Logfile of random's system information tool 1.10 (written by random/random) Run by Emily at 2016-02-10 22:17:52 Microsoft Windows 10 Home System drive C: has 180 GB (26%) free of 692 GB Total RAM: 8122 MB (79% free) HijackThis download failed ======Listing Processes====== winlogon.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS C:\WINDOWS\system32\svchost.exe -k netsvcs "dwm.exe" "C:\WINDOWS\system32\nvvsvc.exe" C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted "C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe" C:\WINDOWS\system32\igfxCUIService.exe "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\WINDOWS\System32\svchost.exe -k NetworkService C:\WINDOWS\system32\nvvsvc.exe -session -first C:\WINDOWS\system32\Hpservice.exe "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPSP "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service C:\WINDOWS\system32\BtwRSupportService.exe "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe" "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe" C:\WINDOWS\System32\svchost.exe -k utcsvc C:\WINDOWS\system32\svchost.exe -k apphost "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe" "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe" "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" "C:\Program Files (x86)\Norton Security\Engine\22.5.5.15\NS.exe" /s "NS" /m "C:\Program Files (x86)\Norton Security\Engine\22.5.5.15\diMaster.dll" /prefetch:1 C:\WINDOWS\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe" /s "NCO" /m "C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\diMaster.dll" /prefetch:1 C:\WINDOWS\system32\svchost.exe -k appmodel "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss d038d4c0-e2c6-4254-9933-e2a6ef4e2669 1 \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\WINDOWS\System32\alg.exe "C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe" /c /a /s UserSession sihost.exe "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp "C:\Program Files (x86)\Norton Security\Engine\22.5.5.15\NS.exe" /c /a /s UserSession2 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" C:\WINDOWS\Explorer.EXE "C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe" "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup dashost.exe {54a2f750-b9d9-4835-a7194d2531d3e9ac} "C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe" "C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe" /hideui "C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" /byrunkey "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" igfxEM.exe igfxHK.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted dashost.exe {f985ac36-4c6f-4d0b-a6a28d8397363ba3} C:\WINDOWS\system32\wbem\wmiprvse.exe "C:\Program Files\Hewlett-Packard\SimplePass\opbhobroker.exe" C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" C:\WINDOWS\system32\SearchIndexer.exe /Embedding "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca C:\Windows\System32\RuntimeBroker.exe -Embedding C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" "C:\Users\Gebruiker\AppData\Local\Hola\local\app\hola.exe" --silent "C:\\Users\\Gebruiker\\AppData\\Local\\Hola\\local\\app\\hola_updater.exe" --no-root --run-as hola_updater --workdir "C:\\Users\\Gebruiker\\AppData\\Local\\Hola\\local" "C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe" "C:\Users\Gebruiker\AppData\Local\Hola\local\app\hola_svc.exe" --no-root --workdir "C:\\Users\\Gebruiker\\AppData\\Local\\Hola\\local" "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe" C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849} "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" "C:\Users\Gebruiker\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\len7rklg.default "{C1A2A613-35F1-4FCF-B27F-2840527B6556}"=C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.4.24\coFFAddon\ [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 20.0.0.286 Plugin "Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5] "Description"=Intel IPT WebApi plugin "Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater] "Description"=This plugin updates Intel WebAPI component "Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.45.