Logfile of random's system information tool 1.10 (written by random/random) Run by Brian at 2015-09-13 15:30:23 Microsoft Windows 10 Home System drive C: has 198 GB (83%) free of 238 GB Total RAM: 16290 MB (75% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:30:24, on 13-9-2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.10240.16412) Boot mode: Normal Running processes: P:\Nieuwe map\TeamViewer.exe T:\Winbar\WinBar.exe C:\Users\Brian\AppData\Local\Google\Update\GoogleUpdate.exe C:\Users\Brian\AppData\Local\Google\Update\1.3.28.13\GoogleCrashHandler.exe C:\Program Files (x86)\Secunia\PSI\psi_tray.exe P:\Logitech\LWS\Webcam Software\LWS.exe P:\Evernote\EvernoteClipper.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe P:\Logitech\LWS\Webcam Software\CameraHelperShell.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe C:\Program Files (x86)\Windows Live\Mail\wlmail.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files\trend micro\Brian.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?linkid=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - P:\Evernote\EvernoteIE.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll O4 - HKLM\..\Run: [LWS] P:\Logitech\LWS\Webcam Software\LWS.exe -hide O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [OneDrive] "C:\Users\Brian\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [WinBar (x86)] T:\Winbar\WinBar.exe O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Brian\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [iCloud] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" (User 'Default user') O4 - Startup: EvernoteClipper.lnk = P:\Evernote\EvernoteClipper.exe O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Afbeelding knippen - P:\Evernote\\EvernoteIERes\Clip.html?clipAction=4 O8 - Extra context menu item: Afbeelding opnemen - P:\Evernote\EvernoteIERes\Clip.html?clipAction=4 O8 - Extra context menu item: Bladwijzer knippen - P:\Evernote\EvernoteIERes\Clip.html?clipAction=0 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Kopieer selectie - P:\Evernote\EvernoteIERes\Clip.html?clipAction=3 O8 - Extra context menu item: Kopieer URL - P:\Evernote\\EvernoteIERes\Clip.html?clipAction=0 O8 - Extra context menu item: Nieuwe notitie - P:\Evernote\EvernoteIERes\NewNote.html O8 - Extra context menu item: Pagina opemen - P:\Evernote\EvernoteIERes\Clip.html?clipAction=1 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: @P:\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - P:\Evernote\\EvernoteIERes\AddNote.html O9 - Extra 'Tools' menuitem: @P:\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - P:\Evernote\\EvernoteIERes\AddNote.html O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: Soluto Launcher Service (SolutoLauncherService) - Soluto - C:\Program Files\Soluto\SolutoLauncherService.exe O23 - Service: Soluto Remote Service (SolutoRemoteService) - GlavSoft LLC. - C:\Program Files\Soluto\SolutoRemoteService.exe O23 - Service: Soluto PCGenome Core Service (SolutoService) - Soluto - C:\Program Files\Soluto\SolutoService.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - P:\Nieuwe map\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: UsbClientService - Unknown owner - P:\Synology\Assistant\UsbClientService.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12319 bytes ======Listing Processes====== C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted "C:\WINDOWS\system32\nvvsvc.exe" C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-dcfad98e-20d2-4ce4-ad2e-b3427ffbdb5f -SystemEventPortName:HostProcess-7ea03882-a1be-47f1-9c64-d1cbfb974880 -IoCancelEventPortName:HostProcess-ff33adfb-3856-4415-9480-1d68c2928669 -NonStateChangingEventPortName:HostProcess-b8051708-2d42-4dc7-98c8-bbb63e456289 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6e6f52ea-05fc-4a4f-a836-86369a4f5a01 -DeviceGroupId:WpdFsGroup C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork C:\WINDOWS\System32\spoolsv.exe "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" C:\WINDOWS\System32\svchost.exe -k utcsvc "C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe" "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" dashost.exe {ece8b617-98b9-4058-b16adeb5837670e7} "C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service "C:\Program Files\Soluto\SolutoService.exe" "C:\Program Files\Soluto\SolutoLauncherService.exe" "P:\Nieuwe map\TeamViewer_Service.exe" C:\WINDOWS\system32\svchost.exe -k appmodel P:\Synology\Assistant\UsbClientService.exe C:\WINDOWS\system32\SearchIndexer.exe /Embedding C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files\Soluto\SolutoRemoteService.exe" -service C:\WINDOWS\System32\WinLogon.exe -SpecialSession "dwm.