jappie1976

Hoi, Hij werkt wel iets sneller, maar het blijft nog steeds veel trager dan ik gewend ben. Heeft een grote schoonmaakbeurt ook effect? Want mijn computer staat vrijwel helemaal vol met foto's en video's. Heeft defragmentatie zin?

Goedenavond, Mijn reactie duurde wat langer, maar ik ben weer terug van vakantie. Bijgevoegd het log bestandje. Bedankt! AdwCleaner[C0].txt

Mijn excuses. Ik had je laatste bericht over het hoofd gezien. Ik heb nu nogmaals de scan uitgevoerd. De bestanden zijn toegevoegd. Hartelijk dank! ZHPCleaner.txt

@abbs was dit voldoende of ben ik een stap vergeten? Alvast bedankt!

ZHPCleaner.txt

Goedemiddag, Hierbij het logbestand. Fijne middag en bedankt! ZHPCleaner.txt

Oke, hartelijk dank. Ik ga met vakantie aanstaande dinsdag, dus ik hoop voor die tijd nog contact met jullie gehad te hebben. Opnieuw bedankt!

Oke bedankt.... bij deze de twee bestanden MVG Jasper Addition.txt FRST.txt

Goedenavond digitale helden, Ik zit nu in safe mode, want als ik mijn computer normaal opstart, dan zit ik er morgenochtend nog op te wachten. In het verleden hebben jullie mij al eens zeer adequaat geholpen, dus dacht, laat ik het via deze weg weer eens proberen. Ik ben alleen even kwijt hoe ik al die logjes enzo moet plaatsen. Wat waren hier de stappen voor? Bij voorbaat dank voor uw hulp!

Nee, het is echt een stuk minder. Bij opstarten neemt hij wel veel tijd, maar volgens mij moet ik wat programma's niet automatisch laten opstarten. Dat lijkt ook veel energie te kosten. Heel erg bedankt voor de hulp in ieder geval. Moet ik nogmaals een log maken om te checken of er nog andere zaken onder de leden zitten?

Oke, hier het logbestand. AdwCleanerC1.txt

Goedemorgen, Ik vergeet inderdaad op toevoegen te drukken.... bij deze alsnog. zoek-results.txt

Goedenavond, Duidelijk. Ik heb het logbestand bijgevoegd. Bedankt voor jullie hulp! Groeten, Jasper

