Logfile of random's system information tool 1.10 (written by random/random) Run by Maaike at 2016-02-17 19:52:04 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 47 GB (16%) free of 292 GB Total RAM: 3070 MB (52% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:52:22, on 17-2-2016 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.18163) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskhost.exe C:\Windows\Explorer.EXE C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Program Files\Samsung\Kies\Kies.exe C:\Program Files\CCleaner\CCleaner.exe C:\Program Files\VoipConnect.com\VoipConnect\voipconnect.exe C:\Users\Maaike\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe C:\Windows\system32\taskeng.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe c:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Maaike\Downloads\RSIT (1).exe C:\Program Files\trend micro\Maaike.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe" O4 - HKLM\..\Run: [ShadowPlay] "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe /SysAutoRun O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized O4 - HKCU\..\Run: [Google Update] "C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR O4 - HKCU\..\Run: [VoipConnect] "C:\Program Files\VoipConnect.com\VoipConnect\voipconnect.exe" -nosplash -minimized O4 - HKCU\..\Run: [Google Photos Backup] "C:\Users\Maaike\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe" /autostart O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O8 - Extra context menu item: &AOL-werkbalk Zoeken - C:\ProgramData\AOL\ieToolbar\resources\nl-NL\local\search.html O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Converteren naar Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Doel van koppeling converteren naar Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Doel van koppeling toevoegen aan bestaande PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html O8 - Extra context menu item: Toevoegen aan bestaande PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - Winlogon Notify: !SASWinLogon - Invalid registry found O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HiSuiteOuc.exe - Unknown owner - C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe O23 - Service: HuaweiHiSuiteService.exe - Unknown owner - C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Microsoft Antimalware Service (MsMpSvc) - Unknown owner - c:\Program Files\Microsoft Security Client\MsMpEng.exe (file missing) O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe O23 - Service: RealtekWlanU - Realtek - C:\Program Files\Realtek\USB Wireless LAN Utility\RtlService.exe O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe O23 - Service: Realtek DHCP Service (RTLDHCPService) - Realtek - C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe O23 - Service: RunSwUSB - Unknown owner - C:\Windows\runSW.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe O23 - Service: Update service - Company - C:\Program Files\Popcorn Time\Updater.exe -- End of file - 13188 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\AutoKMS.job - C:\Windows\AutoKMS.exe C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineCore1d0437a96decffc.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineCore1d09089da4b5162.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineCore1d0e1763a550546.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineCore1d163f8747e9dfb.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0437a97e0da73.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0e1763af76226.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0f1f69fabbcab.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskMachineUA1d163f8752e417d.