Logfile of random's system information tool 1.10 (written by random/random) Run by Freddy ONGENA at 2017-02-09 19:27:44 Microsoft Windows 10 Pro System drive C: has 234 GB (49%) free of 476 GB Total RAM: 16327 MB (86% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:27:53, on 9/02/2017 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.14393.0000) Boot mode: Normal Running processes: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe C:\Program Files (x86)\WinZip\WZQKPICK.EXE C:\Program Files (x86)\Dropbox\Client\Dropbox.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe C:\Program Files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe C:\Program Files\trend micro\Freddy ONGENA.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.nl R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = www.google.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131286492790532699&GUID=BC37A3CD-C5C8-4310-A43F-71089640BB5B R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll O2 - BHO: iSkysoft iMedia Converter Deluxe 5.1.0 - {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} - C:\ProgramData\iSkysoft\VIDEOC~1\WSBROW~1.DLL O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\MICROS~1\Office16\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true O4 - HKLM\..\Run: [ACSW18EN] "C:\Program Files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe" O4 - HKLM\..\Run: [iSkysoft Helper Compact.exe] C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe O4 - HKLM\..\Run: [DelaypluginInstall] C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [IncrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [ACDSeeCommander18] C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe" O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" (User 'Default user') O4 - .DEFAULT User Startup: FIRSTLOGIN.EXE (User 'Default user') O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files (x86)\WinZip\WZQKPICK.EXE O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\Program Files\MICROS~1\Office16\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\Program Files\MICROS~1\Office16\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll O9 - Extra button: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll O9 - Extra 'Tools' menuitem: @%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-430 - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: http://help.eset.com (HKLM) O15 - ESC Trusted Zone: http://help.eset.com (HKLM) O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: WSISVCUchrome - {78A543EB-3A61-4ED3 - (no file) O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: BitTorrent - Unknown owner - C:\Program Files\BitTorrent\BitTorrent.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: Dropbox-update-service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe O23 - Service: Dropbox-update-service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShow Producer\ScsiAccess.exe O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing) O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing) O23 - Service: Service KMSELDI - @ByELDI - C:\Program Files\KMSpico\Service_KMS.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 15283 bytes ======Listing Processes====== winlogon.exe C:\Windows\system32\lsass.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS "dwm.exe" C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k LocalService C:\Windows\System32\svchost.exe -k NetworkService "C:\Windows\system32\nvvsvc.exe" "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted "C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe" C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\spoolsv.exe C:\Windows\System32\svchost.exe -k utcsvc "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" C:\Windows\system32\DbxSvc.exe "C:\Program Files (x86)\Bonjour\mDNSResponder.exe" "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe" "C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe" "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe" "C:\Program Files (x86)\Photodex\ProShow Producer\ScsiAccess.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\KMSpico\Service_KMS.exe" C:\Windows\system32\svchost.exe -k appmodel "C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe" dashost.exe {0602cab0-beaf-4ba4-8383d29e78e5aab3} sihost.exe C:\Windows\system32\SearchIndexer.exe /Embedding C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\Explorer.EXE "C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe" C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\System32\RuntimeBroker.exe -Embedding "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E} "C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.4.86.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" C:\Windows\system32\svchost.exe -k UnistackSvcGroup "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /c "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1" "C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming KHALMNPR.EXE /API "C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe" /c "C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe" -Embedding "C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe" "C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe" "C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" "C:\Program Files (x86)\WinZip\WZQKPICK.EXE" LBTWiz -silent "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup C:\Windows\System32\InstallAgent.exe -Embedding C:\Windows\System32\InstallAgentUserBroker.exe -Embedding "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe" "-launchedbyvulcan" C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding "C:\Program Files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe" "C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe" "fontdrvhost.exe" "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe" --onOSstartup=true --showwindow=false --waitForRegistration=true "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe" --type=renderer --disable-3d-apis --disable-pinch --no-sandbox --enable-deferred-image-decoding --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\locales" --log-file="C:\Users\FREDDY~1\AppData\Local\Temp\CreativeCloud\ACC\CEF.log" --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/3.9.1.335" --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-gpu-compositing --channel="10896.0.610683238\1309939361" /prefetch:673131151 "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe" "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\main.js" \??\C:\Windows\system32\conhost.exe 0x4 "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\server.js" \??\C:\Windows\system32\conhost.exe 0x4 C:\Windows\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85} C:\Windows\system32\AUDIODG.EXE 0x450 "C:\Users\Freddy ONGENA\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe -check pepperplugin C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\Freddy ONGENA\AppData\Roaming\Mozilla\Firefox\Profiles\b5e2llq8.default prefs.js - "browser.search.useDBForOrder" - true prefs.js - "browser.startup.homepage" - "https://www.google.be" prefs.js - "keyword.URL" - "http://www-searching.com/search.aspx?site=shdefault1&prd=smw&pid=s&shr=d&q={searchTerms}&s=H1Bzamobl20564BU, 7d5b76fa-788d-44ec-b73f-bad4ed03d3d5, " [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 24.0.0.194 Plugin "Path"=C:\Windows\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX] "Description"=Canon Easy-PhotoPrint EX "Path"=C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@garmin.com/GpsControl] "Description"=Garmin GPS Control for Firefox "Path"=C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.121.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.121.