Logfile of random's system information tool 1.10 (written by random/random) Run by Jive1 at 2015-12-18 12:37:45 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 56 GB (46%) free of 123 GB Total RAM: 8169 MB (75% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 12:37:48, on 18/12/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.18123) Boot mode: Normal Running processes: C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files (x86)\PrintKey2000\Printkey2000.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files\BullGuard Ltd\BullGuard\Files32\Spamfilter\LittleHook.exe C:\Users\Jive1\AppData\Roaming\BitTorrent\BitTorrent.exe C:\Users\Jive1\AppData\Roaming\BitTorrent\updates\7.9.5_41373\utorrentie.exe C:\Users\Jive1\AppData\Roaming\BitTorrent\updates\7.9.5_41373\utorrentie.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files\trend micro\Jive1.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: Printkey2000.lnk = C:\Program Files (x86)\PrintKey2000\Printkey2000.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra button: Report to BullGuard - {27FD17FB-CF63-486b-B2BE-8D8781CBEA01} - C:\Program Files\BullGuard Ltd\BullGuard\Files32\Antiphishing\IE\BGAntiphishingIE.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: BullGuard Behavioural Detection (BsBhvScan) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe O23 - Service: BullGuard scanning service (BsScanner) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe O23 - Service: BullGuard update service (BsUpdate) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9598 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\SvcHost.exe -k BullGuard_Main C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" C:\Windows\System32\SvcHost.exe -k BullGuard_Backup "C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe" C:\Windows\System32\SvcHost.exe -k BullGuard_Cache C:\Windows\System32\SvcHost.exe -k BullGuard C:\Windows\System32\SvcHost.exe -k BullGuard_Proxy "C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe" "C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe" "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service C:\Windows\System32\svchost.exe -k utcsvc "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe" C:\Windows\system32\IProsetMonitor.exe "taskhost.exe" "C:\Windows\system32\Dwm.exe" "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" C:\Windows\Explorer.EXE "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1ccfaefb-69de-4546-8963-b76297cbac7f -SystemEventPortName:HostProcess-b9f2dfe9-de58-465e-8524-0f8b6ab536b9 -IoCancelEventPortName:HostProcess-326a50d7-0e73-4960-b754-dd1d6ae7eb3e -NonStateChangingEventPortName:HostProcess-83485fd4-c05d-488f-b0e5-98937c660614 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:11041746-ccea-4355-b9d4-50ad29b94d37 -DeviceGroupId: "C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe" -boot "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files (x86)\PrintKey2000\Printkey2000.exe" "C:\Windows\system32\GWX\GWX.exe" "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files\PowerISO\PWRISOVM.EXE" -startup "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ef13655b-b6d0-44eb-850d-6a96298ca5dd -SystemEventPortName:HostProcess-70acc234-16e1-4191-8f36-aaf55e968e4a -IoCancelEventPortName:HostProcess-acb78d20-8764-4542-8fb9-ab78bb3e0b11 -NonStateChangingEventPortName:HostProcess-cc31b8e1-8d2b-4d5f-9158-d96f5ae19ff9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3ecfc582-c2e7-4daa-bd74-2dd719eb3f6d -DeviceGroupId:WpdFsGroup "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp \??\C:\Windows\system32\conhost.exe "-211742486017266450457474537061930992682-13284358511422440650-24244037-957734397 "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Windows\system32\taskmgr.exe" /4 "C:\Program Files\BullGuard Ltd\BullGuard\Files32\Spamfilter\LittleHook.exe" C:\Windows\servicing\TrustedInstaller.exe "C:\Users\Jive1\AppData\Roaming\BitTorrent\BitTorrent.exe" "C:\Users\Jive1\AppData\Roaming\BitTorrent\updates\7.9.5_41373\utorrentie.exe" BitTorrent_3456_009EFDD8_1249999608 BT4823DF041B09 BitTorrent "C:\Users\Jive1\AppData\Roaming\BitTorrent\updates\7.9.5_41373\utorrentie.exe" BitTorrent_3456_009F0098_932579609 BT4823DF041B09 BitTorrent "taskhost.exe" "C:\Program Files\Internet Explorer\iexplore.exe" -Embedding "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6564 CREDAT:267521 /prefetch:2 C:\Windows\system32\Macromed\Flash\FlashUtil64_20_0_0_228_ActiveX.exe -Embedding "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6564 CREDAT:3872026 /prefetch:2 "I:\Malware&Security Tests\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\Windows\tasks\AdvancedDriverUpdater.job - C:\Program Files (x86)\Advanced Driver Updater\adu.exe scan C:\Windows\tasks\AdvancedDriverUpdater_UPDATES.job - C:\Program Files (x86)\Advanced Driver Updater\adu.exe -updatecheck =========Mozilla firefox========= ProfilePath - C:\Users\Jive1\AppData\Roaming\Mozilla\Firefox\Profiles\jqdvbdgp.default [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 10.1 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.66.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.66.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision] "Description"=NVIDIA stereo images plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming] "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-15 219304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-12-15 886488] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-12-15 2339032] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}] ContributeBHO Class - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27 164312] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-22 460384] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-12-15 710872] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-22 172640] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27 164312] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "BullGuard"=C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe [2015-12-15 1334552] "BullGuardUpdate2"=c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe [2015-12-15 2856216] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-11-12 2757424] "ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-11-12 1828160] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-09-17 16404224] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992] "SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-11-09 596528] "PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2015-10-08 408888] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Printkey2000.lnk - C:\Program Files (x86)\PrintKey2000\Printkey2000.exe [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsMain] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsScanner] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsUpdate] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SMPCHelper] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tvnserver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=lvcod64.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "aux5"=wdmaud.drv "MSVideo"=vfwwdm32.dll "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux"=wdmaud.drv "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS5\Dreamweaver.exe","%1" ======List of files/folders created in the last 1 month====== 2015-12-18 08:43:11 ----D---- C:\Users\Jive1\AppData\Roaming\SECRV 2015-12-18 08:10:29 ----A---- C:\Windows\system32\drivers\scdemu.sys 2015-12-16 14:56:37 ----D---- C:\Program Files (x86)\gmsd_be_004010177 2015-12-15 16:47:26 ----D---- C:\Program Files (x86)\Lenovo 2015-12-15 16:47:22 ----D---- C:\Windows\Downloaded Installations 2015-12-15 13:48:23 ----D---- C:\Users\Jive1\AppData\Roaming\PowerISO 2015-12-15 13:48:16 ----D---- C:\Users\Jive1\AppData\Roaming\Shortcut 2015-12-15 13:48:03 ----D---- C:\Users\Jive1\AppData\Roaming\Opera Software 2015-12-15 13:47:40 ----D---- C:\Program Files (x86)\Opera 2015-12-15 13:47:39 ----D---- C:\Program Files\PowerISO 2015-12-15 11:41:44 ----A---- C:\Windows\SYSWOW64\BgGamingMonitor.dll 2015-12-15 11:41:44 ----A---- C:\Windows\system32\BgGamingMonitor.dll 2015-12-15 11:41:41 ----A---- C:\Windows\SYSWOW64\BGLsp.dll 2015-12-15 11:41:41 ----A---- C:\Windows\system32\BGLsp.dll 2015-12-15 11:12:26 ----D---- C:\Users\Jive1\AppData\Roaming\DAEMON Tools Pro 2015-12-15 11:11:50 ----D---- C:\ProgramData\DAEMON Tools Pro 2015-12-15 11:06:51 ----D---- C:\ProgramData\DAEMON Tools Lite 2015-12-15 11:02:12 ----D---- C:\Users\Jive1\AppData\Roaming\WinISO Computing 2015-12-15 11:02:08 ----D---- C:\Program Files (x86)\WinISO Computing 2015-12-15 09:46:13 ----D---- C:\Program Files (x86)\MagicISO 2015-12-13 14:42:59 ----D---- C:\ProgramData\InstallMate 2015-12-10 14:15:28 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvopencl.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvinit.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\NvIFR.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\NvFBC.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvcuda.dll 2015-12-10 14:13:47 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvumdshimx.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvopencl.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvoglv64.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvoglshim64.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvinitx.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\NvIFR64.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvhdap64.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\NvFBC64.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvdispgenco6435906.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvdispco6435906.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvd3dumx.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvcuvid.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvcuda.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\nvcompiler.dll 2015-12-10 14:13:47 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys 2015-12-10 14:13:47 ----A---- C:\Windows\system32\drivers\nvhda64v.sys 2015-12-10 14:09:33 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll 2015-12-09 15:28:44 ----D---- C:\Users\Jive1\AppData\Roaming\TightVNC 2015-12-09 15:28:00 ----D---- C:\Program Files (x86)\ShowMyPCService 2015-12-09 15:11:38 ----D---- C:\rsit 2015-12-09 14:26:41 ----D---- C:\Users\Jive1\AppData\Roaming\teamspeak2 2015-12-09 07:47:32 ----A---- C:\Windows\SYSWOW64\tzres.dll 2015-12-09 07:47:32 ----A---- C:\Windows\system32\tzres.dll 2015-12-09 07:47:02 ----A---- C:\Windows\SYSWOW64\usp10.dll 2015-12-09 07:47:02 ----A---- C:\Windows\system32\usp10.dll 2015-12-09 07:46:36 ----A---- C:\Windows\SYSWOW64\wuwebv.dll 2015-12-09 07:46:36 ----A---- C:\Windows\SYSWOW64\wups.dll 2015-12-09 07:46:36 ----A---- C:\Windows\SYSWOW64\wudriver.dll 2015-12-09 07:46:36 ----A---- C:\Windows\SYSWOW64\wuapp.exe 2015-12-09 07:46:36 ----A---- C:\Windows\SYSWOW64\wuapi.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wuwebv.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wups2.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wups.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wudriver.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wucltux.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wuaueng.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wuauclt.exe 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wuapp.exe 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wuapi.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\wu.upgrade.ps.dll 2015-12-09 07:46:36 ----A---- C:\Windows\system32\WinSetupUI.dll 2015-12-09 07:46:09 ----A---- C:\Windows\SYSWOW64\nlsbres.dll 2015-12-09 07:46:09 ----A---- C:\Windows\SYSWOW64\kbdgeoqw.dll 2015-12-09 07:46:09 ----A---- C:\Windows\SYSWOW64\KBDAZEL.DLL 2015-12-09 07:46:09 ----A---- C:\Windows\SYSWOW64\KBDAZE.DLL 2015-12-09 07:46:09 ----A---- C:\Windows\system32\nlsbres.dll 2015-12-09 07:46:09 ----A---- C:\Windows\system32\kbdgeoqw.dll 2015-12-09 07:46:09 ----A---- C:\Windows\system32\KBDAZEL.DLL 2015-12-09 07:46:09 ----A---- C:\Windows\system32\KBDAZE.DLL 2015-12-09 07:45:41 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2015-12-09 07:45:41 ----A---- C:\Windows\system32\win32k.sys 2015-12-09 07:45:41 ----A---- C:\Windows\system32\FntCache.dll 2015-12-09 07:45:41 ----A---- C:\Windows\system32\DWrite.dll 2015-12-09 07:45:40 ----A---- C:\Windows\SYSWOW64\user32.dll 2015-12-09 07:45:40 ----A---- C:\Windows\system32\user32.dll 2015-12-09 07:44:44 ----A---- C:\Windows\SYSWOW64\wshrm.dll 2015-12-09 07:44:44 ----A---- C:\Windows\system32\wshrm.dll 2015-12-09 07:44:44 ----A---- C:\Windows\system32\drivers\rmcast.sys 2015-12-09 07:44:17 ----A---- C:\Windows\SYSWOW64\comsvcs.dll 2015-12-09 07:44:17 ----A---- C:\Windows\SYSWOW64\catsrvut.dll 2015-12-09 07:44:17 ----A---- C:\Windows\system32\comsvcs.dll 2015-12-09 07:44:17 ----A---- C:\Windows\system32\catsrvut.dll 2015-12-09 07:44:02 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-12-09 07:44:02 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-12-09 07:44:02 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2015-12-09 07:44:02 ----A---- C:\Windows\system32\iertutil.dll 2015-12-09 07:44:02 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-12-09 07:44:02 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\occache.