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001Core.job - C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001Core1d0f1a06a7c429f.job - C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001Core1d12f726500e553.job - C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001UA1cf8da7cf8c479d.job - C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\HPCeeScheduleForMaaike.job - C:\Program Files\Hewlett-Packard\SDP\Ceement\HPCEE.exe HPCeeScheduleForMaaike (null) C:\Windows\tasks\Norton Security Scan for Laurens.job - C:\PROGRA~1\NORTON~2\Engine\376~1.5\Nss.exe /scan-quick /scheduled C:\Windows\tasks\SLOW-PCfighter-Laurens-Startup.job - C:\Program Files\Fighters\SLOW-PCfighter\SLOW-PCfighter.exe ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}] HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25 460712] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22 194504] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25 172968] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}] SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}] HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22 194504] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-12-21 5074384] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2014-01-17 421888] "NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-12 2787264] "ShadowPlay"=C:\Windows\system32\nvspcap.dll [2016-01-12 1542600] "BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184] "PMBVolumeWatcher"=C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2015-04-17 2669568] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] ""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-07-27 1015104] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016] "VoipBuster"=C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe [2015-01-13 23224928] "Google Update"=C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-03 144200] "KiesPreload"=C:\Program Files\Samsung\Kies\Kies.exe [2015-07-27 1566016] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2016-01-15 6628056] "VoipConnect"=C:\Program Files\VoipConnect.com\VoipConnect\voipconnect.exe [2015-07-01 32417376] "Google Photos Backup"=C:\Users\Maaike\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [2015-12-11 3791176] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13 1085656] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent] C:\Users\Laurens\AppData\Roaming\BitTorrent\BitTorrent.exe [2014-02-14 899160] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-21 1983816] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-15 644696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe] C:\Windows\ehome\ehTray.exe [2010-11-20 144384] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] C:\Users\Laurens\AppData\Local\Google\Update\GoogleUpdate.exe /c [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2015-07-27 311616] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2011-04-16 2736128] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mobile Partner] C:\Program Files\HiSuite\HiSuite.exe [2014-09-05 585760] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\QTTask.exe [2014-01-17 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify] C:\Users\Laurens\AppData\Roaming\Spotify\Spotify.exe [2013-03-08 4477336] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper] C:\Users\Laurens\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2013-03-08 1103768] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2015-07-13 248176] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VoipBuster] C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe [2015-01-13 23224928] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe [2009-07-14 65024] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Laurens^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Schermopname en Snel starten.lnk] C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE /tsr [] Պր持 Adobe Flash Player Updater.job AutoKMS.job GoogleUpdateTaskMachineCore.job GoogleUpdateTaskMachineCore1d0437a96decffc.job GoogleUpdateTaskMachineCore1d09089da4b5162.job GoogleUpdateTaskMachineCore1d0e1763a550546.job GoogleUpdateTaskMachineCore1d163f8747e9dfb.job GoogleUpdateTaskMachineUA.job GoogleUpdateTaskMachineUA1d0437a97e0da73.job GoogleUpdateTaskMachineUA1d0e1763af76226.job GoogleUpdateTaskMachineUA1d0f1f69fabbcab.job GoogleUpdateTaskMachineUA1d163f8752e417d.job GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001Core.job GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001Core1d0f1a06a7c429f.job GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001Core1d12f726500e553.job GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001UA1cf8da7cf8c479d.job HPCeeScheduleForMaaike.job ImCleanDisabled Norton Security Scan for Laurens.job SA.DAT SCHEDLGU.TXT SLOW-PCfighter-Laurens-Startup.job [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=0 "ConsentPromptBehaviorUser"=3 "EnableLUA"=0 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "legalnoticetext"= [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "BindDirectlyToPropertySetStorage"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "msacm.l3codecp"=l3codecp.acm "vidc.VP60"=C:\Windows\system32\vp6vfw.dll "vidc.VP61"=C:\Windows\system32\vp6vfw.