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0] "Description"=Skype for Business Plug-in for Firefox "Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\Program Files (x86)\MICROS~1\Office16\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision] "Description"=NVIDIA stereo images plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming] "Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers "Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@photodex.com/PhotodexPresenter] "Description"=Photodex Presenter Plugin "Path"=C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeExManDetect] "Description"= "Path"=C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 24.0.0.194 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@garmin.com/GpsControl] "Description"=Garmin GPS Control for Firefox "Path"=C:\Program Files\Garmin GPS Plugin\npGarmin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\Program Files\MICROS~1\Office16\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeExManDetect] "Description"= "Path"=C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll C:\Program Files (x86)\Mozilla Firefox\plugins\ npMeetingJoinPluginOC.dll C:\Users\Freddy ONGENA\AppData\Roaming\Mozilla\Firefox\Profiles\b5e2llq8.default\extensions\ {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} C:\Users\Freddy ONGENA\AppData\Roaming\Mozilla\Firefox\Profiles\b5e2llq8.default\searchplugins\ 0wcyz852.xml ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-12-13 236744] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-23 171704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}] Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26 435320] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft OneDrive for Business Browser Helper - C:\Program Files\MICROS~1\Office16\GROOVEEX.DLL [2016-11-16 2179376] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}] Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-23 171704] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31 161448] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-22 473152] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] Adobe Acrobat Create PDF Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-23 141496] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE}] iSkysoft iMedia Converter Deluxe 5.1.0 - C:\ProgramData\iSkysoft\VIDEOC~1\WSBROW~1.DLL [2016-11-22 634016] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}] Logitech SetPoint - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26 366200] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\MICROS~1\Office16\GROOVEEX.DLL [2016-11-16 1524528] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-22 186944] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}] Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-23 141496] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-23 171704] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-23 141496] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-06-29 1794888] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128] "EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2015-08-26 3113592] "Bluetooth Connection Assistant"=LBTWIZ.EXE -silent [] "Malwarebytes TrayApp"=C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2016-11-29 2786768] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "IncrediMail"=C:\Program Files (x86)\IncrediMail\bin\IncMail.exe [2017-01-09 444424] "AdobeBridge"= [] "ACDSeeCommander18"=C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe [2014-12-17 1968136] "GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2017-01-16 1407912] "Adobe Acrobat Synchronizer"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [2016-12-23 886352] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] "AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2013-04-25 1075296] "Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2017-02-07 26220296] "Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2016-10-25 2383040] "ACSW18EN"=C:\Program Files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe [2014-09-17 1470224] "iSkysoft Helper Compact.exe"=C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2016-10-08 2138272] "DelaypluginInstall"=C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe [2016-11-22 1962944] "Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [2016-12-23 1870928] ""= [] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-12-12 587288] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup WinZip Quick Pick.lnk - C:\Program Files (x86)\WinZip\WZQKPICK.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn] c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2015-07-02 65992] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{8016939C-D3F3-11E6-A8C2-64006A5CFC35}"=C:\Users\Freddy ONGENA\AppData\Roaming\Jiwotionhey\Piqsyreatisy.dll [] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorUser"=0 "DSCAutomationHostEnabled"=2 "PromptOnSecureDesktop"=0 "FilterAdministratorToken"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoResolveSearch"=1 "NoResolveTrack"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "vidc.i420"=lvcod64.dll "vidc.iyuv"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvu9"=tsbyuv.dll "vidc.yvyu"=msyuv.dll "wavemapper"=msacm32.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "MSVideo"=vfwwdm32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2017-02-09 19:27:44 ----D---- C:\rsit 2017-02-09 19:27:44 ----D---- C:\Program Files\trend micro 2017-02-09 14:39:44 ----A---- C:\Windows\system32\drivers\MBAMChameleon.sys 2017-02-09 14:39:40 ----A---- C:\Windows\system32\drivers\farflt.sys 2017-02-09 14:39:36 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys 2017-02-09 14:39:31 ----A---- C:\Windows\system32\drivers\mbae64.sys 2017-02-09 14:39:26 ----D---- C:\Program Files\Malwarebytes 2017-02-09 14:39:06 ----A---- C:\Windows\system32\drivers\mwac.sys 2017-02-09 14:39:06 ----A---- C:\Windows\system32\drivers\mbam.sys 2017-02-08 12:32:38 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Pegtop 2017-02-07 05:38:06 ----A---- C:\Windows\system32\drivers\dbx-stable.sys 2017-02-07 05:38:06 ----A---- C:\Windows\system32\drivers\dbx-dev.sys 2017-02-07 05:38:06 ----A---- C:\Windows\system32\drivers\dbx-canary.sys 2017-02-07 05:38:06 ----A---- C:\Windows\system32\DbxSvc.exe 2017-02-06 15:43:10 ----D---- C:\Garmin 2017-02-02 23:07:26 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Netscape 2017-02-02 23:07:11 ----D---- C:\Program Files (x86)\Photodex 2017-02-02 23:07:08 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Photodex 2017-02-02 21:51:19 ----D---- C:\ProgramData\Temp 2017-02-02 21:40:53 ----D---- C:\Program Files (x86)\Pixarra 2017-01-28 20:14:04 ----AD---- C:\Program Files (x86)\Garmin GPS Plugin 2017-01-28 20:14:03 ----AD---- C:\Program Files\Garmin GPS Plugin 2017-01-27 22:53:23 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 2017-01-27 12:16:39 ----HD---- C:\ProgramData\CanonIJEPPEX2 2017-01-27 12:16:39 ----HD---- C:\ProgramData\CanonEPP 2017-01-27 12:16:22 ----D---- C:\Program Files (x86)\Canon 2017-01-27 12:16:18 ----D---- C:\Program Files\Canon 2017-01-27 10:24:56 ----AD---- C:\Program Files (x86)\Mozilla Firefox 2017-01-25 23:28:49 ----AD---- C:\Program Files (x86)\Sketch Master 2017-01-25 19:11:56 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Trimble Connect for SketchUp 2017-01-25 19:08:23 ----AD---- C:\ProgramData\Reprise 2017-01-25 13:56:40 ----A---- C:\Windows\SYSWOW64\poqexec.exe 2017-01-25 13:56:40 ----A---- C:\Windows\system32\poqexec.exe 2017-01-23 21:29:02 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Tacx 2017-01-23 20:54:36 ----ASH---- C:\swapfile.sys 2017-01-23 20:54:36 ----ASH---- C:\pagefile.sys 2017-01-23 18:48:27 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2017-01-23 18:48:17 ----D---- C:\Windows\SYSWOW64\URTTEMP 2017-01-23 18:46:52 ----D---- C:\Windows\SYSWOW64\cvirte 2017-01-23 18:46:52 ----A---- C:\Windows\SYSWOW64\dataskt.dll 2017-01-23 18:46:52 ----A---- C:\Windows\SYSWOW64\cvirte.dll 2017-01-23 18:46:52 ----A---- C:\Windows\SYSWOW64\cvirt.dll 2017-01-23 18:46:52 ----A---- C:\Windows\SYSWOW64\cviauto.dll 2017-01-23 18:46:51 ----A---- C:\Windows\SYSWOW64\TacxUSB.dll 2017-01-23 18:46:48 ----AD---- C:\Program Files (x86)\TacxFortius 2017-01-21 20:13:33 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Skype 2017-01-21 20:13:31 ----RD---- C:\Program Files (x86)\Skype 2017-01-21 20:13:29 ----D---- C:\ProgramData\Skype 2017-01-19 16:01:11 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\ESET 2017-01-19 15:54:33 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\TTS4Download 