28:08 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-08-23 19:28:08 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-08-23 19:28:03 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-08-23 19:28:03 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-08-23 19:28:03 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-08-23 19:28:03 ----A---- C:\Windows\system32\shimeng.dll
2015-08-23 19:28:03 ----A---- C:\Windows\system32\sdbinst.exe
2015-08-23 19:28:03 ----A---- C:\Windows\system32\apphelp.dll
2015-08-23 19:28:03 ----A---- C:\Windows\system32\aelupsvc.dll
2015-08-23 19:28:02 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-08-23 19:28:02 ----A---- C:\Windows\system32\scesrv.dll
2015-08-23 19:27:33 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-08-23 19:27:14 ----A---- C:\Windows\system32\certcli.dll
2015-08-23 19:26:41 ----A---- C:\Windows\system32\shell32.dll
2015-08-23 19:26:40 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-08-23 19:16:28 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2015-08-23 19:16:28 ----A---- C:\Windows\system32\clfsw32.dll
2015-08-23 19:16:28 ----A---- C:\Windows\system32\clfs.sys
2015-08-23 19:15:53 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-08-23 19:15:53 ----A---- C:\Windows\system32\WMPhoto.dll
2015-08-23 19:07:06 ----A---- C:\Windows\SYSWOW64\cewmdm.dll
2015-08-23 19:07:06 ----A---- C:\Windows\system32\cewmdm.dll
2015-08-23 19:04:46 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-08-23 19:04:46 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-08-23 19:04:46 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-08-23 19:04:46 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-08-23 19:04:46 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wuwebv.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wups2.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wups.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wudriver.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wucltux.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wuauclt.exe
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wuapp.exe
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wuapi.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-23 19:04:46 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-08-22 14:41:10 ----D---- C:\Program Files\trend micro
2015-08-22 08:03:10 ----D---- C:\zoek_backup
2015-08-21 18:57:43 ----D---- C:\rsit
2015-08-21 18:57:43 ----D---- C:\Program Files (x86)\trend micro
2015-08-21 16:16:53 ----D---- C:\Program Files\Common Files\AV
2015-08-19 11:53:56 ----A---- C:\Windows\system32\drivers\avgidsha.sys
2015-08-19 11:52:30 ----A---- C:\Windows\system32\drivers\avgidsdrivera.sys

======List of files/folders modified in the last 1 month======

2015-09-08 07:39:32 ----D---- C:\Windows\System32
2015-09-08 07:39:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-08 07:39:31 ----D---- C:\Windows\inf
2015-09-08 07:39:09 ----D---- C:\Users\User1\AppData\Roaming\Skype
2015-09-08 07:35:47 ----D---- C:\Windows\Prefetch
2015-09-08 07:34:27 ----D---- C:\Windows\Minidump
2015-09-08 07:34:17 ----D---- C:\Windows
2015-09-08 07:28:41 ----D---- C:\ProgramData\MFAData
2015-09-08 07:28:38 ----SHD---- C:\System Volume Information
2015-09-08 07:10:36 ----D---- C:\Windows\Logs
2015-09-08 07:08:06 ----D---- C:\Windows\system32\config
2015-09-07 20:04:02 ----D---- C:\Windows\system32\Tasks
2015-09-07 20:04:02 ----D---- C:\Program Files
2015-09-05 09:39:56 ----D---- C:\Windows\Tasks
2015-09-05 09:39:56 ----D---- C:\Windows\system32\wfp
2015-09-05 09:39:56 ----D---- C:\Windows\system32\wbem
2015-09-05 09:39:56 ----D---- C:\Windows\system32\DriverStore
2015-09-05 09:39:55 ----D---- C:\Windows\system32\catroot2
2015-09-05 09:39:54 ----D---- C:\Windows\registration
2015-09-05 09:32:25 ----SHD---- C:\Windows\Installer
2015-09-05 09:32:21 ----RD---- C:\Program Files (x86)\Skype
2015-09-05 09:26:49 ----D---- C:\ProgramData\Skype
2015-09-05 09:26:42 ----D---- C:\Windows\SysWOW64
2015-09-04 10:09:08 ----D---- C:\Windows\system32\drivers
2015-09-02 17:36:55 ----SD---- C:\ProgramData\Microsoft