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0] "Description"=WildTangent Games App V2 Presence Detector Plugin "Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 20.0.0.286 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll C:\Program Files (x86)\Mozilla Firefox\extensions\ belgiumeid@eid.belgium.be C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\len7rklg.default\extensions\ jid1-4P0kohSJxU1qGg@jetpack ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-01-19 230080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files (x86)\Norton Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05 1038648] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB4C7833-A6EC-433f-B9FE-6B14B1A2F836}] Norton Identity Protection - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.7.11.42\coIEPlg.dll [2015-03-05 931640] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-18 2093360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files (x86)\Norton Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05 794424] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-08 460384] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-08 172640] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2015-12-20 414920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {A13C2648-91D4-4bf3-BC6D-0079707C4389} - Norton Identity Safe Toolbar - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.7.11.42\coIEPlg.dll [2015-03-05 931640] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05 1038648] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05 794424] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800] "Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-03-28 2198872] "ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-03-28 1225920] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-09-17 3945656] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-10-30 508104] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-12-09 170256] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2014-11-21 43816] "ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2014-11-21 43816] "Adobe Acrobat Synchronizer"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [] "OneDrive"=C:\Users\Gebruiker\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-11-02 405584] "hola"=C:\Users\Gebruiker\AppData\Local\Hola\local\app\hola.exe [2015-12-20 2031232] "SpybotPostWindows10UpgradeReInstall"=C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [2015-07-28 1011200] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall C:\Users\Gebruiker\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448] "Uninstall C:\Users\Gebruiker\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "AccelerometerSysTrayApplet"=C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [2014-04-01 126240] "HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2014-12-01 509192] "beid"=C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe /startup [] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-04-30 334896] "BlueStacks Agent"=C:\Program Files (x86)\BlueStacks\HD-Agent.exe [2015-07-22 896632] "Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2015-11-25 2304688] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup ISCTSystray.lnk - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Verzenden naar OneNote.lnk - C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DSCAutomationHostEnabled"=2 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "vidc.i420"=iyuv_32.dll "vidc.iyuv"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvu9"=tsbyuv.dll "vidc.yvyu"=msyuv.dll "wavemapper"=msacm32.drv "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2016-02-10 22:15:38 ----D---- C:\Program Files\trend micro 2016-02-10 22:15:37 ----D---- C:\rsit 2016-02-10 16:04:39 ----D---- C:\Program Files\Speccy 2016-02-09 21:36:20 ----D---- C:\Program Files\Common Files\Symantec Shared 2016-02-09 21:36:20 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT64x86.SYS 2016-02-09 21:27:18 ----D---- C:\WINDOWS\system32\drivers\NSx64 2016-02-09 21:27:14 ----D---- C:\Program Files (x86)\Norton Security 2016-02-09 20:38:14 ----A---- C:\WINDOWS\wininit.ini 2016-02-09 20:16:50 ----D---- C:\WINDOWS\system32\drivers\NSTx64 2016-02-09 20:16:49 ----D---- C:\Program Files (x86)\Norton Identity Safe 2016-02-09 20:12:12 ----D---- C:\ProgramData\Bitdefender Agent 2016-02-08 22:38:34 ----D---- C:\ProgramData\clp 2016-02-08 22:23:37 ----D---- C:\Program Files\Common Files\AV 2016-02-08 22:20:37 ----D---- C:\ProgramData\Spybot - Search & Destroy 2016-02-08 22:20:32 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2 2016-02-08 22:15:27 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys 2016-02-08 22:14:56 ----D---- C:\ProgramData\Malwarebytes 2016-01-28 15:40:11 ----SHD---- C:\found.000 2016-01-20 19:07:03 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe 2016-01-12 21:59:00 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll 2016-01-12 21:59:00 ----A---- C:\WINDOWS\system32\schannel.dll 2016-01-12 21:59:00 ----A---- C:\WINDOWS\system32\edgehtml.dll 2016-01-12 21:58:59 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll 2016-01-12 21:58:58 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2016-01-12 21:58:56 ----A---- C:\WINDOWS\system32\mshtml.dll 2016-01-12 21:58:55 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL 2016-01-12 21:58:55 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL 2016-01-12 21:58:55 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL 2016-01-12 21:58:55 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL 2016-01-12 21:58:55 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL 2016-01-12 21:58:55 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL 2016-01-12 21:58:55 ----A---- C:\WINDOWS\system32\WMADMOD.DLL 2016-01-12 21:58:55 ----A---- C:\WINDOWS\system32\mfvdsp.dll 2016-01-12 21:58:54 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL 2016-01-12 21:58:54 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL 2016-01-12 21:58:54 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL 2016-01-12 21:58:54 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL 2016-01-12 21:58:54 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL 2016-01-12 21:58:54 ----A---- C:\WINDOWS\system32\COLORCNV.DLL 2016-01-12 21:58:53 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL 2016-01-12 21:58:53 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL 2016-01-12 21:58:53 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL 2016-01-12 21:58:53 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll 2016-01-12 21:58:53 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll 2016-01-12 21:58:53 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL 2016-01-12 21:58:53 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL 2016-01-12 21:58:52 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL 2016-01-12 21:58:52 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll 2016-01-12 21:58:52 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll 2016-01-12 21:58:52 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL 2016-01-12 21:58:52 ----A---- C:\WINDOWS\system32\WMADMOE.DLL 2016-01-12 21:58:52 ----A---- C:\WINDOWS\system32\quartz.dll 2016-01-12 21:58:52 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll 2016-01-12 21:58:52 ----A---- C:\WINDOWS\system32\mfnetsrc.dll 2016-01-12 21:58:52 ----A---- C:\WINDOWS\system32\mfnetcore.dll 2016-01-12 21:58:51 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL 2016-01-12 21:58:51 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll 2016-01-12 21:58:51 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll 2016-01-12 21:58:51 ----A---- C:\WINDOWS\system32\aepic.dll 2016-01-12 21:58:51 ----A---- C:\WINDOWS\system32\aeinv.dll 2016-01-12 21:58:50 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL 2016-01-12 21:58:50 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL 2016-01-12 21:58:50 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL 2016-01-12 21:58:50 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll 2016-01-12 21:58:50 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL 2016-01-12 21:58:50 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL 2016-01-12 21:58:50 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL 2016-01-12 21:58:50 ----A---- C:\WINDOWS\system32\evr.dll 2016-01-12 21:58:50 ----A---- C:\WINDOWS\system32\advapi32.dll 2016-01-12 21:58:49 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll 2016-01-12 21:58:49 ----A---- C:\WINDOWS\system32\qedit.dll 2016-01-12 21:58:49 ----A---- C:\WINDOWS\system32\ntoskrnl.exe 2016-01-12 21:58:49 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll 2016-01-12 21:58:48 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll 2016-01-12 21:58:48 ----A---- C:\WINDOWS\system32\mftranscode.dll 2016-01-12 21:58:48 ----A---- C:\WINDOWS\system32\mfcore.dll 2016-01-12 21:58:48 ----A---- C:\WINDOWS\system32\devenum.dll 2016-01-12 21:58:48 ----A---- C:\WINDOWS\system32\Chakra.dll 2016-01-12 21:58:47 ----A---- C:\WINDOWS\SYSWOW64\mfh264enc.dll 2016-01-12 21:58:47 ----A---- C:\WINDOWS\SYSWOW64\evr.dll 2016-01-12 21:58:47 ----A---- C:\WINDOWS\system32\mfh264enc.dll 2016-01-12 21:58:47 ----A---- C:\WINDOWS\system32\invagent.dll 2016-01-12 21:58:47 ----A---- C:\WINDOWS\system32\generaltel.dll 2016-01-12 21:58:46 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL 2016-01-12 21:58:46 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll 2016-01-12 21:58:46 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll 2016-01-12 21:58:46 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL 2016-01-12 21:58:46 ----A---- C:\WINDOWS\system32\qdvd.dll 2016-01-12 21:58:46 ----A---- C:\WINDOWS\system32\devinv.dll 2016-01-12 21:58:45 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL 2016-01-12 21:58:45 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL 2016-01-12 21:58:45 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll 2016-01-12 21:58:45 ----A---- C:\WINDOWS\system32\usermgrcli.dll 2016-01-12 21:58:45 ----A---- C:\WINDOWS\system32\usermgr.dll 2016-01-12 21:58:45 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL 2016-01-12 21:58:45 ----A---- C:\WINDOWS\system32\MP43DECD.DLL 