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\WINDOWS\system32\nvvsvc.exe -session "C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding sihost.exe "C:\Program Files\COMODO\COMODO Internet Security\cistray.exe" C:\Windows\System32\RuntimeBroker.exe -Embedding C:\WINDOWS\Explorer.EXE "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca "P:\Nieuwe map\TeamViewer.exe" "C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca "P:\Nieuwe map\tv_w32.exe" --action hooks --log P:\Nieuwe map\TeamViewer10_Logfile.log "P:\Nieuwe map\tv_x64.exe" --action hooks --log P:\Nieuwe map\TeamViewer10_Logfile.log "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s "T:\Winbar\WinBar.exe" "C:\Users\Brian\AppData\Local\Google\Update\GoogleUpdate.exe" /c "C:\Users\Brian\AppData\Local\Google\Update\1.3.28.13\GoogleCrashHandler.exe" "C:\Users\Brian\AppData\Local\Google\Update\1.3.28.13\GoogleCrashHandler64.exe" "C:\Program Files (x86)\Secunia\PSI\psi_tray.exe" "P:\Logitech\LWS\Webcam Software\LWS.exe" -hide "P:\Evernote\EvernoteClipper.exe" "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "P:\Logitech\LWS\Webcam Software\CameraHelperShell.exe" /hide "C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup "C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe" -Embedding "C:\Program Files (x86)\Windows Live\Mail\wlmail.exe" "C:\Program Files (x86)\Skype\Phone\Skype.exe" "C:\Users\Brian\AppData\Local\Google\Chrome SxS\Application\chrome.exe" "C:\Users\Brian\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --type=watcher --main-thread-id=4360 --on-initialized-event-handle=16 --parent-handle=884 "C:\Users\Brian\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --type=gpu-process --channel="7920.0.1084166636\1966547703" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,12,21,48,58 --gpu-vendor-id=0x10de --gpu-device-id=0x1287 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.5362 --ignored=" --type=renderer " /prefetch:822062411 "C:\Users\Brian\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Disabled/*AutofillClassifier/Enabled/AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*AutomaticTabDiscarding/Disabled/*BackgroundTracing/default/*BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model3/*CrossDevicePromo/ControlLarge/*DataReductionProxyConfigService/Enabled/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/copy/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/*LightSpeed/Control_PrefetchDWriteFontCache/*LoadStaleCacheExperiment/Primary/*LocalNTPFast/Control/*LocalNTPSuggestionsService/Control/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/DevNumTitleWords15/*OutOfProcessPac/Enabled/PasswordBranding/Disabled/*PasswordGeneration/Enabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/FontsAndLateScripts_11000_0_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/SRTCanary/SSLCommonNameMismatchHandling/Disabled/*SafeBrowsingIncidentReportingService/Enabled/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/StackProfiling/Report profiles/*StunProbeTrial/Default/SyncBackingDatabase32K/Enabled/SyncOptimisticBookmarkAssociation/Disabled/TabSyncByRecency/Control/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_88/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/Disabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-AdaptiveBweThreshold/Default/*WebRTC-BitrateProbing/Enabled/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --show-saved-copy=primary --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7920.2.671520210\1537291926" --font-cache-shared-handle=2884 /prefetch:673131151 "C:\Users\Brian\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Disabled/*AutofillClassifier/Enabled/AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*AutomaticTabDiscarding/Disabled/*BackgroundTracing/default/*BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model3/*CrossDevicePromo/ControlLarge/*DataReductionProxyConfigService/Enabled/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/copy/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/*LightSpeed/Control_PrefetchDWriteFontCache/*LoadStaleCacheExperiment/Primary/*LocalNTPFast/Control/*LocalNTPSuggestionsService/Control/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/DevNumTitleWords15/*OutOfProcessPac/Enabled/PasswordBranding/Disabled/*PasswordGeneration/Enabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/FontsAndLateScripts_11000_0_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/SRTCanary/SSLCommonNameMismatchHandling/Disabled/*SafeBrowsingIncidentReportingService/Enabled/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/StackProfiling/Report profiles/*StunProbeTrial/Default/SyncBackingDatabase32K/Enabled/SyncOptimisticBookmarkAssociation/Disabled/TabSyncByRecency/Control/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_88/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/Disabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-AdaptiveBweThreshold/Default/*WebRTC-BitrateProbing/Enabled/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --show-saved-copy=primary --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7920.3.1124973872\316905689" --font-cache-shared-handle=3112 /prefetch:673131151 "C:\Users\Brian\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Disabled/*AutofillClassifier/Enabled/AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*AutomaticTabDiscarding/Disabled/*BackgroundTracing/default/*BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model3/*CrossDevicePromo/ControlLarge/*DataReductionProxyConfigService/Enabled/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/copy/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/*LightSpeed/Control_PrefetchDWriteFontCache/*LoadStaleCacheExperiment/Primary/*LocalNTPFast/Control/*LocalNTPSuggestionsService/Control/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/DevNumTitleWords15/*OutOfProcessPac/Enabled/PasswordBranding/Disabled/*PasswordGeneration/Enabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/FontsAndLateScripts_11000_0_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/SRTCanary/SSLCommonNameMismatchHandling/Disabled/*SafeBrowsingIncidentReportingService/Enabled/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/StackProfiling/Report