Logfile of random's system information tool 1.10 (written by random/random) Run by jan at 2015-11-09 20:52:30 Microsoft Windows 10 Pro System drive C: has 117 GB (25%) free of 476 GB Total RAM: 4095 MB (37% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:52:33, on 9-11-2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.10240.16412) Boot mode: Normal Running processes: C:\Users\jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Program Files (x86)\Gizmo\gizmo.exe C:\Program Files (x86)\AVG\Av\avgui.exe C:\Program Files (x86)\AVG Web TuneUp\vprot.exe C:\Program Files (x86)\AVG\Framework\Common\avguix.exe C:\WINDOWS\SysWOW64\ctfmon.exe C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\jan\Downloads\HijackThis.exe C:\WINDOWS\SysWOW64\NOTEPAD.EXE C:\Program Files\trend micro\jan.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit= O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.1.8.599\AVG Web TuneUp.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguix.exe" /fmw.trayonly O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun O4 - HKCU\..\Run: [OneDrive] "C:\Users\jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background O4 - HKCU\..\Run: [GizmoDriveDelegate] "C:\Program Files (x86)\Gizmo\gizmo.exe" /RemountStartupImages O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-2417596937-1419322718-4049629523-1006\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'UpdatusUser') O4 - HKUS\S-1-5-21-2417596937-1419322718-4049629523-1006\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser') O4 - Startup: D9478142F.lnk = ? O4 - Global Startup: Gizmo.lnk = C:\Program Files (x86)\Gizmo\gizmo.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Converteren naar Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Doel van koppeling converteren naar Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Doel van koppeling toevoegen aan bestaande PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 O8 - Extra context menu item: Toevoegen aan bestaande PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.3.0\ViProtocol.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagent.exe O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: Gizmo Central - Arainia Solutions - C:\Program Files (x86)\Gizmo\gservice.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: UDisk Monitor Z5 Phone - Unknown owner - C:\Program Files (x86)\Android_USB_Driver_Z\Bin\MonServiceUDisk.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater40.1.8 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.1.8\ToolbarUpdater.exe O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe -- End of file - 15041 bytes ======Listing Processes====== c:\PROGRA~2\AVG\Av\avgrsa.exe /boot C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-7946-56760481694f /binaryPath="C:\Program Files (x86)\AVG\Av\\" winlogon.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted "C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe" "dwm.exe" "C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe" C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\nvvsvc.exe C:\WINDOWS\system32\svchost.exe -k LocalService "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-47019e2d-4eec-4e00-b510-28ff0ae260de -SystemEventPortName:HostProcess-2d442333-55d4-46ea-9e05-97203b1b0de4 -IoCancelEventPortName:HostProcess-8582f036-fcc7-467f-a7a7-d725ed1ddef4 -NonStateChangingEventPortName:HostProcess-d80116aa-1f31-4b28-933d-19196006ab9a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:8b384c61-275c-4759-aaaf-a86ad47dbe45 -DeviceGroupId:WpdFsGroup C:\WINDOWS\system32\nvvsvc.exe -session -first C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service "C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe" C:\WINDOWS\System32\svchost.exe -k utcsvc C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt "C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe" "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files (x86)\Gizmo\gservice.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" dashost.exe {e9e0c347-dfd0-4920-b2af0c80eafeca3b} "C:\Program Files\CyberLink\Shared files\RichVideo64.exe" C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\svchost.exe -k appmodel "C:\Program Files (x86)\Android_USB_Driver_Z\Bin\MonServiceUDisk.exe" "C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.1.8\ToolbarUpdater.exe" "C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.1.8\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties" \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\WINDOWS\system32\svchost.exe -k HPService C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files (x86)\AVG\Av\avgnsa.exe" "C:\Program Files (x86)\AVG\Av\avgemca.exe" C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" C:\WINDOWS\system32\SearchIndexer.exe /Embedding "C:\Program Files\Windows Media Player\wmpnetwk.exe" sihost.exe taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E} C:\WINDOWS\Explorer.EXE C:\Windows\System32\RuntimeBroker.exe -Embedding "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 C:\WINDOWS\system32\SettingSyncHost.exe -Embedding C:\WINDOWS\System32\mobsync.exe -Embedding "C:\Program Files\iTunes\iTunesHelper.exe" "C:\Users\jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background "C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe" "C:\Program Files (x86)\Gizmo\gizmo.exe" /NoSplash /NoShow "C:\Program Files (x86)\AVG\Av\avgui.exe" /TRAYONLY "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe" "C:\Program Files (x86)\AVG\Framework\Common\avguix.exe" /fmw.trayonly "C:\Program Files\iPod\bin\iPodService.exe" "fontdrvhost.exe" ctfmon.exe "C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe" --type=renderer --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" --lang=en-US --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --lang=en-US --uncaught-exception-stack-size=1024 --disable-pepper-3d --disable-accelerated-compositing --disable-accelerated-video-decode --disable-webrtc-hw-encoding --enable-software-compositing --disable-gpu-compositing --disable-pepper-3d --channel="7256.1.1295632506\1645083221" /prefetch:673131151 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding "C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" C:\Windows\System32\SystemSettingsBroker.exe -Embedding "C:\Program Files\CCleaner\CCleaner64.exe" /monitor C:\WINDOWS\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92} -Embedding