Logfile of random's system information tool 1.10 (written by random/random)
Run by Ward at 2016-03-25 14:03:04
Microsoft Windows 8.1 
System drive C: has 113 GB (40%) free of 286 GB
Total RAM: 6022 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:03:11, on 25/03/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
C:\Users\Ward\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Ward.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=C:\WINDOWS\SysWOW64\userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PSUAMain] "C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [BrowserChoice] "C:\Windows\BrowserChoice\browserchoice.exe" /run
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Ward\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - Startup: Dropbox.lnk = Ward\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: GoPro Importer.lnk = C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
O4 - Global Startup: ImageBrowser EX Agent.lnk = C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: @C:\WINDOWS\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\WINDOWS\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\WindowsMobile\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HiSuiteOuc64.exe - Unknown owner - C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
O23 - Service: HuaweiHiSuiteService64.exe - Unknown owner - C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Panda Protection Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Panda Devices Agent (PandaAgent) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
O23 - Service: Panda Product Service (PSUAService) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TomTomHOMEService - Unknown owner - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 12580 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
dashost.exe {952a9c72-dd9d-4d9e-a04fc7a69f3f2551}
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service
"C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe"
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\WINDOWS\system32\svchost.exe -k WindowsMobile
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskhost.exe $(Arg0)

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
 -hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
C:\WINDOWS\Explorer.EXE
taskhostex.exe 
"C:\Program Files\ASUS\P4G\BatteryLife.exe" 
 {C12CFCC9-2ED2-4891-BC7F-A1815F2E0806}
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" 
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" 
KBFiltr.exe
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe" 
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" 
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe" 
"C:\Windows\WindowsMobile\wmdc.exe" 
"C:\Windows\System32\hkcmd.exe" 
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\igfxpers.exe" 
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe" 
"C:\Users\Ward\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" 
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" 
"C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe" 
"C:\WINDOWS\system32\GWX\GWX.exe" 
 {E4758639-6109-4F6C-9AC6-90544FCF7383}
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe" 
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe" 
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe" 
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe" 
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe" 

C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" 
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4668 CREDAT:267521 /prefetch:2
taskeng.exe {DEAADEAB-DAAC-4B2F-9D7F-B7CB1884CC4C}
taskeng.exe {F90918E0-6A38-4997-B1AF-161EB01810F9}

C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4668 CREDAT:595336 /prefetch:2
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe33_ Global\UsGthrCtrlFltPipeMssGthrPipe33 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" 
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 560 572 580 65536 576 
"C:\Users\Ward\Downloads\RSITx64.exe" 
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3128890177-2687465254-2083287530-1004Core.job - C:\Users\Ward\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-3128890177-2687465254-2083287530-1004UA.job - C:\Users\Ward\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-09-29 64640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-03-24 462400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-24 173120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"BtTray"=C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [2012-09-29 765056]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2012-09-29 127616]
"ACMON"=C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-09-11 107192]
"Windows Mobile Device Center"=C:\WINDOWS\WindowsMobile\wmdc.exe [2007-05-31 660360]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-01-12 2787264]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-01-12 1860120]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BrowserChoice"=C:\Windows\BrowserChoice\browserchoice.exe [2013-08-22 86816]