2015-09-02 17:34:06 ----RD---- C:\Program Files (x86)
2015-09-02 17:33:28 ----D---- C:\Program Files (x86)\Common Files
2015-09-02 07:14:22 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-01 09:39:52 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-09-01 09:21:42 ----HD---- C:\ProgramData
2015-08-31 12:10:24 ----RSD---- C:\Windows\assembly
2015-08-31 12:04:39 ----DC---- C:\Windows\system32\DRVSTORE
2015-08-30 13:25:41 ----D---- C:\Windows\Downloaded Program Files
2015-08-30 13:25:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-08-29 13:00:36 ----D---- C:\Windows\system32\wdi
2015-08-29 10:09:14 ----D---- C:\Windows\SoftwareDistribution
2015-08-29 10:08:43 ----D---- C:\Windows\debug
2015-08-29 09:18:25 ----D---- C:\Windows\winsxs
2015-08-29 08:56:49 ----D---- C:\Windows\system32\drivers\etc
2015-08-29 08:56:16 ----SD---- C:\Users\User1\AppData\Roaming\Microsoft
2015-08-27 20:43:30 ----D---- C:\ProgramData\AVG2015
2015-08-27 20:13:05 ----D---- C:\Windows\servicing
2015-08-27 20:11:46 ----D---- C:\Windows\SYSWOW64\wbem
2015-08-27 20:11:45 ----D---- C:\Program Files\Windows Media Player
2015-08-27 20:11:43 ----D---- C:\Windows\ehome
2015-08-27 20:11:43 ----D---- C:\Program Files\Windows Photo Viewer
2015-08-27 20:11:43 ----D---- C:\Program Files\Internet Explorer
2015-08-27 20:09:43 ----D---- C:\Windows\system32\drivers\UMDF
2015-08-27 20:09:43 ----D---- C:\Windows\system32\CodeIntegrity
2015-08-27 20:09:16 ----D---- C:\Program Files\iTunes
2015-08-27 20:09:14 ----D---- C:\Program Files\Common Files\Apple
2015-08-27 20:09:14 ----D---- C:\Program Files\Common Files
2015-08-27 20:09:09 ----D---- C:\Program Files\Bonjour
2015-08-27 20:06:36 ----D---- C:\Windows\Web
2015-08-27 20:06:35 ----D---- C:\Windows\Vss
2015-08-27 20:06:35 ----D---- C:\Windows\SYSWOW64\XPSViewer
2015-08-27 20:06:35 ----D---- C:\Windows\SYSWOW64\winrm
2015-08-27 20:06:34 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell
2015-08-27 20:06:33 ----D---- C:\Windows\SYSWOW64\wdi
2015-08-27 20:06:33 ----D---- C:\Windows\SYSWOW64\WCN
2015-08-27 20:06:32 ----D---- C:\Windows\SYSWOW64\spp
2015-08-27 20:06:32 ----D---- C:\Windows\SYSWOW64\Speech
2015-08-27 20:06:31 ----D---- C:\Windows\SYSWOW64\slmgr
2015-08-27 20:06:29 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2015-08-27 20:06:27 ----D---- C:\Windows\SYSWOW64\nl-NL
2015-08-27 20:06:27 ----D---- C:\Windows\SYSWOW64\NetworkList
2015-08-27 20:06:27 ----D---- C:\Windows\SYSWOW64\MUI
2015-08-27 20:06:25 ----D---- C:\Windows\SYSWOW64\Msdtc
2015-08-27 20:06:24 ----D---- C:\Windows\SYSWOW64\migwiz
2015-08-27 20:06:24 ----D---- C:\Windows\SYSWOW64\migration
2015-08-27 20:06:23 ----D---- C:\Windows\SYSWOW64\Macromed
2015-08-27 20:06:22 ----D---- C:\Windows\SYSWOW64\InstallShield
2015-08-27 20:06:22 ----D---- C:\Windows\SYSWOW64\IME
2015-08-27 20:06:19 ----D---- C:\Windows\SYSWOW64\DriverStore
2015-08-27 20:06:19 ----D---- C:\Windows\SYSWOW64\drivers
2015-08-27 20:06:19 ----D---- C:\Windows\SYSWOW64\Dism
2015-08-27 20:06:16 ----D---- C:\Windows\SYSWOW64\config
2015-08-27 20:06:16 ----D---- C:\Windows\SYSWOW64\com
2015-08-27 20:06:09 ----D---- C:\Windows\system32\winrm
2015-08-27 20:06:09 ----D---- C:\Windows\system32\WindowsPowerShell
2015-08-27 20:06:08 ----D---- C:\Windows\system32\WinBioPlugIns
2015-08-27 20:06:07 ----D---- C:\Windows\system32\WCN
2015-08-27 20:06:01 ----D---- C:\Windows\system32\sysprep
2015-08-27 20:05:59 ----D---- C:\Windows\system32\spp
2015-08-27 20:05:59 ----D---- C:\Windows\system32\spool
2015-08-27 20:05:59 ----D---- C:\Windows\system32\Speech
2015-08-27 20:05:58 ----D---- C:\Windows\system32\SMI
2015-08-27 20:05:58 ----D---- C:\Windows\system32\slmgr
2015-08-27 20:05:54 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2015-08-27 20:05:52 ----D---- C:\Windows\system32\oobe
2015-08-27 20:05:50 ----D---- C:\Windows\system32\nl-NL
2015-08-27 20:05:50 ----D---- C:\Windows\system32\NetworkList
2015-08-27 20:05:49 ----D---- C:\Windows\system32\MUI
2015-08-27 20:05:47 ----D---- C:\Windows\system32\Msdtc
2015-08-27 20:05:46 ----D---- C:\Windows\system32\migwiz
2015-08-27 20:05:45 ----SD---- C:\Windows\system32\Microsoft