profiles/*StunProbeTrial/Default/SyncBackingDatabase32K/Enabled/SyncOptimisticBookmarkAssociation/Disabled/TabSyncByRecency/Control/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_88/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/Disabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-AdaptiveBweThreshold/Default/*WebRTC-BitrateProbing/Enabled/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --show-saved-copy=primary --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7920.4.650583711\1605883" --font-cache-shared-handle=3148 /prefetch:673131151 "C:\Users\Brian\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Disabled/*AutofillClassifier/Enabled/AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*AutomaticTabDiscarding/Disabled/*BackgroundTracing/default/*BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model3/*CrossDevicePromo/ControlLarge/*DataReductionProxyConfigService/Enabled/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/copy/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/*LightSpeed/Control_PrefetchDWriteFontCache/*LoadStaleCacheExperiment/Primary/*LocalNTPFast/Control/*LocalNTPSuggestionsService/Control/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/DevNumTitleWords15/*OutOfProcessPac/Enabled/PasswordBranding/Disabled/*PasswordGeneration/Enabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/FontsAndLateScripts_11000_0_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/SRTCanary/SSLCommonNameMismatchHandling/Disabled/*SafeBrowsingIncidentReportingService/Enabled/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/StackProfiling/Report profiles/*StunProbeTrial/Default/SyncBackingDatabase32K/Enabled/SyncOptimisticBookmarkAssociation/Disabled/TabSyncByRecency/Control/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_88/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/Disabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-AdaptiveBweThreshold/Default/*WebRTC-BitrateProbing/Enabled/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --show-saved-copy=primary --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7920.5.1532893446\1949204898" --font-cache-shared-handle=3280 /prefetch:673131151 "C:\Users\Brian\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Disabled/*AutofillClassifier/Enabled/AutofillEnabled/Default/*AutofillFieldMetadata/Enabled/*AutomaticTabDiscarding/Disabled/*BackgroundTracing/default/*BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model3/*CrossDevicePromo/ControlLarge/*DataReductionProxyConfigService/Enabled/*DomRel-Enable/enable/*EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/copy/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Enabled/*LightSpeed/Control_PrefetchDWriteFontCache/*LoadStaleCacheExperiment/Primary/*LocalNTPFast/Control/*LocalNTPSuggestionsService/Control/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/DevNumTitleWords15/*OutOfProcessPac/Enabled/PasswordBranding/Disabled/*PasswordGeneration/Enabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/*RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/FontsAndLateScripts_11000_0_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/SRTCanary/SSLCommonNameMismatchHandling/Disabled/*SafeBrowsingIncidentReportingService/Enabled/SafeBrowsingReportPhishingErrorLink/Enabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/StackProfiling/Report profiles/*StunProbeTrial/Default/SyncBackingDatabase32K/Enabled/SyncOptimisticBookmarkAssociation/Disabled/TabSyncByRecency/Control/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_88/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_14/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/Disabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/WebRTC-AdaptiveBweThreshold/Default/*WebRTC-BitrateProbing/Enabled/*WebRTC-SupportVP9/Default/WebRTC-UDPSocketNonBlockingIO/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --show-saved-copy=primary --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="7920.6.980570280\1486947461" --font-cache-shared-handle=5944 /prefetch:673131151 C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding "C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.8.25.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe" -ServerName:App.AppXqagq4n4gvy0tjw576pgh6xr601s1h1mv.mca C:\WINDOWS\system32\SettingSyncHost.exe -Embedding "C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1508.14010.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe14_ Global\UsGthrCtrlFltPipeMssGthrPipe14 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\WINDOWS\system32\SearchFilterHost.exe" 0 960 964 972 8192 968 C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} "C:\Users\Brian\Desktop\RSITx64.exe" C:\WINDOWS\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1778768322-595465748-2038507635-1000Core.job - C:\Users\Brian\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1778768322-595465748-2038507635-1000UA.job - C:\Users\Brian\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\Brian\AppData\Roaming\Mozilla\Firefox\Profiles\odhqtxrl.default prefs.js - "browser.startup.homepage" - "http://google.nl/" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 18.0.0.232 Plugin "Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1220162.