2016-01-12 21:58:44 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll 2016-01-12 21:58:44 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL 2016-01-12 21:58:44 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll 2016-01-12 21:58:44 ----A---- C:\WINDOWS\system32\winlogon.exe 2016-01-12 21:58:44 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL 2016-01-12 21:58:44 ----A---- C:\WINDOWS\system32\mfsvr.dll 2016-01-12 21:58:44 ----A---- C:\WINDOWS\system32\mfds.dll 2016-01-12 21:58:43 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll 2016-01-12 21:58:43 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll 2016-01-12 21:58:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll 2016-01-12 21:58:43 ----A---- C:\WINDOWS\system32\gdi32.dll 2016-01-12 21:58:42 ----A---- C:\WINDOWS\SYSWOW64\usermgrcli.dll 2016-01-12 21:58:42 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-01-12 21:58:42 ----A---- C:\WINDOWS\system32\vbscript.dll 2016-01-12 21:58:42 ----A---- C:\WINDOWS\system32\mfps.dll 2016-01-12 21:58:42 ----A---- C:\WINDOWS\system32\appraiser.dll 2016-01-12 21:58:41 ----A---- C:\WINDOWS\SYSWOW64\UserMgrProxy.dll 2016-01-12 21:58:41 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll 2016-01-12 21:58:41 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll 2016-01-12 21:58:41 ----A---- C:\WINDOWS\system32\UserMgrProxy.dll 2016-01-12 21:58:41 ----A---- C:\WINDOWS\system32\jscript.dll 2016-01-12 21:58:41 ----A---- C:\WINDOWS\system32\Chakradiag.dll 2016-01-12 21:58:41 ----A---- C:\WINDOWS\system32\aitstatic.exe ======List of files/folders modified in the last 1 month====== 2016-02-10 22:15:38 ----RD---- C:\Program Files 2016-02-10 22:13:56 ----D---- C:\WINDOWS\system32\NDF 2016-02-10 22:11:46 ----D---- C:\WINDOWS\Temp 2016-02-10 22:11:15 ----D---- C:\WINDOWS\System32 2016-02-10 22:00:48 ----D---- C:\WINDOWS\Microsoft.NET 2016-02-10 21:56:39 ----D---- C:\WINDOWS\system32\Tasks 2016-02-10 21:52:31 ----D---- C:\WINDOWS\AppReadiness 2016-02-10 21:42:51 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2016-02-10 16:23:05 ----D---- C:\WINDOWS\system32\sru 2016-02-10 16:05:20 ----D---- C:\WINDOWS\INF 2016-02-10 14:37:11 ----SHD---- C:\System Volume Information 2016-02-10 14:36:04 ----D---- C:\WINDOWS\system32\config 2016-02-10 14:24:17 ----D---- C:\WINDOWS\WinSxS 2016-02-10 13:40:13 ----D---- C:\WINDOWS\system32\MRT 2016-02-10 13:34:16 ----A---- C:\WINDOWS\system32\MRT.exe 2016-02-10 12:43:53 ----HD---- C:\Program Files\WindowsApps 2016-02-10 09:37:59 ----D---- C:\WINDOWS\CbsTemp 2016-02-10 09:37:55 ----D---- C:\WINDOWS\SysWOW64 2016-02-10 08:47:57 ----HD---- C:\WINDOWS\ELAMBKUP 2016-02-09 23:15:41 ----D---- C:\Users\Gebruiker\AppData\Roaming\vlc 2016-02-09 22:59:52 ----D---- C:\WINDOWS\system32\catroot2 2016-02-09 21:44:00 ----SHD---- C:\WINDOWS\Installer 2016-02-09 21:43:57 ----RD---- C:\Program Files (x86) 2016-02-09 21:42:12 ----D---- C:\Program Files (x86)\BlueStacks 2016-02-09 21:41:33 ----D---- C:\ProgramData\Norton 2016-02-09 21:36:20 ----D---- C:\WINDOWS\system32\drivers 2016-02-09 21:36:20 ----D---- C:\Program Files\Common Files 2016-02-09 21:29:57 ----HD---- C:\ProgramData 2016-02-09 21:26:57 ----D---- C:\Program Files (x86)\NortonInstaller 2016-02-09 20:40:33 ----D---- C:\Users\Gebruiker\AppData\Roaming\uTorrent 2016-02-09 20:39:40 ----D---- C:\Program Files (x86)\Common Files 2016-02-09 20:38:15 ----SD---- C:\ProgramData\Microsoft 2016-02-09 20:38:14 ----D---- C:\Windows 2016-02-08 23:04:31 ----D---- C:\Program Files (x86)\Mozilla Firefox 2016-02-07 23:44:17 ----D---- C:\WINDOWS\Prefetch 2016-02-02 23:47:29 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe 2016-02-02 15:52:32 ----D---- C:\WINDOWS\Tasks 2016-01-30 20:55:59 ----D---- C:\ProgramData\regid.1991-06.com.microsoft 2016-01-30 20:52:42 ----D---- C:\Program Files (x86)\Microsoft Office 2016-01-28 17:08:37 ----D---- C:\WINDOWS\LiveKernelReports 2016-01-22 21:05:05 ----D---- C:\WINDOWS\system32\DriverStore 2016-01-22 20:47:40 ----RSD---- C:\WINDOWS\assembly 2016-01-22 19:50:02 ----D---- C:\ProgramData\Hewlett-Packard 2016-01-22 14:17:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2016-01-22 14:17:12 ----D---- C:\Program Files (x86)\Hewlett-Packard 2016-01-22 14:11:21 ----RSD---- C:\WINDOWS\Fonts 2016-01-22 14:10:32 ----D---- C:\SWSetup 2016-01-13 20:30:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2016-01-13 20:19:34 ----D---- C:\WINDOWS\AppPatch 2016-01-13 20:18:11 ----D---- C:\WINDOWS\system32\CatRoot 2016-01-13 20:13:34 ----D---- C:\Program Files\Microsoft Silverlight 2016-01-13 20:13:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2016-01-12 14:24:49 ----D---- C:\WINDOWS\system32\LogFiles ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 hpdskflt;@oem39.