Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-11-2016
Ran by Elke (administrator) on ELKE-PC (11-11-2016 16:16:55)
Running from C:\Users\Elke\Downloads
Loaded Profiles: Elke (Available Profiles: Elke)
Platform: Microsoft Windows 7 Ultimate  (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\Program Files\Lenovo\Lenovo Mouse Suite\PelService.exe
(Sony Corporation) C:\Program Files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Primax Electronics Ltd.) C:\Program Files\Lenovo\Lenovo Mouse Suite\ICO.exe
(Sony Corporation) C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Windows\vsnpstd3.exe
(Sonix) C:\Windows\vsnp2uvc.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDms.exe
() C:\Program Files\Lenovo\Lenovo Mouse Suite\FSRremoS.EXE
(Primax Electronics Ltd.) C:\Program Files\Lenovo\Lenovo Mouse Suite\PELMICED.EXE
() C:\Program Files\Lenovo\Lenovo Mouse Suite\PelElvDm.exe
() C:\Program Files\Lenovo\System Update\SUService.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
(BitTorrent Inc.) C:\Users\Elke\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Elke\AppData\Roaming\uTorrent\updates\3.4.9_42606\utorrentie.exe
(BitTorrent Inc.) C:\Users\Elke\AppData\Roaming\uTorrent\updates\3.4.9_42606\utorrentie.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Akamai Technologies, Inc.) C:\Users\Elke\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Elke\AppData\Local\Akamai\netsession_win.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Daemon for Mouse Suite] => C:\Program Files\Lenovo\Lenovo Mouse Suite\ICO.EXE [69632 2012-07-10] (Primax Electronics Ltd.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [PMBVolumeWatcher] => C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2728472 2014-12-15] (Sony Corporation)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [snpstd3] => C:\Windows\vsnpstd3.exe [827392 2006-09-19] ()
HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [662016 2015-12-10] (Sonix)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Elke\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [4910912 2011-08-02] (DT Soft Ltd)
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [1407912 2016-10-25] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\Run: [uTorrent] => C:\Users\Elke\AppData\Roaming\uTorrent\uTorrent.exe [1977536 2016-10-07] (BitTorrent Inc.)
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\MountPoints2: {1ea7f34a-4f98-11e4-b0c7-001e372cd508} - F:\autosam.exe
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\MountPoints2: {1ea7f356-4f98-11e4-b0c7-001e372cd508} - G:\autosam.exe
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\MountPoints2: {79a1ecc8-9b65-11e3-8927-001e372cd508} - G:\Setup.exe
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\...\MountPoints2: {f0317dcc-3eed-11e4-abbc-001e372cd508} - "G:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [1407912 2016-10-25] (Garmin Ltd. or its subsidiaries)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-10-12] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-10-12] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-10-12] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 195.130.130.5 195.130.131.5
Tcpip\..\Interfaces\{98307E55-9F52-4293-ABA7-2E3384B40885}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{EFDE8BA5-9100-4DDF-B95B-375AB8A7262C}: [DhcpNameServer] 195.130.130.5 195.130.131.5