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "wave7"=wdmaud.drv "midi7"=wdmaud.drv "mixer7"=wdmaud.drv "aux3"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2016-02-13 11:39:27 ----A---- C:\Windows\system32\NvRtmpStreamer32.dll 2016-02-13 11:37:02 ----D---- C:\ProgramData\Package Cache 2016-02-13 11:34:52 ----A---- C:\Windows\system32\drivers\nvvad32v.sys 2016-02-13 11:34:51 ----A---- C:\Windows\system32\nvaudcap32v.dll 2016-01-26 13:06:56 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-01-26 13:06:56 ----A---- C:\Windows\system32\ieetwproxystub.dll 2016-01-26 13:06:56 ----A---- C:\Windows\system32\ieetwcollector.exe 2016-01-26 13:06:55 ----A---- C:\Windows\system32\urlmon.dll 2016-01-26 13:06:55 ----A---- C:\Windows\system32\occache.dll 2016-01-26 13:06:55 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2016-01-26 13:06:55 ----A---- C:\Windows\system32\jsproxy.dll 2016-01-26 13:06:55 ----A---- C:\Windows\system32\jscript9diag.dll 2016-01-26 13:06:55 ----A---- C:\Windows\system32\ieUnatt.exe 2016-01-26 13:06:55 ----A---- C:\Windows\system32\iernonce.dll 2016-01-26 13:06:55 ----A---- C:\Windows\system32\iedkcs32.dll 2016-01-26 13:06:55 ----A---- C:\Windows\system32\ieapfltr.dll 2016-01-26 13:06:55 ----A---- C:\Windows\system32\ie4uinit.exe 2016-01-26 13:06:55 ----A---- C:\Windows\system32\dxtmsft.dll 2016-01-26 13:06:54 ----A---- C:\Windows\system32\msfeeds.dll 2016-01-26 13:06:53 ----A---- C:\Windows\system32\webcheck.dll 2016-01-26 13:06:53 ----A---- C:\Windows\system32\msrating.dll 2016-01-26 13:06:53 ----A---- C:\Windows\system32\iesetup.dll 2016-01-26 13:06:52 ----A---- C:\Windows\system32\wininet.dll 2016-01-26 13:06:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2016-01-26 13:06:51 ----A---- C:\Windows\system32\ieui.dll 2016-01-26 13:06:51 ----A---- C:\Windows\system32\dxtrans.dll 2016-01-26 13:06:50 ----A---- C:\Windows\system32\ieframe.dll 2016-01-26 13:06:48 ----A---- C:\Windows\system32\mshtmlmedia.dll 2016-01-26 13:06:48 ----A---- C:\Windows\system32\mshtmled.dll 2016-01-26 13:06:47 ----A---- C:\Windows\system32\MshtmlDac.dll 2016-01-26 13:06:47 ----A---- C:\Windows\system32\iertutil.dll 2016-01-26 13:06:46 ----A---- C:\Windows\system32\mshtml.dll 2016-01-26 13:06:44 ----A---- C:\Windows\system32\jscript9.dll 2016-01-26 13:06:42 ----A---- C:\Windows\system32\vbscript.dll 2016-01-26 13:06:42 ----A---- C:\Windows\system32\jscript.dll 2016-01-26 13:05:21 ----A---- C:\Windows\system32\advapi32.dll 2016-01-26 13:05:15 ----A---- C:\Windows\system32\invagent.dll 2016-01-26 13:05:15 ----A---- C:\Windows\system32\generaltel.dll 2016-01-26 13:05:15 ----A---- C:\Windows\system32\devinv.dll 2016-01-26 13:05:15 ----A---- C:\Windows\system32\CompatTelRunner.exe 2016-01-26 13:05:15 ----A---- C:\Windows\system32\appraiser.dll 2016-01-26 13:05:15 ----A---- C:\Windows\system32\acmigration.dll 2016-01-26 13:04:18 ----A---- C:\Windows\system32\kerberos.dll 2016-01-26 13:04:16 ----A---- C:\Windows\system32\schannel.dll 2016-01-26 13:04:16 ----A---- C:\Windows\system32\rpcrt4.dll 2016-01-26 13:04:15 ----A---- C:\Windows\system32\ntoskrnl.exe 2016-01-26 13:04:15 ----A---- C:\Windows\system32\ntkrnlpa.exe 2016-01-26 13:04:14 ----A---- C:\Windows\system32\ncrypt.dll 2016-01-26 13:04:14 ----A---- C:\Windows\system32\lsasrv.dll 2016-01-26 13:04:14 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2016-01-26 13:04:14 ----A---- C:\Windows\system32\adtschema.dll 2016-01-26 13:04:13 ----A---- C:\Windows\system32\wdigest.dll 2016-01-26 13:04:13 ----A---- C:\Windows\system32\ntdll.dll 2016-01-26 13:04:13 ----A---- C:\Windows\system32\msv1_0.dll 2016-01-26 13:04:13 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2016-01-26 13:04:13 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2016-01-26 13:04:13 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2016-01-26 13:04:12 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2016-01-26 13:04:11 ----A---- C:\Windows\system32\sspicli.dll 2016-01-26 13:04:11 ----A---- C:\Windows\system32\secur32.dll 2016-01-26 13:04:11 ----A---- C:\Windows\system32\cryptbase.dll 2016-01-26 13:04:11 ----A---- C:\Windows\system32\credssp.dll 2016-01-26 13:04:10 ----A---- C:\Windows\system32\TSpkg.dll 2016-01-26 13:04:10 ----A---- C:\Windows\system32\sspisrv.dll 2016-01-26 13:04:10 ----A---- C:\Windows\system32\srcore.dll 2016-01-26 13:04:10 ----A---- C:\Windows\system32\smss.exe 2016-01-26 13:04:10 ----A---- C:\Windows\system32\lsass.exe 2016-01-26 13:04:10 ----A---- C:\Windows\system32\auditpol.exe 2016-01-26 13:04:09 ----A---- C:\Windows\system32\srclient.dll 2016-01-26 13:04:09 ----A---- C:\Windows\system32\csrsrv.dll 2016-01-26 13:04:08 ----A---- C:\Windows\system32\rstrui.exe 2016-01-26 13:04:08 ----A---- C:\Windows\system32\apisetschema.dll 2016-01-26 13:04:06 ----A---- C:\Windows\system32\msobjs.dll 2016-01-26 13:04:06 ----A---- C:\Windows\system32\msaudite.dll 2016-01-26 13:02:20 ----A---- C:\Windows\system32\aepic.dll 2016-01-26 13:02:20 ----A---- C:\Windows\system32\aeinv.dll 2016-01-26 13:01:57 ----A---- C:\Windows\system32\gdi32.dll 2016-01-26 13:01:49 ----A---- C:\Windows\system32\qedit.dll 2016-01-26 13:01:41 ----A---- C:\Windows\system32\win32k.sys 2016-01-26 13:01:36 ----A---- C:\Windows\system32\mapi32.dll 2016-01-26 13:01:35 ----A---- C:\Windows\system32\mapistub.dll 2016-01-26 13:01:35 ----A---- C:\Windows\system32\fixmapi.exe 2016-01-26 13:01:17 ----A---- C:\Windows\system32\msmpeg2adec.dll 2016-01-26 13:01:16 ----A---- C:\Windows\system32\WMVDECOD.DLL 2016-01-26 13:01:16 ----A---- C:\Windows\system32\WMADMOD.DLL 2016-01-26 13:01:16 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL 2016-01-26 13:01:15 ----A---- C:\Windows\system32\mf.dll 2016-01-26 13:01:14 ----A---- C:\Windows\system32\WMVSDECD.DLL 2016-01-26 13:01:14 ----A---- C:\Windows\system32\WMSPDMOD.DLL 2016-01-26 13:01:14 ----A---- C:\Windows\system32\WMADMOE.DLL 2016-01-26 13:01:13 ----A---- C:\Windows\system32\wmpmde.dll 2016-01-26 13:01:13 ----A---- C:\Windows\system32\COLORCNV.DLL 2016-01-26 13:01:12 ----A---- C:\Windows\system32\WMVENCOD.DLL 2016-01-26 13:01:12 ----A---- C:\Windows\system32\mcmde.dll 2016-01-26 13:01:12 ----A---- C:\Windows\system32\evr.dll 2016-01-26 13:01:11 ----A---- C:\Windows\system32\WMVXENCD.DLL 2016-01-26 13:01:11 ----A---- C:\Windows\system32\quartz.dll 2016-01-26 13:01:10 ----A---- C:\Windows\system32\qdvd.dll 2016-01-26 13:01:10 ----A---- C:\Windows\system32\mfplat.dll 2016-01-26 13:01:10 ----A---- C:\Windows\system32\devenum.dll 2016-01-26 13:01:09 ----A---- C:\Windows\system32\WMVSENCD.DLL 2016-01-26 13:01:09 ----A---- C:\Windows\system32\msmpeg2vdec.dll 2016-01-26 13:01:09 ----A---- C:\Windows\system32\MPG4DECD.DLL 2016-01-26 13:01:09 ----A---- C:\Windows\system32\MP43DECD.DLL 2016-01-26 13:01:09 ----A---- C:\Windows\system32\MFWMAAEC.DLL 2016-01-26 13:01:08 ----A---- C:\Windows\system32\WMSPDMOE.DLL 2016-01-26 13:01:08 ----A---- C:\Windows\system32\VIDRESZR.DLL 2016-01-26 13:01:08 ----A---- C:\Windows\system32\SysFxUI.dll 2016-01-26 13:01:08 ----A---- C:\Windows\system32\qasf.dll 2016-01-26 13:01:07 ----A---- C:\Windows\system32\rrinstaller.exe 2016-01-26 13:01:07 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL 2016-01-26 13:01:07 ----A---- C:\Windows\system32\MP4SDECD.DLL 2016-01-26 13:01:07 ----A---- C:\Windows\system32\MP3DMOD.DLL 2016-01-26 13:01:07 ----A---- C:\Windows\system32\mfvdsp.dll 2016-01-26 13:01:06 ----A---- C:\Windows\system32\mfps.dll 2016-01-26 13:01:06 ----A---- C:\Windows\system32\mfpmp.exe 2016-01-26 13:01:06 ----A---- C:\Windows\system32\drivers\portcls.sys 2016-01-26 13:01:05 ----A---- C:\Windows\system32\ksuser.dll 2016-01-26 13:01:05 ----A---- C:\Windows\system32\drivers\drmk.sys 2016-01-26 13:01:04 ----A---- C:\Windows\system32\mferror.dll 2016-01-26 13:01:04 ----A---- C:\Windows\system32\drivers\drmkaud.sys ======List of files/folders modified in the last 1 month====== 2016-02-17 19:52:09 ----D---- C:\Windows\Temp 2016-02-17 19:52:09 ----D---- C:\Program Files\Trend Micro 2016-02-17 12:13:27 ----SHD---- C:\Windows\Installer 2016-02-17 12:13:25 ----HD---- C:\Config.Msi 2016-02-17 12:13:02 ----D---- C:\Windows\System32 2016-02-17 12:04:23 ----D---- C:\Windows\system32\Tasks 2016-02-17 11:55:51 ----D---- C:\Windows\system32\config 