2015-08-27 20:05:45 ----D---- C:\Windows\system32\migration
2015-08-27 20:05:45 ----D---- C:\Windows\system32\Macromed
2015-08-27 20:05:43 ----D---- C:\Windows\system32\IME
2015-08-27 20:05:19 ----D---- C:\Windows\system32\Dism
2015-08-27 20:05:15 ----SD---- C:\Windows\system32\CompatTel
2015-08-27 20:05:15 ----D---- C:\Windows\system32\com
2015-08-27 20:05:13 ----D---- C:\Windows\system32\Boot
2015-08-27 20:05:11 ----D---- C:\Windows\Speech
2015-08-27 20:05:11 ----D---- C:\Windows\Setup
2015-08-27 20:05:10 ----D---- C:\Windows\ServiceProfiles
2015-08-27 20:05:10 ----D---- C:\Windows\security
2015-08-27 20:05:10 ----D---- C:\Windows\schemas
2015-08-27 20:05:10 ----D---- C:\Windows\Resources
2015-08-27 20:05:10 ----D---- C:\Windows\rescache
2015-08-27 20:05:10 ----D---- C:\Windows\PolicyDefinitions
2015-08-27 20:05:10 ----D---- C:\Windows\PLA
2015-08-27 20:05:10 ----D---- C:\Windows\Performance
2015-08-27 20:05:10 ----D---- C:\Windows\Migration
2015-08-27 20:04:55 ----D---- C:\Users\User1\AppData\Roaming\Mozilla
2015-08-27 20:04:54 ----D---- C:\Users\User1\AppData\Roaming\Adobe
2015-08-27 20:04:19 ----RD---- C:\Users
2015-08-27 20:04:18 ----HD---- C:\SYSTEM.SAV
2015-08-27 20:04:18 ----D---- C:\SwSetup
2015-08-27 20:04:15 ----D---- C:\RM
2015-08-27 20:04:15 ----D---- C:\ProgramData\Oracle
2015-08-27 20:04:12 ----D---- C:\ProgramData\Malwarebytes
2015-08-27 20:04:12 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-08-27 20:04:12 ----D---- C:\ProgramData\Apple Computer
2015-08-27 20:04:12 ----D---- C:\ProgramData\Apple
2015-08-27 20:04:12 ----D---- C:\ProgramData\Adobe
2015-08-27 20:03:24 ----D---- C:\Program Files (x86)\Apple Software Update
2015-08-27 20:03:24 ----D---- C:\Intel
2015-08-27 20:03:23 ----SHD---- C:\boot
2015-08-27 20:03:23 ----HD---- C:\HP
2015-08-25 07:00:27 ----D---- C:\Windows\AppCompat
2015-08-24 21:46:33 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-24 21:44:37 ----D---- C:\Windows\Microsoft.NET
2015-08-24 21:39:26 ----D---- C:\Windows\system32\catroot
2015-08-24 21:38:17 ----D---- C:\Windows\system32\MRT
2015-08-24 08:27:11 ----D---- C:\Windows\system32\drivers\nl-NL
2015-08-24 08:27:11 ----D---- C:\Program Files\Windows Defender
2015-08-24 08:27:10 ----RSD---- C:\Windows\Fonts
2015-08-24 08:27:10 ----D---- C:\Windows\AppPatch
2015-08-24 08:27:10 ----D---- C:\Program Files\Common Files\System
2015-08-24 08:27:10 ----D---- C:\Program Files (x86)\Windows Defender
2015-08-24 06:49:27 ----D---- C:\Windows\system32\appraiser
2015-08-24 06:49:23 ----D---- C:\Program Files (x86)\Windows Media Player
2015-08-24 06:49:16 ----D---- C:\Windows\system32\AdvancedInstallers
2015-08-24 06:49:16 ----D---- C:\Program Files\Windows Journal
2015-08-23 21:27:56 ----D---- C:\Windows\Panther
2015-08-22 12:40:04 ----D---- C:\Windows\ShellNew
2015-08-22 12:40:01 ----D---- C:\Windows\system32\NDF
2015-08-22 12:37:33 ----RSD---- C:\Windows\Media
2015-08-22 12:37:29 ----D---- C:\Windows\IME
2015-08-22 12:37:29 ----D---- C:\Windows\Help
2015-08-22 12:37:29 ----D---- C:\Windows\Globalization
2015-08-22 12:37:28 ----D---- C:\Windows\diagnostics
2015-08-22 12:37:28 ----D---- C:\Windows\CheckSur
2015-08-22 12:37:28 ----D---- C:\Windows\Branding
2015-08-22 12:37:28 ----D---- C:\Windows\Boot
2015-08-22 12:37:06 ----D---- C:\Program Files\Windows Sidebar
2015-08-22 12:37:06 ----D---- C:\Program Files\Windows NT
2015-08-22 12:37:06 ----D---- C:\Program Files\Windows Mail
2015-08-22 12:37:06 ----D---- C:\Program Files\Reference Assemblies
2015-08-22 12:37:06 ----D---- C:\Program Files\MSBuild
2015-08-22 12:37:06 ----D---- C:\Program Files\Microsoft Office
2015-08-22 12:37:06 ----D---- C:\Program Files\Microsoft Games
2015-08-22 12:37:05 ----D---- C:\Program Files\Java
2015-08-22 12:37:05 ----D---- C:\Program Files\iPod
2015-08-22 12:37:05 ----D---- C:\Program Files\DVD Maker
2015-08-22 12:37:05 ----D---- C:\Program Files\Common Files\SpeechEngines
2015-08-22 12:37:04 ----D---- C:\Program Files\Common Files\ATI Technologies
2015-08-22 12:37:04 ----D---- C:\Program Files\AMD
2015-08-22 12:37:04 ----D---- C:\Program Files (x86)\Windows Sidebar