Dit is het logje dat ik aangemaakt heb: Logfile of random's system information tool 1.10 (written by random/random) Run by Sonia & Jasper at 2015-10-03 20:37:36 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 230 GB (34%) free of 669 GB Total RAM: 8055 MB (71% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 8:37:46 PM, on 10/3/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.18015) Boot mode: Normal Running processes: C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe C:\Program Files (x86)\USB Camera\VM331_STI.EXE C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe C:\PROGRA~2\Lenovo\LENOVO~2\CAPOSD.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Citrix\ICA Client\concentr.exe C:\Program Files (x86)\Citrix\ICA Client\redirector.exe C:\Program Files (x86)\Citrix\Receiver\Receiver.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyWebHelper.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyCrashService.exe C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE C:\Program Files (x86)\iTunes\iTunes.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe C:\Program Files\trend micro\Sonia & Jasper.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll F2 - REG:system.ini: UserInit=userinit.exe O1 - Hosts: 0.0.0.1 mssplus.mcafee.com O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL O4 - HKLM\..\Run: [uSB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart O4 - HKLM\..\Run: [MuteSync] C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe O4 - HKLM\..\Run: [intelligent Touchpad] C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s O4 - HKLM\..\Run: [updateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKLM\..\Run: [updatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery" O4 - HKLM\..\Run: [CAPOSD] C:\PROGRA~2\Lenovo\LENOVO~2\CAPOSD.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [CitrixReceiver] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [Redirector] "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Sonia & Jasper\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [OneDrive] "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background O4 - HKCU\..\Run: [spotify] "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64" O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll O23 - Service: Adobe Active File Monitor V12 (AdobeActiveFileMonitor12.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel® ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\mcafee\msc\mcawfwk.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Fast boot service of lenovo (NSDSvc) - Unknown owner - C:\Windows\System32\NSDSvc.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: ZAtheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- End of file - 25678 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch winlogon.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first "C:\Program Files\Alwil Software\Avast5\AvastSvc.exe" C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Bluetooth Suite\adminservice.exe" "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service C:\Windows\System32\svchost.exe -k utcsvc "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe" "C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe" "C:\Windows\system32\mfevtps.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe" "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE "C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe" "C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe" "C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe" "C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe" "C:\Windows\system32\GWX\GWX.exe" "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 taskeng.exe {050C6CC0-6E3E-49EE-8DC5-B6F9C7375EC7} "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\System32\spoolsv.exe "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe" "C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe" "C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe" "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" "C:\Program Files (x86)\USB Camera\VM331_STI.EXE" "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart "C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe" "C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe" "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" adb fork-server server "C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe" C:\Windows\system32\wbem\wmiprvse.exe "C:\PROGRA~2\Lenovo\LENOVO~2\CAPOSD.exe" "C:\Program Files (x86)\iTunes\iTunesHelper.exe" "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup "C:\Program Files\iPod\bin\iPodService.exe" "C:\Program Files (x86)\Citrix\Receiver\Receiver.exe" -autoupdate -startplugins "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui "C:\Windows\system32\hkcmd.exe" "C:\Windows\system32\igfxpers.exe" "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4 "C:\Program Files\Zune\ZuneLauncher.exe" "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe" "C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe" "C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyWebHelper.exe" C:\Windows\system32\wbem\unsecapp.exe -Embedding C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized "C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe" "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyCrashService.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --channel="6192.0.724097443\1924096929" --no-sandbox --disable-d3d11 --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.14.124 --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,9,21,44 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2626 --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.14.124 /prefetch:822062411 "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=en-US --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.14.124 --disable-spell-checking --device-scale-factor=1 --font-cache-shared-mem-suffix=6192 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="6192.1.245702314\1194201123" /prefetch:673131151 "C:\Windows\SYSTEM32\WISPTIS.EXE" /ManualLaunch; "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc "C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe" "C:\Program Files\mcafee.com\agent\McUpdate.exe" /metroupload 9 "C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe" "C:\Program Files (x86)\iTunes\iTunes.exe" "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe" --pipe \\.\pipe\30473732-423156130300227332 --parentPipe \??\C:\Windows\system32\conhost.exe "1028455302-87130286321154234842044675393-24740875-380211281-20851971011976513664 "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe" \??\C:\Windows\system32\conhost.exe "-42504517-103189329-7552457481442769822-1167920110-1485757679-955715024-1981039294 "C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe" "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-92807fd1-a830-4ec1-8b73-50b4a53864b3 -SystemEventPortName:HostProcess-c2b32102-e005-4c2b-869c-3e9db0775216 -IoCancelEventPortName:HostProcess-5cd149b3-d946-4143-ab35-208f582e48fe -NonStateChangingEventPortName:HostProcess-b5f2a2e2-5856-4599-82cc-a9e85b07ae51 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c23889bb-6037-418e-9935-52995de81f45 -DeviceGroupId:WpdFsGroup C:\Windows\System32\svchost.exe -k secsvcs "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files\Windows Media Player\wmpnetwk.exe" WLIDSvcM.exe 8664 "C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe" "C:\Program Files\McAfee.com\Agent\mcagent.exe" /shRequest C:\Windows\servicing\TrustedInstaller.exe "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" "C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe" taskeng.exe {86B720A5-162C-4E84-9657-9C35226C59DC} C:\Windows\system32\sppsvc.exe "C:\Users\Sonia & Jasper\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1535155601-2421706697-1459365258-1001Core.job - C:\Users\Sonia & Jasper\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1535155601-2421706697-1459365258-1001UA.job - C:\Users\Sonia & Jasper\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\Sonia & Jasper\AppData\Roaming\Mozilla\Firefox\Profiles\ux8d25yj.default prefs.js - "keyword.URL" - "https://search.yahoo.com/search?fr=mcafee&type=C111US714D20140522&p=" "{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe� Flash� Player 19.0.0.185 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Citrix.com/npican] "Description"=Citrix ICA Client Plugin "Path"=C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59] "Description"=Intel IPT WebApi plugin "Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater] "Description"=This plugin updates Intel WebAPI component "Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10] "Description"=McAfee Total Protection MIME Plugin "Path"=c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe� Flash� Player 19.0.0.185 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10] "Description"=McAfee Total Protection MIME Plugin "Path"=c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll C:\Program Files (x86)\Mozilla Firefox\components\ IICAClient.xpt C:\Program Files (x86)\Mozilla Firefox\plugins\ cgpcfg.dll CgpCore.dll confmgr.dll ctxlogging.dll ctxmui.dll ICAClObj.class icafile.dll icalogon.dll Microsoft.VC80.CRT.manifest msvcm80.dll msvcp80.dll msvcr80.dll npicaN.dll nppdf32.dll sslsdk_b.dll TcpPServ.dll C:\Users\Sonia & Jasper\AppData\Roaming\Mozilla\Firefox\Profiles\ux8d25yj.default\searchplugins\ McSiteAdvisor.xml ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-08-04 219304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll [2015-07-20 655480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-09-11 888432] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-09-11 2340472] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}] CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-12-13 64672] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-07-20 559624] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-09-12 710872] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-01-28 170264] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-01-28 398616] "Persistence"=C:\Windows\system32\igfxpers.exe [2012-01-28 440600] "AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-12-13 792224] "AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-12-13 657568] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-01-31 12446824] "RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-11-15 1156712] "SynLenovoGestureMgr"=C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [2011-11-10 408872] "OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-05-30 789856] "UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-14 222504] "Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-05-30 8079408] "EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-05-30 6200368] "Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2012-05-30 206176] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-02-25 3023600] "Zune Launcher"=C:\Program Files\Zune\ZuneLauncher.exe [2011-08-05 163552] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03 