C:\WINDOWS\system32\prevhost.exe {914FEED8-267A-4BAA-B8AA-21E233792679} -Embedding taskhostw.exe "C:\Program Files\Microsoft Office 15\root\office15\OUTLOOK.EXE" "C:\Program Files\Microsoft Office 15\root\office15\WINWORD.EXE" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3612.0.1795788031\1680001574" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,12,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0391 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.280 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3612.10.981363960\1668934929" --font-cache-shared-handle=4752 /prefetch:673131151 "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe" "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3612.12.966109324\1001064241" --font-cache-shared-handle=5228 /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3612.18.1451909821\402887270" --font-cache-shared-handle=7064 /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/*AsyncSetAsDefault/Enabled/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/InstanceID/Enabled/*IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Unused_2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledAutoTuneReceiveWindow/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Off/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Enabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Interval_30min/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3612.19.706065820\535173025" --font-cache-shared-handle=7408 /prefetch:673131151 "C:\Users\jan\Downloads\HijackThis.exe" "C:\WINDOWS\system32\NOTEPAD.EXE" C:\Users\jan\Downloads\hijackthis.log "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe82_ Global\UsGthrCtrlFltPipeMssGthrPipe82 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2417596937-1419322718-4049629523-100083_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2417596937-1419322718-4049629523-100083 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1" C:\WINDOWS\system32\wbem\wmiprvse.exe "C:\WINDOWS\system32\SearchFilterHost.exe" 0 596 600 608 8192 604 "C:\Users\jan\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\WINDOWS\tasks\WebReg HP Photosmart Wireless B109n-z.job - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe "HP Photosmart Wireless B109n-z" ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-09-29 219304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.1.8.599\AVG Web TuneUp.dll [2015-10-06 2476432] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12 2134656] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29 2339032] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2015-09-29 153768] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] AVG Web TuneUp - C:\Program Files (x86)\AVG Web TuneUp\4.1.8.599\AVG Web TuneUp.dll [2015-10-06 2426256] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-12-03 343456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-29 1733240] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}] SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-12-03 343456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-12-03 343456] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-10-16 170256] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Adobe Acrobat Synchronizer"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe [2014-12-03 1104288] "DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-06-18 4468056] "OneDrive"=C:\Users\jan\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-11-01 548552] "GizmoDriveDelegate"=C:\Program Files (x86)\Gizmo\gizmo.exe [2015-09-08 223640] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-10-19 8551848] "TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2015-07-13 248176] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "AVG_UI"=C:\Program Files (x86)\AVG\Av\avgui.exe [2015-10-30 3826600] "vProt"=C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2015-10-06 3177360] "HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888] "AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguix.exe [2015-10-16 1130408] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Gizmo.lnk - C:\Program Files (x86)\Gizmo\gizmo.exe HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup D9478142F.lnk - C:\WINDOWS\system32\regsvr32.exe [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DSCAutomationHostEnabled"=2 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "vidc.i420"=lvcod64.dll "vidc.iyuv"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvu9"=tsbyuv.dll "vidc.yvyu"=msyuv.dll "wavemapper"=msacm32.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "MSVideo"=vfwwdm32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "vidc.pDAD"=prodad-codec.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-11-09 20:52:31 ----D---- C:\Program Files\trend micro 2015-11-09 20:52:30 ----D---- C:\rsit 2015-11-09 16:04:35 ----D---- C:\Program Files (x86)\TomTom HOME 2 2015-11-09 10:19:37 ----D---- C:\Program Files\CCleaner 2015-11-09 09:59:27 ----D---- C:\Program Files (x86)\TomTom International B.V 2015-11-09 09:58:17 ----HD---- C:\OneDriveTemp 2015-11-06 08:37:28 ----D---- C:\Program Files\CyberLink 2015-11-05 08:11:32 ----D---- C:\ProgramData\Avg_Update_1015av 2015-11-03 11:06:11 ----D---- C:\ProgramData\Temp 2015-11-03 10:15:19 ----D---- C:\ProgramData\SmartSound Software Inc 2015-11-03 10:15:19 ----D---- C:\ProgramData\eSellerate 2015-11-03 10:15:19 ----D---- C:\Program Files (x86)\SmartSound Software 2015-11-03 10:14:21 ----D---- C:\Users\jan\AppData\Roaming\proDAD 2015-11-03 10:14:21 ----A---- C:\WINDOWS\system32\prodad-codec.dll 2015-11-03 10:14:17 ----D---- C:\ProgramData\proDAD 2015-11-03 10:14:17 ----D---- C:\Program Files\proDAD 2015-11-03 10:14:17 ----A---- C:\WINDOWS\system32\proDAD-PA-Support.dll 2015-11-03 09:24:49 ----D---- C:\ProgramData\VS Revo Group 2015-11-03 09:24:49 ----A---- C:\WINDOWS\system32\drivers\revoflt.sys 2015-11-03 09:24:46 ----D---- C:\Program Files\VS Revo Group 2015-11-02 14:25:14 ----D---- C:\Bed 2015-11-02 10:23:40 ----A---- C:\WINDOWS\SYSWOW64\drivers\SECDRV.SYS 2015-11-02 10:04:33 ----D---- C:\Microsoft Flight Simulator 2004 Cd1 Cd2 Cd3 CD4 ISO 2015-11-01 20:34:13 ----A---- C:\WINDOWS\system32\hpbrprtmon.dll 2015-11-01 20:34:13 ----A---- C:\WINDOWS\system32\hpbprtmonui.dll 2015-11-01 20:34:13 ----A---- C:\WINDOWS\system32\hpbprtmon.dll 2015-11-01 20:31:00 ----D---- C:\Program Files\iTunes 2015-11-01 20:31:00 ----D---- C:\Program Files\iPod 2015-11-01 20:31:00 ----D---- C:\Program Files (x86)\iTunes 2015-11-01 20:28:36 ----D---- C:\Program Files (x86)\Apple Software Update 2015-11-01 20:27:31 ----D---- C:\Program Files\Bonjour 2015-11-01 20:27:31 ----D---- C:\Program Files (x86)\Bonjour 2015-11-01 14:54:43 ----D---- C:\Program Files (x86)\MSXML 4.0 2015-11-01 14:54:38 ----A---- C:\WINDOWS\SYSWOW64\xinput1_1.dll 2015-11-01 14:54:38 ----A---- C:\WINDOWS\system32\xinput1_1.dll 2015-11-01 14:54:37 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_1.dll 2015-11-01 14:54:37 ----A---- C:\WINDOWS\system32\xactengine2_1.dll 2015-11-01 14:54:31 ----A---- C:\WINDOWS\SYSWOW64\xactengine2_0.dll 2015-11-01 14:54:31 ----A---- C:\WINDOWS\SYSWOW64\x3daudio1_0.dll 2015-11-01 14:54:31 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_30.dll 2015-11-01 14:54:31 ----A---- C:\WINDOWS\system32\xactengine2_0.dll 2015-11-01 14:54:31 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll 2015-11-01 14:54:31 ----A---- C:\WINDOWS\system32\d3dx9_30.dll 2015-11-01 14:54:30 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_29.dll 2015-11-01 14:54:30 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_28.dll 2015-11-01 14:54:30 ----A---- C:\WINDOWS\system32\d3dx9_29.dll 2015-11-01 14:54:30 ----A---- C:\WINDOWS\system32\d3dx9_28.dll 2015-11-01 14:54:29 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_27.dll 2015-11-01 14:54:29 ----A---- C:\WINDOWS\system32\d3dx9_27.dll 2015-11-01 14:54:28 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_26.dll 2015-11-01 14:54:28 ----A---- C:\WINDOWS\system32\d3dx9_26.dll 2015-11-01 14:54:27 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_25.dll 2015-11-01 14:54:27 ----A---- C:\WINDOWS\system32\d3dx9_25.dll 2015-11-01 14:54:26 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_24.dll 2015-11-01 14:54:26 ----A---- C:\WINDOWS\system32\d3dx9_24.dll 2015-10-30 20:33:17 ----D---- C:\FS 2015-10-30 11:27:06 ----A---- C:\WINDOWS\system32\edgehtml.dll 2015-10-30 11:27:03 ----A---- C:\WINDOWS\system32\mshtml.dll 2015-10-30 11:26:57 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll 2015-10-30 11:26:55 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2015-10-30 11:26:50 ----A---- C:\WINDOWS\system32\Windows.Media.dll 2015-10-30 11:26:49 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll 2015-10-30 11:26:49 ----A---- C:\WINDOWS\system32\LicenseManager.dll 2015-10-30 11:26:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll 2015-10-30 11:26:48 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll 2015-10-30 11:26:47 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll 2015-10-30 11:26:45 ----A---- C:\WINDOWS\system32\iertutil.dll 2015-10-30 11:26:43 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll 2015-10-30 11:26:42 ----A---- C:\WINDOWS\system32\audiosrv.dll 2015-10-30 11:26:41 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-10-30 11:26:40 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2015-10-30 11:26:39 ----A---- C:\WINDOWS\system32\urlmon.dll 2015-10-30 11:26:39 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-10-30 11:26:38 ----A---- C:\WINDOWS\system32\winlogon.exe 2015-10-30 11:26:37 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll 2015-10-30 11:26:37 ----A---- C:\WINDOWS\system32\usermgr.dll 2015-10-30 11:26:37 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll 2015-10-30 11:26:36 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll 2015-10-30 11:26:36 ----A---- C:\WINDOWS\system32\esent.dll 2015-10-30 11:26:35 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll 2015-10-30 11:26:34 ----A---- C:\WINDOWS\system32\Windows.UI.dll 2015-10-30 11:26:33 ----A---- C:\WINDOWS\SYSWOW64\esent.dll 2015-10-30 11:26:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll 2015-10-30 11:26:30 ----A---- C:\WINDOWS\system32\dlnashext.dll 2015-10-30 11:26:29 ----A---- C:\WINDOWS\system32\dssvc.dll 2015-10-30 11:26:29 ----A---- C:\WINDOWS\system32\drivers\netio.sys 2015-10-30 11:26:18 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll 2015-10-30 11:26:18 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll 2015-10-30 11:26:18 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll 2015-10-30 11:26:18 ----A---- C:\WINDOWS\system32\browserbroker.dll 2015-10-29 17:13:09 ----D---- C:\Program Files (x86)\Microsoft Games 2015-10-29 17:01:58 ----D---- C:\Users\jan\AppData\Roaming\Gizmo 2015-10-29 15:27:01 ----D---- C:\WINDOWS\system32\SleepStudy 2015-10-29 09:06:56 ----D---- C:\ProgramData\SlySoft 2015-10-29 09:06:54 ----D---- C:\Program Files (x86)\SlySoft 2015-10-29 08:49:48 ----D---- C:\ProgramData\Elaborate Bytes 2015-10-29 08:49:47 ----D---- C:\Program Files (x86)\Elaborate Bytes 2015-10-28 20:03:11 ----DC---- C:\WINDOWS\Panther 2015-10-28 20:00:05 ----D---- C:\Windows.old 2015-10-28 19:58:57 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\SYSWOW64\hevcdecoder.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\system32\winmde.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll 2015-10-28 19:58:55 ----A---- C:\WINDOWS\system32\hevcdecoder.dll 2015-10-28 19:58:54 ----A---- C:\WINDOWS\SYSWOW64\remoteaudioendpoint.dll 2015-10-28 19:58:54 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll 2015-10-28 19:58:54 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll 2015-10-28 19:58:54 ----A---- C:\WINDOWS\system32\mfsvr.dll 2015-10-28 19:58:54 ----A---- C:\WINDOWS\system32\mfps.dll 2015-10-28 19:58:54 ----A---- C:\WINDOWS\system32\mfds.dll 2015-10-28 19:58:54 ----A---- C:\WINDOWS\system32\mfcore.dll 2015-10-28 19:58:54 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll 2015-10-28 19:58:53 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll 2015-10-28 19:58:53 ----A---- C:\WINDOWS\system32\wpnapps.dll 2015-10-28 19:58:53 ----A---- C:\WINDOWS\system32\wmpmde.dll 2015-10-28 19:58:53 ----A---- C:\WINDOWS\system32\remoteaudioendpoint.dll 2015-10-28 19:58:53 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll 2015-10-28 19:58:53 ----A---- C:\WINDOWS\system32\MPSSVC.dll 2015-10-28 19:58:53 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys 2015-10-28 19:58:53 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS 2015-10-28 19:58:53 ----A---- C:\WINDOWS\system32\AudioEng.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\workfolderssvc.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\SensorsApi.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\msxml6.