Logfile of random's system information tool 1.10 (written by random/random)
Run by John at 2014-08-13 17:15:33
Microsoft Windows 8.1
System drive C: has 75 GB (62%) free of 122 GB
Total RAM: 3980 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:15:37, on 13/08/2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\WINDOWS\syswow64\wwahost.exe
C:\Program Files\trend micro\John.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files\ASUS\P4G\InsOnSrv.exe
O23 - Service: Asus WebStorage Windows Service - Unknown owner - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10051 bytes
======Listing Processes======
wininit.exe
winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
C:\WINDOWS\system32\WLANExt.exe 818510181408
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spoolsv.exe
taskhostex.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files\WindowsApps\GoogleInc.GoogleSearch_1.2.1.12_x64__yfg5n0ztvskxp\google-search.exe" -ServerName:App.AppXg6pfmg0p3b0tmgkcdg7at2v06vr6mdm0.mca
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe"
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files\ASUS\P4G\InsOnSrv.exe"
KBFiltr.exe
"C:\Program Files\ASUS\P4G\InsOnWMI.exe"
"C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-330e79d8-f3fc-4f1c-8920-88c335accc42 -SystemEventPortName:HostProcess-a2cfb66a-00ca-4176-960b-5d1087fc378a -IoCancelEventPortName:HostProcess-211c41cb-6737-429e-9c36-c16a5276ee7f -NonStateChangingEventPortName:HostProcess-7bc803fd-52ee-4691-a697-a76705baf4b6 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d5cf44ec-72e7-4c09-849c-933f8978942f -DeviceGroupId:WudfDefaultDevicePool
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe"
"C:\WINDOWS\system32\hkcmd.exe"
"C:\WINDOWS\system32\igfxtray.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe"
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\WINDOWS\system32\wwahost.exe" -ServerName:Microsoft.WindowsLive.Mail.wwa
"C:\Program Files\Internet Explorer\iexplore.exe" -ServerName:DefaultBrowserServer
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:1428 CREDAT:267777 /prefetch:1
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
"C:\WINDOWS\syswow64\wwahost.exe" -ServerName:App.wwa
"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:1428 CREDAT:3872273 /prefetch:1
"C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe" -ServerName:Microsoft.Reader.AppXtszmc7avrx02s7n8gch63tzwg517wd9k.mca
"C:\Users\John\Downloads\RSITx64.exe"
"C:\WINDOWS\system32\NOTEPAD.EXE" C:\rsit\log.txt
"C:\WINDOWS\system32\NOTEPAD.EXE" C:\rsit\log.txt
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 584 588 596 65536 592
"C:\Users\John\Downloads\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-05-21 218784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-21 612248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-07-21 256456]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 877720]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2014-06-10 2335960]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21 153248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-21 457712]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-07-21 194504]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 704664]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2014-06-10 1730264]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-07-21 256456]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-07-21 194504]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2014-01-29 442328]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Power2GoExpress"= []
"Rainlendar2"=C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2014-03-16 2611808]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-05-08 40312]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSPRP]
C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-04-26 3187360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSWebStorage]
C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DisableS3S4]
c:\windows\temp\DisableS3S464\sethigh.cmd []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\system32\hkcmd.exe [2014-01-29 399832]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\WINDOWS\system32\igfxtray.exe [2014-01-29 171992]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mcpltui_exe]