472984] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640] "Spotify Web Helper"=C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-09-30 2025016] "Facebook Update"=C:\Users\Sonia & Jasper\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-30 138096] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-08-27 22041192] "OneDrive"=C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-09-15 405584] "Spotify"=C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe [2015-09-30 7571000] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088] "Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814"=C:\Windows\system32\cmd.exe [2010-11-21 345088] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "USB3MON"=C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-01-27 291608] "331BigDog"=C:\Program Files (x86)\USB Camera\VM331_STI.EXE [2011-11-24 548864] "Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2011-06-01 506712] "MuteSync"=C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe [2012-02-04 343040] "Intelligent Touchpad"=C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe [2011-12-08 291272] "YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29 136488] "YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-01-29 228448] "UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2010-07-27 222504] "VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2012-05-30 329056] "mcui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2013-03-13 1532992] "UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-14 222504] "CAPOSD"=C:\PROGRA~2\Lenovo\LENOVO~2\CAPOSD.exe [2012-02-09 1876992] "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-01-28 59720] "iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-02-20 152392] "CitrixReceiver"=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk [] "ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2013-10-01 395656] "Redirector"=C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [2013-10-01 153992] "AvastUI.exe"=C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2015-07-20 6109776] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\Windows\system32\nvinitx.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2012-01-19 430080] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "DisableTaskMgr"=0 "SoftwareSASGeneration"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 "NoRun"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "mixer2"=wdmaud.drv "midi2"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "aux2"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "aux3"=wdmaud.drv "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "aux4"=wdmaud.drv "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv "aux5"=wdmaud.drv "wave7"=wdmaud.drv "midi7"=wdmaud.drv "mixer7"=wdmaud.drv "aux6"=wdmaud.drv "wave8"=wdmaud.drv "midi8"=wdmaud.drv "mixer8"=wdmaud.drv "aux7"=wdmaud.drv "wave9"=wdmaud.drv "midi9"=wdmaud.drv "mixer9"=wdmaud.drv "aux8"=wdmaud.drv "aux9"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-10-03 20:37:37 ----D---- C:\Program Files\trend micro 2015-10-03 20:37:36 ----D---- C:\rsit 2015-10-03 19:54:24 ----HD---- C:\OneDriveTemp 2015-09-30 00:13:05 ----D---- C:\Program Files (x86)\SoulseekQt 2015-09-19 12:16:57 ----D---- C:\ProgramData\Package Cache 2015-09-11 10:31:44 ----D---- C:\8abaaf553665069b5707f3 2015-09-10 22:22:31 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-09-10 22:22:31 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2015-09-10 22:22:31 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-09-10 22:22:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-09-10 22:22:30 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-09-10 22:22:30 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-09-10 22:22:29 ----A---- C:\Windows\system32\ie4uinit.exe 2015-09-10 22:22:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-09-10 22:22:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-09-10 22:22:28 ----A---- C:\Windows\system32\iernonce.dll 2015-09-10 22:22:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-09-10 22:22:26 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2015-09-10 22:22:25 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-09-10 22:22:25 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-09-10 22:22:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-09-10 22:22:24 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-09-10 22:22:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-09-10 22:22:23 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-09-10 22:22:21 ----A---- C:\Windows\system32\iedkcs32.dll 2015-09-10 22:22:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-09-10 22:22:20 ----A---- C:\Windows\system32\urlmon.dll 2015-09-10 22:22:20 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-09-10 22:22:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-09-10 22:22:19 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2015-09-10 22:22:19 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-09-10 22:22:19 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-09-10 22:22:18 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-09-10 22:22:18 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-09-10 22:22:18 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-09-10 22:22:18 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-09-10 22:22:18 ----A---- C:\Windows\system32\msfeeds.dll 2015-09-10 22:22:18 ----A---- C:\Windows\system32\dxtrans.dll 2015-09-10 22:22:17 ----A---- C:\Windows\system32\iesetup.dll 2015-09-10 22:22:17 ----A---- C:\Windows\system32\ieapfltr.dll 