Internet Explorer:
==================
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.ecosia.org/
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-2414527585-3944006083-3816331441-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2414527585-3944006083-3816331441-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-11-06] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-06] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2414527585-3944006083-3816331441-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Elke\AppData\Roaming\Mozilla\Firefox\Profiles\prwxdqng.default [2016-11-11]
FF Homepage: Mozilla\Firefox\Profiles\prwxdqng.default -> www.google.com
FF Extension: (Belgium eID) - C:\Users\Elke\AppData\Roaming\Mozilla\Firefox\Profiles\prwxdqng.default\Extensions\belgiumeid@eid.belgium.be.xpi [2016-06-22]
FF Extension: (Adblock Plus) - C:\Users\Elke\AppData\Roaming\Mozilla\Firefox\Profiles\prwxdqng.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-10-29]
FF Extension: (YouTube Flash Video Player) - C:\Users\Elke\AppData\Roaming\Mozilla\Firefox\Profiles\prwxdqng.default\Extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi [2016-11-06]
FF Extension: (Belgium eID) - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2016-10-21]
FF HKLM\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-09] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll [2014-03-11] (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google)
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-06] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Elke\AppData\Local\Google\Chrome\User Data\Default [2016-11-11]
CHR Extension: (Google Docs) - C:\Users\Elke\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-01]
CHR Extension: (Google Drive) - C:\Users\Elke\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-01]
CHR Extension: (YouTube) - C:\Users\Elke\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-01]
CHR Extension: (Google Search) - C:\Users\Elke\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-01]
CHR Extension: (Google Docs Offline) - C:\Users\Elke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-28]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Elke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-28]
CHR Extension: (Gmail) - C:\Users\Elke\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-01]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Elke\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-07-21]
CHR HKU\S-1-5-21-2414527585-3944006083-3816331441-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1064312 2014-02-22] (Flexera Software LLC)
S3 Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [985616 2016-10-25] (Garmin Ltd. or its subsidiaries)
R2 PelService; C:\Program Files\Lenovo\Lenovo Mouse Suite\PelService.exe [184320 2010-04-22] () [File not signed]
R2 PMBDeviceInfoProvider; C:\Program Files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [487960 2014-12-15] (Sony Corporation)
R3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [28544 2016-09-10] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 cmnxusbser; C:\Windows\System32\DRIVERS\cmnxusbser.sys [130296 2015-11-24] (Wireless Data Device)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [232512 2014-10-10] (DT Soft Ltd)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2015-12-10] (REALiX(tm))
R3 pelmouse; C:\Windows\System32\DRIVERS\pelmouse.sys [19456 2012-11-28] (TPMX Electronics Ltd.)
R3 pelusblf; C:\Windows\System32\DRIVERS\pelusblf.sys [26624 2013-03-19] (TPMX Electronics Ltd.)
S3 RSUSBCCID; C:\Windows\System32\DRIVERS\RtsUCcid.sys [44032 2014-08-21] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [25768 2015-12-10] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3566336 2015-12-10] ()
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10252544 2007-03-27] (Sonix Co. Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [443448 2015-02-18] () [File not signed]
R3 TASCAM_US122144; C:\Windows\System32\Drivers\tascusb2.sys [341848 2011-04-28] (TASCAM)
R3 TASCAM_US144_MK2_WDM; C:\Windows\System32\drivers\tscusb2a.sys [43352 2011-04-28] (TASCAM)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2009-07-14] (Microsoft Corporation)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [128704 2016-08-16] (MBB)
S3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [203584 2013-11-07] (Jungo Connectivity) [File not signed]
U3 axdweavr; C:\Windows\system32\Drivers\axdweavr.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
S3 cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [X]
S3 cpuz138; \??\C:\Users\Elke\AppData\Local\Temp\cpuz138\cpuz138_x32.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-11 16:16 - 2016-11-11 16:17 - 00015673 _____ C:\Users\Elke\Downloads\FRST.txt
2016-11-11 16:16 - 2016-11-11 16:16 - 00000000 ____D C:\FRST
2016-11-11 16:15 - 2016-11-11 16:15 - 01759744 _____ (Farbar) C:\Users\Elke\Downloads\FRST.exe
2016-11-11 13:31 - 2016-11-11 13:31 - 00000000 ____D C:\Users\Elke\Downloads\Avatar The Last Airbender 2010 DVDRip [A Release-Lounge H264]
2016-11-11 13:27 - 2016-11-11 13:28 - 00000000 ____D C:\Users\Elke\Downloads\Avatar Extended Edition (2009) BRRip 720p x264 NL subs DutchReleaseTeam
2016-11-11 13:26 - 2016-11-11 13:30 - 00000000 ____D C:\Users\Elke\Downloads\Avatar De Legende van Aang
2016-11-11 08:16 - 2016-11-11 08:16 - 00000000 ____D C:\Users\Elke\AppData\LocalLow\uTorrent
2016-11-11 07:50 - 2016-11-11 07:50 - 00007607 _____ C:\Users\Elke\AppData\Local\Resmon.ResmonCfg
2016-11-06 21:17 - 2016-11-06 21:17 - 00000000 ____D C:\Program Files\Common Files\Java
2016-11-05 06:46 - 2016-11-05 06:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2016-10-25 05:06 - 2016-10-25 05:06 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2016-10-21 08:44 - 2016-10-22 06:04 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-10-18 16:40 - 2016-10-18 16:40 - 00002062 _____ C:\Users\Public\Desktop\Google Earth.lnk
2016-10-18 16:40 - 2016-10-18 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2016-10-14 19:50 - 2016-10-14 19:50 - 00000218 _____ C:\Users\Elke\AppData\Local\recently-used.xbel

