Logfile of random's system information tool 1.10 (written by random/random)
Run by Ilse at 2016-04-26 09:50:58
Microsoft Windows 8.1 
System drive C: has 244 GB (84%) free of 292 GB
Total RAM: 3985 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:51:05, on 26/04/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TweakBit\PCSupportBar\PCSupportBar.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files (x86)\AVG\Av\avgui.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\AVG Web TuneUp\CefHost.exe
C:\Program Files (x86)\AVG Web TuneUp\CefHost.exe
C:\Program Files\trend micro\Ilse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Search App by Ask BHO - {4F524A2D-5350-4500-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll" (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: EgisPBIE - {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} - C:\Program Files\Acer ProShield\x86\EgisPBIE.dll
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.2.9.726\AVG Web TuneUp.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O3 - Toolbar: Search App by Ask - {4F524A2D-5350-4500-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll" (file missing)
O4 - HKLM\..\Run: [RadioController] "C:\Program Files (x86)\RadioController\RfBtnHelper.exe" Start_Run
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [sfagent] C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [beid] "C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe" /startup
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Ask-updateservice (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagent.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
O23 - Service: Broadcom Card Reader Service (BrcmCardReader) - Broadcom Corp. - C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Device Fast-lane Service (DeviceFastLaneService) - Acer Incorporated - C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc.  - C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: EgisTec eLock Service (eLockServ) - Egis Technology Inc. - C:\Program Files\Common Files\EgisTec CommonModule\eLock\eLockServ.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - c:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Online Games Manager (ogmservice) - RealNetworks, Inc. - C:\Program Files (x86)\Online Games Manager\ogmservice.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: SPAMfighter Update Service - Unknown owner - C:\Program Files (x86)\Fighters\SPAMfighter\sfus.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Suite Service - Unknown owner - C:\Program Files (x86)\Fighters\FighterSuiteService.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater40.2.9 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.9\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 13411 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe"

"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
"C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe"
"C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Online Games Manager\ogmservice.exe" --service-run
"C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
C:\Windows\RfBtnSvc64.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.9\ToolbarUpdater.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.9\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\Explorer.EXE
taskhostex.exe 
"C:\Program Files (x86)\TweakBit\PCSupportBar\PCSupportBar.exe" 
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window --enable-setforeground-window --enable-kbhook-window
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\WINDOWS\system32\GWX\GWX.exe" 
"C:\Program Files (x86)\AVG\Av\avgnsa.exe"
"C:\Program Files (x86)\AVG\Av\avgemca.exe"
C:\Program Files (x86)\AVG\Av\avgrsa.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\WINDOWS\system32\igfxext.exe -Embedding
C:\Windows\system32\svchost.exe -k HPService
igfxEM.exe 
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
igfxHK.exe 
"C:\Program Files\Common Files\EgisTec CommonModule\eLock\eLockServ.exe"
igfxTray.exe 
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe" 
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Elantech\ETDCtrl.exe" 
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe" 
"C:\Program Files (x86)\RadioController\RfBtnHelper.exe" HigherRFButtonHelper
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe" 
"C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe" 
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" 
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" 
 /fmw.trayonly
"C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
ctfmon.exe
"c:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\skydrive.exe -Embedding
 /trayonly
"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
dashost.exe {2e23cf2c-c575-4d25-a85b5805ac1b8bdf}
"C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe"
"C:\Program Files (x86)\AVG Web TuneUp\vprot.exe" /AFTERINSTALL
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-27bf-7571656e744d /binaryPath="C:\Program Files (x86)\AVG\Av\\" /logPath=C:\WINDOWS\system32\config\systemprofile\AppData\Local\Avg\log\av16 /logCfgPath=C:\ProgramData\Avg\log\av16
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\Program Files\Internet Explorer\iexplore.exe" 
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3192 CREDAT:267521 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3192 CREDAT:595207 /prefetch:2
"CefHost.exe" 