2015-08-22 12:37:04 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-08-22 12:37:04 ----D---- C:\Program Files (x86)\Windows NT
2015-08-22 12:37:04 ----D---- C:\Program Files (x86)\Windows Mail
2015-08-22 12:37:04 ----D---- C:\Program Files (x86)\VideoLAN
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Reference Assemblies
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\MSECache
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\MSBuild
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Microsoft Security Client
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Microsoft Office
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Java
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\iTunes
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Intel
2015-08-22 12:37:03 ----D---- C:\Program Files (x86)\Google
2015-08-22 12:37:01 ----D---- C:\Program Files (x86)\Adobe
2015-08-22 12:37:01 ----D---- C:\Program Files (x86)\Acro Software
2015-08-22 07:23:05 ----D---- C:\Windows\tracing

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;AMD PCI Root Bus Lower Filter; C:\Windows\system32\DRIVERS\amdkmpfd.sys [2013-12-12 36608]
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2015-08-19 297904]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2015-05-07 378336]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2015-08-04 250800]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2015-03-20 40928]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2013-06-18 213888]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2015-03-11 162784]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2015-08-19 313264]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2015-06-16 259040]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2015-08-04 300464]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2013-06-18 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\Windows\system32\DRIVERS\RMCAST.sys [2013-06-18 146432]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-09-16 16750080]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-09-15 576000]
R3 BCM43XX;Stuurprogramma voor Broadcom 802.11-netwerkadapter; C:\Windows\system32\DRIVERS\bcmwl664.sys [2014-07-17 7765240]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-01-10 12311904]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-06-18 25816]
R3 RTL8167;Realtek 8167 NT-stuurprogramma; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 dmvsc;dmvsc; C:\Windows\system32\DRIVERS\dmvsc.sys [2013-06-18 71168]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-08-25 113880]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-06-18 63704]
S3 netr28ux;Stuurprogramma voor RT2870 USB draadloze LAN-kaart voor Vista; C:\Windows\system32\DRIVERS\netr28ux.sys [2009-06-10 867328]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2013-06-18 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-06-11 20992]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2013-06-18 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2013-06-18 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2013-06-18 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\DRIVERS\terminpt.sys [2013-06-18 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-06-18 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\DRIVERS\TsUsbGD.sys [2013-06-18 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2013-06-18 117248]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\DRIVERS\vmbus.sys [2013-06-18 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2013-06-18 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2013-06-18 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-09-16 239616]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2015-08-24 3637160]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2015-08-24 335656]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-06-18 1871160]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-30 269000]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe [2015-08-13 149672]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------