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2013-07-23 30520] R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-11-08 632168] R0 SymEFASI;Symantec Extended File Attributes (SI); C:\WINDOWS\system32\drivers\NSx64\1605050.00F\SYMEFASI64.SYS [2015-11-12 1621232] R1 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton Security\NortonData\22.5.4.24\Definitions\BASHDefs\20160125.001\BHDrvx64.sys [2016-01-25 1665608] R1 ccSet_NS;NS Settings Manager; C:\WINDOWS\system32\drivers\NSx64\1605050.00F\ccSetx64.sys [2015-09-23 173808] R1 ccSet_NST;Norton Identity Safe Settings Manager; C:\WINDOWS\system32\drivers\NSTx64\7DE070B0.02A\ccSetx64.sys [2013-09-27 162392] R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-11-12 91912] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2016-02-09 498512] R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968] R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-12-01 8192] R1 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton Security\NortonData\22.5.4.24\Definitions\IPSDefs\20160209.001\IDSvia64.sys [2016-02-06 767224] R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\WINDOWS\system32\drivers\NSx64\1605050.00F\SRTSPX64.SYS [2015-09-23 50936] R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\NSx64\1605050.00F\Ironx64.SYS [2015-09-23 297720] R1 SymNetS;Symantec Network Security WFP Driver; C:\WINDOWS\System32\Drivers\NSx64\1605050.00F\SYMNETS.SYS [2015-11-12 577768] R2 BstHdDrv;BlueStacks Hypervisor; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2015-06-16 145528] R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128] R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952] R3 Accelerometer;@oem39.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2013-07-23 43320] R3 bcbtums;@oem73.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-10-14 208176] R3 BCM43XX;@oem27.inf,%BCM43XX_Service_DispName%;Stuurprogramma voor de Broadcom 802.11-netwerkadapter; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2014-08-07 7532760] R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992] R3 clwvd;@oem21.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\WINDOWS\system32\DRIVERS\clwvd.sys [2014-01-28 41704] R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2016-02-09 157520] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-10-04 6415272] R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\WINDOWS\system32\DRIVERS\ikbevent.sys [2013-08-13 21408] R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\WINDOWS\system32\DRIVERS\imsevent.sys [2013-08-13 21920] R3 INETMON;INETMON; \??\C:\Windows\System32\Drivers\INETMON.sys [2013-08-13 29088] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320] R3 ISCT;@oem18.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2013-08-13 46568] R3 iwdbus;@oem48.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-03-26 27032] R3 MEIx64;@oem70.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [2015-06-23 192312] R3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton Security\NortonData\22.5.4.24\Definitions\VirusDefs\20160209.049\ENG64.SYS [2016-02-09 138488] R3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton Security\NortonData\22.5.4.24\Definitions\VirusDefs\20160209.049\EX64.SYS [2016-02-09 2148080] R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2015-10-04 11151504] R3 nvvad_WaveExtensible;@oem20.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-03-28 40392] R3 RTL8168;@oem60.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\System32\drivers\Rt630x64.sys [2015-05-14 871640] R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-09-17 44216] R3 SRTSP;Symantec Real Time Storage Protection x64; C:\WINDOWS\System32\Drivers\NSx64\1605050.00F\SRTSP64.SYS [2015-11-12 928496] R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [2016-02-09 111344] R3 SynTP;@oem5.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-09-17 615608] S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800] S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168] S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208] S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720] S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288] S0 SymELAM;Symantec ELAM Driver; C:\WINDOWS\system32\drivers\NSx64\1605050.00F\SymELAM.sys [2015-09-23 24192] S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984] S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2015-07-10 237568] S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280] S3 btwampfl;@oem73.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-10-14 223024] S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352] S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736] S3 dg_ssudbus;@oem33.