C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVBg]
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-12-03 1256080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-12-07 13262480]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2012-05-24 111120]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-01 4085896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2014-01-29 442880]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-08-13 16:53:00 ----D---- C:\rsit
2014-08-13 16:53:00 ----D---- C:\Program Files\trend micro
2014-08-13 14:46:23 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-08-11 13:12:20 ----D---- C:\WINDOWS\PCHEALTH
2014-08-11 13:12:20 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2014-08-11 13:08:06 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-08-11 13:07:41 ----D---- C:\Program Files (x86)\Microsoft Office
2014-08-11 13:06:55 ----RHD---- C:\MSOCache
2014-08-11 12:26:15 ----SHD---- C:\Config.Msi
2014-08-06 19:43:20 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2014-07-21 12:59:09 ----RD---- C:\WINDOWS\BrowserChoice
2014-07-21 12:56:24 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-07-21 12:56:24 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-07-21 12:56:24 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-07-21 12:56:19 ----A---- C:\WINDOWS\system32\devinv.dll
2014-07-21 12:56:19 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-07-21 12:56:19 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-07-21 12:52:29 ----D---- C:\Program Files\CCleaner
2014-07-21 12:38:35 ----D---- C:\Users\John\AppData\Roaming\AVAST Software
2014-07-21 12:38:12 ----D---- C:\Program Files\Google
2014-07-21 12:38:04 ----D---- C:\ProgramData\Google
2014-07-21 12:36:42 ----D---- C:\Program Files (x86)\Google
2014-07-21 12:36:25 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-07-21 12:36:25 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2014-07-21 12:36:25 ----A---- C:\WINDOWS\system32\drivers\aswsp.sys
2014-07-21 12:36:25 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2014-07-21 12:36:25 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-07-21 12:36:25 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2014-07-21 12:36:25 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2014-07-21 12:36:25 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2014-07-21 12:36:23 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-07-21 12:36:15 ----A---- C:\WINDOWS\avastSS.scr
2014-07-21 12:34:59 ----D---- C:\Program Files\AVAST Software
2014-07-21 12:33:34 ----D---- C:\ProgramData\AVAST Software
2014-07-19 20:33:36 ----A---- C:\Recovery.txt
2014-07-19 17:55:25 ----D---- C:\Users\John\AppData\Roaming\Identities
2014-07-19 16:48:31 ----DC---- C:\WINDOWS\Panther
2014-07-19 16:47:53 ----D---- C:\Windows.old
2014-07-19 16:47:23 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-07-19 16:47:23 ----A---- C:\WINDOWS\system32\wusa.exe
2014-07-19 16:45:51 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-07-19 16:45:17 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-07-19 16:45:17 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-07-19 16:45:17 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-07-19 16:45:17 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-07-19 16:45:17 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-07-19 16:45:17 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-07-19 16:44:28 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-07-19 16:44:28 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-07-19 16:43:45 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-07-19 16:43:44 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\wininet.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\msrating.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-07-19 16:43:44 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-07-19 16:41:51 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2014-07-19 16:41:50 ----AC---- C:\WINDOWS\system32\drivers\hidusb.sys