"Dropbox Update"=C:\Users\Ward\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18 134512]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2014-11-19 1092448]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2015-09-24 40336]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-10-11 60712]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-08 95192]
"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2011-03-09 107816]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]
"PSUAMain"=C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [2015-10-22 54520]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-03-20 595480]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GoPro Importer.lnk - C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
ImageBrowser EX Agent.lnk - C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe

C:\Users\Ward\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Ward\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll ,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\SYSTEM32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NanoServiceMain]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSUAService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
"MaxGPOScriptWait"=600

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-25 14:03:04 ----D---- C:\rsit
2016-03-24 19:56:11 ----SHD---- C:\Config.Msi
2016-03-23 07:53:05 ----A---- C:\WINDOWS\system32\drivers\PSKMAD.sys
2016-03-15 08:42:58 ----A---- C:\WINDOWS\SYSWOW64\vulkaninfo.exe
2016-03-15 08:42:58 ----A---- C:\WINDOWS\SYSWOW64\vulkan-1.dll
2016-03-15 08:42:58 ----A---- C:\WINDOWS\system32\vulkaninfo.exe
2016-03-15 08:42:58 ----A---- C:\WINDOWS\system32\vulkan-1.dll
2016-03-15 08:42:33 ----D---- C:\WINDOWS\SYSWOW64\NV
2016-03-15 08:42:33 ----D---- C:\WINDOWS\system32\NV
2016-03-15 08:42:29 ----D---- C:\Program Files (x86)\VulkanRT
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\nvptxJitCompiler.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\nvfatbinaryLoader.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvopencl.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvdispgenco6436451.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvdispco6436451.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\nvcuda.dll
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2016-03-15 08:39:40 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2016-03-15 08:39:39 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2016-03-15 08:39:39 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2016-03-15 08:35:23 ----A---- C:\WINDOWS\SYSWOW64\nvaudcap32v.dll
2016-03-15 08:35:23 ----A---- C:\WINDOWS\system32\nvaudcap64v.dll
2016-03-15 08:35:23 ----A---- C:\WINDOWS\system32\drivers\nvvad64v.sys
2016-03-09 15:14:43 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-03-09 15:14:42 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2016-03-09 15:14:41 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-09 15:14:40 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-03-09 15:14:40 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-09 15:14:40 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-03-09 15:14:39 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-09 15:14:39 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-09 15:14:39 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-03-09 15:14:33 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-03-09 15:14:32 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-03-09 15:14:32 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-09 15:14:32 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-09 15:14:30 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-03-09 15:14:30 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-03-09 15:14:30 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-03-09 15:14:30 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-09 15:14:30 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-03-09 15:14:29 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-09 15:14:28 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-03-09 15:14:28 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-09 15:14:28 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-03-09 15:14:28 ----A---- C:\WINDOWS\system32\hlink.dll
2016-03-09 15:14:27 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-09 15:14:27 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-03-09 15:14:27 ----A---- C:\WINDOWS\system32\jscript.dll