2017-01-19 15:52:43 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\TTS4WebInstaller 2017-01-18 11:06:02 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2017-01-17 22:54:45 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Se7en Soft 2017-01-17 22:54:45 ----D---- C:\ProgramData\Se7en Soft 2017-01-17 22:46:58 ----A---- C:\Windows\SYSWOW64\wdapi1200.dll 2017-01-17 22:46:46 ----A---- C:\Windows\system32\drivers\windrvr1200.sys 2017-01-17 22:45:36 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll 2017-01-17 22:45:35 ----AD---- C:\Program Files (x86)\ffdshow 2017-01-17 22:45:14 ----A---- C:\Windows\SYSWOW64\wdapi1180.dll 2017-01-17 22:39:02 ----A---- C:\Windows\SYSWOW64\wdapi1150.dll 2017-01-17 22:18:03 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll 2017-01-17 22:18:03 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll 2017-01-17 22:18:03 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll 2017-01-17 22:18:03 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll 2017-01-17 22:18:03 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll 2017-01-17 22:18:03 ----A---- C:\Windows\system32\XAudio2_7.dll 2017-01-17 22:18:03 ----A---- C:\Windows\system32\XAPOFX1_5.dll 2017-01-17 22:18:03 ----A---- C:\Windows\system32\xactengine3_7.dll 2017-01-17 22:18:03 ----A---- C:\Windows\system32\d3dcsx_43.dll 2017-01-17 22:18:03 ----A---- C:\Windows\system32\D3DCompiler_43.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll 2017-01-17 22:18:02 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\XAudio2_6.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\XAudio2_5.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\XAPOFX1_4.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\xactengine3_6.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\xactengine3_5.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\D3DX9_43.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\d3dx11_43.dll 2017-01-17 22:18:02 ----A---- C:\Windows\system32\d3dx10_43.dll 2017-01-17 22:18:01 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\system32\D3DX9_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\system32\d3dx11_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\system32\d3dx10_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\system32\d3dcsx_42.dll 2017-01-17 22:18:01 ----A---- C:\Windows\system32\D3DCompiler_42.dll 2017-01-17 22:18:00 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll 2017-01-17 22:18:00 ----A---- C:\Windows\system32\XAPOFX1_3.dll 2017-01-17 22:17:59 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll 2017-01-17 22:17:59 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll 2017-01-17 22:17:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll 2017-01-17 22:17:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll 2017-01-17 22:17:59 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll 2017-01-17 22:17:59 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll 2017-01-17 22:17:59 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll 2017-01-17 22:17:59 ----A---- C:\Windows\system32\XAudio2_3.dll 2017-01-17 22:17:59 ----A---- C:\Windows\system32\XAudio2_2.dll 2017-01-17 22:17:59 ----A---- C:\Windows\system32\XAPOFX1_2.dll 2017-01-17 22:17:59 ----A---- C:\Windows\system32\XAPOFX1_1.dll 2017-01-17 22:17:59 ----A---- C:\Windows\system32\xactengine3_3.dll 2017-01-17 22:17:59 ----A---- C:\Windows\system32\xactengine3_2.dll 2017-01-17 22:17:59 ----A---- C:\Windows\system32\X3DAudio1_5.dll 2017-01-17 22:09:56 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\TTSUpdateDownload 2017-01-17 22:09:53 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\TTS4WebUpdater 2017-01-17 17:09:54 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Ashampoo 2017-01-17 17:09:00 ----D---- C:\ProgramData\Ashampoo 2017-01-17 11:31:28 ----D---- C:\ProgramData\Ant 2017-01-17 00:34:19 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\WinISO Computing 2017-01-17 00:34:07 ----A---- C:\Windows\system32\drivers\WinisoCDBus.sys 2017-01-17 00:34:06 ----D---- C:\Program Files (x86)\WinISO Computing 2017-01-16 21:03:22 ----D---- C:\ProgramData\regid.1995-09.com.example 2017-01-16 21:03:22 ----AD---- C:\Program Files (x86)\Newzbin 2017-01-16 21:03:03 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Newzbin Usenet Community 2017-01-16 20:26:23 ----A---- C:\Windows\SYSWOW64\wdapi1021.dll 2017-01-16 20:26:16 ----D---- C:\Program Files\Garmin 2017-01-16 20:26:02 ----D---- C:\Windows\SYSWOW64\Silabs 2017-01-16 20:19:26 ----D---- C:\ProgramData\Tacx 2017-01-16 20:19:25 ----A---- C:\Windows\system32\drivers\windrvr6.sys 2017-01-16 20:18:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2017-01-16 20:18:18 ----D---- C:\Program Files (x86)\Tacx 2017-01-16 20:17:27 ----D---- C:\Program Files (x86)\Microsoft XNA 2017-01-16 20:17:22 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll 2017-01-16 20:17:22 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll 2017-01-16 20:17:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll 2017-01-16 20:17:22 ----A---- C:\Windows\system32\D3DX9_41.dll 2017-01-16 20:17:22 ----A---- C:\Windows\system32\d3dx10_41.dll 2017-01-16 20:17:22 ----A---- C:\Windows\system32\D3DCompiler_41.dll 2017-01-16 20:17:21 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll 2017-01-16 20:17:21 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll 2017-01-16 20:17:21 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll 2017-01-16 20:17:21 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll 2017-01-16 20:17:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll 2017-01-16 20:17:21 ----A---- C:\Windows\system32\XAudio2_4.dll 2017-01-16 20:17:21 ----A---- C:\Windows\system32\xactengine3_4.dll 2017-01-16 20:17:21 ----A---- C:\Windows\system32\X3DAudio1_6.dll 2017-01-16 20:17:21 ----A---- C:\Windows\system32\d3dx10_40.dll 2017-01-16 20:17:21 ----A---- C:\Windows\system32\D3DCompiler_40.dll 2017-01-16 20:17:20 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll 2017-01-16 20:17:20 ----A---- C:\Windows\system32\D3DX9_40.dll 2017-01-16 20:17:18 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll 2017-01-16 20:17:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll 2017-01-16 20:17:18 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll 2017-01-16 20:17:18 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll 2017-01-16 20:17:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll 2017-01-16 20:17:18 ----A---- C:\Windows\system32\XAudio2_1.dll 2017-01-16 20:17:18 ----A---- C:\Windows\system32\XAPOFX1_0.dll 2017-01-16 20:17:18 ----A---- C:\Windows\system32\D3DX9_39.dll 2017-01-16 20:17:18 ----A---- C:\Windows\system32\d3dx10_39.dll 2017-01-16 20:17:18 ----A---- C:\Windows\system32\D3DCompiler_39.dll 2017-01-16 20:17:17 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll 2017-01-16 20:17:17 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll 2017-01-16 20:17:17 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll 2017-01-16 20:17:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll 2017-01-16 20:17:17 ----A---- C:\Windows\system32\xactengine3_1.dll 2017-01-16 20:17:17 ----A---- C:\Windows\system32\X3DAudio1_4.dll 2017-01-16 20:17:17 ----A---- C:\Windows\system32\d3dx10_38.dll 2017-01-16 20:17:17 ----A---- C:\Windows\system32\D3DCompiler_38.dll 2017-01-16 20:17:16 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll 2017-01-16 20:17:16 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll 2017-01-16 20:17:16 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll 2017-01-16 20:17:16 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll 2017-01-16 20:17:16 ----A---- C:\Windows\system32\XAudio2_0.dll 2017-01-16 20:17:16 ----A---- C:\Windows\system32\xactengine3_0.dll 2017-01-16 20:17:16 ----A---- C:\Windows\system32\X3DAudio1_3.dll 2017-01-16 20:17:16 ----A---- C:\Windows\system32\D3DX9_38.dll 2017-01-16 20:17:15 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll 2017-01-16 20:17:15 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll 2017-01-16 20:17:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll 2017-01-16 20:17:15 ----A---- C:\Windows\system32\D3DX9_37.dll 