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\LocationWiFiAdapter.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\LocationWebproxy.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\LocationPeWiFi.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\LocationPeIP.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\LocationPeCell.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\LocationGeofences.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\LocationFramework.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\LocationCrowdsource.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\jscript9.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\jscript.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\ieframe.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\drivers\Wdf01000.sys 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\drivers\ndis.sys 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\Chakradiag.dll 2015-10-28 19:58:52 ----A---- C:\WINDOWS\system32\Chakra.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\SYSWOW64\CredProvDataModel.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\system32\shell32.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\system32\SharedStartModel.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\system32\LockAppBroker.dll 2015-10-28 19:58:46 ----A---- C:\WINDOWS\system32\acmigration.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Speech.Pal.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\RemoteNaturalLanguage.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\mos.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\mf.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\MapControlCore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\MapConfiguration.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\JpMapControl.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\directmanipulation.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wwansvc.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wwanmm.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wwanconn.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wwancfg.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\WWanAPI.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wuuhext.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\WUDFx02000.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wuaueng.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wpx.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wlidsvc.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wlansvc.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\winresume.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\winload.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wininet.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\windows.storage.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.Speech.Pal.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\win32kfull.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\win32kbase.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wcmsvc.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\wcmcsp.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\VEEventDispatcher.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\vbscript.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\UserDataService.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\Unistore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\TokenBroker.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\tileobjserver.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\tetheringservice.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\syncutil.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\syncmlhook.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\StoreAgent.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\RDXService.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\psmsrv.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\provops.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\provisioningcsp.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\provengine.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\pnidui.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\omadmclient.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\omadmapi.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\ntoskrnl.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\NotificationController.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\nlasvc.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\ngcsvc.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\ngckeyenum.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\ngccredprov.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\netcenter.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\ncsi.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\ncryptprov.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\msxml3.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\mos.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\modernexecserver.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\mf.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\mdmregistration.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\mdmmigrator.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\MBMediaManager.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\MbaeApi.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\MapsStore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\MapControlCore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\MapConfiguration.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\LicenseManagerShellext.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\KnobsCsp.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\KnobsCore.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\kerberos.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\JpMapControl.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\HttpsDataSource.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\fveapi.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\enterprisecsps.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\enrollmentapi.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\EmailApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\portcls.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\pdc.