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1] "Description"=VLC Multimedia Plugin "Path"=P:\Vlc Player\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 18.0.0.232 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-20 460384] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}] Evernote extension - P:\Evernote\EvernoteIE.dll [2015-07-01 629256] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-20 172640] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800] "Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496] "IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2015-06-23 36352] "iTunesHelper"=T:\iTunes\iTunesHelper.exe [2015-08-13 170256] "COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-08-05 1427648] "Soluto"=c:\program files\soluto\soluto.exe [2013-12-08 1361440] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "OneDrive"=C:\Users\Brian\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-08-07 402632] "msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2014-03-31 4272840] "WinBar (x86)"=T:\Winbar\WinBar.exe [2009-09-29 271360] "iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2015-04-26 43816] "Google Update"=C:\Users\Brian\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-04 144200] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "LWS"=P:\Logitech\LWS\Webcam Software\LWS.exe [2012-09-13 204136] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe C:\Users\Brian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup EvernoteClipper.lnk - P:\Evernote\EvernoteClipper.exe [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DSCAutomationHostEnabled"=2 "PromptOnSecureDesktop"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "vidc.i420"=lvcod64.dll "vidc.iyuv"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvu9"=tsbyuv.dll "vidc.yvyu"=msyuv.dll "wavemapper"=msacm32.drv "MSVideo"=vfwwdm32.dll "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "aux2"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-09-08 23:43:39 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll 2015-09-08 23:43:39 ----A---- C:\WINDOWS\system32\edgehtml.dll 2015-09-08 23:43:38 ----A---- C:\WINDOWS\system32\mshtml.dll 2015-09-08 23:43:37 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2015-09-08 23:43:36 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll 2015-09-08 23:43:36 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll 2015-09-08 23:43:36 ----A---- C:\WINDOWS\system32\win32kfull.sys 2015-09-08 23:43:36 ----A---- C:\WINDOWS\system32\ieframe.dll 2015-09-08 23:43:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll 2015-09-08 23:43:35 ----A---- C:\WINDOWS\SYSWOW64\authui.dll 2015-09-08 23:43:35 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll 2015-09-08 23:43:35 ----A---- C:\WINDOWS\system32\authui.dll 2015-09-08 23:43:34 ----A---- C:\WINDOWS\system32\win32kbase.sys 2015-09-08 23:43:34 ----A---- C:\WINDOWS\system32\SettingSync.dll 2015-09-08 23:43:34 ----A---- C:\WINDOWS\system32\jscript.dll 2015-09-08 23:43:34 ----A---- C:\WINDOWS\system32\iertutil.dll 2015-09-08 23:43:33 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll 2015-09-08 23:43:33 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll 2015-09-08 23:43:33 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll 2015-09-08 23:43:33 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe 2015-09-08 23:43:33 ----A---- C:\WINDOWS\system32\winlogon.exe 2015-09-08 23:43:33 ----A---- C:\WINDOWS\system32\vbscript.dll 2015-09-08 23:43:33 ----A---- C:\WINDOWS\system32\schedsvc.dll 2015-09-08 23:43:33 ----A---- C:\WINDOWS\system32\fontdrvhost.exe 2015-09-08 23:43:33 ----A---- C:\WINDOWS\system32\acmigration.dll 2015-09-08 23:43:32 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll 2015-09-08 23:43:32 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll 2015-09-08 23:43:32 ----A---- C:\WINDOWS\system32\Windows.UI.PicturePassword.dll 2015-09-08 23:43:32 ----A---- C:\WINDOWS\system32\shacct.dll 2015-09-08 23:43:32 ----A---- C:\WINDOWS\system32\atmfd.dll 2015-09-08 23:43:31 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll 2015-09-08 23:43:31 ----A---- C:\WINDOWS\system32\atmlib.dll 2015-09-05 02:52:57 ----D---- C:\Users\Brian\AppData\Roaming\Comodo 2015-09-05 02:36:35 ----D---- C:\ProgramData\Malwarebytes 2015-09-04 01:33:32 ----HD---- C:\VTRoot 2015-09-04 01:33:31 ----A---- C:\WINDOWS\system32\drivers\fvstore.dat 2015-09-04 00:53:22 ----A---- C:\WINDOWS\wininit.ini 2015-09-03 23:25:25 ----A---- C:\WINDOWS\system32\drivers\sfi.dat 2015-09-03 23:25:19 ----D---- C:\ProgramData\Shared Space 2015-09-03 23:25:04 ----D---- C:\Program Files\COMODO 2015-09-03 23:23:16 ----D---- C:\ProgramData\Comodo 2015-09-03 23:19:08 ----D---- C:\ProgramData\F-Secure-UninstallationTool 2015-08-28 15:12:29 ----D---- C:\Users\Brian\AppData\Roaming\2BrightSparks 2015-08-28 13:43:10 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-08-27 