2017-01-16 20:17:15 ----A---- C:\Windows\system32\d3dx10_37.dll 2017-01-16 20:17:15 ----A---- C:\Windows\system32\D3DCompiler_37.dll 2017-01-16 20:17:14 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll 2017-01-16 20:17:14 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll 2017-01-16 20:17:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll 2017-01-16 20:17:14 ----A---- C:\Windows\system32\xactengine2_10.dll 2017-01-16 20:17:14 ----A---- C:\Windows\system32\d3dx10_36.dll 2017-01-16 20:17:14 ----A---- C:\Windows\system32\D3DCompiler_36.dll 2017-01-16 20:17:13 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll 2017-01-16 20:17:13 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll 2017-01-16 20:17:13 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll 2017-01-16 20:17:13 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll 2017-01-16 20:17:13 ----A---- C:\Windows\system32\xactengine2_9.dll 2017-01-16 20:17:13 ----A---- C:\Windows\system32\d3dx9_36.dll 2017-01-16 20:17:13 ----A---- C:\Windows\system32\d3dx10_35.dll 2017-01-16 20:17:13 ----A---- C:\Windows\system32\D3DCompiler_35.dll 2017-01-16 20:17:12 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll 2017-01-16 20:17:12 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll 2017-01-16 20:17:12 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll 2017-01-16 20:17:12 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll 2017-01-16 20:17:12 ----A---- C:\Windows\system32\xactengine2_8.dll 2017-01-16 20:17:12 ----A---- C:\Windows\system32\X3DAudio1_2.dll 2017-01-16 20:17:12 ----A---- C:\Windows\system32\d3dx9_35.dll 2017-01-16 20:17:12 ----A---- C:\Windows\system32\d3dx10_34.dll 2017-01-16 20:17:11 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll 2017-01-16 20:17:11 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll 2017-01-16 20:17:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll 2017-01-16 20:17:11 ----A---- C:\Windows\system32\xinput1_3.dll 2017-01-16 20:17:11 ----A---- C:\Windows\system32\d3dx9_34.dll 2017-01-16 20:17:11 ----A---- C:\Windows\system32\D3DCompiler_34.dll 2017-01-16 20:17:10 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll 2017-01-16 20:17:10 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll 2017-01-16 20:17:10 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll 2017-01-16 20:17:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll 2017-01-16 20:17:10 ----A---- C:\Windows\system32\xactengine2_7.dll 2017-01-16 20:17:10 ----A---- C:\Windows\system32\d3dx9_33.dll 2017-01-16 20:17:10 ----A---- C:\Windows\system32\d3dx10_33.dll 2017-01-16 20:17:10 ----A---- C:\Windows\system32\D3DCompiler_33.dll 2017-01-16 20:17:09 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll 2017-01-16 20:17:09 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll 2017-01-16 20:17:09 ----A---- C:\Windows\SYSWOW64\d3dx10.dll 2017-01-16 20:17:09 ----A---- C:\Windows\system32\xactengine2_6.dll 2017-01-16 20:17:09 ----A---- C:\Windows\system32\xactengine2_5.dll 2017-01-16 20:17:09 ----A---- C:\Windows\system32\d3dx10.dll 2017-01-16 20:17:08 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll 2017-01-16 20:17:08 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll 2017-01-16 20:17:08 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll 2017-01-16 20:17:08 ----A---- C:\Windows\system32\xactengine2_4.dll 2017-01-16 20:17:08 ----A---- C:\Windows\system32\x3daudio1_1.dll 2017-01-16 20:17:08 ----A---- C:\Windows\system32\d3dx9_32.dll 2017-01-16 20:17:07 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll 2017-01-16 20:17:07 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll 2017-01-16 20:17:07 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll 2017-01-16 20:17:07 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll 2017-01-16 20:17:07 ----A---- C:\Windows\system32\xinput1_2.dll 2017-01-16 20:17:07 ----A---- C:\Windows\system32\xactengine2_3.dll 2017-01-16 20:17:07 ----A---- C:\Windows\system32\xactengine2_2.dll 2017-01-16 20:17:07 ----A---- C:\Windows\system32\d3dx9_31.dll 2017-01-16 20:17:06 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll 2017-01-16 20:17:06 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll 2017-01-16 20:17:06 ----A---- C:\Windows\system32\xinput1_1.dll 2017-01-16 20:17:06 ----A---- C:\Windows\system32\xactengine2_1.dll 2017-01-16 20:17:04 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll 2017-01-16 20:17:04 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll 2017-01-16 20:17:04 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll 2017-01-16 20:17:04 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll 2017-01-16 20:17:04 ----A---- C:\Windows\system32\xactengine2_0.dll 2017-01-16 20:17:04 ----A---- C:\Windows\system32\x3daudio1_0.dll 2017-01-16 20:17:04 ----A---- C:\Windows\system32\d3dx9_30.dll 2017-01-16 20:17:04 ----A---- C:\Windows\system32\d3dx9_29.dll 2017-01-16 20:17:03 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll 2017-01-16 20:17:03 ----A---- C:\Windows\system32\d3dx9_28.dll 2017-01-16 20:17:02 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll 2017-01-16 20:17:02 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll 2017-01-16 20:17:02 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll 2017-01-16 20:17:02 ----A---- C:\Windows\system32\d3dx9_26.dll 2017-01-16 20:17:02 ----A---- C:\Windows\system32\d3dx9_25.dll 2017-01-16 20:17:02 ----A---- C:\Windows\system32\d3dx9_24.dll 2017-01-16 13:25:34 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\dvdcss 2017-01-14 21:01:55 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\AIMP3 2017-01-14 21:01:53 ----D---- C:\Program Files (x86)\AIMP3 2017-01-14 20:51:41 ----D---- C:\ProgramData\Logitech 2017-01-14 20:51:31 ----A---- C:\Windows\system32\drivers\LNonPnP.sys 2017-01-14 20:51:25 ----D---- C:\ProgramData\Logishrd 2017-01-14 20:51:22 ----D---- C:\Program Files\Logitech 2017-01-14 20:50:53 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Logitech 2017-01-14 20:50:53 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Logishrd 2017-01-14 14:32:11 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Apple Computer 2017-01-14 08:48:35 ----D---- C:\ProgramData\Apple Computer 2017-01-14 08:48:35 ----AD---- C:\Program Files (x86)\QuickTime 2017-01-13 23:54:57 ----D---- C:\ProgramData\AnyMP4 Studio 2017-01-13 23:54:57 ----D---- C:\Program Files (x86)\AnyMP4 Studio 2017-01-13 22:38:24 ----D---- C:\ProgramData\iSkysoft Video Converter Ultimate 2017-01-13 22:35:37 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A} 2017-01-13 22:35:34 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\iSkysoft iMedia Converter Deluxe 2017-01-13 22:34:53 ----A---- C:\Windows\SYSWOW64\ISCM64.dll 2017-01-13 22:34:53 ----A---- C:\Windows\SYSWOW64\ISCM32.dll 2017-01-13 22:34:45 ----D---- C:\ProgramData\iSkysoft iMedia Converter Deluxe 2017-01-13 22:34:42 ----D---- C:\ProgramData\iSkysoft 2017-01-13 22:34:42 ----D---- C:\Program Files (x86)\iSkysoft 2017-01-13 20:35:25 ----D---- C:\Program Files (x86)\TNod 2017-01-13 20:29:31 ----A---- C:\Windows\system32\Windows.UI.Xaml.Resources.dll 2017-01-13 20:29:30 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll 2017-01-13 20:29:29 ----A---- C:\Windows\SYSWOW64\Windows.UI.Logon.dll 2017-01-13 20:29:29 ----A---- C:\Windows\SYSWOW64\StoreAgent.dll 2017-01-13 20:29:29 ----A---- C:\Windows\SYSWOW64\InstallAgentUserBroker.exe 2017-01-13 20:29:29 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe 2017-01-13 20:29:29 ----A---- C:\Windows\system32\Windows.Media.dll 2017-01-13 20:29:29 ----A---- C:\Windows\system32\mfmp4srcsnk.dll 2017-01-13 20:29:29 ----A---- C:\Windows\system32\mfcore.dll 2017-01-13 20:29:28 ----A---- C:\Windows\SYSWOW64\Windows.Storage.ApplicationData.dll 2017-01-13 20:29:28 ----A---- C:\Windows\system32\rdpcore.dll 2017-01-13 20:29:28 ----A---- C:\Windows\system32\mfnetsrc.dll 2017-01-13 20:29:28 ----A---- C:\Windows\system32\mfnetcore.dll 2017-01-13 20:29:28 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll 2017-01-13 20:29:28 ----A---- C:\Windows\system32\mfasfsrcsnk.dll 2017-01-13 20:29:28 ----A---- C:\Windows\system32\D3DCompiler_47.dll 2017-01-13 20:29:28 ----A---- C:\Windows\system32\d2d1.dll 2017-01-13 20:29:28 ----A---- C:\Windows\system32\aeinv.dll 2017-01-13 20:29:27 ----A---- C:\Windows\SYSWOW64\Windows.UI.CredDialogController.dll 2017-01-13 20:29:27 ----A---- C:\Windows\SYSWOW64\Windows.UI.Cred.dll 2017-01-13 20:29:27 ----A---- C:\Windows\SYSWOW64\Windows.UI.BlockedShutdown.dll 2017-01-13 20:29:27 ----A---- C:\Windows\SYSWOW64\Windows.UI.BioFeedback.dll 2017-01-13 20:29:27 ----A---- C:\Windows\SYSWOW64\offlinesam.dll 2017-01-13 20:29:27 ----A---- C:\Windows\system32\wuuhext.dll 2017-01-13 20:29:27 ----A---- C:\Windows\system32\wuaueng.dll 2017-01-13 20:29:27 ----A---- C:\Windows\system32\winlogon.exe 2017-01-13 20:29:27 ----A---- C:\Windows\system32\sppobjs.dll 2017-01-13 20:29:27 ----A---- C:\Windows\system32\samsrv.dll 2017-01-13 20:29:27 ----A---- C:\Windows\system32\rdpencom.dll 2017-01-13 20:29:27 ----A---- C:\Windows\system32\mstscax.dll 2017-01-13 20:29:27 ----A---- C:\Windows\system32\MCRecvSrc.dll 2017-01-13 20:29:27 ----A---- C:\Windows\system32\D3D12.dll 2017-01-13 20:29:26 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll 2017-01-13 20:29:26 ----A---- C:\Windows\SYSWOW64\aclui.dll 2017-01-13 20:29:26 ----A---- C:\Windows\system32\shell32.dll 2017-01-13 20:29:26 ----A---- C:\Windows\system32\offlinesam.dll 2017-01-13 20:29:26 ----A---- C:\Windows\system32\lsasrv.dll 2017-01-13 20:29:25 ----A---- C:\Windows\SYSWOW64\shell32.dll 2017-01-13 20:29:25 ----A---- C:\Windows\system32\wuapi.dll 2017-01-13 20:29:25 ----A---- C:\Windows\system32\drivers\cng.sys 2017-01-13 20:29:24 ----A---- C:\Windows\SYSWOW64\WinSCard.dll 2017-01-13 20:29:24 ----A---- C:\Windows\SYSWOW64\updatepolicy.dll 2017-01-13 20:29:24 ----A---- C:\Windows\SYSWOW64\MSVP9DEC.dll 2017-01-13 20:29:24 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2017-01-13 20:29:24 ----A---- C:\Windows\SYSWOW64\cryptui.dll 2017-01-13 20:29:24 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\wow64.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\WinSCard.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\updatepolicy.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\ScDeviceEnum.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\msv1_0.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\kerberos.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\ImplatSetup.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\cryptui.dll 2017-01-13 20:29:24 ----A---- C:\Windows\system32\certprop.dll 2017-01-13 20:29:23 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Resources.dll 2017-01-13 20:29:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2017-01-13 20:29:23 ----A---- C:\Windows\SYSWOW64\indexeddbserver.dll 2017-01-13 20:29:23 ----A---- C:\Windows\SYSWOW64\Chakradiag.dll 2017-01-13 20:29:23 ----A---- C:\Windows\SYSWOW64\AudioSes.dll 2017-01-13 20:29:23 ----A---- C:\Windows\system32\aadtb.dll 2017-01-13 20:29:22 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll 2017-01-13 20:29:21 ----A---- C:\Windows\SYSWOW64\Chakra.dll 2017-01-13 20:29:21 ----A---- C:\Windows\SYSWOW64\AzureSettingSyncProvider.dll 2017-01-13 20:29:21 ----A---- C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll 2017-01-13 20:29:20 ----A---- C:\Windows\SYSWOW64\edgehtml.dll 2017-01-13 20:29:20 ----A---- C:\Windows\system32\Windows.UI.Shell.dll 2017-01-13 20:29:20 ----A---- C:\Windows\system32\AzureSettingSyncProvider.dll 2017-01-13 20:29:19 ----A---- C:\Windows\SYSWOW64\twinui.dll 2017-01-13 20:29:19 ----A---- C:\Windows\SYSWOW64\mspaint.exe 2017-01-13 20:29:19 ----A---- C:\Windows\system32\win32kbase.sys 2017-01-13 20:29:19 ----A---- C:\Windows\system32\Chakra.dll 2017-01-13 20:29:18 ----A---- C:\Windows\SYSWOW64\winmde.dll 2017-01-13 20:29:18 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll 2017-01-13 20:29:18 ----A---- C:\Windows\system32\mspaint.exe 2017-01-13 20:29:18 ----A---- C:\Windows\system32\msmpeg2vdec.dll 2017-01-13 20:29:18 ----A---- C:\Windows\system32\mshtml.dll 2017-01-13 20:29:18 ----A---- C:\Windows\system32\indexeddbserver.dll 2017-01-13 20:29:17 ----A---- C:\Windows\system32\winmde.dll 2017-01-13 20:29:17 ----A---- C:\Windows\system32\Windows.Storage.ApplicationData.dll 2017-01-13 20:29:17 ----A---- C:\Windows\system32\twinui.dll 2017-01-13 20:29:16 ----A---- C:\Windows\system32\edgehtml.dll 2017-01-13 20:29:16 ----A---- C:\Windows\system32\aadcloudap.dll 2017-01-13 20:29:15 ----A---- C:\Windows\system32\AppVEntSubsystems64.dll 2017-01-13 20:29:14 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.LockScreen.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\usocore.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\updatehandlers.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\rdpcorets.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\LaunchWinApp.exe 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVScripting.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVReporting.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVPublishing.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVOrchestration.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVManifest.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVIntegration.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVEntVirtualization.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVEntSubsystemController.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVEntStreamingManager.dll 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVClient.exe 2017-01-13 20:29:14 ----A---- C:\Windows\system32\AppVCatalog.dll 2017-01-13 20:29:13 ----A---- C:\Windows\SYSWOW64\SyncSettings.dll 2017-01-13 20:29:13 ----A---- C:\Windows\SYSWOW64\remoteaudioendpoint.dll 2017-01-13 20:29:13 ----A---- C:\Windows\SYSWOW64\rdpencom.dll 2017-01-13 20:29:13 ----A---- C:\Windows\SYSWOW64\rdpcore.dll 2017-01-13 20:29:13 ----A---- C:\Windows\SYSWOW64\MSVPXENC.dll 2017-01-13 20:29:13 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2017-01-13 20:29:13 ----A---- C:\Windows\SYSWOW64\LaunchWinApp.exe 2017-01-13 20:29:13 ----A---- C:\Windows\SYSWOW64\CloudBackupSettings.dll 2017-01-13 20:29:13 ----A---- C:\Windows\system32\TransportDSA.dll 2017-01-13 20:29:13 ----A---- C:\Windows\system32\rdpudd.dll 2017-01-13 20:29:13 ----A---- C:\Windows\system32\OneBackupHandler.dll 2017-01-13 20:29:13 ----A---- C:\Windows\system32\MSVP9DEC.dll 2017-01-13 20:29:13 ----A---- C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll 2017-01-13 20:29:13 ----A---- C:\Windows\system32\AppVShNotify.exe 2017-01-13 20:29:13 ----A---- C:\Windows\system32\AppVPolicy.dll 2017-01-13 20:29:13 ----A---- C:\Windows\system32\AppVDllSurrogate.exe 2017-01-13 20:29:12 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll 2017-01-13 20:29:12 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll 2017-01-13 20:29:12 ----A---- C:\Windows\SYSWOW64\mfcore.dll 2017-01-13 20:29:12 ----A---- C:\Windows\SYSWOW64\LogonController.dll 2017-01-13 20:29:12 ----A---- C:\Windows\system32\Windows.UI.Logon.dll 2017-01-13 20:29:12 ----A---- C:\Windows\system32\win32kfull.sys 2017-01-13 20:29:12 ----A---- C:\Windows\system32\win32k.sys 2017-01-13 20:29:12 ----A---- C:\Windows\system32\SRHInproc.dll 2017-01-13 20:29:12 ----A---- C:\Windows\system32\SRH.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\StoreAgent.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\SettingSyncHost.exe 2017-01-13 20:29:11 ----A---- C:\Windows\system32\SettingSyncCore.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\InstallAgentUserBroker.exe 2017-01-13 20:29:11 ----A---- C:\Windows\system32\InstallAgent.exe 2017-01-13 20:29:11 ----A---- C:\Windows\system32\dosvc.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\domgmt.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\ClipUp.exe 2017-01-13 20:29:11 ----A---- C:\Windows\system32\audiosrv.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\AudioSes.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\AUDIOKSE.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\AudioEng.