2014-07-19 16:41:50 ----AC---- C:\WINDOWS\system32\drivers\hidclass.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\wlangpui.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\w32tm.exe
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\l2gpstore.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\wlidprov.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\wlangpui.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\w32tm.exe
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\userenv.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\sxproxy.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\spp.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\SetNetworkLocation.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\SessEnv.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\RMapi.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\ReInfo.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\ReAgent.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\rasapi32.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\pdh.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\ole32.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\nshwfp.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\netlogon.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\msxml6.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\msftedit.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\LocationApi.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\dxgi.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\dwmcore.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\dnsapi.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\Display.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\DevPropMgr.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\dcomp.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\davclnt.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\d3d11.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\cdd.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\BFE.DLL
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\authui.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\system32\aclui.dll
2014-07-19 16:41:50 ----A---- C:\WINDOWS\explorer.exe
2014-07-19 16:38:54 ----AC---- C:\WINDOWS\system32\drivers\usbuhci.sys
2014-07-19 16:38:54 ----AC---- C:\WINDOWS\system32\drivers\usbport.sys
2014-07-19 16:38:54 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-07-19 16:38:54 ----AC---- C:\WINDOWS\system32\drivers\usbhub.sys
2014-07-19 16:38:54 ----AC---- C:\WINDOWS\system32\drivers\usbehci.sys
2014-07-19 16:38:54 ----AC---- C:\WINDOWS\system32\drivers\usbd.sys
2014-07-19 16:38:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-07-19 16:38:54 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2014-07-19 16:38:54 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\WUDFSvc.dll
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\rsaenh.dll
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\hal.dll
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-07-19 16:38:54 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-07-19 16:38:08 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-07-19 16:38:08 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-07-19 16:38:08 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-07-19 16:38:08 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-07-19 16:38:08 ----A---- C:\WINDOWS\system32\certcli.dll
2014-07-19 16:38:08 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-07-19 16:37:42 ----A---- C:\WINDOWS\SYSWOW64\mrt100.dll
2014-07-19 16:37:42 ----A---- C:\WINDOWS\SYSWOW64\mrt_map.dll
2014-07-19 16:37:42 ----A---- C:\WINDOWS\system32\mrt100.dll
2014-07-19 16:37:42 ----A---- C:\WINDOWS\system32\mrt_map.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\twinui.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-07-19 16:37:13 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-19 16:36:28 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-07-19 16:36:19 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-07-19 16:35:01 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-07-19 16:35:01 ----A---- C:\WINDOWS\system32\qedit.dll