"C:\Program Files (x86)\AVG Web TuneUp\CefHost.exe" --type=renderer --no-sandbox --user-agent="Mozilla/4.0 (compatible; MSIE 9.11.9600.18283; Windows NT 6.3)" --lang=en-US --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --lang=en-US --disable-pepper-3d --disable-accelerated-compositing --disable-accelerated-video-decode --disable-webrtc-hw-encoding --enable-software-compositing --disable-gpu-compositing --disable-pepper-3d --channel="5860.1.622807773\1867249719" /prefetch:673131151
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Users\Ilse\AppData\Local\Microsoft\Windows\INetCache\IE\JM9UBSMN\RSITx64.exe" 

======Scheduled tasks folder======

C:\WINDOWS\tasks\0316tbUpdateInfo.job - C:\ProgramData\Avg_Update_0316tb\0316tb_{501A80AC-C1F7-4A44-83B4-DB89751723AE}.exe  /SETINFO /CMPID=0316tb /INFORETRY=3 /RUNBY=UP
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-03-18 228552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5350-4500-76A7-7A786E7484D7}]
Search App by Ask - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll [2016-04-21 12360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll [2013-01-28 66688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.2.9.726\AVG Web TuneUp.dll [2016-04-25 2476104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-04-21 2348848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5350-4500-76A7-7A786E7484D7}]
Search App by Ask - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll [2016-04-21 10824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-25 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9}]
EgisPBIE Sign-in Helper - C:\Program Files\Acer ProShield\x86\EgisPBIE.dll [2013-04-24 531944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files (x86)\AVG Web TuneUp\4.2.9.726\AVG Web TuneUp.dll [2016-04-25 2439240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08 1725056]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c723a437-2eaf-466d-a95b-3fa0966bf88c}]
Strong Signal - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-25 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4F524A2D-5350-4500-76A7-7A786E7484D7} - Search App by Ask - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll [2016-04-21 12360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{4F524A2D-5350-4500-76A7-7A786E7484D7} - Search App by Ask - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll [2016-04-21 10824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2012-11-20 2873744]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-10-01 448912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe []
"Persistence"=C:\Windows\system32\igfxpers.exe []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2013-01-28 132736]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RadioController"=C:\Program Files (x86)\RadioController\RfBtnHelper.exe [2013-10-19 111216]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-05-28 310064]
"sfagent"=C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe []
"ApnTBMon"=C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2016-04-21 1612872]
"beid"=C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe /startup []
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-04-14 186640]
"AVG_UI"=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-04-06 32528]
"vProt"=C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2016-04-25 2885704]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2013-01-28 132736]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLinkedConnections"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-04-26 09:50:58 ----D---- C:\rsit
2016-04-26 09:50:58 ----D---- C:\Program Files\trend micro
2016-04-25 09:01:06 ----D---- C:\ProgramData\Avg_Update_0516tb
2016-04-14 09:41:06 ----AC---- C:\WINDOWS\system32\drivers\vhdmp.sys
2016-04-14 09:41:04 ----A---- C:\WINDOWS\system32\WindowsAnytimeUpgradeui.exe
2016-04-14 09:41:03 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-04-14 09:41:03 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-04-14 09:41:03 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-04-14 09:41:03 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-04-14 09:41:03 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-04-14 09:41:02 ----A---- C:\WINDOWS\system32\winresume.exe
2016-04-14 09:41:02 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-04-14 09:41:01 ----A---- C:\WINDOWS\system32\winload.exe
2016-04-14 09:40:05 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-04-14 09:40:05 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-04-14 09:40:03 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-04-14 09:39:57 ----A---- C:\WINDOWS\system32\rpcss.dll
2016-04-14 09:39:55 ----A---- C:\WINDOWS\system32\drivers\vpci.sys
2016-04-14 09:39:53 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2016-04-14 09:39:53 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2016-04-14 09:39:52 ----A---- C:\WINDOWS\system32\nshwfp.dll
2016-04-14 09:39:52 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2016-04-14 09:39:52 ----A---- C:\WINDOWS\system32\BFE.DLL
2016-04-14 09:39:51 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2016-04-14 09:39:44 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2016-04-14 09:39:44 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2016-04-14 09:39:42 ----A---- C:\WINDOWS\system32\VSSVC.exe
2016-04-14 09:39:19 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2016-04-14 09:39:17 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2016-04-14 09:39:16 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2016-04-14 09:39:16 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2016-04-14 09:39:16 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2016-04-14 09:39:16 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2016-04-14 09:39:16 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2016-04-14 09:39:15 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2016-04-14 09:39:15 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2016-04-14 09:39:13 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2016-04-14 09:39:10 ----A---- C:\WINDOWS\SYSWOW64\dhcpsapi.dll