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800] S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232] S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992] S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016] S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800] S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-03-26 38296] S3 IntcDAud;@oem16.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-08 473864] S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2016-02-09 192216] S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376] S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128] S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-07-30 934752] S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2014-01-03 271064] S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2014-01-03 331992] S3 SmbDrv;SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [2014-03-13 30448] S3 ssudmdm;@oem24.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeUpdateService;AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [2015-11-16 683696] R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015-11-25 2016448] R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-10-07 77104] R2 BcmBtRSupport;@oem73.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-10-14 2286848] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096] R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2016-01-17 2772720] R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-01-28 227904] R2 hpsrv;@oem39.inf,%hpservice_desc%;HP Service; C:\WINDOWS\system32\Hpservice.exe [2013-07-23 43320] R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [2015-12-20 26168] R2 HPWMISVC;HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2014-12-01 573704] R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-08 15720] R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-10-04 359848] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520] R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-12-10 131544] R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2013-12-04 200168] R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-12-10 169432] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-12-10 390616] R2 NCO;Norton Identity Safe; C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\NST.exe [2015-03-05 131144] R2 NS;Norton Security; C:\Program Files (x86)\Norton Security\Engine\22.5.5.15\NS.exe [2015-11-20 282016] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-03-28 1615192] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-03-28 20539168] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-08-07 937592] R2 omniserv; HP SimplePass Service; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [2014-09-27 94720] R2 OneSyncSvc_Session1;Host synchroniseren_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-06-24 303360] R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2015-04-28 1102472] R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200] S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 OneSyncSvc_Session2;Host synchroniseren_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 OneSyncSvc_Session3;Host synchroniseren_Session3; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S2 OneSyncSvc_Session7;Host synchroniseren_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20 269504] S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-07-10 50352] S3 BstHdAndroidSvc;BlueStacks Android Service; C:\Program Files (x86)\BlueStacks\HD-Service.exe [2015-06-16 433784] S3 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [2015-06-16 413304] S3 BstHdUpdaterSvc;BlueStacks Updater Service; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [2015-07-21 831096] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-10-04 291752] S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136] S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696] S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200] S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376] S3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2015-12-09 644880] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-01-07 146888] S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2016-01-17 212176] S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 PimIndexMaintenanceSvc_Session1;Contact Data_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 PimIndexMaintenanceSvc_Session2;Contact Data_Session2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 PimIndexMaintenanceSvc_Session3;Contact Data_Session3; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 PimIndexMaintenanceSvc_Session7;Contact Data_Session7; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856] S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-07-30 1031680] S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856] -----------------EOF-----------------