2016-03-09 15:14:27 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-09 15:14:26 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-03-09 15:14:26 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-09 15:14:25 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-09 15:14:25 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-03-09 15:14:25 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-03-09 15:14:24 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-09 15:14:19 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-09 15:14:18 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-09 15:14:18 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-03-09 15:14:17 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-03-09 15:13:55 ----AC---- C:\WINDOWS\system32\drivers\usbehci.sys
2016-03-09 15:13:53 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2016-03-09 15:13:53 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2016-03-09 15:13:52 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2016-03-09 15:13:52 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2016-03-09 15:13:52 ----A---- C:\WINDOWS\system32\mispace.dll
2016-03-09 15:13:49 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2016-03-09 15:13:49 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-09 15:13:49 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2016-03-09 15:13:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-09 15:13:46 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2016-03-09 15:13:46 ----A---- C:\WINDOWS\system32\rsaenh.dll
2016-03-09 15:13:31 ----A---- C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-03-09 15:13:30 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2016-03-09 15:13:30 ----A---- C:\WINDOWS\SYSWOW64\msvcp120_clr0400.dll
2016-03-09 15:13:30 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-03-09 15:13:24 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-09 15:13:24 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-09 15:13:24 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-09 15:13:24 ----A---- C:\WINDOWS\system32\wscapi.dll
2016-03-09 15:13:24 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-09 15:13:24 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-09 15:13:23 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2016-03-09 15:13:23 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-03-09 15:13:23 ----A---- C:\WINDOWS\system32\wscsvc.dll
2016-03-09 15:13:23 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-03-09 15:13:21 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2016-03-09 15:13:21 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2016-03-09 15:13:21 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-03-09 15:13:21 ----A---- C:\WINDOWS\system32\wudriver.dll
2016-03-09 15:13:21 ----A---- C:\WINDOWS\system32\wucltux.dll
2016-03-09 15:13:21 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-09 15:13:21 ----A---- C:\WINDOWS\system32\wuauclt.exe
2016-03-09 15:13:21 ----A---- C:\WINDOWS\system32\wuapp.exe
2016-03-09 15:13:21 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-03-09 15:13:20 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2016-03-09 15:13:20 ----A---- C:\WINDOWS\system32\wuwebv.dll
2016-03-09 15:13:20 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2016-03-09 15:13:15 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2016-03-09 15:13:15 ----A---- C:\WINDOWS\system32\comsvcs.dll
2016-03-09 15:13:10 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2016-03-09 15:13:10 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2016-03-09 15:13:09 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-09 15:13:09 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2016-03-09 15:13:08 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-09 15:13:08 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-09 15:13:07 ----A---- C:\WINDOWS\SYSWOW64\WMASF.DLL
2016-03-09 15:13:07 ----A---- C:\WINDOWS\system32\WMASF.DLL
2016-03-09 15:13:06 ----AC---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-03-09 15:13:05 ----A---- C:\WINDOWS\system32\win32k.sys
2016-03-09 15:13:02 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-09 15:13:02 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-09 15:13:02 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-09 15:13:02 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-09 15:13:01 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2016-03-09 15:13:01 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-03-09 15:12:55 ----A---- C:\WINDOWS\system32\msra.exe
2016-03-09 15:12:54 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-09 15:12:54 ----A---- C:\WINDOWS\system32\winlogon.exe
2016-03-09 15:12:54 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-09 15:12:52 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-03-09 15:12:52 ----A---- C:\WINDOWS\system32\storagewmi.dll

======List of files/folders modified in the last 1 month======

2016-03-25 14:03:10 ----D---- C:\Program Files\trend micro
2016-03-25 14:00:26 ----D---- C:\WINDOWS\Temp
2016-03-25 14:00:00 ----D---- C:\WINDOWS\system32\sru
2016-03-25 13:59:51 ----D---- C:\WINDOWS\Prefetch
2016-03-25 13:59:48 ----D---- C:\Users\Ward\AppData\Roaming\Dropbox