2014-07-19 16:34:53 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-07-19 16:34:53 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-07-19 16:34:44 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2014-07-19 16:34:44 ----A---- C:\WINDOWS\system32\FntCache.dll
2014-07-19 16:34:44 ----A---- C:\WINDOWS\system32\DWrite.dll
2014-07-19 16:34:34 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-07-19 16:34:34 ----A---- C:\WINDOWS\system32\win32k.sys
2014-07-19 16:34:34 ----A---- C:\WINDOWS\system32\osk.exe
2014-07-19 16:34:08 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-07-19 16:33:48 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\system32\wups.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-07-19 16:33:48 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-07-19 16:33:48 ----A---- C:\WINDOWS\system32\ubpm.dll
2014-07-19 16:33:48 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-07-19 16:32:06 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-07-19 16:32:06 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-07-19 16:32:06 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\winmde.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\tlscsp.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\swprv.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\srcore.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\srclient.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\shell32.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\resutils.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\rdpencom.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\propsys.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mispace.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mfps.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\mf.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\localspl.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\gpapi.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\energyprov.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\d3d9.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-07-19 16:30:50 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-19 16:30:49 ----AC---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-07-19 16:30:49 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-07-19 16:30:49 ----AC---- C:\WINDOWS\system32\drivers\msiscsi.sys
2014-07-19 16:30:49 ----AC---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\tlscsp.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\SYSWOW64\d3d8thk.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\services.exe
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-07-19 16:30:49 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-07-19 16:25:53 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-07-19 16:25:53 ----D---- C:\Program Files (x86)\MSBuild
2014-07-19 16:25:50 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2014-07-19 16:25:50 ----D---- C:\Program Files\Reference Assemblies
2014-07-19 16:25:50 ----D---- C:\Program Files\MSBuild
2014-07-19 16:24:55 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-07-19 16:24:55 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-07-19 16:24:54 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2014-07-19 16:24:53 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-07-19 16:24:53 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-07-19 16:24:52 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-07-19 16:18:40 ----SHD---- C:\ProgramData\Sjablonen
2014-07-19 16:18:40 ----SHD---- C:\ProgramData\Menu Start
2014-07-19 16:18:40 ----SHD---- C:\ProgramData\Documenten
2014-07-19 16:18:40 ----SHD---- C:\ProgramData\Bureaublad
2014-07-19 16:17:24 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2014-07-19 16:01:02 ----SD---- C:\Users\John\AppData\Roaming\Microsoft
2014-07-19 15:51:42 ----A---- C:\WINDOWS\system32\drivers\RTWAVES30.dat
2014-07-19 15:51:31 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2014-07-19 15:51:31 ----D---- C:\Program Files\Realtek
2014-07-19 15:50:04 ----D---- C:\WINDOWS\Prefetch
2014-07-19 13:25:17 ----SD---- C:\WINDOWS\system32\CompatTel
2014-07-18 12:42:54 ----D---- C:\Program Files (x86)\Rainlendar2
2014-07-18 12:36:10 ----D---- C:\Users\John\AppData\Roaming\CyberLink
