Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Ronald-pc on ma 11-04-2016 at 20:03:52,50.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ronald-pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KPLB32XI\zoek.exe [Scan all users] [Script inserted] [Checkboxes used]

==== Older Logs ======================

C:\zoek-results2016-04-10-105853.log	58013 bytes

==== Empty Folders Check ======================

C:\Users\Ronald-pc\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TuneUp.UtilitiesSvc deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\TuneUp.UtilitiesSvc deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bonus.screenshotreader.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\eprojmanager.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sprint.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe] 

==== Deleting Files \ Folders ======================

C:\ProgramData\AVG Security Toolbar not found
C:\Users\Ronald-pc\AppData\Roaming\TuneUp Software deleted
"C:\Program Files\AVG\AVG PC TuneUp\html.dat" not deleted
"C:\Program Files\AVG\AVG PC TuneUp\tuavgx.dll" deleted
"C:\Program Files\AVG\AVG PC TuneUp\tuneup_nl.lng" not deleted
"C:\Program Files\AVG\AVG PC TuneUp\tuuix.dll" deleted
"C:\Program Files\AVG\AVG PC TuneUp" not deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====
2016-04-04 07:24:41	BA3AFC9419A11D6C28E80ECD524F0380	308	----a-w-	C:\Windows\setup.iss
2016-04-03 23:28:07	E185BDA84E5F03F4E1D8DCA30E209277	1912	----a-w-	C:\Windows\epplauncher.mif
2016-04-03 23:10:50	E9BF58E95AF5E1D1BED4A84F092AECEB	1698408	------r-	C:\Windows\RtlExUpd.dll
2016-04-03 23:09:37	718FECF22BF4BD4FC05B79AA4BEC75D0	1769	----a-w-	C:\Windows\Language_trs.ini
2016-04-03 23:09:34	0552886AEB8554F1C234214B69AE19E4	28398	----a-w-	C:\Windows\Ascd_tmp.ini
====== C:\Users\RONALD~1\AppData\Local\Temp ====
====== Java Cache =====
====== C:\Windows\system32 =====
2016-04-05 20:54:50	D81E646D85FF4339B56BB1185A0CA86B	49936	----a-w-	C:\Windows\System32\TURegOpt.exe
2016-04-05 20:54:49	2D1ADE2D52792574CF498D513FCDC473	39696	----a-w-	C:\Windows\System32\authuitu.dll
2016-04-04 07:54:53	C4848C5022D7F317034D4F370D82AB29	142528	----a-w-	C:\Windows\System32\FlashPlayerCPLApp.cpl
2016-04-04 07:54:53	B50CA9BD22136A40B174FA4D1A207905	797376	----a-w-	C:\Windows\System32\FlashPlayerApp.exe
2016-04-04 07:20:10	A622A7F07406723EC2A34D8E2788A5EA	8192	----a-w-	C:\Windows\System32\E_DCINST.DLL
2016-04-04 07:20:03	2D4744FF25906C84E47ED702A14CCEB5	95232	----a-w-	C:\Windows\System32\E_FLBINE.DLL
2016-04-04 07:19:58	F7E8465680D7889174E6C7284E74B586	81408	----a-w-	C:\Windows\System32\E_FD4BINE.DLL
2016-04-04 07:19:17	E9EFCB47B90FD5498695BB7FEFD36CAE	122000	----a-w-	C:\Windows\System32\escsvc.exe
2016-04-04 07:19:17	62C798C07F5EC683E819BC53630CC3A4	342016	----a-w-	C:\Windows\System32\esw2ud.dll
2016-04-03 23:53:53	C611C6ED5ECFE4608BA79472DFE3D49C	646144	----a-w-	C:\Windows\System32\MsSpellCheckingFacility.exe
2016-04-03 23:53:53	AD27563BC16AB1EAACAE3033E99C2F78	194048	----a-w-	C:\Windows\System32\elshyph.dll
2016-04-03 23:53:52	9B8701A380CEE1B05D651B4ED4048C8F	645120	----a-w-	C:\Windows\System32\jsIntl.dll
2016-04-03 23:53:51	FB5C9234E4BF6BDAF4A954763A4582BA	168960	----a-w-	C:\Windows\System32\msrating.dll
2016-04-03 23:53:51	E4EB138060BAE0DBAB1A3B71A3141FE7	1950720	----a-w-	C:\Windows\System32\wininet.dll
2016-04-03 23:53:51	C93AE4D14AEF5169791B35D97AE7C9FC	47104	----a-w-	C:\Windows\System32\jsproxy.dll
2016-04-03 23:53:51	C1A6E565B2782C09BC40AD749B46D9ED	71680	----a-w-	C:\Windows\System32\RegisterIEPKEYs.exe
2016-04-03 23:53:51	927E38A35E4DFC4E294BD130BAA6F759	2278912	----a-w-	C:\Windows\System32\iertutil.dll
2016-04-03 23:53:51	53E9614ADFA6A40A452BA014CEF6F261	1309696	----a-w-	C:\Windows\System32\urlmon.dll
2016-04-03 23:53:51	298FDE634538B62CEEEC266D8773B21A	182272	----a-w-	C:\Windows\System32\msls31.dll
2016-04-03 23:53:50	F26680AF396F89F7ABFDA1D1D6B62011	285696	----a-w-	C:\Windows\System32\dxtrans.dll
2016-04-03 23:53:50	EF853EA2A6A7BD891CCF31B0C2915352	341504	----a-w-	C:\Windows\System32\html.iec
2016-04-03 23:53:50	CFCE4EFF1D6D909EE2EA3AFCB8F1E677	233472	----a-w-	C:\Windows\System32\url.dll
2016-04-03 23:53:50	C17139EAF939964142C7A1AEEE02DC81	616104	----a-w-	C:\Windows\System32\ieapfltr.dat
2016-04-03 23:53:50	B6D8148C1C697A7BF04EE0FE82408B6A	710144	----a-w-	C:\Windows\System32\ieapfltr.dll
2016-04-03 23:53:50	AD2726E4A53EC118D88CCA40260E1AE0	342728	----a-w-	C:\Windows\System32\iedkcs32.dll
2016-04-03 23:53:50	ABE3B4B605499D726C27ACB6F756BC11	685568	----a-w-	C:\Windows\System32\ie4uinit.exe
2016-04-03 23:53:50	AB3B2CA52AFB695AFCDD2620A21E5B21	24576	----a-w-	C:\Windows\System32\licmgr10.dll
2016-04-03 23:53:50	9E170B0AF156B478BD2B1FD6A2250C9E	62464	----a-w-	C:\Windows\System32\tdc.ocx
2016-04-03 23:53:50	85E21CCF38166E0D6DE2E42D9D3823BD	1155072	----a-w-	C:\Windows\System32\mshtmlmedia.dll
2016-04-03 23:53:50	81C1182A9EE7AC4D21187811DE66A7D0	30720	----a-w-	C:\Windows\System32\iernonce.dll
2016-04-03 23:53:50	5C06EE62F06E990E9521EA80B8D4D4B8	62464	----a-w-	C:\Windows\System32\iesetup.dll
2016-04-03 23:53:50	4F032F1FDEFEA5EC8EEA3562643B5EE8	69120	----a-w-	C:\Windows\System32\icardie.dll
2016-04-03 23:53:50	4ABEEF30EA5B9F4718312DCB60B6C9BC	2052608	----a-w-	C:\Windows\System32\inetcpl.cpl