2015-09-10 22:22:15 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-09-10 22:22:15 ----A---- C:\Windows\system32\iertutil.dll 2015-09-10 22:22:14 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-09-10 22:22:14 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-09-10 22:22:14 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-09-10 22:22:14 ----A---- C:\Windows\system32\vbscript.dll 2015-09-10 22:22:14 ----A---- C:\Windows\system32\jsproxy.dll 2015-09-10 22:22:14 ----A---- C:\Windows\system32\ieUnatt.exe 2015-09-10 22:22:13 ----A---- C:\Windows\system32\ieui.dll 2015-09-10 22:22:13 ----A---- C:\Windows\system32\ieframe.dll 2015-09-10 22:22:13 ----A---- C:\Windows\system32\dxtmsft.dll 2015-09-10 22:22:12 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-09-10 22:22:12 ----A---- C:\Windows\system32\mshtmled.dll 2015-09-10 22:22:12 ----A---- C:\Windows\system32\jscript9diag.dll 2015-09-10 22:22:12 ----A---- C:\Windows\system32\jscript.dll 2015-09-10 22:22:11 ----A---- C:\Windows\system32\wininet.dll 2015-09-10 22:22:11 ----A---- C:\Windows\system32\jscript9.dll 2015-09-10 22:22:10 ----A---- C:\Windows\system32\msrating.dll 2015-09-10 22:22:10 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-09-10 22:22:09 ----A---- C:\Windows\system32\mshtml.dll 2015-09-10 22:15:33 ----A---- C:\Windows\SYSWOW64\InkEd.dll 2015-09-10 22:15:33 ----A---- C:\Windows\system32\InkEd.dll 2015-09-10 22:15:31 ----A---- C:\Windows\system32\jnwmon.dll 2015-09-10 22:15:28 ----A---- C:\Windows\system32\schedsvc.dll 2015-09-10 22:15:20 ----A---- C:\Windows\SYSWOW64\tzres.dll 2015-09-10 22:15:20 ----A---- C:\Windows\system32\tzres.dll 2015-09-10 22:13:37 ----A---- C:\Windows\SYSWOW64\dwmcore.dll 2015-09-10 22:13:37 ----A---- C:\Windows\system32\dwmcore.dll 2015-09-10 22:13:37 ----A---- C:\Windows\system32\dwmapi.dll 2015-09-10 22:13:36 ----A---- C:\Windows\SYSWOW64\dwmapi.dll 2015-09-10 22:13:27 ----A---- C:\Windows\system32\UtcResources.dll 2015-09-10 22:13:27 ----A---- C:\Windows\system32\diagtrack.dll 2015-09-10 22:13:26 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-09-10 22:13:26 ----A---- C:\Windows\system32\ntdll.dll 2015-09-10 22:13:25 ----A---- C:\Windows\system32\tdh.dll 2015-09-10 22:13:25 ----A---- C:\Windows\system32\kernel32.dll 2015-09-10 22:13:24 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-09-10 22:13:23 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-09-10 22:13:23 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2015-09-10 22:13:23 ----A---- C:\Windows\system32\KernelBase.dll 2015-09-10 22:13:22 ----A---- C:\Windows\SYSWOW64\tdh.dll 2015-09-10 22:13:22 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2015-09-10 22:13:22 ----A---- C:\Windows\system32\advapi32.dll 2015-09-10 22:13:21 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2015-09-10 22:13:21 ----A---- C:\Windows\system32\lsasrv.dll 2015-09-10 22:13:19 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2015-09-10 22:13:19 ----A---- C:\Windows\system32\wow64.dll 2015-09-10 22:13:19 ----A---- C:\Windows\system32\srcore.dll 2015-09-10 22:13:19 ----A---- C:\Windows\system32\rstrui.exe 2015-09-10 22:13:19 ----A---- C:\Windows\system32\rpcrt4.dll 2015-09-10 22:13:18 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2015-09-10 22:13:18 ----A---- C:\Windows\system32\winsrv.dll 2015-09-10 22:13:18 ----A---- C:\Windows\system32\kerberos.dll 2015-09-10 22:13:18 ----A---- C:\Windows\system32\csrsrv.dll 2015-09-10 22:13:18 ----A---- C:\Windows\system32\conhost.exe 2015-09-10 22:13:17 ----A---- C:\Windows\SYSWOW64\schannel.dll 2015-09-10 22:13:17 ----A---- C:\Windows\system32\wdigest.dll 2015-09-10 22:13:17 ----A---- C:\Windows\system32\smss.exe 2015-09-10 22:13:17 ----A---- C:\Windows\system32\schannel.dll 2015-09-10 22:13:17 ----A---- C:\Windows\system32\msv1_0.dll 2015-09-10 22:13:16 ----A---- C:\Windows\SYSWOW64\wdigest.dll 2015-09-10 22:13:16 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2015-09-10 22:13:16 ----A---- C:\Windows\system32\sspicli.dll 2015-09-10 22:13:16 ----A---- C:\Windows\system32\ncrypt.dll 2015-09-10 22:13:16 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-09-10 22:13:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-09-10 22:13:15 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2015-09-10 22:13:15 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2015-09-10 22:13:15 ----A---- C:\Windows\system32\TSpkg.dll 2015-09-10 22:13:15 ----A---- C:\Windows\system32\lsass.exe 2015-09-10 22:13:06 ----A---- C:\Windows\SYSWOW64\setup16.exe 2015-09-10 22:13:06 ----A---- C:\Windows\system32\auditpol.exe 2015-09-10 22:12:42 ----A---- C:\Windows\SYSWOW64\auditpol.exe 2015-09-10 22:12:29 ----A---- C:\Windows\SYSWOW64\srclient.dll 2015-09-10 22:12:29 ----A---- C:\Windows\SYSWOW64\cryptbase.dll 2015-09-10 22:12:29 ----A---- C:\Windows\system32\srclient.dll 2015-09-10 22:12:29 ----A---- C:\Windows\system32\secur32.dll 2015-09-10 22:12:29 ----A---- C:\Windows\system32\ntvdm64.dll 2015-09-10 22:12:29 ----A---- C:\Windows\system32\cryptbase.dll 2015-09-10 22:12:28 ----A---- C:\Windows\SYSWOW64\secur32.dll 2015-09-10 22:12:28 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2015-09-10 22:12:28 ----A---- C:\Windows\system32\wow64win.dll 2015-09-10 22:12:28 ----A---- C:\Windows\system32\sspisrv.dll 2015-09-10 22:12:28 ----A---- C:\Windows\system32\credssp.dll 2015-09-10 22:12:27 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2015-09-10 22:12:27 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll 2015-09-10 22:12:27 ----A---- C:\Windows\SYSWOW64\credssp.dll 2015-09-10 22:12:27 ----A---- C:\Windows\system32\wow64cpu.dll 2015-09-10 22:12:27 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2015-09-10 22:12:27 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2015-09-10 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-09-10 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-09-10 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-09-10 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-09-10 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-09-10 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-09-10 22:12:26 ----A---- C:\Windows\SYSWOW64\wow32.dll 2015-09-10 22:12:26 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2015-09-10 22:12:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-09-10 22:12:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-09-10 22:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-09-10 22:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2015-09-10 22:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-09-10 22:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-09-10 22:12:23 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-09-10 22:12:23 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-09-10 22:12:23 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-09-10 22:12:23 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-09-10 22:12:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-09-10 22:12:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-09-10 22:12:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-09-10 22:12:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-09-10 22:12:22 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-09-10 22:12:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2015-09-10 22:12:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-09-10 22:12:21 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-09-10 22:12:21 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-09-10 22:12:20 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-09-10 22:12:20 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-09-10 22:12:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2015-09-10 22:12:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-09-10 22:12:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-09-10 22:12:04 ----A---- C:\Windows\SYSWOW64\instnm.exe 2015-09-10 22:12:04 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2015-09-10 22:12:04 ----A---- C:\Windows\system32\apisetschema.dll 2015-09-10 22:12:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-09-10 22:12:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2015-09-10 22:12:03 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-09-10 22:12:03 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-09-10 22:12:02 ----A---- C:\Windows\SYSWOW64\user.exe 2015-09-10 22:12:02 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2015-09-10 22:12:02 ----A---- C:\Windows\system32\adtschema.dll 2015-09-10 22:12:01 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2015-09-10 22:12:01 ----A---- C:\Windows\system32\msaudite.dll 2015-09-10 22:11:59 ----A---- C:\Windows\SYSWOW64\msobjs.dll 2015-09-10 22:11:59 ----A---- C:\Windows\system32\msobjs.dll 2015-09-10 22:11:30 ----A---- C:\Windows\system32\authui.dll 2015-09-10 22:11:29 ----A---- C:\Windows\SYSWOW64\authui.dll 2015-09-10 22:11:29 ----A---- C:\Windows\system32\consent.exe 2015-09-10 22:11:28 ----A---- C:\Windows\system32\appinfo.dll 2015-09-10 22:11:17 ----A---- C:\Windows\SYSWOW64\msxml6.dll 2015-09-10 22:11:17 ----A---- C:\Windows\system32\msxml6.dll 2015-09-10 22:11:17 ----A---- C:\Windows\system32\msxml3.dll 2015-09-10 22:11:16 ----A---- C:\Windows\SYSWOW64\msxml6r.dll 2015-09-10 22:11:16 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2015-09-10 22:11:16 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2015-09-10 22:11:16 ----A---- C:\Windows\system32\msxml6r.dll 2015-09-10 22:11:16 ----A---- C:\Windows\system32\msxml3r.dll 2015-09-10 22:10:57 ----A---- C:\Windows\system32\appidpolicyconverter.exe 2015-09-10 22:10:55 ----A---- C:\Windows\system32\appidsvc.dll 2015-09-10 22:10:55 ----A---- C:\Windows\system32\appidapi.dll 2015-09-10 22:10:53 ----A---- C:\Windows\SYSWOW64\appidapi.dll 2015-09-10 22:10:49 ----A---- C:\Windows\system32\appidcertstorecheck.exe 2015-09-10 22:10:47 ----A---- C:\Windows\system32\setbcdlocale.dll 2015-09-10 22:10:46 ----A---- C:\Windows\system32\drivers\appid.sys 2015-09-10 22:10:08 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2015-09-10 22:10:08 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2015-09-10 22:10:08 ----A---- C:\Windows\system32\win32k.sys 2015-09-10 22:10:08 ----A---- C:\Windows\system32\lpk.dll 2015-09-10 22:10:08 ----A---- C:\Windows\system32\atmlib.dll 2015-09-10 22:10:08 ----A---- C:\Windows\system32\atmfd.dll 2015-09-10 22:10:07 ----A---- C:\Windows\SYSWOW64\lpk.dll 2015-09-10 22:10:07 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2015-09-10 22:10:07 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2015-09-10 22:10:07 ----A---- C:\Windows\system32\fontsub.dll 2015-09-10 22:10:07 ----A---- C:\Windows\system32\dciman32.dll 2015-09-10 22:10:02 ----A---- C:\Windows\system32\wucltux.dll 2015-09-10 22:10:02 ----A---- C:\Windows\system32\wuaueng.dll 2015-09-10 22:10:01 ----A---- C:\Windows\SYSWOW64\wuwebv.dll 2015-09-10 22:10:01 ----A---- C:\Windows\SYSWOW64\wudriver.dll 2015-09-10 22:10:01 ----A---- C:\Windows\SYSWOW64\wuapi.dll 2015-09-10 22:10:01 ----A---- C:\Windows\system32\wuwebv.dll 2015-09-10 22:10:01 ----A---- C:\Windows\system32\wuapi.dll 2015-09-10 22:10:01 ----A---- C:\Windows\system32\WinSetupUI.dll 2015-09-10 22:10:00 ----A---- C:\Windows\SYSWOW64\wuapp.exe 2015-09-10 22:10:00 ----A---- C:\Windows\system32\wups2.dll 2015-09-10 22:10:00 ----A---- C:\Windows\system32\wudriver.dll 2015-09-10 22:10:00 ----A---- C:\Windows\system32\wuauclt.exe 2015-09-10 22:10:00 ----A---- C:\Windows\system32\wuapp.exe 2015-09-10 22:09:59 ----A---- C:\Windows\SYSWOW64\wups.dll 2015-09-10 22:09:59 ----A---- C:\Windows\system32\wups.dll 2015-09-10 22:09:59 ----A---- C:\Windows\system32\wu.upgrade.ps.dll 2015-09-10 08:58:25 ----HD---- C:\$Windows.~BT 2015-09-07 10:28:01 ----SD---- C:\Windows\SYSWOW64\Microsoft ======List of files/folders modified in the last 1 month====== 2015-10-03 20:37:40 ----D---- C:\Windows\Temp 2015-10-03 20:37:37 ----D---- C:\Program Files 2015-10-03 20:00:35 ----D---- C:\Windows\inf 2015-10-03 20:00:35 ----AD---- C:\Windows\System32 2015-10-03 20:00:35 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-10-03 19:59:14 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\Spotify 2015-10-03 19:55:08 ----A---- C:\Windows\SYSWOW64\log.txt 2015-10-03 19:53:35 ----D---- C:\Windows\Prefetch 2015-10-03 19:52:56 ----D---- C:\ProgramData\VeriFace 2015-10-03 10:13:23 ----D---- C:\Windows\system32\config 2015-10-01 23:45:29 ----SHD---- C:\Windows\Installer 2015-10-01 23:45:09 ----SHD---- C:\System Volume Information 2015-10-01 22:52:30 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\Skype 2015-10-01 22:29:14 ----D---- C:\Windows\rescache 2015-09-30 00:17:20 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\uTorrent 2015-09-30 00:13:26 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\vlc 2015-09-30 00:13:05 ----RD---- C:\Program Files (x86) 2015-09-28 15:39:17 ----D---- C:\Windows\system32\drivers 2015-09-23 22:57:16 ----D---- C:\Windows\SysWOW64 2015-09-23 22:57:10 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-09-23 10:23:27 ----SHD---- C:\Config.Msi 2015-09-23 10:23:07 ----RSD---- C:\Windows\assembly 2015-09-23 10:23:02 ----D---- C:\ProgramData\regid.1991-06.com.microsoft 2015-09-23 10:20:54 ----D---- C:\Program Files\Microsoft Office 15 2015-09-19 13:58:49 ----D---- C:\Windows\Panther 2015-09-19 12:19:47 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\Origin 2015-09-19 12:19:46 ----D---- C:\ProgramData\Origin 2015-09-19 12:18:34 ----D---- C:\Program Files (x86)\Origin 2015-09-19 12:16:57 ----HD---- C:\ProgramData 2015-09-18 07:40:13 ----D---- C:\Windows\Tasks 2015-09-14 13:09:21 ----D---- C:\Windows\Microsoft.NET 2015-09-14 11:19:09 ----D---- C:\Windows\system32\Tasks 2015-09-13 12:41:26 ----D---- C:\Windows\winsxs 2015-09-13 12:38:33 ----D---- C:\Program Files\Windows Journal 2015-09-11 11:15:24 ----D---- C:\Windows\SYSWOW64\en-US 2015-09-11 11:15:24 ----D---- C:\Windows\system32\en-US 2015-09-11 11:15:24 ----D---- C:\Windows\ehome 2015-09-11 11:15:21 ----D---- C:\Program Files\Internet Explorer 2015-09-11 11:15:16 ----D---- C:\Windows\PolicyDefinitions 2015-09-11 11:15:12 ----D---- C:\Program Files (x86)\Internet Explorer 2015-09-11 11:14:50 ----D---- C:\Windows\AppPatch 2015-09-11 11:14:36 ----D---- C:\Windows\system32\Boot 2015-09-11 10:31:53 ----D---- C:\Windows\system32\MRT 2015-09-10 22:09:37 ----D---- C:\Windows\system32\catroot2 2015-09-05 00:19:18 ----D---- C:\Windows\system32\catroot 2015-09-04 10:26:29 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-09-04 10:26:29 ----D---- C:\Program Files (x86)\Mozilla Firefox ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-07-20 65224] R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-07-20 274808] R0 fbfmon;fbfmon; C:\Windows\system32\drivers\fbfmon.sys [2012-05-30 57952] R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-11-30 568600] R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-01-27 16152] R0 LHDmgr;LHDmgr; C:\Windows\System32\DRIVERS\LhdX64.sys [2012-05-30 39008] R0 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2013-02-19 771536] R0 mfewfpk;McAfee Inc. mfewfpk; C:\Windows\system32\drivers\mfewfpk.sys [2013-02-19 340216] R0 NSD;NSD; C:\Windows\system32\drivers\nsd.sys [2011-12-24 24160] R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-10-08 30056] R0 PxHlpa64;PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [2013-07-19 56336] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-07-20 93528] R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-07-20 1048856] R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-07-20 447944] R1 BPntDrv;BPntDrv; C:\Windows\system32\drivers\BPntDrv.sys [2012-05-30 13408] R1 ctxusbm;Citrix USB Monitor Driver; C:\Windows\system32\DRIVERS\ctxusbm.sys [2013-09-24 97768] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-20 283200] R1 Nsdfltr;Nsdfltr; C:\Windows\system32\drivers\Nsdfltr.sys [2011-12-22 59488] R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-07-20 28656] R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-07-20 90968] R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-07-20 150160] R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2012-05-30 30816] R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-10-22 2791424] R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-12-13 29344] R3 cfwids;McAfee Inc. cfwids; C:\Windows\system32\drivers\cfwids.sys [2013-02-19 70112] R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-01-19 14658688] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-01-31 4739304] R3 IntcDAud;Intel® Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264] R3 iusb3hub;Intel® USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-01-27 356120] R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-01-27 787736] R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120] R3 MEIx64;Intel® Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184] R3 mfeapfk;McAfee Inc. mfeapfk; C:\Windows\system32\drivers\mfeapfk.sys [2013-02-19 179280] R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2013-02-19 309840] R3 mfefirek;McAfee Inc. mfefirek; C:\Windows\system32\drivers\mfefirek.sys [2013-02-19 515968] R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2015-09-22 37960] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-02-25 470256] R3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784] S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-12-13 36000] S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-12-13 259744] S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2011-12-13 109216] S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-12-13 166048] S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-12-13 59040] S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-12-13 283296] S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-12-13 290464] S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984] S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784] S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960] S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-10-10 80384] S3 HipShieldK;McAfee Inc. HipShieldK; C:\Windows\system32\drivers\HipShieldK.sys [2012-04-20 196440] S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736] S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 36928] S3 HtcVCom32;HTC Diagnostic Port; C:\Windows\system32\DRIVERS\HtcVComV64.sys [2010-03-08 121800] S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 30208] S3 mfeavfk01;McAfee Inc.; C:\Windows\system32\drivers\mfeavfk01.sys [] S3 mferkdet;McAfee Inc. mferkdet; C:\Windows\system32\drivers\mferkdet.sys [2013-02-19 106552] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720] S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2011-10-24 313960] S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [2013-09-03 181152] R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008] R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-12-13 106144] R2 avast! Antivirus;Avast Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2015-07-20 146600] R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672] R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-09-11 2774104] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2013-11-18 87368] R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448] R2 Intel® ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-02-08 128280] R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2012-02-08 161560] R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2012-02-08 277784] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2015-09-22 157928] R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304] R2 mcmscsvc;McAfee Services; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304] R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304] R2 McNASvc;McAfee Network Agent; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304] R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304] R2 McShield;McAfee McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [2013-02-19 241456] R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2013-02-19 218760] R2 mfevtp;McAfee Validation Trust Protection Service; C:\Windows\system32\mfevtps.exe [2013-02-19 182752] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240] R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424] R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-02-08 363800] R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-02-20 641352] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088] S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200] S2 NSDSvc;Fast boot service of lenovo; C:\Windows\System32\NSDSvc.exe [2011-12-24 120160] S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-08 1258856] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-23 269000] S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864] S3 cphs;Intel® Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-01-28 276248] S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688] S3 McAWFwk;McAfee Activation Service; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [2011-01-28 225216] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe [2015-07-31 289256] S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2013-02-26 384048] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-30 149160] S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-09-19 2057736] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-12-13 150600] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-12-13 5132888] S4 McOobeSv;McAfee OOBE Service; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] -----------------EOF-----------------

Goedemiddag, Ik heb al een tijdlang last van het feit dat mijn computer vastloopt, nadat ik hem een aantal minuten niet in gebruik heb en mijn computer automatisch op de screensaver gaat. Als ik hem, nadat mijn scherm zwart is, weer activeer, dan kan ik even met mijn muis bewegen, maar vervolgens loopt hij volledig vast en blijft mijn computer laden tot ik een ons weeg. Ik moet mijn computer dan uitzetten door de aan/uit knop langer dan 5 seconden ingedrukt te houden. Over het algemeen vind ik mijn computer ook een stuk trager dan voorheen. Wat kan ik het beste doen? Met vriendelijke groeten en bij voorbaat dank, Jasper