2016-04-14 09:39:10 ----A---- C:\WINDOWS\system32\dhcpsapi.dll
2016-04-14 09:39:00 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-04-14 09:38:43 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-04-14 09:38:42 ----A---- C:\WINDOWS\system32\twinui.dll
2016-04-14 09:38:41 ----A---- C:\WINDOWS\system32\shell32.dll
2016-04-14 09:38:39 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2016-04-14 09:38:39 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-04-14 09:38:39 ----A---- C:\WINDOWS\explorer.exe
2016-04-14 09:38:38 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2016-04-14 09:38:38 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-04-14 09:38:38 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2016-04-14 09:38:38 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2016-04-14 09:38:38 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2016-04-14 09:38:37 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-04-14 09:38:37 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-04-14 09:38:37 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-04-14 09:38:37 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-04-14 09:38:37 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2016-04-14 09:38:37 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-04-14 09:38:37 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-04-14 09:38:37 ----A---- C:\WINDOWS\system32\hgcpl.dll
2016-04-14 09:38:37 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-04-14 09:38:36 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2016-04-14 09:38:36 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2016-04-14 09:38:36 ----A---- C:\WINDOWS\system32\usercpl.dll
2016-04-14 09:38:36 ----A---- C:\WINDOWS\system32\themecpl.dll
2016-04-14 09:38:36 ----A---- C:\WINDOWS\system32\stobject.dll
2016-04-14 09:38:36 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2016-04-14 09:38:36 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-04-14 09:38:35 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2016-04-14 09:38:35 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2016-04-14 09:38:35 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2016-04-14 09:38:35 ----A---- C:\WINDOWS\SYSWOW64\SettingMonitor.dll
2016-04-14 09:38:35 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-04-14 09:38:30 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2016-04-14 09:38:30 ----A---- C:\WINDOWS\system32\storagewmi.dll
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\wbengine.exe
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\invagent.dll
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\devinv.dll
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\aepic.dll
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-04-14 09:38:03 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-04-14 09:38:02 ----AC---- C:\WINDOWS\system32\drivers\volsnap.sys
2016-04-14 09:38:02 ----AC---- C:\WINDOWS\system32\drivers\disk.sys
2016-04-14 09:11:15 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-04-14 09:11:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-04-14 09:11:03 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-04-14 09:10:57 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-04-14 09:10:55 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-04-14 09:10:54 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-04-14 09:10:54 ----A---- C:\WINDOWS\system32\wininet.dll
2016-04-14 09:10:53 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-04-14 09:10:53 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-04-14 09:10:52 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-04-14 09:10:51 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-04-14 09:10:50 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-04-14 09:10:50 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-04-14 09:10:49 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-04-14 09:10:49 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-04-14 09:10:47 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-04-14 09:10:44 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2016-04-14 09:10:44 ----A---- C:\WINDOWS\system32\iepeers.dll
2016-04-14 09:10:44 ----A---- C:\WINDOWS\system32\dxtrans.dll
2016-04-14 09:10:42 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-04-14 09:10:41 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-04-14 09:10:41 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2016-04-14 09:10:41 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-04-14 09:10:41 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-04-14 09:10:40 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-04-14 09:10:40 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-04-14 09:10:40 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-04-14 09:10:39 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-04-14 09:10:39 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-04-14 09:10:39 ----A---- C:\WINDOWS\system32\jscript.dll
2016-04-14 09:10:39 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-04-14 09:10:38 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-04-14 09:08:58 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-04-14 09:08:58 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-04-14 09:08:56 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-04-14 09:08:56 ----A---- C:\WINDOWS\system32\ole32.dll