2016-04-03 23:53:50	2CBD6D22499EB13A2666F62EF33D00E2	16303	----a-w-	C:\Windows\System32\ieuinit.inf
2016-04-03 23:53:50	185490A6C3BEDAC5EF547314F68AB07B	60416	----a-w-	C:\Windows\System32\JavaScriptCollectionAgent.dll
2016-04-03 23:53:50	17B0852D8202A872C3E6D01B518B6A4E	418304	----a-w-	C:\Windows\System32\dxtmsft.dll
2016-04-03 23:53:50	03B3541AE6986602CF9CB5B3AD169C33	208384	----a-w-	C:\Windows\System32\webcheck.dll
2016-04-03 23:53:49	EC7038154490E50ACD405A022F51B204	83456	----a-w-	C:\Windows\System32\inseng.dll
2016-04-03 23:53:49	E21AE910DF0C5CB7D46D8FA17A4567DE	115712	----a-w-	C:\Windows\System32\ieUnatt.exe
2016-04-03 23:53:49	C842601A18BA4D9058E7C0EFA5683513	102912	----a-w-	C:\Windows\System32\ieetwcollector.exe
2016-04-03 23:53:49	AD392013A39DE951627EE402002E800C	4096	----a-w-	C:\Windows\System32\ieetwcollectorres.dll
2016-04-03 23:53:49	ABDFC692D9FE43E2BA8FE6CB5A8CB95A	13312	----a-w-	C:\Windows\System32\mshta.exe
2016-04-03 23:53:49	9A33FDDD687A836A1FD478B43C5A95FD	151552	----a-w-	C:\Windows\System32\iexpress.exe
2016-04-03 23:53:49	975421AC32F9F6E27A58F75DAB4B5871	19607040	----a-w-	C:\Windows\System32\mshtml.dll
2016-04-03 23:53:49	96837E5864777688477AF6DE2332C06D	503808	----a-w-	C:\Windows\System32\vbscript.dll
2016-04-03 23:53:49	8C8B8C78C0CCD5D36ABCB115B0B581E1	2724864	----a-w-	C:\Windows\System32\mshtml.tlb
2016-04-03 23:53:49	6B7210618D7E2CE0404ECF748701253A	76288	----a-w-	C:\Windows\System32\mshtmled.dll
2016-04-03 23:53:49	6A92CEC8532056791C6832B2725D170D	139264	----a-w-	C:\Windows\System32\wextract.exe
2016-04-03 23:53:49	4BCC7EB5F20840DA67943BD86AE95735	56832	----a-w-	C:\Windows\System32\pngfilt.dll
2016-04-03 23:53:49	2DED8A99E45053C42DD21D6937D3960C	689152	----a-w-	C:\Windows\System32\msfeeds.dll
2016-04-03 23:53:49	1200D9C7DB0ADC1B8143A0A9921BF7DA	127488	----a-w-	C:\Windows\System32\occache.dll
2016-04-03 23:53:48	F7B6E341F4B1947BEC0E14EEBE3C627E	111616	----a-w-	C:\Windows\System32\IEAdvpack.dll
2016-04-03 23:53:48	C27C8CACEBC712BE2AD791715E9734EC	664064	----a-w-	C:\Windows\System32\jscript.dll
2016-04-03 23:53:48	9F6066005D8B8620598085C7499E9B70	64000	----a-w-	C:\Windows\System32\MshtmlDac.dll
2016-04-03 23:53:48	8C3A03295F56D1FFB51D9D05DA42B12D	47616	----a-w-	C:\Windows\System32\ieetwproxystub.dll
2016-04-03 23:53:48	887055A3C8DD6C87D200D11EAFDBD45B	74240	----a-w-	C:\Windows\System32\SetIEInstalledDate.exe
2016-04-03 23:53:48	7DBCBB1647B7CD71E2039C1B50A12717	620032	----a-w-	C:\Windows\System32\jscript9diag.dll
2016-04-03 23:53:48	6EB0B7301E00F717BD68A742D1391FAF	36352	----a-w-	C:\Windows\System32\imgutil.dll
2016-04-03 23:53:48	55969AADF0210A614700F89B48976F68	43008	----a-w-	C:\Windows\System32\msfeedsbs.dll
2016-04-03 23:53:48	53FC62C51CB18C9100A7DFAF2D2A6C47	12800	----a-w-	C:\Windows\System32\msfeedssync.exe
2016-04-03 23:53:48	1AFBAA54BDF637F69B8E02A5578286B0	116736	----a-w-	C:\Windows\System32\iepeers.dll
2016-04-03 23:53:47	DB254D50B4527C2821C537E0587B44E8	12829696	----a-w-	C:\Windows\System32\ieframe.dll
2016-04-03 23:53:47	AE6A2C5ECD3E96556E22F12816842F60	48640	----a-w-	C:\Windows\System32\mshtmler.dll
2016-04-03 23:53:47	83F49FD1BC0A999B006D564C540C7258	86016	----a-w-	C:\Windows\System32\iesysprep.dll
2016-04-03 23:53:47	3FD7E6DB5D81FE400DB4D81D278596E6	4305920	----a-w-	C:\Windows\System32\jscript9.dll
2016-04-03 23:53:47	1A628C1F5470F0AF21E37E425026F27A	478208	----a-w-	C:\Windows\System32\ieui.dll
2016-04-03 23:53:05	E0B8C6B1EA1EF94747E966E9093FB968	1289096	----a-w-	C:\Windows\System32\ntdll.dll
2016-04-03 23:53:05	DE91DCC7BC55E940979097E98F743205	69632	----a-w-	C:\Windows\System32\smss.exe
2016-04-03 23:53:05	D67472125471784DE7147946EDA25FEB	640512	----a-w-	C:\Windows\System32\advapi32.dll
2016-04-03 23:53:05	813A7F5A2D6D366EB3FFB643B851BCE5	3914176	----a-w-	C:\Windows\System32\ntoskrnl.exe
2016-04-03 23:53:05	482C8CD985C727C7C78A5E9B320947F0	3969472	----a-w-	C:\Windows\System32\ntkrnlpa.exe
2016-04-03 23:53:05	401D25136E26B237D77DA1BF1198B3BD	619520	----a-w-	C:\Windows\System32\tdh.dll
2016-04-03 23:53:05	23AB7E36551C6BA5370EF7F05142F0EB	38912	----a-w-	C:\Windows\System32\csrsrv.dll
2016-04-03 23:52:50	E94C583CDE2348950155F2AF2876F34D	231424	----a-w-	C:\Windows\System32\mswsock.dll
2016-04-03 23:52:39	72E953215CADE1A726C04AAFDF6B463D	49152	----a-w-	C:\Windows\System32\taskhost.exe
2016-04-03 23:52:13	CE90695129BD27591C47F7A4AB526789	293376	----a-w-	C:\Windows\System32\KernelBase.dll
2016-04-03 23:52:13	6F93A0F455963DC8A9A16BB682C8D589	868352	----a-w-	C:\Windows\System32\kernel32.dll
2016-04-03 23:52:13	48CB4FDBCAAEAC7BCE2F5941545FF071	169984	----a-w-	C:\Windows\System32\winsrv.dll
2016-04-03 23:52:13	47005361FF2A479A0554F352266BAED3	271360	----a-w-	C:\Windows\System32\conhost.exe
2016-04-03 23:50:57	C7A730AFB80B11F93EFC81B1D6F920D7	364544	----a-w-	C:\Windows\System32\XpsGdiConverter.dll
2016-04-03 23:50:57	6A7B5A3EFCCDB53DA41CF6838056990F	1158144	----a-w-	C:\Windows\System32\XpsPrint.dll
2016-04-03 23:50:57	6A13B4F3B3F575F1E24B877B9359AABA	10752	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-04-03 23:50:57	6951562DC4625EEFC6EACD52AD165866	9728	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-04-03 23:50:57	60F4AEFA103D421EA4A40E31409B4756	3072	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-04-03 23:50:57	600A65F922CCDCBB2D11467914241556	2284544	----a-w-	C:\Windows\System32\msmpeg2vdec.dll