2016-02-17 11:46:12 ----D---- C:\Windows 2016-02-17 11:45:39 ----D---- C:\ProgramData\NVIDIA 2016-02-14 10:43:50 ----D---- C:\Windows\inf 2016-02-13 17:02:54 ----D---- C:\Windows\debug 2016-02-13 12:39:43 ----D---- C:\Windows\winsxs 2016-02-13 12:38:59 ----D---- C:\Windows\system32\catroot2 2016-02-13 12:29:52 ----SHD---- C:\System Volume Information 2016-02-13 11:41:31 ----D---- C:\ProgramData\NVIDIA Corporation 2016-02-13 11:38:33 ----D---- C:\Windows\system32\DriverStore 2016-02-13 11:37:02 ----HD---- C:\ProgramData 2016-02-13 11:35:31 ----D---- C:\Windows\system32\drivers 2016-02-13 10:57:28 ----D---- C:\Windows\Prefetch 2016-02-10 15:43:10 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2016-02-10 12:45:12 ----D---- C:\Program Files 2016-02-10 12:44:53 ----D---- C:\Windows\Tasks 2016-02-08 11:59:24 ----D---- C:\Windows\Minidump 2016-01-31 22:54:26 ----A---- C:\Windows\system32\PerfStringBackup.INI 2016-01-29 15:44:43 ----D---- C:\Windows\rescache 2016-01-27 11:05:16 ----D---- C:\Windows\system32\MRT 2016-01-27 10:53:42 ----D---- C:\Windows\system32\nl-NL 2016-01-27 10:53:41 ----D---- C:\Windows\system32\en-US 2016-01-27 10:53:39 ----D---- C:\Program Files\Internet Explorer 2016-01-27 10:53:37 ----SD---- C:\Windows\system32\CompatTel 2016-01-27 10:53:35 ----D---- C:\Windows\system32\appraiser 2016-01-27 10:53:33 ----D---- C:\Windows\AppPatch 2016-01-27 00:42:28 ----D---- C:\ProgramData\Microsoft Help 2016-01-27 00:21:52 ----A---- C:\Windows\system32\MRT.exe 2016-01-27 00:19:07 ----A---- C:\Windows\win.ini 2016-01-26 12:20:50 ----D---- C:\Windows\SoftwareDistribution 2016-01-26 11:16:39 ----D---- C:\Users\Maaike\AppData\Roaming\Adobe 2016-01-22 21:21:56 ----D---- C:\Windows\system32\LogFiles ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-12-21 47568] R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 195296] R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2008-11-20 43872] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440] R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-12-21 171680] R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-12-21 122240] R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-12-21 46056] R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\system32\drivers\HWiNFO32.SYS [2015-05-07 23840] R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2009-07-28 69480] R1 VWiFiFlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128] R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-12-21 150080] R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 103112] R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-04-09 33096] R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2013-07-18 37344] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2015-05-07 3675736] R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-12 25536] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad32v.sys [2015-12-18 42128] R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2015-05-07 723160] R3 RtlWlanu;Realtek Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\rtwlanu.sys [2014-01-10 2515160] R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2009-06-17 46984] S1 SASDIFSV;SASDIFSV; C:\Windows\system32\drivers\SASDIFSV.sys [] S1 SASKUTIL;SASKUTIL; C:\Windows\system32\drivers\SASKUTIL.sys [] S2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-04-09 113960] S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888] S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-05-21 89984] S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [] S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072] S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272] S3 grmnusb;Garmin USB Driver; C:\Windows\system32\drivers\grmnusb.sys [2012-04-18 15720] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-04-04 119512] S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2011-11-01 18176] S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2011-11-01 23168] S3 PAC7302;CANYON USB PC CAMERA; C:\Windows\system32\DRIVERS\PAC7302.SYS [2007-11-08 458752] S3 PalmUSBD;PalmUSBD; C:\Windows\system32\drivers\PalmUSBD.sys [] S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368] S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-09-23 47360] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [] S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-08-06 124928] S3 SASENUM;SASENUM; C:\Windows\system32\drivers\SASENUM.sys [] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304] S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2015-05-21 184192] S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2009-08-28 169064] S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2009-06-19 42472] S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2009-06-19 79872] S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2009-07-24 21608] S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2009-08-05 61168] S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2009-08-05 49400] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 49152] S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2011-11-01 8192] S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-12-13 45056] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352] S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2014-07-29 28160] S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2011-11-01 8192] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128] R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 20992] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2012-12-21 1333424] R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2013-07-18 233472] R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-01-12 929728] R2 HiSuiteOuc.exe;HiSuiteOuc.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe [2014-09-05 117280] R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208] R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 20992] R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-02-05 47416] R2 HuaweiHiSuiteService.exe;HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [2014-09-05 180768] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2011-04-16 73728] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208] R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-11 139944] R2 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-11 139944] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-12 1879488] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-01-12 3996608] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-04 670536] R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [2015-04-17 494592] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 RealtekWlanU;RealtekWlanU; C:\Program Files\Realtek\USB Wireless LAN Utility\RtlService.exe [2010-04-16 36864] R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [2015-05-07 254168] R2 RunSwUSB;RunSwUSB; C:\Windows\runSW.exe [2013-10-18 48856] R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2015-05-21 743688] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-02-04 409800] R2 TeamViewer9;TeamViewer 9; C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-17 5341536] R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2015-07-13 93040] R2 Update service;Update service; C:\Program Files\Popcorn Time\Updater.exe [2014-12-17 335360] R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 20992] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992] R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-01-12 5178816] R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608] S2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 20992] S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28 144200] S2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [] S2 RTLDHCPService;Realtek DHCP Service; C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe [2013-11-12 261848] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504] S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-11 45744] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-04-17 651720] S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2009-11-13 238328] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28 144200] S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-18 194032] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-12-12 102912] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888] S3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2009-07-30 144752] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-11 139944] -----------------EOF-----------------