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\drivers\buttonconverter.sys 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\dmenrollengine.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\dmcsps.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\dmcertinst.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\directmanipulation.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\DataSenseHandlers.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\CredProvDataModel.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\CoreMessaging.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\ContactApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\configmanager2.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\cloudAP.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\ChatApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\CellularAPI.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\bisrv.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\BingMaps.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\AppointmentApis.dll 2015-10-28 19:58:45 ----A---- C:\WINDOWS\system32\accountaccessor.dll 2015-10-28 19:54:25 ----A---- C:\WINDOWS\system32\perfi013.dat 2015-10-28 19:54:25 ----A---- C:\WINDOWS\system32\perfh013.dat 2015-10-28 19:54:25 ----A---- C:\WINDOWS\system32\perfd013.dat 2015-10-28 19:54:25 ----A---- C:\WINDOWS\system32\perfc013.dat 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\nl 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\drivers\nl-NL 2015-10-28 19:54:02 ----D---- C:\WINDOWS\system32\nl 2015-10-28 19:54:01 ----D---- C:\WINDOWS\system32\drivers\nl-NL 2015-10-28 19:54:01 ----D---- C:\WINDOWS\nl-NL 2015-10-28 19:46:25 ----D---- C:\Program Files\Reference Assemblies 2015-10-28 19:46:25 ----D---- C:\Program Files\MSBuild 2015-10-28 19:46:25 ----D---- C:\Program Files (x86)\Reference Assemblies 2015-10-28 19:46:25 ----D---- C:\Program Files (x86)\MSBuild 2015-10-28 19:45:54 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe 2015-10-28 19:45:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll 2015-10-28 19:45:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-10-28 19:45:52 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe 2015-10-28 19:45:52 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll 2015-10-28 19:45:52 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2015-10-28 12:35:12 ----A---- C:\WINDOWS\system32\prm0013.dll 2015-10-28 12:35:11 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons000c.dll 2015-10-28 12:35:11 ----A---- C:\WINDOWS\SYSWOW64\NlsData000c.dll 2015-10-28 12:35:11 ----A---- C:\WINDOWS\system32\NlsLexicons000c.dll 2015-10-28 12:35:11 ----A---- C:\WINDOWS\system32\NlsData000c.dll 2015-10-28 11:58:13 ----A---- C:\WINDOWS\system32\nvoglv64.dll 2015-10-28 11:58:12 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll 2015-10-28 11:58:12 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys 2015-10-28 11:58:11 ----A---- C:\WINDOWS\system32\nvdispgenco64.dll 2015-10-28 11:58:11 ----A---- C:\WINDOWS\system32\nvdispco64.dll 2015-10-28 11:58:10 ----A---- C:\WINDOWS\system32\nvd3dumx.dll 2015-10-28 11:58:09 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll 2015-10-28 11:58:09 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll 2015-10-28 11:58:09 ----A---- C:\WINDOWS\SYSWOW64\nvcuvenc.dll 2015-10-28 11:58:09 ----A---- C:\WINDOWS\system32\nvcuvid.dll 2015-10-28 11:58:09 ----A---- C:\WINDOWS\system32\nvcuvenc.dll 2015-10-28 11:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll 2015-10-28 11:58:08 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll 2015-10-28 11:58:08 ----A---- C:\WINDOWS\system32\nvcuda.dll 2015-10-28 11:58:07 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll 2015-10-28 11:58:07 ----A---- C:\WINDOWS\system32\nvcompiler.dll 2015-10-28 11:58:07 ----A---- C:\WINDOWS\system32\nvapi64.dll 2015-10-28 11:35:53 ----SHD---- C:\ProgramData\Favorites 2015-10-28 11:35:52 ----SHD---- C:\Recovery 2015-10-28 11:31:34 ----A---- C:\WINDOWS\system32\emptyregdb.dat 2015-10-28 11:29:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2015-10-28 11:10:07 ----SD---- C:\Users\jan\AppData\Roaming\Microsoft 2015-10-28 11:07:40 ----D---- C:\Program Files\Common Files\logishrd 2015-10-28 11:04:39 ----D---- C:\WINDOWS\Prefetch 2015-10-28 10:02:35 ----HD---- C:\$Windows.~BT 2015-10-28 09:54:29 ----HD---- C:\$Windows.~WS 2015-10-27 20:32:19 ----D---- C:\ProgramData\VIPRE 2015-10-27 20:19:55 ----D---- C:\Users\jan\AppData\Roaming\ParetoLogic 2015-10-27 20:19:55 ----A---- C:\Users\jan\AppData\Roaming\LogFile.txt 2015-10-27 20:19:43 ----D---- C:\ProgramData\ParetoLogic 2015-10-27 17:49:25 ----D---- C:\Program Files\Reimage 2015-10-27 17:48:35 ----A---- C:\WINDOWS\Reimage.ini 2015-10-27 15:54:01 ----ASH---- C:\swapfile.sys 2015-10-27 15:54:01 ----ASH---- C:\pagefile.sys 2015-10-27 15:53:51 ----ASH---- C:\hiberfil.sys 2015-10-27 11:10:42 ----A---- C:\WINDOWS\SYSWOW64\drivers\HWiNFO64A.SYS 2015-10-27 11:10:33 ----D---- C:\Program Files (x86)\HWiNFO32 2015-10-21 18:34:13 ----A---- C:\WINDOWS\SYSWOW64\drivers\DrvAgent64.SYS 2015-10-21 16:16:48 ----A---- C:\WINDOWS\system32\drivers\avgldx64.sys 2015-10-21 16:15:02 ----A---- C:\WINDOWS\system32\drivers\avgmfx64.sys 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-16 11:24:04 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-14 08:02:26 ----D---- C:\NVIDIA ======List of files/folders modified in the last 1 month====== 2015-11-09 20:52:31 ----RD---- C:\Program Files 2015-11-09 20:50:44 ----D---- C:\WINDOWS\system32\sru 2015-11-09 20:50:15 ----D---- C:\WINDOWS\Temp 2015-11-09 20:50:12 ----D---- C:\WINDOWS\System32 2015-11-09 16:21:38 ----D---- C:\WINDOWS\Microsoft.NET 2015-11-09 16:04:42 ----SHD---- C:\WINDOWS\Installer 2015-11-09 16:04:35 ----RD---- C:\Program Files (x86) 2015-11-09 12:16:49 ----D---- C:\WINDOWS\rescache 2015-11-09 10:19:39 ----D---- C:\WINDOWS\system32\Tasks 2015-11-09 09:33:17 ----D---- C:\WINDOWS\AppReadiness 2015-11-09 09:33:14 ----HD---- C:\Program Files\WindowsApps 2015-11-09 09:29:18 ----D---- C:\WINDOWS\system32\config 2015-11-09 09:28:38 ----SHD---- C:\System Volume Information 2015-11-09 09:21:19 ----D---- C:\WINDOWS\system32\drivers 2015-11-09 09:21:19 ----D---- C:\ProgramData\MFAData 2015-11-06 23:37:40 ----D---- C:\Users\jan\AppData\Roaming\Azureus 2015-11-06 15:49:10 ----D---- C:\WINDOWS\INF 2015-11-06 13:38:33 ----D---- C:\WINDOWS\CbsTemp 2015-11-06 13:38:10 ----D---- C:\WINDOWS\WinSxS 2015-11-06 13:37:36 ----D---- C:\WINDOWS\SYSWOW64\nl-NL 2015-11-06 13:37:36 ----D---- C:\WINDOWS\SYSWOW64\en-US 2015-11-06 13:37:36 ----D---- C:\WINDOWS\SysWOW64 2015-11-06 13:37:36 ----D---- C:\WINDOWS\system32\nl-NL 2015-11-06 13:37:36 ----D---- C:\WINDOWS\system32\en-US 2015-11-06 13:37:34 ----A---- C:\WINDOWS\SYSWOW64\dpnsvr.exe 2015-11-06 13:37:34 ----A---- C:\WINDOWS\SYSWOW64\dpnlobby.dll 2015-11-06 13:37:34 ----A---- C:\WINDOWS\SYSWOW64\dpnhupnp.dll 2015-11-06 13:37:34 ----A---- C:\WINDOWS\SYSWOW64\dpnhpast.dll 2015-11-06 13:37:34 ----A---- C:\WINDOWS\SYSWOW64\dpnet.dll 2015-11-06 13:37:34 ----A---- C:\WINDOWS\SYSWOW64\dpnathlp.dll 2015-11-06 13:37:34 ----A---- C:\WINDOWS\SYSWOW64\dpnaddr.dll 2015-11-06 13:37:33 ----A---- C:\WINDOWS\system32\dpnsvr.exe 2015-11-06 13:37:33 ----A---- C:\WINDOWS\system32\dpnlobby.dll 2015-11-06 13:37:33 ----A---- C:\WINDOWS\system32\dpnhupnp.dll 2015-11-06 13:37:33 ----A---- C:\WINDOWS\system32\dpnhpast.dll 2015-11-06 13:37:33 ----A---- C:\WINDOWS\system32\dpnet.dll 2015-11-06 13:37:33 ----A---- C:\WINDOWS\system32\dpnathlp.dll 2015-11-06 13:37:33 ----A---- C:\WINDOWS\system32\dpnaddr.dll 2015-11-06 13:37:31 ----A---- C:\WINDOWS\SYSWOW64\dpwsockx.dll 2015-11-06 13:37:31 ----A---- C:\WINDOWS\SYSWOW64\dpmodemx.dll 2015-11-06 13:37:31 ----A---- C:\WINDOWS\SYSWOW64\dplayx.dll 2015-11-06 13:37:31 ----A---- C:\WINDOWS\SYSWOW64\dplaysvr.exe 2015-11-06 08:45:12 ----D---- C:\ProgramData\install_clap 2015-11-06 08:44:35 ----RSD---- C:\WINDOWS\Fonts 2015-11-06 08:36:58 ----D---- C:\Program Files (x86)\InstallShield Installation Information 2015-11-05 08:11:32 ----HD---- C:\ProgramData 2015-11-04 13:46:42 ----D---- C:\WINDOWS\system32\DriverStore 2015-11-04 11:54:55 ----D---- C:\WINDOWS\system32\catroot2 2015-11-04 10:31:11 ----RSD---- C:\WINDOWS\assembly 2015-11-03 11:16:24 ----D---- C:\WINDOWS\system32\CatRoot 2015-11-03 11:14:52 ----D---- C:\WINDOWS\system32\appraiser 2015-11-03 11:14:51 ----D---- C:\WINDOWS\AppPatch 2015-11-03 11:09:10 ----D---- C:\WINDOWS\Logs 2015-11-03 11:06:11 ----D---- C:\ProgramData\SUPPORTDIR 2015-11-03 10:20:45 ----D---- C:\Users\jan\AppData\Roaming\CyberLink 2015-11-03 10:20:29 ----D---- C:\ProgramData\CyberLink 2015-11-03 10:14:05 ----D---- C:\Program Files\NewBlue 2015-11-03 10:13:55 ----D---- C:\Program Files (x86)\NewBlue 2015-11-03 10:12:37 ----D---- C:\Program Files (x86)\NSIS Uninstall Information 2015-11-02 14:20:20 ----D---- C:\WINDOWS\system32\LogFiles 2015-11-02 10:31:47 ----SD---- C:\ProgramData\Microsoft 2015-11-02 10:30:36 ----D---- C:\Windows 2015-11-02 10:23:40 ----D---- C:\WINDOWS\SYSWOW64\drivers 2015-11-01 21:16:00 ----A---- C:\AirPrint Activator iOS5.exe 2015-11-01 20:34:26 ----D---- C:\ProgramData\Package Cache 2015-11-01 20:34:25 ----D---- C:\Program Files\HP 2015-11-01 20:31:00 ----D---- C:\Program Files\Common Files\Apple 2015-11-01 20:30:57 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-10-29 17:02:56 ----D---- C:\Program Files (x86)\Gizmo 2015-10-29 15:08:40 ----D---- C:\WINDOWS\debug 2015-10-29 14:09:24 ----D---- C:\WINDOWS\system32\WDI 2015-10-29 13:49:44 ----D---- C:\WINDOWS\system32\restore 2015-10-29 08:50:27 ----D---- C:\ProgramData\regid.1991-06.com.microsoft 2015-10-29 08:48:33 ----D---- C:\Program Files\Microsoft Office 15 2015-10-29 08:26:55 ----D---- C:\WINDOWS\appcompat 2015-10-28 19:59:48 ----SD---- C:\WINDOWS\SYSWOW64\F12 2015-10-28 19:59:48 ----SD---- C:\WINDOWS\system32\F12 2015-10-28 19:59:48 ----RD---- C:\WINDOWS\PurchaseDialog 2015-10-28 19:59:48 ----D---- C:\WINDOWS\SYSWOW64\migration 2015-10-28 19:59:48 ----D---- C:\WINDOWS\system32\WinBioPlugIns 2015-10-28 19:59:48 ----D---- C:\WINDOWS\system32\SystemResetPlatform 2015-10-28 19:59:48 ----D---- C:\WINDOWS\system32\Boot 2015-10-28 19:59:48 ----D---- C:\WINDOWS\Provisioning 2015-10-28 19:59:47 ----D---- C:\WINDOWS\L2Schemas 2015-10-28 19:54:04 ----SD---- C:\WINDOWS\SYSWOW64\DiagSvcs 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\winrm 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\WCN 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\wbem 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\slmgr 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\oobe 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\MUI 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\Dism 2015-10-28 19:54:04 ----D---- C:\WINDOWS\SYSWOW64\Com 2015-10-28 19:54:04 ----D---- C:\WINDOWS\system32\winrm 2015-10-28 19:54:04 ----D---- C:\WINDOWS\system32\WCN 2015-10-28 19:54:04 ----D---- C:\WINDOWS\system32\wbem 2015-10-28 19:54:04 ----D---- C:\WINDOWS\system32\slmgr 2015-10-28 19:54:04 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts 2015-10-28 19:54:02 ----D---- C:\WINDOWS\system32\MUI 2015-10-28 19:54:02 ----D---- C:\WINDOWS\system32\migwiz 2015-10-28 19:54:01 ----SD---- C:\WINDOWS\system32\DiagSvcs 2015-10-28 19:54:01 ----RD---- C:\WINDOWS\MiracastView 2015-10-28 19:54:01 ----RD---- C:\WINDOWS\ImmersiveControlPanel 2015-10-28 19:54:01 ----RD---- C:\WINDOWS\DevicesFlow 2015-10-28 19:54:01 ----D---- C:\WINDOWS\system32\Dism 2015-10-28 19:54:01 ----D---- C:\WINDOWS\system32\Com 2015-10-28 19:54:01 ----D---- C:\WINDOWS\servicing 2015-10-28 19:54:01 ----D---- C:\WINDOWS\PolicyDefinitions 2015-10-28 19:54:01 ----D---- C:\WINDOWS\IME 2015-10-28 19:54:01 ----D---- C:\Program Files\Windows Photo Viewer 2015-10-28 19:54:01 ----D---- C:\Program Files\Windows Media Player 2015-10-28 19:54:01 ----D---- C:\Program Files\Windows Journal 2015-10-28 19:54:01 ----D---- C:\Program Files\Windows Defender 2015-10-28 19:54:01 ----D---- C:\Program Files (x86)\Windows Photo Viewer 2015-10-28 19:54:01 ----D---- C:\Program Files (x86)\Windows Media Player 2015-10-28 19:54:01 ----D---- C:\Program Files (x86)\Windows Defender 2015-10-28 19:54:01 ----D---- C:\Program Files (x86)\Internet Explorer 2015-10-28 19:54:00 ----D---- C:\Program Files\Common Files\System 2015-10-28 19:48:19 ----SD---- C:\WINDOWS\system32\Microsoft 2015-10-28 13:19:24 ----D---- C:\WINDOWS\Tasks 2015-10-28 12:42:50 ----D---- C:\Nieuwe map 2015-10-28 12:35:29 ----D---- C:\WINDOWS\OCR 2015-10-28 12:05:55 ----D---- C:\Program Files (x86)\Common Files 2015-10-28 12:02:19 ----D---- C:\ProgramData\NVIDIA 2015-10-28 11:59:03 ----D---- C:\Program Files\NVIDIA Corporation 2015-10-28 11:43:53 ----HD---- C:\ProgramData\Common Files 2015-10-28 11:35:32 ----D---- C:\WINDOWS\SoftwareDistribution 2015-10-28 11:33:06 ----D---- C:\WINDOWS\Registration 2015-10-28 11:28:37 ----D---- C:\WINDOWS\system32\drivers\etc 2015-10-28 11:26:21 ----D---- C:\Program Files\Common Files\AV 2015-10-28 11:25:18 ----HD---- C:\WINDOWS\ELAMBKUP 2015-10-28 11:19:50 ----D---- C:\ProgramData\regid.1986-12.com.adobe 2015-10-28 11:15:21 ----D---- C:\WINDOWS\WindowsMobile 2015-10-28 11:15:21 ----D---- C:\WINDOWS\twain_32 2015-10-28 11:15:21 ----D---- C:\WINDOWS\SYSWOW64\zh-TW 2015-10-28 11:15:21 ----D---- C:\WINDOWS\SYSWOW64\zh-HK 2015-10-28 11:15:20 ----D---- C:\WINDOWS\SYSWOW64\zh-CN 2015-10-28 11:15:18 ----D---- C:\WINDOWS\SYSWOW64\uk-UA 2015-10-28 11:15:18 ----D---- C:\WINDOWS\SYSWOW64\tr-TR 2015-10-28 11:15:18 ----D---- C:\WINDOWS\SYSWOW64\th-TH 2015-10-28 11:15:17 ----D---- C:\WINDOWS\SYSWOW64\sv-SE 2015-10-28 11:15:17 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS 2015-10-28 11:15:17 ----D---- C:\WINDOWS\SYSWOW64\sl-SI 2015-10-28 11:15:17 ----D---- C:\WINDOWS\SYSWOW64\sk-SK 2015-10-28 11:15:17 ----D---- C:\WINDOWS\SYSWOW64\ru-RU 2015-10-28 11:15:17 ----D---- C:\WINDOWS\SYSWOW64\ro-RO 2015-10-28 11:15:17 ----D---- C:\WINDOWS\SYSWOW64\pt-PT 2015-10-28 11:15:16 ----D---- C:\WINDOWS\SYSWOW64\pt-BR 2015-10-28 11:15:16 ----D---- C:\WINDOWS\SYSWOW64\pl-PL 2015-10-28 11:15:16 ----D---- C:\WINDOWS\SYSWOW64\nb-NO 2015-10-28 11:15:16 ----D---- C:\WINDOWS\SYSWOW64\lv-LV 2015-10-28 11:15:16 ----D---- C:\WINDOWS\SYSWOW64\lt-LT 2015-10-28 11:15:16 ----D---- C:\WINDOWS\SYSWOW64\ko-KR 2015-10-28 11:15:16 ----D---- C:\WINDOWS\SYSWOW64\ja-JP 2015-10-28 11:15:16 ----D---- C:\WINDOWS\SYSWOW64\it-IT 2015-10-28 11:15:15 ----D---- C:\WINDOWS\SYSWOW64\hu-HU 2015-10-28 11:15:15 ----D---- C:\WINDOWS\SYSWOW64\hr-HR 2015-10-28 11:15:15 ----D---- C:\WINDOWS\SYSWOW64\he-IL 2015-10-28 11:15:15 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy 2015-10-28 11:15:15 ----D---- C:\WINDOWS\SYSWOW64\fr-FR 2015-10-28 11:15:15 ----D---- C:\WINDOWS\SYSWOW64\fi-FI 2015-10-28 11:15:15 ----D---- C:\WINDOWS\SYSWOW64\et-EE 2015-10-28 11:15:15 ----D---- C:\WINDOWS\SYSWOW64\es-ES 2015-10-28 11:15:14 ----D---- C:\WINDOWS\SYSWOW64\en-GB 2015-10-28 11:15:14 ----D---- C:\WINDOWS\SYSWOW64\el-GR 2015-10-28 11:15:14 ----D---- C:\WINDOWS\SYSWOW64\de-DE 2015-10-28 11:15:14 ----D---- C:\WINDOWS\SYSWOW64\da-DK 2015-10-28 11:15:14 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ 2015-10-28 11:15:14 ----D---- C:\WINDOWS\SYSWOW64\bg-BG 2015-10-28 11:15:14 ----D---- C:\WINDOWS\SYSWOW64\ar-SA 2015-10-28 11:15:12 ----D---- C:\WINDOWS\system32\zh-TW 2015-10-28 11:15:12 ----D---- C:\WINDOWS\system32\zh-HK 2015-10-28 11:15:12 ----D---- C:\WINDOWS\system32\zh-CN 2015-10-28 11:15:11 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Shared 2015-10-28 11:15:11 ----D---- C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared 2015-10-28 11:15:11 ----D---- C:\WINDOWS\system32\uk-UA 2015-10-28 11:15:11 ----D---- C:\WINDOWS\system32\tr-TR 2015-10-28 11:15:11 ----D---- C:\WINDOWS\system32\th-TH 2015-10-28 11:15:11 ----D---- C:\WINDOWS\system32\sv-SE 2015-10-28 11:15:11 ----D---- C:\WINDOWS\system32\sr-Latn-RS 2015-10-28 11:15:09 ----D---- C:\WINDOWS\system32\sl-SI 2015-10-28 11:15:09 ----D---- C:\WINDOWS\system32\sk-SK 2015-10-28 11:15:09 ----D---- C:\WINDOWS\system32\ru-RU 2015-10-28 11:15:09 ----D---- C:\WINDOWS\system32\ro-RO 2015-10-28 11:15:09 ----D---- C:\WINDOWS\system32\pt-PT 2015-10-28 11:15:09 ----D---- C:\WINDOWS\system32\pt-BR 2015-10-28 11:15:09 ----D---- C:\WINDOWS\system32\pl-PL 2015-10-28 11:15:09 ----D---- C:\WINDOWS\system32\oobe 2015-10-28 11:15:08 ----D---- C:\WINDOWS\system32\NDF 2015-10-28 11:15:08 ----D---- C:\WINDOWS\system32\nb-NO 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\migration 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\lv-LV 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\lt-LT 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\ko-KR 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\ja-JP 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\it-IT 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\InputMethod 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\hu-HU 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\hr-HR 2015-10-28 11:15:07 ----D---- C:\WINDOWS\system32\he-IL 2015-10-28 11:15:06 ----D---- C:\WINDOWS\system32\fr-FR 2015-10-28 11:15:06 ----D---- C:\WINDOWS\system32\fi-FI 2015-10-28 11:15:06 ----D---- C:\WINDOWS\system32\et-EE 2015-10-28 11:15:06 ----D---- C:\WINDOWS\system32\es-ES 2015-10-28 11:15:05 ----DC---- C:\WINDOWS\system32\DRVSTORE 2015-10-28 11:15:05 ----D---- C:\WINDOWS\system32\en-GB 2015-10-28 11:15:05 ----D---- C:\WINDOWS\system32\el-GR 2015-10-28 11:15:04 ----D---- C:\WINDOWS\system32\de-DE 2015-10-28 11:15:04 ----D---- C:\WINDOWS\system32\da-DK 2015-10-28 11:15:04 ----D---- C:\WINDOWS\system32\cs-CZ 2015-10-28 11:14:51 ----D---- C:\WINDOWS\system32\CodeIntegrity 2015-10-28 11:13:18 ----D---- C:\WINDOWS\system32\bg-BG 2015-10-28 11:13:18 ----D---- C:\WINDOWS\system32\ar-SA 2015-10-28 11:13:18 ----D---- C:\WINDOWS\system32\appmgmt 2015-10-28 11:13:10 ----D---- C:\WINDOWS\MediaViewer 2015-10-28 11:13:10 ----D---- C:\WINDOWS\LiveKernelReports 2015-10-28 11:13:05 ----D---- C:\WINDOWS\InputMethod 2015-10-28 11:13:04 ----D---- C:\WINDOWS\Help 2015-10-28 11:13:02 ----D---- C:\WINDOWS\ADFS 2015-10-28 11:13:00 ----RD---- C:\Users 2015-10-28 11:12:51 ----D---- C:\Program Files (x86)\Windows Mail 2015-10-28 11:12:50 ----D---- C:\Program Files (x86)\Microsoft.NET 2015-10-28 11:12:48 ----D---- C:\Program Files\Windows Mail 2015-10-28 11:12:47 ----D---- C:\Program Files\Internet Explorer 2015-10-28 11:12:47 ----D---- C:\Program Files\Common Files\microsoft shared 2015-10-28 11:12:47 ----D---- C:\Program Files\Common Files 2015-10-28 11:12:12 ----HD---- C:\WINDOWS\system32\GroupPolicy 2015-10-28 11:12:08 ----D---- C:\WINDOWS\system32\Recovery 2015-10-28 11:09:19 ----D---- C:\WINDOWS\system32\Sysprep 2015-10-28 11:05:27 ----D---- C:\WINDOWS\system32\drivers\UMDF 2015-10-28 10:20:00 ----D---- C:\Temp 2015-10-28 09:58:46 ----RHD---- C:\ESD 2015-10-27 08:43:19 ----D---- C:\ProgramData\AVG2015 2015-10-26 12:40:25 ----D---- C:\Program Files (x86)\AVG 2015-10-26 12:40:24 ----D---- C:\Users\jan\AppData\Roaming\AVG 2015-10-26 12:36:55 ----D---- C:\ProgramData\AVG 2015-10-26 11:45:03 ----D---- C:\Toolkit 2015-10-19 14:14:25 ----RD---- C:\WINDOWS\ToastData 2015-10-19 08:26:02 ----RD---- C:\Program Files (x86)\Skype 2015-10-16 20:40:13 ----D---- C:\WINDOWS\system32\MRT 