2016-04-14 09:08:47 ----A---- C:\WINDOWS\system32\basesrv.dll
2016-04-14 09:08:43 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-04-14 09:08:42 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-04-14 09:08:42 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-04-14 09:08:42 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-04-14 09:08:42 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-04-14 09:08:42 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-04-14 09:08:42 ----A---- C:\WINDOWS\system32\certcli.dll
2016-04-14 09:08:41 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2016-04-14 09:08:41 ----A---- C:\WINDOWS\system32\samlib.dll
2016-04-14 09:08:41 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-04-14 09:07:54 ----A---- C:\WINDOWS\system32\win32k.sys
2016-04-07 18:38:28 ----D---- C:\ProgramData\TERMINAL Studio
2016-04-07 18:37:49 ----D---- C:\Zylom Games
2016-03-29 17:19:36 ----D---- C:\ProgramData\Playrix Entertainment
2016-03-29 16:56:44 ----D---- C:\Users\Ilse\AppData\Roaming\Rumbic Studio

======List of files/folders modified in the last 1 month======

2016-04-26 09:50:58 ----RD---- C:\Program Files
2016-04-26 09:50:56 ----D---- C:\WINDOWS\Prefetch
2016-04-26 09:41:52 ----D---- C:\WINDOWS\Temp
2016-04-26 09:15:45 ----D---- C:\ProgramData\MFAData
2016-04-26 09:11:53 ----D---- C:\WINDOWS\system32\sru
2016-04-25 17:32:33 ----D---- C:\WINDOWS\Microsoft.NET
2016-04-25 17:32:22 ----RD---- C:\WINDOWS\assembly
2016-04-25 17:31:19 ----D---- C:\WINDOWS\system32\DriverStore
2016-04-25 17:31:19 ----D---- C:\WINDOWS\Inf
2016-04-25 17:21:15 ----SHD---- C:\WINDOWS\Installer
2016-04-25 17:21:15 ----HD---- C:\Config.Msi
2016-04-25 09:03:11 ----D---- C:\WINDOWS\Tasks
2016-04-25 09:03:11 ----D---- C:\WINDOWS\system32\Tasks
2016-04-25 09:02:20 ----D---- C:\ProgramData\AVG Web TuneUp
2016-04-25 09:02:10 ----D---- C:\Program Files (x86)\AVG Web TuneUp
2016-04-25 09:01:06 ----HD---- C:\ProgramData
2016-04-25 08:51:30 ----D---- C:\WINDOWS\system32\config
2016-04-25 08:45:57 ----D---- C:\WINDOWS\WinSxS
2016-04-22 11:54:58 ----RD---- C:\WINDOWS\System32
2016-04-22 11:54:58 ----D---- C:\WINDOWS\SysWOW64
2016-04-22 11:54:25 ----D---- C:\Program Files (x86)\Belgium Identity Card
2016-04-22 11:54:19 ----D---- C:\Windows
2016-04-22 11:54:19 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-04-22 11:54:16 ----D---- C:\WINDOWS\system32\catroot
2016-04-22 11:06:09 ----D---- C:\WINDOWS\rescache
2016-04-22 09:57:45 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2016-04-22 09:23:09 ----SHD---- C:\System Volume Information
2016-04-22 09:10:34 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2016-04-22 08:38:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-21 18:06:05 ----D---- C:\WINDOWS\system32\catroot2
2016-04-21 14:27:38 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2016-04-21 14:26:31 ----D---- C:\Program Files\Microsoft Office 15
2016-04-21 13:58:33 ----D---- C:\WINDOWS\system32\drivers
2016-04-21 13:58:28 ----D---- C:\WINDOWS\system32\Boot
2016-04-21 13:58:25 ----D---- C:\WINDOWS\apppatch
2016-04-21 13:58:25 ----D---- C:\Program Files (x86)\Internet Explorer
2016-04-21 13:58:21 ----D---- C:\Program Files\Internet Explorer
2016-04-21 13:58:20 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2016-04-21 13:58:19 ----D---- C:\WINDOWS\system32\nl-NL
2016-04-21 13:58:17 ----D---- C:\WINDOWS\system32\appraiser
2016-04-21 13:58:13 ----RD---- C:\WINDOWS\ToastData
2016-04-21 13:58:07 ----D---- C:\WINDOWS\system32\wbem
2016-04-19 20:14:06 ----D---- C:\Users\Ilse\AppData\Roaming\HpUpdate
2016-04-16 19:11:59 ----D---- C:\WINDOWS\CbsTemp
2016-04-16 19:09:10 ----D---- C:\WINDOWS\system32\MRT
2016-04-16 19:02:20 ----A---- C:\WINDOWS\system32\MRT.exe
2016-04-14 09:36:06 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-04-14 09:36:05 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-04-14 09:36:02 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-04-13 14:15:20 ----D---- C:\Program Files\AVG Web TuneUp
2016-04-09 08:40:16 ----D---- C:\WINDOWS\AppReadiness
2016-04-07 18:37:40 ----D---- C:\ProgramData\Trymedia
2016-04-05 23:53:01 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2016-01-26 272304]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2016-02-16 360736]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2016-03-07 246560]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2015-12-04 42416]
R0 Avguniva;AVG Universal Driver; C:\WINDOWS\system32\DRIVERS\avguniva.sys [2016-03-08 71456]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2016-02-16 162592]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2016-03-08 306976]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-12-16 315840]
R1 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver; C:\WINDOWS\system32\DRIVERS\eLock2BurnerLockDriver.sys [2013-10-19 20072]
R1 mwlPSDFilter;mwlPSDFilter; C:\WINDOWS\system32\DRIVERS\mwlPSDFilter.sys [2013-10-19 22648]
R1 mwlPSDNServ;mwlPSDNServ; C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys [2013-10-19 20520]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys [2013-10-19 62776]
R2 eLock2FSCTLDriver;eLock2FSCTLDriver; C:\WINDOWS\system32\DRIVERS\eLock2FSCTLDriver.sys [2013-10-19 26264]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 b57xdbd;@oem38.inf,%bcmxd_16bf_svcd%;Broadcom xD Picture Bus Driver Service; C:\WINDOWS\System32\drivers\b57xdbd.sys [2012-08-13 72280]
R3 b57xdmp;@oem38.inf,%BXD_SVCDESC%;Broadcom xD Picture vstorp client drv; C:\WINDOWS\System32\drivers\b57xdmp.sys [2012-08-13 21080]