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-12-09 07:44:01 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-12-09 07:44:01 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-12-09 07:44:01 ----A---- C:\Windows\system32\iernonce.dll 2015-12-09 07:44:01 ----A---- C:\Windows\system32\ie4uinit.exe 2015-12-09 07:44:00 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-12-09 07:44:00 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-12-09 07:44:00 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-12-09 07:44:00 ----A---- C:\Windows\system32\urlmon.dll 2015-12-09 07:44:00 ----A---- C:\Windows\system32\occache.dll 2015-12-09 07:44:00 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-12-09 07:44:00 ----A---- C:\Windows\system32\iedkcs32.dll 2015-12-09 07:43:59 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-12-09 07:43:59 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2015-12-09 07:43:59 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-12-09 07:43:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-12-09 07:43:59 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-12-09 07:43:59 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-12-09 07:43:59 ----A---- C:\Windows\system32\msfeeds.dll 2015-12-09 07:43:59 ----A---- C:\Windows\system32\iesetup.dll 2015-12-09 07:43:59 ----A---- C:\Windows\system32\dxtrans.dll 2015-12-09 07:43:58 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-12-09 07:43:58 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2015-12-09 07:43:58 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-12-09 07:43:58 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-12-09 07:43:58 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-12-09 07:43:58 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-12-09 07:43:58 ----A---- C:\Windows\system32\vbscript.dll 2015-12-09 07:43:58 ----A---- C:\Windows\system32\jsproxy.dll 2015-12-09 07:43:58 ----A---- C:\Windows\system32\ieapfltr.dll 2015-12-09 07:43:57 ----A---- C:\Windows\system32\mshtmled.dll 2015-12-09 07:43:57 ----A---- C:\Windows\system32\ieui.dll 2015-12-09 07:43:57 ----A---- C:\Windows\system32\ieframe.dll 2015-12-09 07:43:57 ----A---- C:\Windows\system32\dxtmsft.dll 2015-12-09 07:43:56 ----A---- C:\Windows\system32\wininet.dll 2015-12-09 07:43:56 ----A---- C:\Windows\system32\webcheck.dll 2015-12-09 07:43:56 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-12-09 07:43:56 ----A---- C:\Windows\system32\jscript9diag.dll 2015-12-09 07:43:56 ----A---- C:\Windows\system32\jscript9.dll 2015-12-09 07:43:56 ----A---- C:\Windows\system32\jscript.dll 2015-12-09 07:43:56 ----A---- C:\Windows\system32\ieUnatt.exe 2015-12-09 07:43:55 ----A---- C:\Windows\system32\msrating.dll 2015-12-09 07:43:55 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-12-09 07:43:55 ----A---- C:\Windows\system32\mshtml.dll 2015-12-09 07:43:06 ----A---- C:\Windows\SYSWOW64\els.dll 2015-12-09 07:43:06 ----A---- C:\Windows\system32\els.dll 2015-12-08 14:44:41 ----D---- C:\Program Files\WinImage 2015-12-05 15:15:09 ----A---- C:\Windows\SYSWOW64\MSBIND.DLL 2015-12-05 10:40:46 ----D---- C:\Windows\Repair 2015-12-05 10:40:34 ----D---- C:\ProgramData\MyDefrag 2015-12-05 09:39:23 ----A---- C:\Windows\system32\drivers\MxEFUF64.sys 2015-12-05 09:39:23 ----A---- C:\Windows\system32\drivers\MxEFLF64.sys 2015-12-05 09:38:53 ----D---- C:\Program Files\Synaptics 2015-12-05 09:20:41 ----D---- C:\ProgramData\AmUStor 2015-12-05 09:20:41 ----D---- C:\Program Files (x86)\AmUStor 2015-12-05 09:18:27 ----D---- C:\Program Files (x86)\Intel 2015-12-05 09:11:52 ----D---- C:\Windows\system32\DAX2 2015-12-05 09:11:49 ----D---- C:\Windows\SYSWOW64\RTCOM 2015-12-05 09:11:49 ----D---- C:\Program Files\Realtek 2015-12-05 09:10:54 ----A---- C:\Windows\SYSWOW64\LVUI2RC.dll 2015-12-05 09:10:54 ----A---- C:\Windows\SYSWOW64\LVUI2.dll 2015-12-05 09:10:54 ----A---- C:\Windows\SYSWOW64\lvcodec2.dll 2015-12-05 09:10:54 ----A---- C:\Windows\system32\LVUIRC64.dll 2015-12-05 09:10:54 ----A---- C:\Windows\system32\LVUI64.dll 2015-12-05 