2014-07-18 12:28:44 ----D---- C:\Program Files (x86)\CyberLink
2014-07-18 12:28:39 ----D---- C:\ProgramData\CyberLink
2014-07-18 12:28:38 ----D---- C:\ProgramData\Temp
2014-07-16 16:30:26 ----D---- C:\Program Files\KMSpico
2014-07-16 12:52:49 ----A---- C:\WINDOWS\system32\perfi010.dat
2014-07-16 12:52:49 ----A---- C:\WINDOWS\system32\perfi00C.dat
2014-07-16 12:52:49 ----A---- C:\WINDOWS\system32\perfh010.dat
2014-07-16 12:52:49 ----A---- C:\WINDOWS\system32\perfh00C.dat
2014-07-16 12:52:49 ----A---- C:\WINDOWS\system32\perfd010.dat
2014-07-16 12:52:49 ----A---- C:\WINDOWS\system32\perfd00C.dat
2014-07-16 12:52:49 ----A---- C:\WINDOWS\system32\perfc00C.dat
2014-07-16 12:52:48 ----A---- C:\WINDOWS\system32\perfc010.dat
2014-07-16 12:46:31 ----D---- C:\WINDOWS\SYSWOW64\drivers\it-IT
2014-07-16 12:46:31 ----D---- C:\WINDOWS\SYSWOW64\0410
2014-07-16 12:46:28 ----D---- C:\WINDOWS\SYSWOW64\it
2014-07-16 12:45:46 ----D---- C:\WINDOWS\system32\drivers\it-IT
2014-07-16 12:45:46 ----D---- C:\WINDOWS\system32\0410
2014-07-16 12:45:41 ----D---- C:\WINDOWS\system32\it
2014-07-16 12:44:17 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-GB
2014-07-16 12:43:38 ----D---- C:\WINDOWS\system32\drivers\en-GB
2014-07-16 12:41:36 ----D---- C:\WINDOWS\SYSWOW64\040C
2014-07-16 12:41:35 ----D---- C:\WINDOWS\SYSWOW64\fr
2014-07-16 12:41:35 ----D---- C:\WINDOWS\SYSWOW64\drivers\fr-FR
2014-07-16 12:41:01 ----D---- C:\WINDOWS\system32\040C
2014-07-16 12:41:00 ----D---- C:\WINDOWS\system32\fr
2014-07-16 12:41:00 ----D---- C:\WINDOWS\system32\drivers\fr-FR
2014-07-16 10:53:45 ----D---- C:\sources
2014-07-16 10:11:52 ----D---- C:\WINDOWS\system32\MRT
2014-07-16 10:11:47 ----A---- C:\WINDOWS\system32\MRT.exe
======List of files/folders modified in the last 1 month======
2014-08-13 17:00:00 ----D---- C:\WINDOWS\system32\sru
2014-08-13 16:53:00 ----RD---- C:\Program Files
2014-08-13 16:48:50 ----D---- C:\WINDOWS\Temp
2014-08-13 16:48:40 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-08-13 15:19:14 ----SHD---- C:\WINDOWS\Installer
2014-08-13 15:16:46 ----D---- C:\WINDOWS\system32\config
2014-08-13 15:16:28 ----SHD---- C:\System Volume Information
2014-08-13 15:12:29 ----D---- C:\ProgramData\Microsoft Help
2014-08-13 15:12:19 ----D---- C:\WINDOWS\Microsoft.NET
2014-08-13 15:11:45 ----RD---- C:\WINDOWS\assembly
2014-08-13 15:10:11 ----SHD---- C:\$Recycle.Bin
2014-08-13 15:01:26 ----A---- C:\WINDOWS\win.ini
2014-08-13 14:46:23 ----RD---- C:\Program Files (x86)
2014-08-13 14:45:26 ----D---- C:\WINDOWS\SysWOW64
2014-08-13 12:30:39 ----D---- C:\WINDOWS\system32\catroot
2014-08-12 07:01:36 ----D---- C:\WINDOWS\system32\DriverStore
2014-08-11 13:45:07 ----D---- C:\WINDOWS\Logs
2014-08-11 13:43:56 ----D---- C:\WINDOWS\AppReadiness
2014-08-11 13:43:55 ----HD---- C:\Program Files\WindowsApps
2014-08-11 13:15:32 ----RSD---- C:\WINDOWS\Fonts
2014-08-11 13:15:18 ----D---- C:\WINDOWS\ShellNew
2014-08-11 13:14:58 ----D---- C:\Program Files (x86)\Common Files
2014-08-11 13:14:12 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-08-11 13:13:36 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-08-11 13:12:20 ----D---- C:\Windows
2014-08-11 13:09:29 ----RD---- C:\WINDOWS\System32
2014-08-11 13:09:29 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-11 13:09:28 ----D---- C:\WINDOWS\Inf
2014-08-11 13:07:38 ----D---- C:\Program Files\Common Files\microsoft shared
2014-08-07 17:36:10 ----D---- C:\WINDOWS\system32\NDF
2014-08-02 19:58:59 ----D---- C:\WINDOWS\system32\drivers
2014-07-28 16:14:49 ----D---- C:\WINDOWS\debug
2014-07-26 19:16:46 ----D---- C:\WINDOWS\system32\Tasks
2014-07-21 12:59:22 ----D---- C:\WINDOWS\WinSxS
2014-07-21 12:59:22 ----D---- C:\WINDOWS\CbsTemp
2014-07-21 12:38:04 ----HD---- C:\ProgramData
2014-07-21 12:36:48 ----D---- C:\WINDOWS\Tasks
2014-07-21 12:25:51 ----D---- C:\WINDOWS\system32\wdi
2014-07-21 09:52:48 ----A---- C:\WINDOWS\system32\bcmihvui64.dll
2014-07-21 09:52:47 ----A---- C:\WINDOWS\system32\bcmihvsrv64.dll
2014-07-21 08:40:59 ----D---- C:\ProgramData\McAfee
2014-07-21 08:40:59 ----D---- C:\Program Files\Common Files
2014-07-21 08:40:59 ----D---- C:\Program Files (x86)\McAfee
2014-07-21 08:38:40 ----HD---- C:\WINDOWS\ELAMBKUP
2014-07-20 14:28:05 ----D---- C:\WINDOWS\tracing
2014-07-20 10:03:10 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-07-20 09:06:37 ----D---- C:\WINDOWS\system32\wbem
2014-07-20 09:05:49 ----D---- C:\WINDOWS\system32\catroot2
2014-07-20 08:58:46 ----D---- C:\WINDOWS\registration
2014-07-20 08:53:41 ----D---- C:\WINDOWS\system32\restore
2014-07-19 18:43:12 ----SD---- C:\ProgramData\Microsoft
2014-07-19 17:57:32 ----D---- C:\WINDOWS\SoftwareDistribution
2014-07-19 16:48:26 ----SHD---- C:\Recovery
2014-07-19 16:45:27 ----RD---- C:\WINDOWS\ToastData
2014-07-19 16:44:16 ----D---- C:\Program Files\Internet Explorer
2014-07-19 16:44:16 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-19 16:42:26 ----D---- C:\WINDOWS\system32\setup
2014-07-19 16:36:16 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2014-07-19 16:32:13 ----D---- C:\Program Files\Windows Defender
2014-07-19 16:32:13 ----D---- C:\Program Files (x86)\Windows Defender
2014-07-19 16:31:40 ----D---- C:\WINDOWS\system32\drivers\nl-NL
2014-07-19 16:24:21 ----D---- C:\WINDOWS\apppatch
2014-07-19 16:19:48 ----D---- C:\WINDOWS\rescache
2014-07-19 16:18:40 ----D---- C:\Program Files\Windows NT
2014-07-19 16:17:31 ----D---- C:\WINDOWS\system32\LogFiles
2014-07-19 16:15:16 ----RSD---- C:\WINDOWS\Media
2014-07-19 16:10:56 ----D---- C:\WINDOWS\SYSWOW64\drivers
2014-07-19 16:10:56 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2014-07-19 16:10:56 ----D---- C:\WINDOWS\system32\Sysprep
2014-07-19 16:10:55 ----D---- C:\WINDOWS\nl
2014-07-19 16:10:55 ----D---- C:\WINDOWS\it
2014-07-19 16:10:54 ----D---- C:\WINDOWS\fr
2014-07-19 16:10:54 ----D---- C:\WINDOWS\en-GB
2014-07-19 16:10:54 ----D---- C:\WINDOWS\de
2014-07-19 16:09:24 ----D---- C:\WINDOWS\WinStore
2014-07-19 16:09:23 ----D---- C:\WINDOWS\SYSWOW64\winrm
2014-07-19 16:09:21 ----D---- C:\WINDOWS\SYSWOW64\WCN
2014-07-19 16:09:21 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2014-07-19 16:09:20 ----D---- C:\WINDOWS\SYSWOW64\SMI
2014-07-19 16:09:20 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2014-07-19 16:09:20 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2014-07-19 16:09:20 ----D---- C:\WINDOWS\SYSWOW64\oobe
2014-07-19 16:09:19 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2014-07-19 16:09:19 ----D---- C:\WINDOWS\SYSWOW64\MUI
2014-07-19 16:09:19 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2014-07-19 16:09:18 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-07-19 16:09:18 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2014-07-19 16:09:18 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2014-07-19 16:09:17 ----D---- C:\WINDOWS\SYSWOW64\IME
2014-07-19 16:09:16 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2014-07-19 16:09:15 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2014-07-19 16:09:15 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2014-07-19 16:09:15 ----D---- C:\WINDOWS\SYSWOW64\Dism
2014-07-19 16:09:15 ----D---- C:\WINDOWS\SYSWOW64\catroot
2014-07-19 16:09:13 ----D---- C:\WINDOWS\system32\winrm
2014-07-19 16:09:10 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2014-07-19 16:09:10 ----D---- C:\WINDOWS\system32\WCN
2014-07-19 16:09:10 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2014-07-19 16:09:10 ----D---- C:\WINDOWS\system32\spool
2014-07-19 16:09:05 ----D---- C:\WINDOWS\system32\slmgr
2014-07-19 16:09:05 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2014-07-19 16:09:05 ----D---- C:\WINDOWS\system32\oobe
2014-07-19 16:09:04 ----D---- C:\WINDOWS\system32\nl-NL
2014-07-19 16:09:03 ----D---- C:\WINDOWS\system32\MUI
2014-07-19 16:09:03 ----D---- C:\WINDOWS\system32\migration
2014-07-19 16:09:03 ----D---- C:\WINDOWS\system32\it-IT
2014-07-19 16:09:02 ----D---- C:\WINDOWS\system32\IME
2014-07-19 16:09:02 ----D---- C:\WINDOWS\system32\fr-FR
2014-07-19 16:09:01 ----D---- C:\WINDOWS\system32\en-GB
2014-07-19 16:09:00 ----D---- C:\WINDOWS\system32\Dism
2014-07-19 16:07:57 ----D---- C:\WINDOWS\system32\Boot
2014-07-19 16:07:52 ----D---- C:\WINDOWS\PolicyDefinitions
2014-07-19 16:07:42 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-07-19 16:07:41 ----D---- C:\WINDOWS\IME
2014-07-19 16:07:40 ----D---- C:\WINDOWS\Help
2014-07-19 16:07:38 ----D---- C:\WINDOWS\DigitalLocker
2014-07-19 16:07:34 ----RD---- C:\Users
2014-07-19 16:07:34 ----D---- C:\ProgramData\PRICache
2014-07-19 16:07:28 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2014-07-19 16:07:28 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-07-19 16:07:27 ----D---- C:\Program Files (x86)\Windows Media Player
2014-07-19 16:07:27 ----D---- C:\Program Files (x86)\Windows Mail
2014-07-19 16:07:19 ----SHD---- C:\Program Files\Windows Sidebar
2014-07-19 16:07:19 ----D---- C:\Program Files\Windows Photo Viewer
2014-07-19 16:07:19 ----D---- C:\Program Files\Windows Media Player
2014-07-19 16:07:18 ----D---- C:\Program Files\Windows Mail
2014-07-19 16:07:18 ----D---- C:\Program Files\Windows Journal
2014-07-19 16:07:17 ----D---- C:\Program Files\Common Files\System
2014-07-19 16:02:18 ----D---- C:\WINDOWS\system32\Recovery
2014-07-19 14:25:40 ----D---- C:\WINDOWS\AUInstallAgent
2014-07-18 12:32:49 ----D---- C:\Program Files (x86)\ASUS
2014-07-18 12:32:37 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-07-16 19:48:41 ----D---- C:\WINDOWS\de-DE
2014-07-16 16:08:48 ----D---- C:\Program Files\Microsoft Office
2014-07-16 12:47:03 ----D---- C:\WINDOWS\it-IT
2014-07-16 12:42:21 ----D---- C:\WINDOWS\fr-FR
2014-07-15 18:15:14 ----D---- C:\ProgramData\Adobe
2014-07-15 17:18:28 ----D---- C:\Users\John\AppData\Roaming\Adobe
2014-07-15 16:48:24 ----D---- C:\WINDOWS\LiveKernelReports
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-07-21 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-07-21 224896]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-03-25 678384]
R0 Wof;Windows Overlay File System Filter Driver; C:\WINDOWS\system32\drivers\Wof.sys [2014-07-19 157016]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-07-21 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-07-21 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-21 427360]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-21 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-21 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-07-21 92008]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 ATP;@oem3.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-02-06 65784]
R3 BCM43XX;@oem18.inf,%BCM43XX_Service_DispName%;Stuurprogramma voor Broadcom 802.11-netwerkadapter; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2014-07-21 6835784]
R3 HIDSwitch;@oem6.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2012-05-31 21152]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-01-29 5363200]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-12-11 3258256]
R3 IntcDAud;@oem15.inf,%IntcDAud.SvcDesc%;Intel® Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-10-26 342528]
R3 kbfiltr;@oem5.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS-minipoortstuurprogramma voor Qualcomm Atheros AR81xx PCI-E Ethernet-controller; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem16.inf,%HECI_SvcDesc%;Intel® Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB-videoapparaat (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S3 AmUStor;@oem4.inf,%AmUStor.SvcDesc%;AM USB Stroage Driver; C:\WINDOWS\system32\drivers\AmUStor.SYS [2012-06-14 100992]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2013-01-07 1280768]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-21 50344]
R3 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2013-01-15 107320]
R3 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files\ASUS\P4G\InsOnSrv.exe [2013-03-26 277120]
R3 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192]
R3 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R3 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R3 Intel® ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R3 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R3 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R3 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-21 116648]
S3 cphs;Intel® Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-01-29 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-21 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-07-21 194032]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-10-01 150648]
-----------------EOF-----------------