2015-10-16 20:37:39 ----A---- C:\WINDOWS\system32\MRT.exe 2015-10-16 10:51:27 ----D---- C:\Users\jan\AppData\Roaming\Mp3tag 2015-10-16 10:30:41 ----D---- C:\Program Files (x86)\Mp3tag 2015-10-16 04:10:46 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe 2015-10-14 07:58:50 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 adpu160m;adpu160m; C:\WINDOWS\System32\drivers\adpu160m.sys [2012-06-28 122488] R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2015-08-20 298416] R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2015-08-14 398256] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2015-10-21 255408] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2015-08-10 42416] R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2015-08-10 197040] R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2015-10-19 313776] R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-10-21 284080] R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-10-08 306608] R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968] R1 GizmoDrv;Gizmo Device Driver; C:\WINDOWS\system32\drivers\GizmoDrv.sys [2015-09-08 34704] R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-07-10 8192] R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [2015-10-27 27552] R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128] R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952] R3 dtlitescsibus;@oem19.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2015-09-08 30264] R3 lvrs64;@oem36.inf,%lvrs.SrvDesc%;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs64.sys [2012-10-26 351520] R3 LVUVC64;@oem27.inf,%PID_0805_DD%(UVC);Logitech Webcam 300(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc64.sys [2012-10-26 4758176] R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-10-05 25816] R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2012-06-12 13551976] R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-06-18 587264] R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Still Serial Digital Camera Driver; C:\WINDOWS\system32\DRIVERS\serscan.sys [2015-07-10 12800] S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2015-09-09 23152] S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800] S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168] S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208] S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720] S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288] S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-28 36352] S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736] S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800] S3 DrvAgent64;DrvAgent64; \??\C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS [2015-10-21 22200] S3 esgiguard;esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [2014-01-07 14872] S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] S3 GeneralusbserialserZ52203;@oem8.inf,%ZFIVEUSBSER%;Android Legacy Serial Communication Z52203; C:\WINDOWS\system32\DRIVERS\CT_U_USBSER_Z5.sys [2013-11-18 250568] S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992] S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016] S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800] S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2015-10-30 192216] S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-10-05 64216] S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376] S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128] S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-09-10 934752] S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 31800] S3 scsiscan;@sti.inf,%scsiscan.SvcDesc%;SCSI Scanner Driver; C:\WINDOWS\system32\DRIVERS\scsiscan.sys [2015-07-10 19968] S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952] S3 UcmUcsi;@ucmucsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-09-10 46080] S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032] S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088] S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048] S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-10-07 77104] R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2015-10-16 1046952] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [2015-10-30 579776] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696] R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-10-07 2780856] R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R2 Gizmo Central;Gizmo Central; C:\Program Files (x86)\Gizmo\gservice.exe [2015-10-29 34728] R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\syswow64\svchost.exe [2015-07-10 35176] R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2012-06-12 888680] R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-06-12 1258344] R2 OneSyncSvc_Session1;Sync Host_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-08-08 390672] R2 SpyHunter 4 Service;SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [2014-01-09 770432] R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2015-07-13 93040] R2 UDisk Monitor Z5 Phone;UDisk Monitor Z5 Phone; C:\Program Files (x86)\Android_USB_Driver_Z\Bin\MonServiceUDisk.exe [2013-11-18 585416] R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-06-18 1268568] R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R3 hpqcxs08;hpqcxs08; C:\WINDOWS\syswow64\svchost.exe [2015-07-10 35176] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2015-10-16 644880] R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R3 PimIndexMaintenanceSvc_Session1;Contact Data_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [2015-10-30 3815648] S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-12 144200] S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416] S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496] S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2015-10-30 595376] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136] S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-18 43696] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-12 144200] S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632] S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344] S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-12-13 178760] S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-09-10 1031680] S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088] -----------------EOF-----------------