09:10:54 ----A---- C:\Windows\system32\lvcoin64.ini 2015-12-05 09:10:54 ----A---- C:\Windows\system32\lvcod64.dll 2015-12-05 09:10:54 ----A---- C:\Windows\system32\lvco1110.dll 2015-12-05 09:10:54 ----A---- C:\Windows\system32\drivers\LVUSBS64.sys 2015-12-05 09:10:54 ----A---- C:\Windows\system32\drivers\LV302V64.SYS 2015-12-05 08:01:11 ----D---- C:\Users\Jive1\AppData\Roaming\Systweak 2015-12-05 08:01:07 ----D---- C:\Program Files (x86)\Advanced Driver Updater 2015-12-05 07:43:04 ----AD---- C:\ProgramData\TEMP 2015-12-05 07:43:01 ----D---- C:\Program Files (x86)\Smart PC Solutions 2015-11-22 07:26:47 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-11-22 07:26:45 ----D---- C:\Windows\system32\Macromed ======List of files/folders modified in the last 1 month====== 2015-12-18 12:37:48 ----D---- C:\Windows\Prefetch 2015-12-18 12:37:47 ----D---- C:\Program Files\trend micro 2015-12-18 12:36:31 ----D---- C:\Users\Jive1\AppData\Roaming\BitTorrent 2015-12-18 12:36:04 ----D---- C:\ProgramData\BullGuard 2015-12-18 12:35:51 ----D---- C:\Windows\Temp 2015-12-18 10:42:12 ----D---- C:\Windows\system32\config 2015-12-18 10:41:10 ----D---- C:\Program Files 2015-12-18 10:37:34 ----D---- C:\ProgramData\NVIDIA 2015-12-18 10:37:19 ----D---- C:\Windows 2015-12-18 09:28:07 ----D---- C:\Program Files\CCleaner 2015-12-18 09:23:34 ----SHD---- C:\System Volume Information 2015-12-18 09:20:52 ----D---- C:\Windows\system32\Tasks 2015-12-18 09:08:25 ----HD---- C:\ProgramData 2015-12-18 09:08:25 ----D---- C:\Windows\Tasks 2015-12-18 09:08:07 ----RD---- C:\Program Files (x86) 2015-12-18 09:08:05 ----D---- C:\Windows\System32 2015-12-18 08:11:09 ----SHD---- C:\Windows\Installer 2015-12-18 08:10:29 ----D---- C:\Windows\system32\drivers 2015-12-18 08:05:46 ----D---- C:\Windows\inf 2015-12-18 07:33:09 ----D---- C:\Windows\winsxs 2015-12-16 18:02:14 ----D---- C:\Windows\SysWOW64 2015-12-16 18:02:08 ----D---- C:\ProgramData\Package Cache 2015-12-16 18:00:17 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2015-12-15 18:19:11 ----D---- C:\Windows\system32\catroot 2015-12-15 16:48:12 ----D---- C:\Program Files (x86)\Common Files 2015-12-15 16:47:28 ----RSD---- C:\Windows\assembly 2015-12-15 11:17:56 ----D---- C:\Windows\system32\DriverStore 2015-12-15 11:16:52 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-12-15 08:33:14 ----D---- C:\Windows\Microsoft.NET 2015-12-15 08:09:20 ----D---- C:\ProgramData\regid.1991-06.com.microsoft 2015-12-15 08:08:22 ----D---- C:\Program Files\Microsoft Office 15 2015-12-14 15:47:06 ----D---- C:\Program Files\WinRAR 2015-12-12 08:00:59 ----D---- C:\temp 2015-12-10 16:38:32 ----RSD---- C:\Windows\Fonts 2015-12-10 15:59:38 ----D---- C:\Windows\rescache 2015-12-10 15:25:26 ----D---- C:\Windows\debug 2015-12-10 14:15:48 ----D---- C:\ProgramData\NVIDIA Corporation 2015-12-10 14:15:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2015-12-10 14:14:27 ----D---- C:\Windows\system32\catroot2 2015-12-10 07:19:49 ----D---- C:\Windows\SYSWOW64\nl-NL 2015-12-10 07:19:49 ----D---- C:\Windows\system32\nl-NL 2015-12-10 07:19:46 ----D---- C:\Windows\ehome 2015-12-10 07:19:45 ----D---- C:\Program Files\Internet Explorer 2015-12-10 07:19:44 ----D---- C:\Windows\SYSWOW64\en-US 2015-12-10 07:19:44 ----D---- C:\Windows\system32\en-US 2015-12-10 07:19:43 ----D---- C:\Program Files (x86)\Internet Explorer 2015-12-09 16:16:34 ----D---- C:\Windows\system32\MRT 2015-12-09 16:14:16 ----A---- C:\Windows\system32\MRT.exe 2015-12-08 17:48:55 ----D---- C:\Users\Jive1\AppData\Roaming\Adobe 2015-12-05 09:11:00 ----D---- C:\Program Files\Common Files\logishrd 2015-12-04 11:46:30 ----SD---- C:\Users\Jive1\AppData\Roaming\Microsoft 2015-11-28 14:23:49 ----D---- C:\Program Files\Microsoft Games 2015-11-25 00:10:29 ----A---- C:\Windows\SYSWOW64\OpenCL.dll 2015-11-25 00:10:29 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll 2015-11-25 00:10:29 ----A---- C:\Windows\SYSWOW64\nvapi.dll 2015-11-25 00:10:29 ----A---- C:\Windows\system32\OpenCL.dll 2015-11-25 00:10:29 ----A---- C:\Windows\system32\nvwgf2umx.dll 2015-11-25 00:10:29 ----A---- C:\Windows\system32\nvhdagenco6420103.dll 2015-11-25 00:10:29 ----A---- C:\Windows\system32\nvapi64.dll 2015-11-24 19:40:40 ----A---- C:\Windows\system32\nvsvc64.dll 2015-11-24 19:40:40 ----A---- C:\Windows\system32\nvcpl.dll 2015-11-24 19:40:37 ----A---- C:\Windows\system32\nvvsvc.exe 2015-11-24 19:40:37 ----A---- C:\Windows\system32\nvsvcr.dll 2015-11-24 19:40:37 ----A---- C:\Windows\system32\nvshext.dll 2015-11-24 19:40:37 ----A---- C:\Windows\system32\nvmctray.dll 2015-11-22 07:42:13 ----D---- C:\ProgramData\Oracle 2015-11-22 07:41:47 ----D---- C:\Program Files (x86)\Java 2015-11-22 07:41:08 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 AFW;Agnitum Firewall Driver; C:\Windows\system32\DRIVERS\afw.sys [2015-08-26 52904] R1 BdAgent;BullGuard Security Agent; C:\Windows\system32\DRIVERS\BdAgent.sys [2015-08-26 117184] R1 BdSpy;BdSpy; C:\Windows\system32\drivers\BdSpy.sys [2015-10-29 76728] R1 NovaShieldFilterDriver;NovaShieldFilterDriver; C:\Windows\system32\DRIVERS\NSKernel.sys [2015-08-26 325488] R1 NovaShieldTDIDriver;NovaShieldTDIDriver; C:\Windows\system32\DRIVERS\NSNetmon.sys [2015-08-26 26776] R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2015-10-08 127760] R3 afwcore;afwcore; C:\Windows\system32\DRIVERS\afwcore.sys [2015-08-26 465072] R3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2014-03-18 91928] R3 BdNet;BdNet; C:\Windows\system32\DRIVERS\BdNet.sys [2015-10-29 33968] R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2013-08-21 494864] R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2010-08-18 26136] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-09-17 4603136] R3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys [2007-07-19 50072] R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-08-31 179456] R3 MxEFLF;Matrox Extio Lower Function Filter; C:\Windows\system32\DRIVERS\MxEFLF64.sys [2010-11-04 113480] R3 MxEFUF;Matrox Extio Upper Function Filter; C:\Windows\system32\DRIVERS\MxEFUF64.sys [2010-11-04 143688] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2013-08-12 107912] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2013-08-12 226696] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-11-25 205456] R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-11-12 19760] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-10-03 50472] R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V64.SYS [2007-07-19 1213592] R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-08-03 33960] R3 Trufos;Trufos; C:\Windows\system32\DRIVERS\Trufos.sys [2015-10-29 477272] R3 WinUsb;WinUsb-stuurprogramma; C:\Windows\system32\drivers\WinUSB.sys [2010-11-21 41984] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-28 82128] R2 BsBackup;BullGuard backup service; C:\Windows\System32\SvcHost.exe [2009-07-14 27136] R2 BsBhvScan;BullGuard Behavioural Detection; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe [2015-12-15 671000] R2 BsCache;BullGuard cache service; C:\Windows\System32\SvcHost.exe [2009-07-14 27136] R2 BsFileScan;BullGuard on-access service; C:\Windows\System32\SvcHost.exe [2009-07-14 27136] R2 BsFire;BullGuard firewall service; C:\Windows\System32\SvcHost.exe [2009-07-14 27136] R2 BsMailProxy;BullGuard e-mail monitoring service; C:\Windows\System32\SvcHost.exe [2009-07-14 27136] R2 BsMain;BullGuard Main Service; C:\Windows\System32\SvcHost.exe [2009-07-14 27136] R2 BsScanner;BullGuard scanning service; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe [2015-12-15 310040] R2 BsUpdate;BullGuard update service; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe [2015-12-15 398616] R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-11-24 2802360] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-11-12 1156400] R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2013-07-30 204552] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-11-12 1872688] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-11-12 5915440] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-11-24 938616] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-11-24 417584] R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-11-12 8133424] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088] S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-11-08 114688] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-10-15 147624] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-11-03 150600] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2015-10-31 5132888] S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-10-30 1255736] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] -----------------EOF-----------------