R3 bScsiMSa;bScsiMSa; C:\WINDOWS\System32\drivers\bScsiMSa.sys [2012-06-19 55384]
R3 bScsiSDa;bScsiSDa; C:\WINDOWS\System32\drivers\bScsiSDa.sys [2012-08-14 70744]
R3 BTATH_HCRP;@oem13.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-01-28 179432]
R3 BTATH_RCP;@oem34.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-01-28 136424]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-04-28 599240]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-11-21 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-11-21 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-11-21 81920]
R3 ETD;@oem3.inf,%PS2.DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2012-11-20 331152]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-10-01 3828152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-06-12 4060560]
R3 IntcDAud;@oem27.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem43.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-08-01 27032]
R3 k57nd60a;@netk57a.inf,%SvcDispName%;Broadcom NetLink Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\system32\DRIVERS\k57nd60a.sys [2013-06-18 425984]
R3 MEIx64;@oem39.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 Ps2Kb2Hid;@oem40.inf,%Ps2Kb2Hid.SVCDESC%;PS/2 Keyboard to HID Driver; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [2013-10-19 26736]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Stuurprogramma voor seriële digitale fotocamera; C:\WINDOWS\system32\DRIVERS\serscan.sys [2014-11-21 11776]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB-videoapparaat (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-11-21 212736]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2016-01-07 21632]
S0 GDBehave;GDBehave; C:\WINDOWS\system32\drivers\GDBehave.sys []
S1 GDMnIcpt;GDMnIcpt; \??\C:\Windows\system32\drivers\MiniIcpt.sys []
S1 HookCentre;HookCentre; \??\C:\Windows\system32\drivers\HookCentre.sys []
S3 AthBTPort;@oem9.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-01-28 89168]
S3 BTATH_LWFLT;@oem24.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-01-28 77464]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 dg_ssudbus;@oem49.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2015-12-08 122160]
S3 GDPkIcpt;GDPkIcpt; \??\C:\Windows\system32\drivers\PktIcpt.sys []
S3 hitmanpro37;HitmanPro 3.7 Support Driver; \??\C:\Windows\system32\drivers\hitmanpro37.sys [2014-09-25 32512]
S3 intaud_WaveExtensible;@oem42.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-08-01 38296]
S3 ssudmdm;@oem50.inf,%ssud.Service.Name%;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2015-12-08 214832]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 APNMCP;Ask-updateservice; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2016-04-21 198216]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [2013-01-28 227456]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [2016-04-06 3993088]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-04-14 1074448]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [2016-04-06 593880]
R2 BrcmCardReader;Broadcom Card Reader Service; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [2012-08-21 176640]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-01-08 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-01-08 1773696]
R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2016-03-08 2829552]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2012-12-10 350544]
R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\WINDOWS\syswow64\svchost.exe [2014-11-21 33088]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2014-11-21 38792]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-10-01 319376]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2010-05-21 110736]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 NAUpdate;Nero Update; c:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-14 769432]
R2 ogmservice;Online Games Manager; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [2014-03-27 581568]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-11 193824]
R2 RfButtonDriverService;Dritek RF Button Command Service; C:\Windows\RfBtnSvc64.exe [2013-10-19 96880]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 364416]
R3 eLockServ;EgisTec eLock Service; C:\Program Files\Common Files\EgisTec CommonModule\eLock\eLockServ.exe [2013-04-23 24552]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\syswow64\svchost.exe [2014-11-21 33088]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-13 144200]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2014-11-21 38792]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2014-11-21 38792]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S2 SPAMfighter Update Service;SPAMfighter Update Service; C:\Program Files (x86)\Fighters\SPAMfighter\sfus.exe []
S2 Suite Service;Suite Service; C:\Program Files (x86)\Fighters\FighterSuiteService.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-08 269504]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-04-06 638456]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-10-01 281488]
S3 DeviceFastLaneService;Device Fast-lane Service; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [2012-11-16 469648]
S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe [2013-04-24 222184]
S3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2013-03-16 662088]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-13 144200]
S3 ose;Office  Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-02-24 150600]
S4 AVKWCtl;G Data Bestandssysteembewaker; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlx64.exe []

-----------------EOF-----------------