2016-04-03 23:50:57	589CBC4989F750E1DA35625AB481CF43	4096	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-04-03 23:50:57	49ACA548B2423F1C67898E6AC719A9A6	3584	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-04-03 23:50:57	3BE0D923AA45A4DBE091C2D84F0B4FE7	3072	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2016-04-03 23:50:57	2E33DFD10F28F86C3FC40EE123CC3904	2560	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-04-03 23:50:57	1C60E09CA1C3A045BC4D367F67C915B7	5632	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-04-03 23:50:57	007863E45F25AA47A4C30D0930BBFD85	5632	---ha-w-	C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-04-03 23:50:56	FB3F036EF6A467F7AF46C821FF5D198D	220160	----a-w-	C:\Windows\System32\d3d10core.dll
2016-04-03 23:50:56	E12C4928B32ACE04610259647F072635	906240	----a-w-	C:\Windows\System32\FntCache.dll
2016-04-03 23:50:56	D4F264FE23F8953D840904418220C15E	293376	----a-w-	C:\Windows\System32\dxgi.dll
2016-04-03 23:50:56	D4212AB475A3B25EC4DF574536C3EDC5	249856	----a-w-	C:\Windows\System32\d3d10_1core.dll
2016-04-03 23:50:56	B3170CCC779B682C3341873EA60CF084	1988096	----a-w-	C:\Windows\System32\d3d10warp.dll
2016-04-03 23:50:56	9FF8F684BACF326082E5562F7C104A79	3419136	----a-w-	C:\Windows\System32\d2d1.dll
2016-04-03 23:50:56	8B285BDAB7735FDFB18E6F7122923B77	187392	----a-w-	C:\Windows\System32\UIAnimation.dll
2016-04-03 23:50:56	8504944851DF6175CC489A8F3328459E	1080832	----a-w-	C:\Windows\System32\d3d10.dll
2016-04-03 23:50:56	62A6EB5771580CAE445804389F3F7432	207872	----a-w-	C:\Windows\System32\WindowsCodecsExt.dll
2016-04-03 23:50:56	545F1BAAADD0BF1F4FE4586293FCA07D	417792	----a-w-	C:\Windows\System32\WMPhoto.dll
2016-04-03 23:50:56	4FF3EC04CD47DD62181894B71B004E40	604160	----a-w-	C:\Windows\System32\d3d10level9.dll
2016-04-03 23:50:56	4277F5164DE9B7C665BB928B9145BEE0	1247744	----a-w-	C:\Windows\System32\DWrite.dll
2016-04-03 23:50:56	3C1936A12C62254F914A01BBC6A8DC69	161792	----a-w-	C:\Windows\System32\d3d10_1.dll
2016-04-03 23:50:56	3BCECD87AB4E6743BFB45B352AD1A529	1230336	----a-w-	C:\Windows\System32\WindowsCodecs.dll
2016-04-03 23:48:59	6DE66FE7C526637E74CD066461C7C871	1505280	----a-w-	C:\Windows\System32\d3d11.dll
2016-04-03 23:30:57	0DA4EAA3687BC1453421E1042855A399	247976	------w-	C:\Windows\System32\MpSigStub.exe
2016-04-03 23:17:07	1C60C4A166948BA984796AC9F4E5F960	15498	----a-w-	C:\Windows\System32\results.xml
2016-04-03 23:14:03	CF908195BEDC55F5EB612618EF7A7625	176920	----a-w-	C:\Windows\System32\hkcmd.exe
2016-04-03 23:14:03	C9ACD1C1340EBE59F145366E9A9909B2	4691736	----a-w-	C:\Windows\System32\GfxUI.exe
2016-04-03 23:14:03	A16E966DEBE65033E703CA9514753E11	60226	----a-w-	C:\Windows\System32\iglhxc32.vp
2016-04-03 23:14:03	7FEF5563D091D8A44B96DD4EBE0350AA	1090	----a-w-	C:\Windows\System32\iglhxa32.vp
2016-04-03 23:14:03	6655F30867DDBDB50C3B5F910B9F21A7	8198936	----a-w-	C:\Windows\System32\TVWSetup.exe
2016-04-03 23:14:03	51DBE9A911685400B7EE432858562572	4096	----a-w-	C:\Windows\System32\IGFXDEVLib.dll
2016-04-03 23:14:03	16D5661D176EE6523B1B142454F999CF	94208	----a-w-	C:\Windows\System32\IccLibDll.dll
2016-04-03 23:14:03	0CA0764ED350C4352610A504A8821A73	142848	----a-w-	C:\Windows\System32\igfxcmrt32.dll
2016-04-03 23:14:03	0890DC3615343BD520D6542C9E29C78E	130048	----a-w-	C:\Windows\System32\igfxdo.dll
2016-04-03 23:14:02	F76284FADB1645E099BE01D55AD9B41F	283648	----a-w-	C:\Windows\System32\igfxrdan.lrc
2016-04-03 23:14:02	F4F89CEEB88BBA3AC41E29A75DDE6F2B	24576	----a-w-	C:\Windows\System32\igfxexps.dll
2016-04-03 23:14:02	F4349F0D97EDF72A70D9BAB8B6B3B6D7	180246	----a-w-	C:\Windows\System32\Gfxres.ru-RU.resources
2016-04-03 23:14:02	EFEBE343C2C47474D87F10734538A3AC	131290	----a-w-	C:\Windows\System32\Gfxres.sk-SK.resources
2016-04-03 23:14:02	EABDC3D42A96179748778484FAF1EBD3	284672	----a-w-	C:\Windows\System32\igfxrsky.lrc
2016-04-03 23:14:02	E9DB6BD9A68E934383F6C17EFF0ECD34	131711	----a-w-	C:\Windows\System32\Gfxres.pl-PL.resources
2016-04-03 23:14:02	DFD46E1831E1656BFDE0EF7DB8056AC9	127599	----a-w-	C:\Windows\System32\Gfxres.sl-SI.resources
2016-04-03 23:14:02	D7280D94E507FD098A2C0FE4704566A7	284672	----a-w-	C:\Windows\System32\igfxrplk.lrc
2016-04-03 23:14:02	D70E98531A689880BB292160653791E5	284160	----a-w-	C:\Windows\System32\igfxrsve.lrc
2016-04-03 23:14:02	D62F6ED4661EB4B4977F8BBC4C6E43D1	208335	----a-w-	C:\Windows\System32\Gfxres.th-TH.resources
2016-04-03 23:14:02	D5579A6D2BDA8E37EF4F5E1100C94B00	267544	----a-w-	C:\Windows\System32\igfxsrvc.exe
2016-04-03 23:14:02	D1C6B71E7E491C3EBA228D4A5C18FC8D	284160	----a-w-	C:\Windows\System32\igfxrtrk.lrc
2016-04-03 23:14:02	C38C5856A2A4E14DA7BDFB07E1DCBDD3	280576	----a-w-	C:\Windows\System32\igfxrchs.lrc
2016-04-03 23:14:02	C05A919EB36330DD97E62C13543E7644	95232	----a-w-	C:\Windows\System32\hccutils.dll
2016-04-03 23:14:02	BF60311546618E46D9F8163B21197F77	115195	----a-w-	C:\Windows\System32\Gfxres.zh-CN.resources
2016-04-03 23:14:02	BD522E7DC9836177C0B730BF36CC7C85	132422	----a-w-	C:\Windows\System32\Gfxres.sv-SE.resources
2016-04-03 23:14:02	B58FF3C260B9F63F740D59E305C4AE81	281600	----a-w-	C:\Windows\System32\igfxrjpn.lrc