23:47:52 ----A---- C:\WINDOWS\system32\shell32.dll 2015-08-27 23:47:50 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll 2015-08-27 23:47:49 ----A---- C:\WINDOWS\system32\ntoskrnl.exe 2015-08-27 23:47:49 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll 2015-08-27 23:47:48 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll 2015-08-27 23:47:48 ----A---- C:\WINDOWS\system32\wuaueng.dll 2015-08-27 23:47:48 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-08-27 23:47:48 ----A---- C:\WINDOWS\system32\dwmcore.dll 2015-08-27 23:47:47 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll 2015-08-27 23:47:47 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll 2015-08-27 23:47:47 ----A---- C:\WINDOWS\system32\reseteng.dll 2015-08-27 23:47:47 ----A---- C:\WINDOWS\system32\modernexecserver.dll 2015-08-27 23:47:47 ----A---- C:\WINDOWS\system32\LicenseManager.dll 2015-08-27 23:47:46 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll 2015-08-27 23:47:46 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll 2015-08-27 23:47:46 ----A---- C:\WINDOWS\system32\NetSetupShim.dll 2015-08-27 23:47:46 ----A---- C:\WINDOWS\system32\InstallAgent.exe 2015-08-27 23:47:46 ----A---- C:\WINDOWS\system32\facecredentialprovider.dll 2015-08-27 23:47:46 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS 2015-08-27 23:47:46 ----A---- C:\WINDOWS\system32\ci.dll 2015-08-27 23:47:45 ----A---- C:\WINDOWS\system32\WlanMediaManager.dll 2015-08-27 23:47:45 ----A---- C:\WINDOWS\system32\wcnwiz.dll 2015-08-27 23:47:45 ----A---- C:\WINDOWS\system32\WcnNetsh.dll 2015-08-27 23:47:45 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll 2015-08-27 23:47:45 ----A---- C:\WINDOWS\system32\aitstatic.exe 2015-08-27 23:47:44 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll 2015-08-27 23:47:44 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll 2015-08-27 23:47:44 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll 2015-08-27 23:47:44 ----A---- C:\WINDOWS\system32\wlansvc.dll 2015-08-27 23:47:44 ----A---- C:\WINDOWS\system32\wfdprov.dll 2015-08-27 23:47:44 ----A---- C:\WINDOWS\system32\WcnApi.dll 2015-08-27 23:47:44 ----A---- C:\WINDOWS\system32\fdWCN.dll 2015-08-27 23:47:44 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2015-08-27 23:47:44 ----A---- C:\WINDOWS\system32\dafWCN.dll 2015-08-27 23:47:43 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll 2015-08-27 23:47:43 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll 2015-08-27 23:47:43 ----A---- C:\WINDOWS\system32\vaultsvc.dll 2015-08-27 23:47:43 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll 2015-08-27 23:47:43 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-08-27 23:47:43 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-08-27 21:04:52 ----D---- C:\ProgramData\Macrium 2015-08-26 18:31:12 ----D---- C:\$WINDOWS.~BT 2015-08-26 18:30:54 ----HD---- C:\$Windows.~WS 2015-08-26 18:09:33 ----RHD---- C:\ESD 2015-08-25 01:20:21 ----D---- C:\Users\Brian\AppData\Roaming\WinBar 2015-08-25 01:20:19 ----D---- C:\ProgramData\WinBar 2015-08-20 12:19:59 ----D---- C:\Users\Brian\AppData\Roaming\Sun 2015-08-20 12:11:16 ----D---- C:\WINDOWS\system32\MRT 2015-08-20 12:11:16 ----A---- C:\WINDOWS\system32\MRT.exe 2015-08-20 12:09:46 ----A---- C:\WINDOWS\system32\wlidsvc.dll 2015-08-20 12:09:45 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\VEDataLayerHelpers.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\NotificationObjFactory.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\LogonController.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\LockAppHost.exe 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\GamePanel.exe 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll 2015-08-20 12:09:44 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll 2015-08-20 12:09:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll 2015-08-20 12:09:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll 2015-08-20 12:09:43 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll 2015-08-20 12:09:43 ----A---- C:\WINDOWS\SYSWOW64\tetheringclient.dll 2015-08-20 12:09:43 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe 2015-08-20 12:09:43 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll 2015-08-20 12:09:43 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll 2015-08-20 12:09:43 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\wwansvc.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\WWAHost.exe 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\wcmsvc.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\tquery.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\ReAgent.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\mssrch.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\mssprxy.dll 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\GamePanel.exe 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys 2015-08-20 12:09:36 ----A---- C:\WINDOWS\system32\drivers\msgpiowin32.sys 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\VEDataLayerHelpers.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\tileobjserver.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\sysmain.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\SharedStartModel.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\RDXService.