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll 2017-01-13 20:29:11 ----A---- C:\Windows\system32\aclui.dll 2017-01-13 20:29:10 ----A---- C:\Windows\SYSWOW64\wuapi.dll 2017-01-13 20:29:10 ----A---- C:\Windows\SYSWOW64\mfnetsrc.dll 2017-01-13 20:29:10 ----A---- C:\Windows\SYSWOW64\mfnetcore.dll 2017-01-13 20:29:10 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll 2017-01-13 20:29:10 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll 2017-01-13 20:29:10 ----A---- C:\Windows\SYSWOW64\MCRecvSrc.dll 2017-01-13 20:29:10 ----A---- C:\Windows\system32\Windows.UI.CredDialogController.dll 2017-01-13 20:29:10 ----A---- C:\Windows\system32\wbiosrvc.dll 2017-01-13 20:29:10 ----A---- C:\Windows\system32\SyncSettings.dll 2017-01-13 20:29:10 ----A---- C:\Windows\system32\remoteaudioendpoint.dll 2017-01-13 20:29:10 ----A---- C:\Windows\system32\ie4uinit.exe 2017-01-13 20:29:10 ----A---- C:\Windows\system32\drivers\vhdmp.sys 2017-01-13 20:29:10 ----A---- C:\Windows\system32\cloudAP.dll 2017-01-13 20:29:09 ----A---- C:\Windows\system32\winsrv.dll 2017-01-13 20:29:09 ----A---- C:\Windows\system32\Windows.UI.BlockedShutdown.dll 2017-01-13 20:29:09 ----A---- C:\Windows\system32\Windows.UI.BioFeedback.dll 2017-01-13 20:29:09 ----A---- C:\Windows\system32\securekernel.exe 2017-01-13 20:29:09 ----A---- C:\Windows\system32\ntoskrnl.exe 2017-01-13 20:29:09 ----A---- C:\Windows\system32\fhsettingsprovider.dll 2017-01-13 20:29:09 ----A---- C:\Windows\system32\fhcfg.dll 2017-01-13 20:29:09 ----A---- C:\Windows\system32\drivers\pci.sys 2017-01-13 20:29:09 ----A---- C:\Windows\system32\CloudBackupSettings.dll 2017-01-13 20:29:05 ----A---- C:\Windows\system32\AppXDeploymentExtensions.onecore.dll 2017-01-13 20:29:04 ----A---- C:\Windows\SYSWOW64\win32kfull.sys 2017-01-13 20:29:04 ----A---- C:\Windows\system32\AppXDeploymentServer.dll 2017-01-13 20:29:03 ----A---- C:\Windows\SYSWOW64\SettingSyncHost.exe 2017-01-13 20:29:03 ----A---- C:\Windows\SYSWOW64\SettingSyncCore.dll 2017-01-13 20:29:03 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2017-01-13 20:29:03 ----A---- C:\Windows\SYSWOW64\aadtb.dll 2017-01-13 20:29:03 ----A---- C:\Windows\system32\LogonController.dll 2017-01-13 20:29:02 ----A---- C:\Windows\SYSWOW64\win32k.sys 2017-01-13 20:29:02 ----A---- C:\Windows\SYSWOW64\AppVEntSubsystems32.dll 2017-01-13 20:29:02 ----A---- C:\Windows\system32\ConsoleLogon.dll 2017-01-13 20:29:02 ----A---- C:\Windows\system32\CloudExperienceHost.dll 2017-01-13 20:29:01 ----A---- C:\Windows\SYSWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-13 20:29:01 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2017-01-13 20:29:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll 2017-01-13 20:29:01 ----A---- C:\Windows\system32\provengine.dll 2017-01-13 20:29:01 ----A---- C:\Windows\system32\MSVPXENC.dll 2017-01-13 20:29:00 ----A---- C:\Windows\SYSWOW64\D3D12.dll 2017-01-13 20:29:00 ----A---- C:\Windows\system32\ProvPluginEng.dll 2017-01-13 20:29:00 ----A---- C:\Windows\system32\KnobsCsp.dll 2017-01-13 20:29:00 ----A---- C:\Windows\system32\KnobsCore.dll 2017-01-13 15:33:49 ----D---- C:\ProgramData\ESET 2017-01-13 15:33:49 ----D---- C:\Program Files\ESET 2017-01-13 15:27:51 ----SD---- C:\Windows\SYSWOW64\Microsoft 2017-01-13 12:11:00 ----D---- C:\ProgramData\Microleaves 2017-01-13 12:09:05 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Softlink 2017-01-13 12:08:58 ----SHD---- C:\ProgramData\WindowsMsg 2017-01-13 12:08:16 ----D---- C:\Program Files (x86)\baidu 2017-01-13 12:08:15 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Jozusp 2017-01-13 12:08:02 ----D---- C:\Program Files (x86)\Microleaves 2017-01-13 12:07:46 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Microleaves 2017-01-12 02:20:07 ----D---- C:\Program Files\log 2017-01-12 02:20:06 ----AD---- C:\Program Files (x86)\Belgium Identity Card 2017-01-12 02:01:21 ----HD---- C:\ProgramData\68g79q44j75 2017-01-12 01:43:43 ----D---- C:\ProgramData\Malwarebytes 2017-01-12 00:00:36 ----A---- C:\Windows\rsrcs.dll 2017-01-12 00:00:34 ----A---- C:\ProgramData\smp2.exe 2017-01-11 23:59:48 ----D---- C:\Program Files\BitTorrent 2017-01-11 23:59:40 ----D---- C:\ProgramData\Ronzaps 2017-01-11 23:59:35 ----A---- C:\Users\Freddy ONGENA\AppData\Roaming\Main.dat 2017-01-11 23:59:35 ----A---- C:\Users\Freddy ONGENA\AppData\Roaming\agent.dat 2017-01-11 23:59:29 ----A---- C:\Users\Freddy ONGENA\AppData\Roaming\Installer.dat 2017-01-11 23:59:27 ----A---- C:\Windows\SYSWOW64\log.txt 2017-01-11 13:25:24 ----D---- C:\Windows\Microsoft Antimalware 2017-01-11 13:18:08 ----A---- C:\Windows\system32\bi3.exe 2017-01-11 12:46:53 ----A---- C:\Windows\system32\drivers\PROCEXP152.SYS 2017-01-11 12:46:51 ----D---- C:\Program Files (x86)\Gabtydrb 2017-01-10 19:13:00 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Garmin 2017-01-10 19:13:00 ----D---- C:\Program Files\DIFX 2017-01-10 19:12:57 ----D---- C:\ProgramData\Garmin 2017-01-10 19:12:56 ----AD---- C:\Program Files (x86)\Garmin 2017-01-10 18:52:33 ----D---- C:\Program Files\FileMaker 2017-01-10 18:11:23 ----AD---- C:\Program Files (x86)\Carta 2017-01-10 17:56:41 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Opera Software 2017-01-10 17:44:41 ----D---- C:\ProgramData\Avira 2017-01-10 17:44:41 ----D---- C:\ProgramData\Avg 2017-01-10 17:44:41 ----D---- C:\ProgramData\AVAST Software 2017-01-10 17:43:05 ----D---- C:\Windows\IObit 2017-01-10 17:43:05 ----D---- C:\ProgramData\ProductData 2017-01-10 17:43:05 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS 2017-01-10 17:42:53 ----D---- C:\Program Files (x86)\IObit 2017-01-10 17:42:40 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Profiles 2017-01-10 17:42:40 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Jiwotionhey 2017-01-10 17:22:28 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\ACD Systems 2017-01-10 17:21:47 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll 2017-01-10 17:21:47 ----A---- C:\Windows\system32\d3dx9_27.dll 2017-01-10 17:21:46 ----D---- C:\ProgramData\ACD Systems 2017-01-10 17:21:45 ----D---- C:\Program Files\Common Files\ACD Systems 2017-01-10 17:21:45 ----AD---- C:\Program Files (x86)\ACD Systems 2017-01-10 15:26:51 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\FileMaker Pro Advanced 2017-01-10 15:25:36 ----D---- C:\Program Files\Bonjour 2017-01-10 15:25:36 ----AD---- C:\Program Files (x86)\Bonjour 2017-01-10 15:25:26 ----D---- C:\ProgramData\Apple 2017-01-10 15:24:05 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\FileMaker 2017-01-10 15:24:05 ----D---- C:\Program Files (x86)\FileMaker 2017-01-10 15:07:53 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Leadertech 2017-01-10 15:06:10 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\FileMaker Pro 2017-01-10 15:03:25 ----D---- C:\ProgramData\VS Revo Group 2017-01-10 15:03:25 ----A---- C:\Windows\system32\drivers\revoflt.sys 2017-01-10 15:03:24 ----D---- C:\Program Files\VS Revo Group 2017-01-10 14:40:28 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\SumatraPDF 2017-01-10 14:22:44 ----D---- C:\ProgramData\boost_interprocess 2017-01-10 12:31:17 ----D---- C:\ProgramData\Package Cache 2017-01-10 12:21:27 ----D---- C:\ProgramData\FileMaker 2017-01-10 12:03:55 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Dropbox 2017-01-10 12:03:38 ----D---- C:\ProgramData\Dropbox 2017-01-10 12:03:38 ----D---- C:\Program Files (x86)\Dropbox 2017-01-10 11:34:40 ----D---- C:\Program Files (x86)\Google 2017-01-10 02:09:02 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\IsolatedStorage 2017-01-10 02:09:02 ----D---- C:\ProgramData\IsolatedStorage 2017-01-10 00:48:26 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2017-01-10 00:48:18 ----D---- C:\Program Files (x86)\Java 2017-01-10 00:35:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2017-01-10 00:07:20 ----D---- C:\ProgramData\Photodex 2017-01-10 00:07:20 ----AD---- C:\Program Files (x86)\TeamViewer 2017-01-10 00:07:19 ----AD---- C:\Program Files (x86)\Photodex Presenter ======List of files/folders modified in the last 1 month====== 2017-02-09 19:27:44 ----RD---- C:\Program Files 2017-02-09 19:26:17 ----D---- C:\Windows\Temp 2017-02-09 19:07:07 ----D---- C:\Windows\System32 2017-02-09 19:07:07 ----A---- C:\Windows\system32\PerfStringBackup.INI 2017-02-09 19:03:33 ----D---- C:\Windows\Prefetch 2017-02-09 19:02:53 ----D---- C:\Windows\system32\sru 2017-02-09 19:02:53 ----D---- C:\ProgramData\NVIDIA 