2016-04-03 23:14:02	B0561C3DB5AD76416C0ED2CF1925D1A0	133321	----a-w-	C:\Windows\System32\Gfxres.pt-BR.resources
2016-04-03 23:14:02	AD4589C9B09A42490597E3CB9F49C8D0	284672	----a-w-	C:\Windows\System32\igfxrrom.lrc
2016-04-03 23:14:02	AB29B5A1E56A2177E009B766EA01239F	137000	----a-w-	C:\Windows\System32\Gfxres.ko-KR.resources
2016-04-03 23:14:02	A8F4FFF864C87348F3BDD9CE6BF5B5F4	284160	----a-w-	C:\Windows\System32\igfxrptb.lrc
2016-04-03 23:14:02	A07CC075D9E3BB3EDFF599D4EF0CB03F	285184	----a-w-	C:\Windows\System32\igfxrfra.lrc
2016-04-03 23:14:02	9D4018B676558406EC5D589EEB7EA442	284160	----a-w-	C:\Windows\System32\igfxrslv.lrc
2016-04-03 23:14:02	9B53CD10412F905D3391F530415DD7C8	368640	----a-w-	C:\Windows\System32\iglhsip32.dll
2016-04-03 23:14:02	988DB95E655BE8F981B2942DBD86B89E	283648	----a-w-	C:\Windows\System32\igfxrtha.lrc
2016-04-03 23:14:02	97DF38E931E5152EB5FD650DF4B85D4F	132876	----a-w-	C:\Windows\System32\Gfxres.nl-NL.resources
2016-04-03 23:14:02	95010458D8FE989A9701A73A6A3C9CCB	131897	----a-w-	C:\Windows\System32\Gfxres.cs-CZ.resources
2016-04-03 23:14:02	8AA31922CC71296AF8A8A627A45A289B	284672	----a-w-	C:\Windows\System32\igfxrcsy.lrc
2016-04-03 23:14:02	87C78A7A82D22B1112468EDBE3B45DC5	280576	----a-w-	C:\Windows\System32\igfxrcht.lrc
2016-04-03 23:14:02	7A9BA0AFAEA8F104C5BC927447CC056D	284672	----a-w-	C:\Windows\System32\igfxrptg.lrc
2016-04-03 23:14:02	798879A1744041464D3DC9036B566D71	283136	----a-w-	C:\Windows\System32\igfxrara.lrc
2016-04-03 23:14:02	77DC6E83EF77D300CFBE4BAF7A77C95A	283648	----a-w-	C:\Windows\System32\igfxrenu.lrc
2016-04-03 23:14:02	77A5CC27A66C499E771C1017A2EA4C84	284160	----a-w-	C:\Windows\System32\igfxrnor.lrc
2016-04-03 23:14:02	6BDD8BA6EB2BB04C8CACBADD8DFCD6A3	135119	----a-w-	C:\Windows\System32\Gfxres.ro-RO.resources
2016-04-03 23:14:02	69B821AFA04D63B396309AD7C3FD848E	284672	----a-w-	C:\Windows\System32\igfxrita.lrc
2016-04-03 23:14:02	635C4388BA353BAAF2D720ACE65D8CA0	132299	----a-w-	C:\Windows\System32\Gfxres.pt-PT.resources
2016-04-03 23:14:02	60E1F44D2BB3243CF57F20555F4BF1D7	122646	----a-w-	C:\Windows\System32\Gfxres.en-US.resources
2016-04-03 23:14:02	5C88EB1A146502B08007838F36A2660F	281088	----a-w-	C:\Windows\System32\igfxrkor.lrc
2016-04-03 23:14:02	580A174CFE9A926F5787D8290F35BF10	285184	----a-w-	C:\Windows\System32\igfxresn.lrc
2016-04-03 23:14:02	537D0C1ED2A1CA9FF1476B6B9CF0828F	284160	----a-w-	C:\Windows\System32\igfxrhun.lrc
2016-04-03 23:14:02	49A85A75EC77C1C1C0067BF58FCF379E	143640	----a-w-	C:\Windows\System32\igfxtray.exe
2016-04-03 23:14:02	401B2CA8BB07F6A6ED660EA9A6945351	284672	----a-w-	C:\Windows\System32\igfxrdeu.lrc
2016-04-03 23:14:02	3E3AB5E4B49DB5E8EFAC5A1D1ABA9260	284672	----a-w-	C:\Windows\System32\igfxrhrv.lrc
2016-04-03 23:14:02	391439BB43EB98A96AF10F7EC18584BF	133868	----a-w-	C:\Windows\System32\Gfxres.tr-TR.resources
2016-04-03 23:14:02	323F5D8F5623EA1B95F192E6A24C3E6B	138635	----a-w-	C:\Windows\System32\Gfxres.it-IT.resources
2016-04-03 23:14:02	2B78ED3326A225296FD7E23B2CF15A4A	116413	----a-w-	C:\Windows\System32\Gfxres.zh-TW.resources
2016-04-03 23:14:02	29791F5766040591781D1104F56F074C	284672	----a-w-	C:\Windows\System32\igfxrnld.lrc
2016-04-03 23:14:02	278864AD720565A726478C0A04236CE8	285184	----a-w-	C:\Windows\System32\igfxrell.lrc
2016-04-03 23:14:02	247F5387208FA65E58A40DF8D7871A67	130414	----a-w-	C:\Windows\System32\Gfxres.hr-HR.resources
2016-04-03 23:14:02	23D2C4C1FCD2E60EC5B17FD960C1ED3D	575488	----a-w-	C:\Windows\System32\igdumdx32.dll
2016-04-03 23:14:02	1EB1FB699B0721B894D096E4C652406F	57856	----a-w-	C:\Windows\System32\igfxsrvc.dll
2016-04-03 23:14:02	1B43DBE25306E2D1BC4A0282D255516C	284672	----a-w-	C:\Windows\System32\igfxrrus.lrc
2016-04-03 23:14:02	17621A4FC0896CEA65926548FB30895A	132861	----a-w-	C:\Windows\System32\Gfxres.hu-HU.resources
2016-04-03 23:14:02	161B18A9912E5AC7F08D4D4A8D876451	283136	----a-w-	C:\Windows\System32\igfxrheb.lrc
2016-04-03 23:14:02	0F4B4480919E7B8268664B89C45220E2	178456	----a-w-	C:\Windows\System32\igfxpers.exe
2016-04-03 23:14:02	0D9B33CD27933B22F75D8D7A6B192D63	9030656	----a-w-	C:\Windows\System32\igfxress.dll
2016-04-03 23:14:02	09B41966E23479354DC2A77E9D800B8A	284160	----a-w-	C:\Windows\System32\igfxrfin.lrc
2016-04-03 23:14:01	FFB49EE58EF3E271AA25F847D3299047	151	----a-w-	C:\Windows\System32\GfxUI.exe.config
2016-04-03 23:14:01	E91F871CD79BFFBD418D3337B4338792	14299648	----a-w-	C:\Windows\System32\ig4icd32.dll
2016-04-03 23:14:01	E4E57FAFF34A606205B80C400D159A81	136172	----a-w-	C:\Windows\System32\Gfxres.es-ES.resources
2016-04-03 23:14:01	D8C4121A81D4CBC19DB3F4FD468D2DDC	267264	----a-w-	C:\Windows\System32\igfxpph.dll
2016-04-03 23:14:01	D3EEBC1763F15A8EEBB6F056D9726FF8	216876	----a-w-	C:\Windows\System32\igfcg600m.bin
2016-04-03 23:14:01	D095DD95193127E42D1158672CD386A2	81920	----a-w-	C:\Windows\System32\igfxCoIn_v2405.dll
2016-04-03 23:14:01	CB4DCAF11675F52D39035BCEE14ABA77	60015	----a-w-	C:\Windows\System32\iglhxo32.vp
2016-04-03 23:14:01	C3AB41E0AC1FD0A76F6B2ACFF2D026F6	154366	----a-w-	C:\Windows\System32\Gfxres.ar-SA.resources
2016-04-03 23:14:01	B76B7FF4396BC54589ABE49D94992FC5	147392	----a-w-	C:\Windows\System32\Gfxres.he-IL.resources