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\rdbui.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\ntdll.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\notepad.exe 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\NetworkStatus.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\msctfuimanager.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\drivers\wof.sys 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\drivers\storport.sys 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\diagtrack_win.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\diagtrack.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\cloudAP.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\system32\Chakra.dll 2015-08-20 12:09:35 ----A---- C:\WINDOWS\notepad.exe 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\TextInputFramework.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\syncutil.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\mfsvr.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\mfps.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\mfplat.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\mfcore.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\mf.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\MbaeApi.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\LogonController.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\LockAppHost.exe 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\LockAppBroker.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\LocationPermissions.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\LocationGeofences.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\LocationFramework.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\InputService.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\FntCache.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\enterprisecsps.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\DWrite.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\directmanipulation.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\diagtrack_wininternal.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\coredpus.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\configmanager2.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\system32\ActionCenter.dll 2015-08-20 12:09:34 ----A---- C:\WINDOWS\explorer.exe 2015-08-20 12:09:33 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll 2015-08-20 12:09:33 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2015-08-20 12:09:33 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll 2015-08-20 12:09:33 ----A---- C:\WINDOWS\system32\tetheringservice.dll 2015-08-20 12:09:33 ----A---- C:\WINDOWS\system32\tetheringclient.dll 2015-08-20 12:09:33 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll 2015-08-20 12:00:42 ----D---- C:\WINDOWS\SoftwareDistribution 2015-08-20 11:58:48 ----D---- C:\WINDOWS\system32\catroot2 2015-08-20 11:54:09 ----HD---- C:\Program Files (x86)\Uninstall Information 2015-08-20 11:48:55 ----D---- C:\RegBackup 2015-08-18 15:05:02 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll 2015-08-18 15:04:42 ----D---- C:\Program Files (x86)\Java 2015-08-18 14:56:17 ----D---- C:\rsit 2015-08-18 14:56:17 ----D---- C:\Program Files\trend micro 2015-08-16 02:29:33 ----D---- C:\1005ec6c33c5bbe43a 2015-08-15 00:33:02 ----D---- C:\Users\Brian\AppData\Roaming\Apple Computer 2015-08-15 00:32:54 ----D---- C:\ProgramData\Apple Computer 2015-08-15 00:32:54 ----D---- C:\Program Files\iPod 2015-08-15 00:32:54 ----D---- C:\Program Files (x86)\iTunes 2015-08-15 00:32:44 ----AD---- C:\Program Files (x86)\Apple Software Update 2015-08-15 00:32:40 ----AD---- C:\Program Files\Bonjour 2015-08-15 00:32:40 ----AD---- C:\Program Files (x86)\Bonjour 2015-08-15 00:32:37 ----D---- C:\Program Files\Common Files\Apple 2015-08-15 00:32:32 ----D---- C:\ProgramData\Apple ======List of files/folders modified in the last 1 month====== 2015-09-13 15:29:29 ----D---- C:\Users\Brian\AppData\Roaming\Skype 2015-09-13 15:10:59 ----D---- C:\WINDOWS\System32 2015-09-13 15:10:59 ----D---- C:\WINDOWS\INF 2015-09-13 15:10:59 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2015-09-13 15:02:42 ----D---- C:\WINDOWS\Temp 2015-09-13 14:54:43 ----D---- C:\WINDOWS\prefetch 2015-09-13 14:47:47 ----D---- C:\Users\Brian\AppData\Roaming\TeamViewer 2015-09-13 14:46:00 ----D---- C:\WINDOWS\system32\sru 2015-09-13 14:42:24 ----D---- C:\WINDOWS\AppReadiness 2015-09-13 14:37:19 ----HD---- C:\Program Files\WindowsApps 2015-09-12 16:36:21 ----D---- C:\WINDOWS\Microsoft.NET 2015-09-12 16:25:50 ----D---- C:\Windows 2015-09-12 13:39:14 ----D---- C:\WINDOWS\debug 2015-09-12 13:24:48 ----RD---- C:\WINDOWS\assembly 2015-09-12 12:58:59 ----SHD---- C:\WINDOWS\Installer 2015-09-12 12:51:07 ----D---- C:\WINDOWS\system32\config 2015-09-12 12:41:26 ----D---- C:\AdwCleaner 2015-09-12 12:32:57 ----D---- C:\Users\Brian\AppData\Roaming\MPC-HC 2015-09-10 20:59:50 ----D---- C:\WINDOWS\WinSxS 2015-09-10 20:59:08 ----D---- C:\WINDOWS\syswow64 2015-09-10 20:59:07 ----D---- C:\WINDOWS\system32\DriverStore 2015-09-10 20:59:07 ----D---- C:\WINDOWS\system32\appraiser 2015-09-10 20:59:07 ----D---- C:\WINDOWS\AppPatch 2015-09-10 20:59:07 ----D---- C:\Program Files\Windows Journal 2015-09-10 14:17:07 ----D---- C:\ProgramData\Microsoft Help 2015-09-10 14:16:53 ----D---- C:\WINDOWS\CbsTemp 2015-09-10 14:16:14 ----A---- C:\WINDOWS\win.ini 2015-09-08 23:39:17 ----D---- C:\WINDOWS\Tasks 2015-09-08 23:39:17 ----D---- C:\WINDOWS\system32\Tasks 2015-09-08 12:51:52 ----SHD---- C:\System Volume Information 2015-09-08 12:15:07 ----HD---- C:\ProgramData 2015-09-08 11:45:41 ----D---- C:\EEK 2015-09-05 03:11:23 ----D---- C:\WINDOWS\system32\drivers 2015-09-04 02:43:07 ----D---- C:\WINDOWS\system32\LogFiles 2015-09-04 01:41:09 ----HD---- C:\$SysReset 2015-09-04 01:32:57 ----RD---- C:\Program Files (x86) 2015-09-04 01:32:53 ----D---- C:\Program Files (x86)\Google 2015-09-04 00:53:33 ----D---- C:\Program Files (x86)\Common Files 2015-09-03 23:25:04 ----RD---- C:\Program Files 2015-09-03 23:21:25 ----D---- C:\ProgramData\F-Secure 2015-09-03 23:18:59 ----AD---- C:\Program Files (x86)\Internetbeveiliging 2015-09-03 22:00:39 ----D---- C:\WINDOWS\system32\CatRoot 2015-09-03 13:52:03 ----A---- C:\WINDOWS\SYSWOW64\guard32.dll 2015-09-03 13:52:00 ----A---- C:\WINDOWS\system32\guard64.dll 2015-08-31 15:34:02 ----D---- C:\WINDOWS\rescache 2015-08-31 00:51:54 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-08-31 00:51:20 ----D---- C:\WINDOWS\system32\oobe 2015-08-31 00:51:20 ----D---- C:\WINDOWS\system32\drivers\UMDF 2015-08-27 18:35:35 ----D---- C:\WINDOWS\Logs 2015-08-26 21:03:18 ----D---- C:\Users\Brian\AppData\Roaming\vlc 2015-08-26 18:31:12 ----DC---- C:\WINDOWS\Panther 2015-08-25 01:51:45 ----D---- C:\temp 2015-08-24 23:53:41 ----RD---- C:\Program Files (x86)\Skype 2015-08-24 23:53:41 ----D---- C:\ProgramData\Skype 2015-08-24 23:01:59 ----D---- C:\WINDOWS\LiveKernelReports 2015-08-20 12:20:23 ----D---- C:\ProgramData\Oracle 2015-08-20 12:15:30 ----D---- C:\WINDOWS\SYSWOW64\nl-NL 2015-08-20 12:15:30 ----D---- C:\WINDOWS\system32\WinBioPlugIns 2015-08-20 12:15:30 ----D---- C:\WINDOWS\system32\nl-NL 2015-08-20 12:15:30 ----D---- C:\WINDOWS\system32\drivers\nl-NL 2015-08-20 12:15:29 ----RD---- C:\WINDOWS\DevicesFlow 2015-08-20 11:56:24 ----D---- C:\WINDOWS\system32\drivers\etc 2015-08-20 11:54:42 ----D---- C:\WINDOWS\SYSWOW64\wbem 2015-08-15 00:32:37 ----D---- C:\Program Files\Common Files ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2015-06-23 1455552] R0 Soluto;Soluto; C:\WINDOWS\system32\DRIVERS\Soluto.sys [2013-12-08 54728] R1 AsIO;AsIO; C:\WINDOWS\SysWow64\drivers\AsIO.sys [2012-05-07 13440] R1 cmderd;COMODO Internet Security Eradication Driver; C:\WINDOWS\System32\DRIVERS\cmderd.sys [2015-08-05 21720] R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\system32\DRIVERS\cmdguard.sys [2015-08-05 827632] R1 cmdhlp;COMODO Internet Security Helper Driver; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [2015-08-05 35056] R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968] R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192] R1 inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\system32\DRIVERS\inspect.sys [2015-08-05 127232] R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128] R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952] R3 busenum;@oem5.inf,%busenum.SVCDESC%;Synology Virtual USB Hub; C:\WINDOWS\System32\drivers\busenum.sys [2012-08-03 55776] R3 cpuz136;cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [2015-08-10 23856] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320] R3 LVRS64;@oem76.inf,%lvrs.SrvDesc%;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs64.sys [2012-10-26 351520] R3 LVUVC64;@oem48.inf,%PID_081B_DD%(UVC);Logitech HD Webcam C310(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc64.sys [2012-10-26 4758176] R3 MEIx64;@oem43.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-03-12 64624] R3 NVHDA;@oem7.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2015-08-05 206152] R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-08-05 11153224] R3 PSI;PSI; C:\WINDOWS\system32\DRIVERS\psi_mf_amd64.sys [2014-11-28 18456] R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-10 587264] S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800] S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168] S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208] S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720] S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288] S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-07-10 32256] S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736] S3 CompFilter64;UVCCompositeFilter; C:\WINDOWS\System32\drivers\lvbflt64.sys [2012-10-26 26784] S3 cpuz138;cpuz138; \??\C:\Users\Brian\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [] S3 dg_ssudbus;@oem2.