2016-03-25 13:57:41 ----D---- C:\WINDOWS\system32\NDF
2016-03-25 06:12:24 ----D---- C:\WINDOWS\debug
2016-03-25 06:12:24 ----D---- C:\Windows
2016-03-25 06:04:00 ----D---- C:\WINDOWS\system32\config
2016-03-25 05:59:18 ----D---- C:\WINDOWS\AppReadiness
2016-03-25 05:57:52 ----D---- C:\WINDOWS\CbsTemp
2016-03-25 05:57:49 ----D---- C:\WINDOWS\WinSxS
2016-03-25 05:57:48 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2016-03-25 05:57:48 ----SD---- C:\WINDOWS\system32\GWX
2016-03-25 05:57:43 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-24 21:23:28 ----D---- C:\Karlien
2016-03-24 21:07:08 ----SHD---- C:\System Volume Information
2016-03-24 20:55:40 ----D---- C:\WINDOWS\Inf
2016-03-24 19:56:52 ----D---- C:\ProgramData\Oracle
2016-03-24 19:56:13 ----SHD---- C:\WINDOWS\Installer
2016-03-24 19:56:13 ----D---- C:\Program Files (x86)\Java
2016-03-24 19:56:06 ----D---- C:\WINDOWS\SysWOW64
2016-03-24 19:55:56 ----D---- C:\Program Files (x86)\Common Files
2016-03-24 19:55:06 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2016-03-24 19:49:07 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-03-24 19:47:04 ----D---- C:\WINDOWS\system32\drivers
2016-03-23 09:21:17 ----RD---- C:\WINDOWS\System32
2016-03-23 09:21:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-17 13:06:07 ----D---- C:\ProgramData\PC Suite
2016-03-15 11:16:53 ----D---- C:\ProgramData\NVIDIA Corporation
2016-03-15 08:42:29 ----D---- C:\Program Files (x86)
2016-03-15 08:42:28 ----D---- C:\ProgramData\NVIDIA
2016-03-15 08:40:52 ----D---- C:\Program Files\NVIDIA Corporation
2016-03-15 08:40:30 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-14 16:14:15 ----D---- C:\ProgramData\Microsoft Help
2016-03-14 15:56:24 ----D---- C:\WINDOWS\rescache
2016-03-14 15:52:23 ----RSD---- C:\WINDOWS\assembly
2016-03-14 11:55:40 ----D---- C:\WINDOWS\SoftwareDistribution
2016-03-13 09:15:54 ----D---- C:\WINDOWS\Minidump
2016-03-11 17:19:39 ----HD---- C:\Program Files\WindowsApps
2016-03-10 18:15:16 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2016-03-10 18:15:16 ----D---- C:\WINDOWS\system32\nl-NL
2016-03-10 18:15:16 ----D---- C:\WINDOWS\system32\appraiser
2016-03-10 18:15:16 ----D---- C:\Program Files\Internet Explorer
2016-03-10 18:15:16 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-10 18:15:15 ----D---- C:\WINDOWS\system32\drivers\nl-NL
2016-03-10 18:07:56 ----D---- C:\WINDOWS\system32\MRT
2016-03-10 18:07:55 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-10 18:04:47 ----D---- C:\WINDOWS\system32\catroot2
2016-03-09 15:11:30 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-03-09 15:11:29 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-03-09 15:11:27 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-03-08 11:07:02 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2016-03-08 11:07:02 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2016-03-08 11:07:02 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2016-03-08 11:07:02 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2016-03-08 11:07:02 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2016-03-08 11:07:02 ----A---- C:\WINDOWS\system32\nvinitx.dll
2016-03-08 11:07:02 ----A---- C:\WINDOWS\system32\nvapi64.dll
2016-03-08 08:00:28 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-08 07:27:51 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2016-03-08 07:27:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2016-03-08 07:27:49 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2016-03-08 07:27:49 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2016-03-08 07:27:48 ----A---- C:\WINDOWS\system32\nvshext.dll
2016-03-08 07:27:48 ----A---- C:\WINDOWS\system32\nvmctray.dll
2016-03-08 07:27:48 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2016-03-08 07:27:48 ----A---- C:\WINDOWS\system32\nv3dappshext.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-02 647736]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2016-03-08 39992]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 NNSALPC;NNSAlpc; C:\WINDOWS\system32\DRIVERS\NNSAlpc.sys [2015-07-09 94456]
R1 NNSHTTP;NNSHttp; C:\WINDOWS\system32\DRIVERS\NNSHttp.sys [2015-07-09 201976]
R1 NNSHTTPS;NNSHttps; C:\WINDOWS\system32\DRIVERS\NNSHttps.sys [2015-07-09 110840]
R1 NNSIDS;NNSids; C:\WINDOWS\system32\DRIVERS\NNSIds.sys [2015-07-09 110840]
R1 NNSNAHSL;@oem63.inf,%NNSNAHSL_Desc%;Network Activity Hook Server LightWeight Filter Driver; C:\WINDOWS\system32\DRIVERS\NNSNAHSL.sys [2015-06-19 58616]
R1 NNSPICC;NNSPicc; C:\WINDOWS\system32\DRIVERS\NNSPicc.sys [2015-07-09 103160]
R1 NNSPIHSW;NNSPihsw; C:\WINDOWS\system32\DRIVERS\NNSPihsw.sys [2015-09-01 89472]
R1 NNSPOP3;NNSPop3; C:\WINDOWS\system32\DRIVERS\NNSPop3.sys [2015-07-09 124152]
R1 NNSPROT;NNSProt; C:\WINDOWS\system32\DRIVERS\NNSProt.sys [2015-07-09 300280]
R1 NNSPRV;NNSPrv; C:\WINDOWS\system32\DRIVERS\NNSPrv.sys [2015-07-09 170232]
R1 NNSSMTP;NNSSmtp; C:\WINDOWS\system32\DRIVERS\NNSSmtp.sys [2015-07-09 113400]
R1 NNSSTRM;NNSStrm; C:\WINDOWS\system32\DRIVERS\NNSStrm.sys [2015-07-09 257784]
R1 NNSTLSC;NNSTlsc; C:\WINDOWS\system32\DRIVERS\NNSTlsc.sys [2015-07-09 106232]
R1 PSINKNC;PSINKNC; C:\WINDOWS\system32\DRIVERS\psinknc.sys [2015-07-19 197880]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 PSINAflt;PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [2015-07-19 164088]
R2 PSINFile;PSINFile; C:\WINDOWS\system32\DRIVERS\PSINFile.sys [2015-07-19 121592]
R2 PSINProc;PSINProc; C:\WINDOWS\system32\DRIVERS\PSINProc.sys [2015-07-19 124152]
R2 PSINProt;PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [2015-07-19 134392]
R2 PSINReg;PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [2015-07-19 107768]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 athr;@oem43.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athwbx.sys [2013-08-14 3837440]
R3 ATP;@oem3.inf,%PS2.DeviceDesc%;ASUS PS/2 Port Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2012-10-31 61824]
R3 HIDSwitch;@oem42.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2013-11-04 20280]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-06-12 4060560]
R3 kbfiltr;@oem16.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-06-18 25816]
R3 MEIx64;@oem20.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-01-11 64624]
R3 NETIMFLT01060044;@oem14.inf,%PANDAIMCLMP_Desc%;PANDA NDIS IM Filter Miniport v1.6.0.44; C:\WINDOWS\system32\DRIVERS\n64i1644.sys [2010-09-01 216648]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-03-08 12564024]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-01-12 26560]
R3 nvvad_WaveExtensible;@oem77.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 PSKMAD;PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [2015-05-22 61712]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT-stuurprogramma; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB-videoapparaat (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736]
S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\C:\eSupport\eDriver\I386\AsPrOb64.sys [2010-05-26 12416]
S3 intaud_WaveExtensible;@oem1.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys []
S3 IntcDAud;@oem30.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-08-27 342528]
S3 iwdbus;@oem2.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys []
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-06-18 64216]
S3 nmwcd;@oem54.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;@oem59.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 nmwcdnsucx64;@oem55.inf,%ServiceDisplayName%;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsucx64.sys [2013-01-23 12800]
S3 nmwcdnsux64;@oem60.inf,%ServiceDisplayName%;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsux64.sys [2013-01-23 171008]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 Prot6Flt;Prot6Flt; C:\WINDOWS\system32\DRIVERS\Prot6Flt.sys []
S3 RSUSBSTOR;@oem10.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2012-06-13 252048]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;USB RNDIS-adapter; C:\WINDOWS\System32\drivers\usb8023x.sys [2015-04-25 20992]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2015-05-07 33280]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2012-09-11 106880]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-09-29 220288]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-01-12 1163200]
R2 HiSuiteOuc64.exe;HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [2015-05-20 138544]
R2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [2015-05-20 192304]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-17 128896]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-17 165760]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 276864]
R2 NanoServiceMain;Panda Protection Service; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [2015-10-18 142072]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-01-12 1879488]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-01-12 4812736]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-03-08 1264064]
R2 PandaAgent;Panda Devices Agent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [2016-02-22 73176]
R2 PSUAService;Panda Product Service; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [2015-10-22 38136]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\WINDOWS\system32\svchost.exe [2014-10-29 38792]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 364416]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-01-12 6308288]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-24 107848]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe []
S3 aspnet_state;ASP.NET-statusservice; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2013-08-17 31904]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-24 107848]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-20 136120]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------