2016-04-03 23:14:01	B62B5B76EBE28F69F0F9DBA283552AE1	134081	----a-w-	C:\Windows\System32\Gfxres.fr-FR.resources
2016-04-03 23:14:01	A8F7FC8611DF6A646FDD5EEB6C0820FB	86528	----a-w-	C:\Windows\System32\iglhcp32.dll
2016-04-03 23:14:01	A1ED1DD51100217D2A0BDF1DF1300C41	187672	----a-w-	C:\Windows\System32\igfxext.exe
2016-04-03 23:14:01	99AF886F548DFA1AEC9868A8BF0F74FC	1921265	----a-w-	C:\Windows\System32\iglhxa32.cpa
2016-04-03 23:14:01	996D188997F062A4B7A6D36D0CADD0DB	136226	----a-w-	C:\Windows\System32\Gfxres.de-DE.resources
2016-04-03 23:14:01	9683C4AEAD1E2D8097C1760B37A6BA51	5699072	----a-w-	C:\Windows\System32\igdumd32.dll
2016-04-03 23:14:01	91B4AAD4412BB223B466F3DFB43E86DA	452440	----a-w-	C:\Windows\System32\d3dx10_40.dll
2016-04-03 23:14:01	774CD6002AE15A5CB685F4CA61230C25	120320	----a-w-	C:\Windows\System32\igfxcpl.cpl
2016-04-03 23:14:01	75E69F3FC2A7AE68B2C70CE781C15260	131456	----a-w-	C:\Windows\System32\Gfxres.fi-FI.resources
2016-04-03 23:14:01	756975A508428DACB6023CBEFD9B59CD	6067200	----a-w-	C:\Windows\System32\igd10umd32.dll
2016-04-03 23:14:01	481F6E1CD63E09F0516B5E78B35D333E	145804	----a-w-	C:\Windows\System32\igcompkrng600.bin
2016-04-03 23:14:01	4807D80B51F138D68137C5CCF6666588	127109	----a-w-	C:\Windows\System32\Gfxres.da-DK.resources
2016-04-03 23:14:01	41912365AA105AE5F72EEEC2C91C0F76	145408	----a-w-	C:\Windows\System32\gfxSrvc.dll
2016-04-03 23:14:01	32967A254EFFE93213A9463C61520BB8	151350	----a-w-	C:\Windows\System32\Gfxres.ja-JP.resources
2016-04-03 23:14:01	2DAE8EF56FA66F1A76A628CF7B039596	963116	----a-w-	C:\Windows\System32\igkrng600.bin
2016-04-03 23:14:01	15C92E815FC7FE5933BC538EC864ED2D	127367	----a-w-	C:\Windows\System32\Gfxres.nb-NO.resources
2016-04-03 23:14:01	14F646CCE09A5F807E47F1F6E3794117	62640	----a-w-	C:\Windows\System32\iglhxs32.vp
2016-04-03 23:14:01	10F6886D345CF260170FE1B043A30CFA	288768	----a-w-	C:\Windows\System32\igfxdev.dll
2016-04-03 23:14:01	06D745D89962EE9D5C910D8B42E73FD3	262144	----a-w-	C:\Windows\System32\igfxTMM.dll
2016-04-03 23:14:01	00B110E8451CC833832B4BDE2A9C2DC5	195681	----a-w-	C:\Windows\System32\Gfxres.el-GR.resources
2016-04-03 23:13:09	EC6E2DB67695966DF22CF5EBEFC1D305	2425856	----a-w-	C:\Windows\System32\wucltux.dll
2016-04-03 23:13:09	D9B0134913E5EF007AF82A418C503322	1973728	----a-w-	C:\Windows\System32\wuaueng.dll
2016-04-03 23:13:09	459E257F8915D44B23ACB46211FD45D0	45536	----a-w-	C:\Windows\System32\wups2.dll
2016-04-03 23:13:09	072678E0D68E9C3A7960328671134C7B	54240	----a-w-	C:\Windows\System32\wuauclt.exe
2016-04-03 23:13:04	867148EBF47E7E7E7B21C07B4A981929	581600	----a-w-	C:\Windows\System32\wuapi.dll
2016-04-03 23:13:04	372218B80DEF827063049EBEE76B7501	92672	----a-w-	C:\Windows\System32\wudriver.dll
2016-04-03 23:13:04	255F0417EC31C71585824269522EC8E9	36320	----a-w-	C:\Windows\System32\wups.dll
2016-04-03 23:12:57	F419D738BD2AE58D9DF2F9FEB5F43842	33792	----a-w-	C:\Windows\System32\wuapp.exe
2016-04-03 23:12:57	5AA2CAD923E9E647276A61387E83DDD0	179656	----a-w-	C:\Windows\System32\wuwebv.dll
2016-04-03 23:11:59	7FD1956E221C3750E0532A48E8EDD305	80416	----a-w-	C:\Windows\System32\RtNicProp32.dll
2016-04-03 23:11:59	65A5BD4A43ED3C029A514E7502CD804F	100896	----a-w-	C:\Windows\System32\RTNUninst32.dll
2016-04-03 23:11:03	CE1E84AA03EE50362D3C69382DCFA294	1783056	----a-w-	C:\Windows\System32\WavesLib.dll
2016-04-03 23:11:03	B49CCD0A77E064E85A761168E54C3447	214368	----a-w-	C:\Windows\System32\SFNHK.dll
2016-04-03 23:11:03	A258F7B2B84E88118369B0B2196CC257	140528	----a-w-	C:\Windows\System32\SRSWOW.dll
2016-04-03 23:11:03	927EC5A15D723D6E985F305D62D073E4	74080	----a-w-	C:\Windows\System32\SFCOM.dll
2016-04-03 23:11:03	8C83CED38F8CAC3E8D5A953C03BCF4B4	345328	----a-w-	C:\Windows\System32\SRSTSXT.dll
2016-04-03 23:11:03	79AF5519F6273EBF3717E909497E572F	1725784	----a-w-	C:\Windows\System32\WavesGUILib.dll
2016-04-03 23:11:03	38B14183FB1B76F318D9AFBD9E236CD2	68960	----a-w-	C:\Windows\System32\SFAPO.dll
2016-04-03 23:11:03	272BF8E5DBDAF0614CC367A25EA3B256	173296	----a-w-	C:\Windows\System32\SRSHP360.dll
2016-04-03 23:11:03	029F36DE21AFBDD2865CC657E252EBA7	185584	----a-w-	C:\Windows\System32\SRSTSHD.dll
2016-04-03 23:11:02	F8ED0377F88771FEC3DF6593C2CEC722	2187368	----a-w-	C:\Windows\System32\RtkPgExt.dll
2016-04-03 23:11:02	B7365644A14701941B39D926489A29F2	1256040	----a-w-	C:\Windows\System32\RtkApoApi.dll
2016-04-03 23:11:02	5BC33E8CC7D31E6AC0B7E4996C0CB222	75880	----a-w-	C:\Windows\System32\RtkCoInst.dll
2016-04-03 23:11:01	EFDE14A73B8788FD6CF72791FB14A455	4160104	----a-w-	C:\Windows\System32\RtkAPO.dll
2016-04-03 23:11:00	E232507C219A1957880D4EB6D022FAC7	170840	----a-w-	C:\Windows\System32\RTEED32A.dll
2016-04-03 23:11:00	E16A9D9FEF615233F7B5C5274556C05B	103256	----a-w-	C:\Windows\System32\R4EEL32A.dll
2016-04-03 23:11:00	DA070B7D24C1C437487B7EA5977B4C83	3296600	----a-w-	C:\Windows\System32\R4EEP32A.dll
2016-04-03 23:11:00	D0A930B153AC993F8607F29ADE93B1DA	1474048	----a-w-	C:\Windows\System32\RCoRes.dat
2016-04-03 23:11:00	C619CDFA5CDC5A346C89870010A2391C	295768	----a-w-	C:\Windows\System32\RP3DAA32.dll
2016-04-03 23:11:00	C45E7C12A5C6CA76AD577A1D8E982283	88408	----a-w-	C:\Windows\System32\R4EEA32A.dll
2016-04-03 23:11:00	AD49F27A24E90E1549FA7089F8D4B0E7	345944	----a-w-	C:\Windows\System32\R4EED32A.dll