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssudbus.sys [2014-10-13 110336] S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232] S3 FlashUSB;FlashUSB; C:\WINDOWS\System32\drivers\FlashUSB.sys [2014-10-13 19968] S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992] S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016] S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800] S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624] S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376] S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128] S3 NvStUSB;@oem69.inf,%NvStUSB.SvcDesc%;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys [2015-08-05 462480] S3 NVSWCFilter;@oem65.inf,%NVSWCFilter.SvcDesc%;NVIDIA SHIELD Wireless Controller Trackpad Service; C:\WINDOWS\System32\drivers\nvswcfilter.sys [2015-07-24 19616] S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-07 934752] S3 RimVSerPort;@oem58.inf,%RimVSerPort%;RIM Virtual Serial Port v2; C:\WINDOWS\System32\drivers\RimSerial_AMD64.sys [2012-12-10 44544] S3 shspusb;@oem56.inf,%HSP_Usb_DriverDesc.SvcDesc%;Samsung High Speed USB Driver disks; C:\WINDOWS\System32\drivers\HSPUSB.sys [2014-10-13 24064] S3 ss_bbus;@oem10.inf,%Samsung.Service.Desc%;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\System32\drivers\ss_bbus.sys [2014-10-13 127488] S3 ss_bserd;@oem85.inf,%Samsung.Service.Name%;SAMSUNG USB Mobile Logging Driver; C:\WINDOWS\System32\drivers\ss_bserd.sys [2014-10-13 128000] S3 ss_bus;@oem70.inf,%SAMSUNG.Service.Desc%;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\System32\drivers\ss_bus.sys [2014-10-13 127488] S3 ss_conn_usb_driver;@oem1.inf,%ssud.SvcDesc%;SAMSUNG Mobile USB Connectivity Device Driver; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver.sys [2014-10-13 26368] S3 ssadbus;@oem66.inf,%SAMSUNG.Service.Desc%;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\System32\drivers\ssadbus.sys [2014-10-13 169288] S3 ssadserd;@oem13.inf,%Samsung.Service.Name%;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\System32\drivers\ssadserd.sys [2014-10-13 158024] S3 sscdbus;@oem45.inf,%SAMSUNG.Service.Desc%;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\System32\drivers\sscdbus.sys [2014-10-13 169288] S3 sscdserd;@oem37.inf,%Samsung.Service.Name%;SAMSUNG Mobile Modem Diagnostic Serial Port (WDM); C:\WINDOWS\System32\drivers\sscdserd.sys [2014-10-13 158024] S3 sscebus;@oem78.inf,%SAMSUNG.Service.Desc%;SAMSUNG USB Composite Device V2 driver (WDM); C:\WINDOWS\System32\drivers\sscebus.sys [2014-10-13 169288] S3 ssceserd;@oem89.inf,%Samsung.Service.Name%;SAMSUNG Mobile Modem Diagnostic Serial Port V2 (WDM); C:\WINDOWS\System32\drivers\ssceserd.sys [2014-10-13 158024] S3 ssdudfu;@oem53.inf,%SvcDesc%;SAMSUNG Mobile USB DFU2 Device; C:\WINDOWS\System32\drivers\ssdudfu.sys [2014-10-13 101960] S3 ssm_bus;@oem60.inf,%Samsung.Service.Desc%;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\System32\drivers\ssm_bus.sys [2014-10-13 136192] S3 ssm_mdm;@oem32.inf,%Samsung.Service.Name%;SAMSUNG Mobile USB Port II 1.0 Drivers; C:\WINDOWS\System32\drivers\ssm_mdm.sys [2014-10-13 172032] S3 ssuddmgr;@oem47.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Device Management Serial Port(DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssuddmgr.sys [2014-10-13 206080] S3 ssudobex;@oem6.inf,%ssud.Service.Name%;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssudobex.sys [2014-10-13 206080] S3 ssudrmnet;@oem25.inf,%ssud.Service.Name%;SAMSUNG Mobile USB RMNET Drivers; C:\WINDOWS\System32\drivers\ssudrmnet.sys [2014-10-13 70400] S3 ssudserd;@oem31.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssudserd.sys [2014-10-13 206080] S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952] S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-07 46080] S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032] S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088] S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048] S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128] R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 77128] R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe [2012-10-29 927232] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-09-08 5542472] R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2015-07-26 24888] R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2015-06-23 18856] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-07-23 937800] R2 OneSyncSvc_Session2;Host synchroniseren_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2014-11-28 1363160] R2 SolutoLauncherService;Soluto Launcher Service; C:\Program Files\Soluto\SolutoLauncherService.exe [2013-12-08 221728] R2 SolutoService;Soluto PCGenome Core Service; C:\Program Files\Soluto\SolutoService.exe [2013-12-08 698912] R2 TeamViewer;TeamViewer 10; P:\Nieuwe map\TeamViewer_Service.exe [2015-08-07 5611280] R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R3 SolutoRemoteService;Soluto Remote Service; C:\Program Files\Soluto\SolutoRemoteService.exe [2013-12-08 1942016] R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-04 144200] S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2014-11-28 765144] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11 269000] S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-08-05 2265792] S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136] S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-04 144200] S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2015-08-13 644880] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-28 149160] S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 PimIndexMaintenanceSvc_Session2;Contact Data_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-07 1031680] S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 UnistoreSvc_Session2;User Data Storage_Session2; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] -----------------EOF-----------------