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2099-12-06 14:54 - 2015-06-29 08:38 - 00019749 _____ C:\Windows\emmeNL.wri
2016-11-11 16:16 - 2016-04-22 15:50 - 00000000 ____D C:\Users\Elke\AppData\Roaming\uTorrent
2016-11-11 15:50 - 2015-10-26 17:54 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-11 15:38 - 2013-09-13 10:01 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-11 15:18 - 2013-11-29 12:29 - 00000000 ____D C:\Users\Elke\AppData\Local\Akamai
2016-11-11 15:11 - 2009-07-14 05:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-11 15:11 - 2009-07-14 05:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-11 13:45 - 2013-08-31 05:56 - 00000000 ____D C:\Users\Elke\AppData\Roaming\vlc
2016-11-11 08:16 - 2013-09-06 07:36 - 00000000 ____D C:\Users\Elke\AppData\LocalLow\Temp
2016-11-11 07:57 - 2015-01-26 20:58 - 00000000 ___RD C:\Users\Elke\Desktop\ELKE
2016-11-11 07:11 - 2013-09-13 10:01 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-11 07:11 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-11 07:07 - 2015-04-16 16:00 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2016-11-11 07:06 - 2009-07-14 03:04 - 00000219 _____ C:\Windows\system.ini
2016-11-11 07:05 - 2012-12-27 14:02 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-11-11 07:03 - 2015-01-26 21:23 - 00000000 ___RD C:\Users\Elke\Desktop\MAXIM
2016-11-11 07:03 - 2014-10-10 13:59 - 00000000 ____D C:\Users\Elke\AppData\Roaming\DAEMON Tools Lite
2016-11-11 06:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-11-09 13:40 - 2014-10-13 13:43 - 00000000 ____D C:\Users\Elke\Documents\EVA
2016-11-09 09:50 - 2015-10-23 08:54 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-11-09 09:50 - 2015-10-23 08:54 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-11-09 09:50 - 2012-12-27 13:56 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-07 15:19 - 2013-08-31 05:57 - 00000000 ____D C:\Users\Elke\AppData\Roaming\dvdcss
2016-11-06 21:21 - 2015-07-20 10:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-11-06 21:21 - 2015-07-20 10:52 - 00000000 ____D C:\Program Files\Java
2016-11-06 21:21 - 2015-07-17 09:03 - 00000000 ____D C:\ProgramData\Oracle
2016-11-06 21:15 - 2015-07-20 10:53 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2016-11-05 16:59 - 2012-12-27 13:48 - 00788036 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-05 06:46 - 2016-09-13 04:59 - 00001820 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2016-11-05 06:46 - 2016-04-27 06:30 - 00000000 ____D C:\ProgramData\Package Cache
2016-11-05 06:46 - 2014-07-29 18:50 - 00000000 ____D C:\Program Files\Garmin
2016-11-03 11:31 - 2015-12-08 17:37 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-11-02 22:39 - 2014-07-21 19:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-10-26 04:39 - 2012-12-27 14:00 - 00000000 ____D C:\ProgramData\Lenovo
2016-10-25 08:31 - 2014-09-21 11:13 - 00000000 ___RD C:\Program Files\Skype
2016-10-25 05:40 - 2015-03-18 22:14 - 00002101 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-25 05:40 - 2015-03-18 22:14 - 00002089 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-10-25 05:06 - 2012-12-27 14:00 - 00000000 ____D C:\Program Files\Lenovo
2016-10-24 11:18 - 2014-04-08 20:11 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-10-22 06:04 - 2013-08-31 08:41 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-10-21 23:43 - 2014-11-05 10:11 - 00000000 ____D C:\Users\Elke\Documents\Solliciteren
2016-10-14 19:44 - 2016-04-22 15:48 - 00000000 ____D C:\Users\Elke\AppData\Roaming\deluge

==================== Files in the root of some directories =======

2014-01-16 18:10 - 2015-03-26 17:57 - 0000132 _____ () C:\Users\Elke\AppData\Roaming\Adobe BMP Format CS6 Prefs
2014-02-13 11:16 - 2014-02-13 11:16 - 0000132 _____ () C:\Users\Elke\AppData\Roaming\Adobe GIF Format CS6 Prefs
2014-02-12 22:23 - 2014-02-12 22:23 - 0000132 _____ () C:\Users\Elke\AppData\Roaming\Adobe PNG Format CS6 Prefs
2015-10-14 16:09 - 2015-10-14 16:09 - 3531374 _____ () C:\Users\Elke\AppData\Local\curl.zip
2016-10-14 19:50 - 2016-10-14 19:50 - 0000218 _____ () C:\Users\Elke\AppData\Local\recently-used.xbel
2016-11-11 07:50 - 2016-11-11 07:50 - 0007607 _____ () C:\Users\Elke\AppData\Local\Resmon.ResmonCfg
2013-12-17 12:55 - 2013-12-17 12:55 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-07-09 10:21 - 2015-07-09 10:21 - 0010295 _____ () C:\ProgramData\regid.2011-06.com.youtubebyclick_3C521B99-9ACE-47EA-AC9F-26075467D03B.swidtag

Some files in TEMP:
====================
C:\Users\Elke\AppData\Local\Temp\HitmanPro.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-10-24 17:10

==================== End of FRST.txt ============================