2016-04-03 23:11:00	A6686775084244141483AEA0391508D2	359768	----a-w-	C:\Windows\System32\RTEEP32A.dll
2016-04-03 23:11:00	6C75723CB2309D23A3A16EF9F45B2F49	252760	----a-w-	C:\Windows\System32\MaxxVolumeSDAPO.dll
2016-04-03 23:11:00	5B18398DEDE4A4A78651CD34F0A217A5	78680	----a-w-	C:\Windows\System32\RTEEL32A.dll
2016-04-03 23:11:00	4F92047498EFEA076E3745C291481975	295768	----a-w-	C:\Windows\System32\RP3DHT32.dll
2016-04-03 23:11:00	3DE99987154319C901A6537BA8777CB9	64856	----a-w-	C:\Windows\System32\RTEEG32A.dll
2016-04-03 23:11:00	02E94AF0C802FAB0EC59C353EE7A16AA	1497704	----a-w-	C:\Windows\System32\RTSndMgr.cpl
2016-04-03 23:11:00	01B187108DDCB9A977D9142684FF7551	61272	----a-w-	C:\Windows\System32\R4EEG32A.dll
2016-04-03 23:10:59	F678031A1EF7C96DB09AE9F0DDB7F88E	1938704	----a-w-	C:\Windows\System32\MaxxAudioEQ.dll
2016-04-03 23:10:59	EE03F5DEF3A7EFC3B798122DEBDD1017	259928	----a-w-	C:\Windows\System32\MaxxAudioAPO30.dll
2016-04-03 23:10:59	8D60A15505301760399A3C10C9822AAB	357200	----a-w-	C:\Windows\System32\KAAPORT.dll
2016-04-03 23:10:59	84AB243EBB8839C268BA45975BD6558C	132368	----a-w-	C:\Windows\System32\MaxxAudioAPO.dll
2016-04-03 23:10:59	57C588F098C811E9459AC7034349AF6F	232792	----a-w-	C:\Windows\System32\MaxxAudioAPO20.dll
2016-04-03 23:10:59	3DB3BD3BE8DC7DE94EC9D946DCA7F5A3	3327320	----a-w-	C:\Windows\System32\MaxxAudioRealtek.dll
2016-04-03 23:10:57	C77A4CA13CF78E242C5844D045EDFDA0	218728	----a-w-	C:\Windows\System32\DTSGFXAPO.dll
2016-04-03 23:10:57	C1D3FC8F45C3AA7F0F03DA2A0D384524	1509480	----a-w-	C:\Windows\System32\DTSS2SpeakerDLL.dll
2016-04-03 23:10:57	BEB707543D3996C6185B1656F63CCF27	1740352	----a-w-	C:\Windows\System32\FMAPO.dll
2016-04-03 23:10:57	BAF09FCD09873CF0A3ADF4752F6B144B	601704	----a-w-	C:\Windows\System32\DTSVoiceClarityDLL.dll
2016-04-03 23:10:57	B447DFE249DAD3577A9CCCC6960A57D2	1220200	----a-w-	C:\Windows\System32\DTSBoostDLL.dll
2016-04-03 23:10:57	5ADA836A4F9E4C0CF9CC1BFDBAA9D37F	1292904	----a-w-	C:\Windows\System32\DTSS2HeadphoneDLL.dll
2016-04-03 23:10:57	5A65D120056B4B814E703E100FDE14C6	389736	----a-w-	C:\Windows\System32\DTSGainCompensatorDLL.dll
2016-04-03 23:10:57	5328523AC3FE93F61054823D90DA73A5	218216	----a-w-	C:\Windows\System32\DTSLFXAPO.dll
2016-04-03 23:10:57	4CB970E9423433CC834BF54588E0AA5A	458344	----a-w-	C:\Windows\System32\DTSNeoPCDLL.dll
2016-04-03 23:10:57	426246A4B6A7D1A1D12AAB6BB2E483C5	631400	----a-w-	C:\Windows\System32\DTSSymmetryDLL.dll
2016-04-03 23:10:57	3B7950071A28E861C877BA77742D9577	218728	----a-w-	C:\Windows\System32\DTSGFXAPONS.dll
2016-04-03 23:10:57	255A4B9B8008773D0B143E22A21AB4FA	375400	----a-w-	C:\Windows\System32\DTSLimiterDLL.dll
2016-04-03 23:10:56	6353994C972CB58EB01854C6FDFAC80D	96160	----a-w-	C:\Windows\System32\AERTARen.dll
2016-04-03 23:10:56	4A635AE3CC50F6BF1317957D1FEE975A	654952	----a-w-	C:\Windows\System32\DTSBassEnhancementDLL.dll
2016-04-03 23:10:56	2CCEAF03E8AF4543171D236DF21DC29A	175200	----a-w-	C:\Windows\System32\AERTACap.dll
2016-04-03 23:10:14	E3F9DA68FE296EACBB2F4432351B481C	53248	----a-r-	C:\Windows\System32\CSVer.dll
====== C:\Windows\system32\drivers =====
2016-04-05 21:28:09	D41D8CD98F00B204E9800998ECF8427E	0	---ha-w-	C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-04-03 23:52:50	F81BB7E487EDCEAB630A7EE66CF23913	338944	----a-w-	C:\Windows\System32\drivers\afd.sys
2016-04-03 23:52:50	CA59F7C570AF70BC174F477CFE2D9EE3	1294272	----a-w-	C:\Windows\System32\drivers\tcpip.sys
2016-04-03 23:52:50	AAB149EE616952BB84308C28E75ED20D	187752	----a-w-	C:\Windows\System32\drivers\FWPKCLNT.SYS
2016-04-03 23:52:50	776FCEFE2CD27C442DF66D3F3535078D	240496	----a-w-	C:\Windows\System32\drivers\netio.sys
2016-04-03 23:14:47	B090D844D1356787CED6315A505CFEE1	8192	----a-w-	C:\Windows\System32\drivers\IntelMEFWVer.dll
2016-04-03 23:14:32	D86AC00883B9C98B570E7643AAF8E554	41088	----a-w-	C:\Windows\System32\drivers\HECI.sys
2016-04-03 23:14:01	696D41B94FB11F425E6F730F8DBEAE7A	10540032	----a-w-	C:\Windows\System32\drivers\igdkmd32.sys
2016-04-03 23:11:59	5283B9A27FF230F2FF70D92451FF409A	394856	----a-w-	C:\Windows\System32\drivers\Rt86win7.sys
2016-04-03 23:11:00	6BEA3C6C9B0DC7BB92A54154796895B7	3525352	----a-w-	C:\Windows\System32\drivers\RTKVHDA.sys
====== C:\Windows\Tasks ======
2016-04-11 12:53:50	F64A2D5E9C1762DEAFBEB4978044D22B	3874	----a-w-	C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2016-04-04 07:54:55	727608D1A061AF49784565134A3786FC	940	----a-w-	C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-04 07:54:55	4CFDF56A66EE0863AA17D41EF0DFBDB6	3878	----a-w-	C:\Windows\system32\Tasks\Adobe Flash Player Updater
====== C:\Windows\Temp ======
======= C:\Program Files =====
2016-04-11 12:53:04	--------	d-----w-	C:\Program Files\Common Files\Adobe
2016-04-11 12:53:04	--------	d-----w-	C:\Program Files\Adobe
2016-04-10 10:02:26	--------	d-----w-	C:\Program Files\Common Files\AV
2016-04-09 20:38:03	--------	d-----w-	C:\Program Files\trend micro
2016-04-04 08:19:49	--------	d-----w-	C:\Program Files\AVG
2016-04-04 07:40:19	--------	d-----w-	C:\Program Files\Common Files\EPSON
2016-04-04 07:27:19	--------	d-----w-	C:\Program Files\Common Files\ABBYY
2016-04-04 07:27:19	--------	d-----w-	C:\Program Files\ABBYY FineReader 9.0 Sprint
2016-04-04 07:23:07	--------	d-----w-	C:\Program Files\EPSON Software