2017-02-09 17:11:30 ----D---- C:\Windows\system32\catroot2 2017-02-09 16:52:19 ----RSD---- C:\Windows\assembly 2017-02-09 16:52:19 ----RD---- C:\Windows\Microsoft.NET 2017-02-09 16:09:33 ----SHD---- C:\Windows\Installer 2017-02-09 16:09:31 ----RD---- C:\Program Files (x86) 2017-02-09 16:09:31 ----D---- C:\Windows\system32\drivers 2017-02-09 16:09:31 ----D---- C:\Windows\system32\CatRoot 2017-02-09 16:09:31 ----D---- C:\Windows\INF 2017-02-09 16:09:31 ----D---- C:\Program Files (x86)\Common Files 2017-02-09 16:09:08 ----SHD---- C:\System Volume Information 2017-02-09 15:58:34 ----D---- C:\ProgramData\Spotnet 2017-02-09 15:01:51 ----HD---- C:\ProgramData 2017-02-09 15:01:50 ----D---- C:\Program Files\Common Files 2017-02-09 15:01:02 ----D---- C:\Windows\system32\drivers\etc 2017-02-09 14:56:47 ----D---- C:\Windows\system32\SleepStudy 2017-02-09 14:39:44 ----D---- C:\Windows\SysWOW64 2017-02-09 09:55:33 ----D---- C:\Windows\AppReadiness 2017-02-08 21:47:14 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\vlc 2017-02-08 21:19:06 ----D---- C:\ProgramData\Microsoft Help 2017-02-05 21:04:37 ----D---- C:\Windows\system32\FxsTmp 2017-02-04 13:32:34 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Adobe 2017-02-04 13:25:35 ----D---- C:\Program Files\Common Files\Adobe 2017-02-04 13:25:35 ----AD---- C:\Program Files\Adobe 2017-02-02 23:07:26 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\Mozilla 2017-02-01 16:53:07 ----RD---- C:\Users 2017-02-01 16:15:56 ----SD---- C:\Users\Freddy ONGENA\AppData\Roaming\Microsoft 2017-02-01 16:14:38 ----HD---- C:\Windows\system32\GroupPolicy 2017-02-01 16:14:38 ----D---- C:\Windows\SYSWOW64\GroupPolicy 2017-01-30 21:01:23 ----D---- C:\Windows\system32\config 2017-01-28 20:10:43 ----D---- C:\Windows\system32\DriverStore 2017-01-25 23:01:56 ----D---- C:\Windows 2017-01-25 14:10:15 ----D---- C:\Windows\CbsTemp 2017-01-25 14:10:13 ----D---- C:\Windows\WinSxS 2017-01-24 13:16:21 ----D---- C:\Windows\Tasks 2017-01-24 13:10:02 ----D---- C:\Windows\system32\Tasks 2017-01-23 18:48:25 ----D---- C:\Windows\registration 2017-01-23 18:48:17 ----D---- C:\Program Files (x86)\Internet Explorer 2017-01-22 20:43:18 ----D---- C:\ProgramData\Oracle 2017-01-16 20:15:58 ----D---- C:\Windows\Logs 2017-01-16 01:40:07 ----D---- C:\Windows\system32\Macromed 2017-01-16 01:40:04 ----D---- C:\Windows\SYSWOW64\Macromed 2017-01-15 20:20:30 ----D---- C:\Windows\rescache 2017-01-15 09:14:15 ----AD---- C:\Program Files (x86)\Adobe 2017-01-15 09:10:10 ----D---- C:\ProgramData\regid.1986-12.com.adobe 2017-01-15 09:09:22 ----RSD---- C:\Windows\Fonts 2017-01-15 09:09:15 ----D---- C:\ProgramData\Adobe 2017-01-14 20:51:34 ----D---- C:\Program Files\Common Files\logishrd 2017-01-14 01:00:06 ----RD---- C:\Windows\ImmersiveControlPanel 2017-01-14 01:00:06 ----D---- C:\Windows\system32\WinBioPlugIns 2017-01-14 01:00:06 ----D---- C:\Windows\system32\wbem 2017-01-14 01:00:06 ----D---- C:\Windows\system32\oobe 2017-01-14 01:00:06 ----D---- C:\Windows\ShellExperiences 2017-01-14 01:00:06 ----D---- C:\Windows\Provisioning 2017-01-14 01:00:06 ----D---- C:\Windows\PolicyDefinitions 2017-01-14 01:00:06 ----D---- C:\Program Files\Internet Explorer 2017-01-13 20:53:59 ----D---- C:\Windows\system32\MRT 2017-01-13 20:52:19 ----D---- C:\Windows\debug 2017-01-13 20:52:18 ----AC---- C:\Windows\system32\MRT.exe 2017-01-13 20:39:20 ----HD---- C:\Windows\ELAMBKUP 2017-01-13 20:07:08 ----SD---- C:\Windows\SYSWOW64\F12 2017-01-13 20:07:08 ----SD---- C:\Windows\SYSWOW64\DiagSvcs 2017-01-13 20:07:08 ----SD---- C:\Windows\system32\Nui 2017-01-13 20:07:08 ----SD---- C:\Windows\system32\DiagSvcs 2017-01-13 20:07:08 ----RD---- C:\Program Files\Windows Defender 2017-01-13 20:07:08 ----D---- C:\Windows\SYSWOW64\migration 2017-01-13 20:07:08 ----D---- C:\Windows\system32\Sysprep 2017-01-13 20:07:08 ----D---- C:\Windows\system32\migwiz 2017-01-13 20:07:08 ----D---- C:\Windows\system32\migration 2017-01-13 20:07:08 ----D---- C:\Windows\system32\drivers\UMDF 2017-01-13 20:07:08 ----D---- C:\Windows\system32\CodeIntegrity 2017-01-13 20:07:08 ----D---- C:\Program Files\Windows Mail 2017-01-13 20:07:08 ----D---- C:\Program Files\Windows Defender Advanced Threat Protection 2017-01-13 20:07:08 ----D---- C:\Program Files (x86)\Windows Mail 2017-01-13 20:07:07 ----SD---- C:\Windows\system32\F12 2017-01-13 20:07:07 ----SD---- C:\Windows\system32\dsc 2017-01-13 20:07:07 ----D---- C:\Windows\SYSWOW64\wbem 2017-01-13 20:07:07 ----D---- C:\Windows\SYSWOW64\setup 2017-01-13 20:07:07 ----D---- C:\Windows\SYSWOW64\oobe 2017-01-13 20:07:07 ----D---- C:\Windows\SYSWOW64\Dism 2017-01-13 20:07:07 ----D---- C:\Windows\system32\setup 2017-01-13 20:07:07 ----D---- C:\Windows\system32\Dism 2017-01-13 20:07:07 ----D---- C:\Windows\system32\Boot 2017-01-13 20:07:07 ----D---- C:\Windows\servicing 2017-01-13 20:07:07 ----D---- C:\Windows\AppPatch 2017-01-13 20:07:07 ----D---- C:\Program Files\Windows Photo Viewer 2017-01-13 20:07:07 ----D---- C:\Program Files\Windows Media Player 2017-01-13 20:07:07 ----D---- C:\Program Files (x86)\Windows Photo Viewer 2017-01-13 20:07:07 ----D---- C:\Program Files (x86)\Windows Media Player 2017-01-13 20:07:07 ----D---- C:\Program Files (x86)\Windows Defender 2017-01-13 20:07:04 ----D---- C:\Windows\SYSWOW64\C2MP 2017-01-13 20:06:59 ----RD---- C:\Program Files (x86)\TC UP 2017-01-13 20:06:59 ----D---- C:\Program Files (x86)\CMAK 2017-01-13 20:06:58 ----D---- C:\NVIDIA 2017-01-13 20:06:42 ----HD---- C:\Program Files\WindowsApps 2017-01-13 20:06:04 ----SD---- C:\ProgramData\Microsoft 2017-01-13 20:05:56 ----AD---- C:\Program Files\Microsoft Office 2017-01-12 02:26:15 ----D---- C:\Windows\Panther 2017-01-12 02:02:43 ----D---- C:\Windows\system32\WDI 2017-01-12 02:01:05 ----D---- C:\Windows\LiveKernelReports 2017-01-12 00:11:57 ----A---- C:\Windows\win.ini 2017-01-11 13:36:49 ----SHD---- C:\Recovery 2017-01-10 17:44:41 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2017-01-10 17:44:41 ----AD---- C:\Program Files (x86)\WinZip 2017-01-10 17:43:05 ----D---- C:\Windows\SYSWOW64\drivers 2017-01-10 12:54:28 ----D---- C:\Users\Freddy ONGENA\AppData\Roaming\YoWindow 2017-01-10 12:31:07 ----AD---- C:\Program Files\Common Files\microsoft shared 2017-01-10 00:34:35 ----AD---- C:\Program Files\Microsoft Silverlight 2017-01-10 00:34:34 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2017-01-10 00:33:27 ----D---- C:\Windows\SYSWOW64\sr-Latn-CS 2017-01-10 00:33:27 ----D---- C:\Windows\SYSWOW64\nl-NL 2017-01-10 00:33:27 ----D---- C:\Windows\SYSWOW64\en-US 2017-01-10 00:33:26 ----D---- C:\Windows\system32\sr-Latn-RS 2017-01-10 00:33:26 ----D---- C:\Windows\system32\sr-Latn-CS 2017-01-10 00:33:26 ----D---- C:\Windows\system32\nl-NL 2017-01-10 00:33:25 ----D---- C:\Windows\system32\en-US 2017-01-10 00:33:25 ----D---- C:\Windows\system32\drivers\nl-NL 2017-01-10 00:33:25 ----D---- C:\Windows\system32\appraiser 2017-01-10 00:33:24 ----D---- C:\Windows\bcastdvr ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2016-12-13 106768] R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\Windows\system32\drivers\iorate.sys [2016-11-02 48992] R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-12-13 132272] R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2016-12-13 180544] R1 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2016-12-13 70960] R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2016-07-16 88576] R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2016-07-16 8192] R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWoW64\drivers\HWiNFO64A.SYS [2017-01-10 27552] R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\Windows\System32\drivers\registry.sys [2016-07-16 70144] R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2016-07-16 48128] R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\Windows\system32\drivers\storqosflt.sys [2016-07-16 78336] R3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\System32\drivers\e1i63x64.sys [2016-07-16 524800] R3 LHidFilt;@oem33.inf,%LHidFilt.SvcDesc%;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2015-06-18 86672] R3 LMouFilt;@oem33.inf,%LMouFilt.SvcDesc%;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2015-06-18 69264] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2017-02-09 250816] R3 MEIx64;@oem5.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2016-04-04 195152] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2016-12-09 12914360] S0 eelam;eelam; C:\Windows\system32\DRIVERS\eelam.sys [2016-12-13 15488] S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2016-07-16 105824] S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2016-07-16 101216] S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2016-10-05 64352] S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2016-07-16 58720] S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2016-07-16 61792] S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2016-07-16 88416] S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\Windows\System32\drivers\storufs.sys [2016-07-16 32096] S1 gxolehgn;gxolehgn; \??\C:\Windows\system32\drivers\gxolehgn.sys [] S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2016-07-16 18432] S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2016-07-16 15360] S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\Windows\system32\drivers\AppvStrm.sys [2016-09-15 127328] S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\Windows\system32\drivers\AppvVemgr.sys [2016-07-16 157024] S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\Windows\system32\drivers\AppvVfs.sys [2016-07-16 141152] S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\Windows\System32\drivers\bcmfn.sys [2016-07-16 9728] S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2016-07-16 38912] S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2016-09-10 118272] S3 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2016-07-16 346976] S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2016-07-16 2104160] S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys [] S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2016-07-16 20480] S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2016-07-16 50016] S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2016-08-06 73568] S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2016-07-16 33280] S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2016-07-16 81408] S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512] S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2016-07-16 176384] S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2016-07-16 526176] S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2016-07-16 35840] S3 irda;IrDA; C:\Windows\system32\drivers\irda.sys [2016-07-16 120320] S3 libusb0;libusb-win32 - Kernel Driver 04/08/2011 1.2.4.0; C:\Windows\system32\DRIVERS\libusb0.sys [2013-09-23 44480] S3 LVRS64;@oem11.inf,%lvrs.SrvDesc%;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-10-26 351520] S3 LVUVC64;@oem10.inf,%PID_081B_DD%(UVC);Logitech HD Webcam C310(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-10-26 4758176] S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2016-07-16 842584] S3 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\Windows\system32\drivers\mssecflt.sys [2016-07-16 179040] S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2016-07-16 108896] S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2016-07-16 90624] S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\Windows\System32\drivers\pnpmem.sys [2016-07-16 16896] S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2016-07-16 928608] S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800] S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\Windows\System32\drivers\scmdisk0101.sys [2016-07-16 123904] S3 SensorsHIDClassDriver;@SensorsHidClassDriver.inf,%WudfSensorsHIDClassDriverDisplayName%;UMDF Reflector service for Sensors HID Class Driver; C:\Windows\System32\drivers\WUDFRd.sys [2016-07-16 216064] S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\Windows\System32\Drivers\UcmCx.sys [2016-07-16 95744] S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\Windows\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544] S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\Windows\System32\drivers\UcmUcsi.sys [2016-07-16 50688] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640] R2 AdobeUpdateService;AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [2016-10-25 744640] R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2017-01-19 2227312] R2 Bonjour Service;Bonjour-service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2008-08-29 238888] R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2016-07-16 44496] R2 CDPUserSvc_3047a;CDPUserSvc_3047a; C:\Windows\system32\svchost.exe [2016-07-16 44496] R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2016-07-16 44496] R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2017-02-07 46400] R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2016-07-16 44496] R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2016-12-14 2836296] R2 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [2017-01-16 1039376] R2 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2015-07-02 356808] R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2016-11-29 4317648] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-11-14 932728] R2 OneSyncSvc_3047a;Host synchroniseren_3047a; C:\Windows\system32\svchost.exe [2016-07-16 44496] R2 ScsiAccess;ScsiAccess; C:\Program Files (x86)\Photodex\ProShow Producer\ScsiAccess.exe [2016-07-30 186760] R2 Service KMSELDI;Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [2015-09-27 739520] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2016-11-14 426040] R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\Windows\system32\svchost.exe [2016-07-16 44496] R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2016-07-16 44496] R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\Windows\system32\svchost.exe [2016-07-16 44496] R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2016-07-16 44496] S2 BitTorrent;BitTorrent; C:\Program Files\BitTorrent\BitTorrent.exe [2016-11-06 312320] S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\Windows\system32\svchost.exe [2016-07-16 44496] S2 dbupdate;Dropbox-update-service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-01-10 143144] S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2016-07-16 44496] S2 Foncultfanuward;Foncultfanuward; C:\Windows\system32\svchost.exe [2016-07-16 44496] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-24 153752] S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2016-07-16 44496] S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2016-07-16 44496] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-09-20 324224] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-16 270936] S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 dbupdatem;Dropbox-update-service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-01-10 143144] S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2016-07-16 93184] S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696] S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-24 153752] S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 MessagingService_3047a;MessagingService_3047a; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-01-27 172488] S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-07-31 242864] S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 PimIndexMaintenanceSvc_3047a;Contact Data_3047a; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\Windows\System32\svchost.exe [2016-07-16 44496] S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2016-09-15 2889896] S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2016-09-07 1312768] S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2016-07-16 44496] S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\Windows\system32\TieringEngineService.exe [2016-07-16 287744] S3 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\Windows\system32\svchost.exe [2016-07-16 44496] S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\Windows\system32\AppVClient.exe [2016-12-14 822624] S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\Windows\System32\svchost.exe [2016-07-16 44496] -----------------EOF-----------------