2016-04-04 07:19:16	--------	d-----w-	C:\Program Files\epson
2016-04-03 23:14:42	--------	d-----w-	C:\Program Files\Common Files\postureAgent
2016-04-03 23:14:16	--------	d-----w-	C:\Program Files\Common Files\Intel
2016-04-03 23:10:56	--------	d--h--w-	C:\Program Files\InstallShield Installation Information
2016-04-03 23:10:56	--------	d-----w-	C:\Program Files\Realtek
2016-04-03 23:10:50	--------	d--h--w-	C:\Program Files\Temp
2016-04-03 23:10:48	--------	d-----w-	C:\Program Files\Common Files\InstallShield
2016-04-03 23:10:14	--------	d-----w-	C:\Program Files\Intel
======= C: =====
2016-04-11 17:21:51	447C197CA17A6F68C9EE941D21AB00EE	3552	------w-	C:\bootsqm.dat
====== C:\Users\Ronald-pc\AppData\Roaming ======
2016-04-11 12:58:52	--------	d-----w-	C:\Users\Ronald-pc\AppData\Locallow\Adobe
2016-04-11 12:50:48	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\Adobe
2016-04-11 12:44:24	--------	d-----w-	C:\Users\Default\AppData\Roaming\TuneUp Software
2016-04-11 12:44:24	--------	d-----w-	C:\Users\Default User\AppData\Roaming\TuneUp Software
2016-04-10 10:58:53	--------	d-----w-	C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp
2016-04-10 10:58:53	--------	d-----w-	C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp
2016-04-10 10:58:53	--------	d-----w-	C:\Users\Default\AppData\Local\Temp
2016-04-10 10:58:53	--------	d-----w-	C:\Users\Default User\AppData\Local\Temp
2016-04-10 10:58:52	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\Temp
2016-04-05 20:07:33	--------	d-----w-	C:\Users\Ronald-pc\AppData\Roaming\AVG
2016-04-05 20:07:19	--------	d-----w-	C:\Windows\system32\config\systemprofile\AppData\Roaming\AVG
2016-04-05 19:45:38	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\ElevatedDiagnostics
2016-04-05 19:23:17	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\Programs
2016-04-04 19:20:20	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\Diagnostics
2016-04-04 08:20:14	--------	d-----w-	C:\Windows\system32\config\systemprofile\AppData\Local\AvgSetupLog
2016-04-04 08:20:01	--------	d-----w-	C:\Windows\system32\config\systemprofile\AppData\Local\Avg
2016-04-04 08:16:40	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\AvgSetupLog
2016-04-04 08:16:40	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\Avg
2016-04-04 07:43:35	--------	d-----w-	C:\Users\Ronald-pc\AppData\Roaming\Epson
2016-04-04 07:28:26	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\ABBYY
2016-04-03 23:59:40	--------	d-----w-	C:\Users\Ronald-pc\AppData\Roaming\Adobe
2016-04-03 23:28:08	97B176D6CD88FCF7412AE889A972BAC4	57560	----a-w-	C:\Users\Ronald-pc\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-03 23:19:17	--------	d-sh--w-	C:\Users\Ronald-pc\AppData\Locallow\Microsoft
2016-04-03 23:14:31	--------	d-----w-	C:\Users\Ronald-pc\AppData\Roaming\InstallShield
2016-04-03 23:14:20	--------	d-----w-	C:\Windows\serviceprofiles\Localservice\AppData\Local\PnrpSqm
2016-04-03 23:13:18	--------	d-----w-	C:\Windows\serviceprofiles\Localservice\AppData\Roaming\PeerNetworking
2016-04-03 23:07:53	--------	d-----r-	C:\Users\Ronald-pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-04-03 23:07:53	--------	d-----r-	C:\Users\Ronald-pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-04-03 23:07:44	--------	d-----w-	C:\Users\Ronald-pc\AppData\Roaming\Identities
2016-04-03 23:07:35	--------	d-s---w-	C:\Users\Ronald-pc\AppData\Roaming\Microsoft
2016-04-03 23:07:35	--------	d-----w-	C:\Users\Ronald-pc\AppData\Roaming\Media Center Programs
2016-04-03 23:07:35	--------	d-----w-	C:\Users\Ronald-pc\AppData\Local\Microsoft
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
====== C:\Users\Ronald-pc ======
2016-04-11 12:52:22	--------	d-----w-	C:\ProgramData\Adobe
2016-04-10 10:02:04	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-04-05 21:06:36	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-04-05 20:54:47	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp
2016-04-04 08:19:49	--------	d--h--w-	C:\ProgramData\Common Files
2016-04-04 08:19:48	--------	d-----w-	C:\ProgramData\Avg
2016-04-04 07:28:10	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2016-04-04 07:27:19	--------	d-----w-	C:\ProgramData\ABBYY
2016-04-04 07:25:43	--------	d-----w-	C:\ProgramData\UDL
2016-04-04 07:23:36	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2016-04-04 07:19:27	--------	d-----w-	C:\ProgramData\EPSON
2016-04-04 07:19:17	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2016-04-03 23:07:53	--------	d-----r-	C:\Users\Ronald-pc\Searches
2016-04-03 23:07:42	--------	d-----r-	C:\Users\Ronald-pc\Contacts
2016-04-03 23:07:35	6FC234AD3752E1267B34FB12BCD6718B	20	--sh--w-	C:\Users\Ronald-pc\ntuser.ini
2016-04-03 23:07:35	--------	d--h--w-	C:\Users\Ronald-pc\AppData
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Videos
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Saved Games
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Pictures
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Music
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Links
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Favorites
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Downloads
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Documents
2016-04-03 23:07:35	--------	d-----r-	C:\Users\Ronald-pc\Desktop

====== C: exe-files ==
2016-04-11 13:00:45	CBBD8D9A382A0025A2B2F44ECB870264	403672	----a-w-	C:\ProgramData\Adobe\ARM\S\29046\AdobeARMHelper.exe
2016-04-11 12:47:57	F71E0250F483B6BDBE886D0C7BAD7A3C	78608	----a-w-	C:\ProgramData\Avg\Setup\av\avguirux.exe
2016-04-11 12:47:54	107C9276E9553D5E54F01B32AE53EB0A	6069152	----a-w-	C:\ProgramData\Avg\Setup\av\avgmfapx.exe
2016-04-11 12:43:36	00B8FBA4118F975C17D1D439BDF09537	273680	----a-w-	C:\Program Files\AVG\Av\avgndisx.exe
2016-04-10 10:00:27	8142BD628D72354ED23CB360767160E7	3205904	----a-w-	C:\Program Files\AVG\Setup\avgsetupx.exe
2016-04-10 10:00:27	0C15B2AEBD3A5C3B7362873AFA8DB0AA	686352	----a-w-	C:\Program Files\AVG\Setup\avgntdumpx.exe
2016-04-09 20:38:04	9A2347903D6EDB84C10F288BC0578C1C	388608	----a-w-	C:\Program Files\trend micro\Ronald-pc.exe
2016-04-07 15:57:42	FF19A53E0AD1A970C8DAF17EBD147454	2289424	----a-w-	C:\Program Files\AVG\Setup\avgsetupwrkx.exe
2016-04-06 15:17:10	56214DB3F7BC6F897243DD5739A79571	3993088	----a-w-	C:\Program Files\AVG\Av\avgidsagent.exe
2016-04-06 15:13:34	A00B83BA9B4409733F565A7ADD7696AF	3930384	----a-w-	C:\Program Files\AVG\Av\avgui.exe
2016-04-06 15:13:20	F8AED416B21E62113E954041BD916D6A	1615192	----a-w-	C:\Program Files\AVG\Av\avgfws.exe
2016-04-06 15:12:54	95C301A654B38EB0D9558EAC3C3E492D	1335056	----a-w-	C:\Program Files\AVG\Av\avgnsx.exe
2016-04-06 15:12:26	A82D131C4A8DDEB9B67479BE63C801F7	795408	----a-w-	C:\Program Files\AVG\Av\avgemcx.exe
2016-04-06 15:12:14	D0DD2473B70ED090E8A26C27D9E41960	500632	----a-w-	C:\Program Files\AVG\Av\avgwsc.exe
2016-04-06 15:12:12	D4A47DE759726D272EEA681C1896C24C	362768	----a-w-	C:\Program Files\AVG\Av\fixcfg.exe
2016-04-06 15:12:10	F366958E93A94BDBB1382DC50A01DDFB	408848	----a-w-	C:\Program Files\AVG\Av\avgcfgex.exe
2016-04-06 15:12:08	1410E8BA810BC19E59B00C6A5E0D771F	385808	----a-w-	C:\Program Files\AVG\Av\avgcomdlgx.exe
2016-04-06 15:10:56	9493F89A3A3CB73293A46843E11B7566	688912	----a-w-	C:\Program Files\AVG\Av\avgntdumpx.exe
2016-04-06 15:10:48	F291F1FFD27F9C9FBF7300F3331E6564	267536	----a-w-	C:\Program Files\AVG\Av\avgcmgr.exe
2016-04-06 15:10:32	013816C6AC79ADFC29EB557EC0DBB503	1010960	----a-w-	C:\Program Files\AVG\Av\avgrsx.exe
2016-04-06 15:09:52	B3CB78E6BB883862B2B90B2F6BF4DE0C	868112	----a-w-	C:\Program Files\AVG\Av\avgcsrvx.exe
2016-04-06 15:09:00	DC106E8C0138B667EB4E2B8C0DE01F62	593880	----a-w-	C:\Program Files\AVG\Av\avgwdsvcx.exe
2016-04-06 15:08:24	B9B1AEA866C129B56D352A08F0CD910D	3649808	----a-w-	C:\Program Files\AVG\Av\avgdiagex.exe
2016-04-06 15:06:58	2D2C15A68FBBF28AEB1E778148070991	638456	----a-w-	C:\Program Files\AVG\Av\avgamps.exe
2016-04-06 15:06:38	BD43185408AAA19B8CC3C7BA6A82724B	4281616	----a-w-	C:\Program Files\AVG\Av\upgrade.exe
2016-04-06 15:05:24	FDF8F2EBF960428D339BAAEF33B77F31	435472	----a-w-	C:\Program Files\AVG\Av\avgscanx.exe
2016-04-06 15:05:24	0E4251E03A1A28BBAFD86056AA76F16B	716984	----a-w-	C:\Program Files\AVG\Av\avgdumpx.exe
2016-04-06 15:00:02	2D4EAC16F376D2DD579FD21038B0DC83	32528	----a-w-	C:\Program Files\AVG\Av\avuirunnerx.exe
2016-04-05 20:54:50	D81E646D85FF4339B56BB1185A0CA86B	49936	----a-w-	C:\Windows\System32\TURegOpt.exe
=== C: other files ==
2016-04-06 15:19:30	921287BA377F3FA7074D41392FC7842A	1021345	----a-w-	C:\Program Files\AVG\Av\banners\banners.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s                                                                                                                                                                                                                       "
"EEventManager"="C:\Program Files\Epson Software\Event Manager\EEventManager.exe                                                                                                                                                                                                        "
"AvgUi"="C:\Program Files\AVG\Framework\Common\avguirnx.exe /lps=fmw"
"AVG_UI"="C:\Program Files\AVG\Av\avuirunnerx.exe C:\Program Files\AVG\Av\avgui.exe"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]
"Persistence"="C:\\Windows\\system32\\igfxpers.exe"
"HotKeysCmds"="C:\\Windows\\system32\\hkcmd.exe"
"IgfxTray"="C:\\Windows\\system32\\igfxtray.exe"


==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [07-04-2016 21:13]

==== Other Scheduled Tasks ======================

"C:\Windows\system32\tasks\Adobe Acrobat Update Task" [C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe]
"C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.startpagina.nl/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.startpagina.nl/"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02

==== Empty IE Cache ======================

C:\Users\Ronald-pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Ronald-pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DXISXGX2 will be deleted at reboot
C:\Users\Ronald-pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KPLB32XI will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1822 folders=31 147419461 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Ronald-pc\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot