Monstermarketplace verwijderen(Alweer)

[JaMiiE]

Vorige week ben ik van Monstermarketplace afgeholpen, maar sinds twee dagen terug heb ik het weer, zou ik nog een keer geholpen kunnen worden?

[Jion]

Je kent de drill he JaMiiE ;-)

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

• 
  
• RSIT 32 bit (RSIT.exe)
  
• RSIT 64 bit (RSITx64.exe)
  

Dubbelklik op RSIT.exe om de tool te starten.

• 
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  
• Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
  
• Plaats de inhoud hiervan in het volgende bericht.
  

[JaMiiE]

Logfile of random's system information tool 1.09 (written by random/random)

Run by Jamie at 2013-09-21 19:01:22

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 535 GB (56%) free of 954 GB

Total RAM: 8191 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 19:02:16, on 21-9-2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16506)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Skype\Phone\Skype.exe

C:\Program Files (x86)\Windows Sidebar\sidebar.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Jamie\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\17.0.0.136\InstStub.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files\trend micro\Jamie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\IPSBHO.DLL

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll

O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [CTSyncService] C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe /StartRunKey

O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r

O4 - HKLM\..\Run: [updReg] C:\Windows\UpdReg.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_C1BDF7A752CABCCEC37F2A5D7AA45B34] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

O4 - HKCU\..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-21-2695811633-3072124037-2456282401-1001\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')

O4 - HKUS\S-1-5-21-2695811633-3072124037-2456282401-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe

O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe

O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: Sound Blaster X-Fi MB Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 11278 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

winlogon.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

"C:\Windows\system32\nvvsvc.exe"

"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"

C:\Windows\system32\nvvsvc.exe -session -first

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"

"taskhost.exe"

"C:\Program Files\Bonjour\mDNSResponder.exe"

"C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\diMaster.dll" /prefetch:1

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k imgsvc

"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"

WLIDSvcM.exe 1588

C:\Windows\system32\SearchIndexer.exe /Embedding

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

"C:\Windows\System32\rundll32.exe" C:\Windows\system32\AmbRunE.dll,RunDLLEntry

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun

"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe"

"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2604.0.2067692309\627564451" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19,22 --gpu-vendor-id=0x10de --gpu-device-id=0x0dc4 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.1106 --ignored=" --type=renderer " /prefetch:822062411

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

"C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.1.1269607175\320399156" /prefetch:673131151

"C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

"C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe" /StartRunKey

"C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r

"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"C:\Program Files (x86)\iTunes\iTunesHelper.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.2.290957580\1056675446" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.3.360998625\827168524" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.4.48437222\85584795" /prefetch:673131151

"C:\Users\Jamie\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001" 3476 "C:\Users\Jamie\AppData\Local\Temp\""Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0012"

"C:\Program Files\iPod\bin\iPodService.exe"

"C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe"

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

"C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\17.0.0.136\InstStub.exe" /svc

"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"

C:\Windows\System32\svchost.exe -k secsvcs

"C:\Windows\system32\wuauclt.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2604.15.2002963111\1428345952" --lang=nl --ignored=" --type=renderer " /prefetch:-632637702

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.17.2068137689\1165912845" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.21.785350906\833475934" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.24.23246226\100433244" /prefetch:673131151

taskeng.exe {DB4ED80F-70E6-4877-82CF-E6E232EB9598}

"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c

C:\Windows\system32\wbem\wmiprvse.exe

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/OutdatedInstallCheck/12WeeksOutdatedInstall/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.31.49752996\1061261434" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Control0 pct:50a m29stable:r1/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/OutdatedInstallCheck/12WeeksOutdatedInstall/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_91/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --disable-accelerated-2d-canvas --channel="2604.33.59323222\29966634" /prefetch:673131151

"C:\Users\Jamie\Downloads\RSITx64.exe"

C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Jamie\AppData\Roaming\Mozilla\Firefox\Profiles\k2xjxkoe.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]

"Description"=iTunes Detector Plug-in

"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]

"Description"=

"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]

"Description"=Java™ Deployment Toolkit

"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]

"Description"=Oracle® Next Generation Java™ Plug-In

"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]

"Description"=NVIDIA stereo images plugin for Mozilla browsers

"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]

"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers

"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]

"Description"=This plugin detects and launches Pando Media Booster

"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

Symantec NCO BHO - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll [2009-08-29 392560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]

Symantec Intrusion Prevention - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\IPSBHO.DLL [2009-08-30 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-09-11 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-09-11 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll [2009-08-29 392560]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-08 10060832]

"RunDLLEntry"=C:\Windows\system32\AmbRunE.dll [2009-02-26 17920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ASRockOCTuner"= []

"ASRockIES"= []

"zASRockInstantBoot"= []

"GoogleChromeAutoLaunch_C1BDF7A752CABCCEC37F2A5D7AA45B34"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2013-09-02 829392]

"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-07-25 20684656]

"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-08-01 3673696]

"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21 1174016]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"NUSB3MON"=C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-01-22 106496]

"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

"CTSyncService"=C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [2009-07-08 1233195]

"VolPanel"=C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [2009-05-04 241789]

"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]

"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-08-16 152392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvyu"=msyuv.dll

"vidc.iyuv"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"vidc.yvu9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

"wave2"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer2"=wdmaud.drv

"aux2"=wdmaud.drv

"wave3"=wdmaud.drv

"midi3"=wdmaud.drv

"mixer3"=wdmaud.drv

"aux3"=wdmaud.drv

"wave4"=wdmaud.drv

"midi4"=wdmaud.drv

"mixer4"=wdmaud.drv

"aux4"=wdmaud.drv

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-09-21 19:01:22 ----D---- C:\rsit

2013-09-21 16:00:06 ----D---- C:\Program Files (x86)\Microsoft.NET

2013-09-21 15:50:58 ----N---- C:\bootsqm.dat

2013-09-18 07:32:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2013-09-18 07:32:38 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe

2013-09-18 07:32:38 ----A---- C:\Windows\SYSWOW64\msls31.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\wininet.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\msrating.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\mshtmler.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\jscript.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\ieui.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\iesysprep.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\iepeers.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\ieakeng.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\dxtrans.dll

2013-09-18 07:32:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\wextract.exe

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\webcheck.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\url.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\pngfilt.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\occache.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\mshta.exe

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\licmgr10.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\inseng.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\imgutil.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\iexpress.exe

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\iesetup.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\ieakui.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\ieaksie.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\icardie.dll

2013-09-18 07:32:36 ----A---- C:\Windows\SYSWOW64\admparse.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\wininet.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\urlmon.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-18 07:32:35 ----A---- C:\Windows\system32\pngfilt.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\occache.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\msrating.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\msls31.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\mshtml.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\jsproxy.dll

2013-09-18 07:32:35 ----A---- C:\Windows\system32\ieUnatt.exe

2013-09-18 07:32:35 ----A---- C:\Windows\system32\iertutil.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\SetIEInstalledDate.exe

2013-09-18 07:32:34 ----A---- C:\Windows\system32\mshtmler.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\mshta.exe

2013-09-18 07:32:34 ----A---- C:\Windows\system32\msfeedssync.exe

2013-09-18 07:32:34 ----A---- C:\Windows\system32\msfeedsbs.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\jscript9.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\jscript.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\imgutil.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\ieui.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\iesysprep.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\iepeers.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\ieframe.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\ieapfltr.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\ieapfltr.dat

2013-09-18 07:32:34 ----A---- C:\Windows\system32\ieakui.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\ieaksie.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\ieakeng.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\IEAdvpack.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\ie4uinit.exe

2013-09-18 07:32:34 ----A---- C:\Windows\system32\icardie.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\dxtrans.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\dxtmsft.dll

2013-09-18 07:32:34 ----A---- C:\Windows\system32\admparse.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\wextract.exe

2013-09-18 07:32:33 ----A---- C:\Windows\system32\webcheck.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\vbscript.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\url.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\mshtmled.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\msfeeds.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\licmgr10.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\inseng.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\iexpress.exe

2013-09-18 07:32:33 ----A---- C:\Windows\system32\iesetup.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\iernonce.dll

2013-09-18 07:32:33 ----A---- C:\Windows\system32\iedkcs32.dll

2013-09-18 07:30:03 ----D---- C:\Windows\SYSWOW64\Wat

2013-09-18 07:30:02 ----D---- C:\Windows\system32\Wat

2013-09-15 19:23:25 ----D---- C:\Windows\Minidump

2013-09-15 15:41:53 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll

2013-09-15 15:41:53 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll

2013-09-15 15:41:08 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE

2013-09-15 14:38:07 ----D---- C:\Program Files (x86)\Bethesda Softworks

2013-09-15 14:38:06 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll

2013-09-15 14:38:06 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll

2013-09-15 14:38:06 ----A---- C:\Windows\system32\XAudio2_1.dll

2013-09-15 14:38:06 ----A---- C:\Windows\system32\XAPOFX1_0.dll

2013-09-15 14:38:05 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll

2013-09-15 14:38:05 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll

2013-09-15 14:38:05 ----A---- C:\Windows\system32\xactengine3_1.dll

2013-09-15 14:38:05 ----A---- C:\Windows\system32\X3DAudio1_4.dll

2013-09-15 14:38:02 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll

2013-09-15 14:38:02 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll

2013-09-15 14:38:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll

2013-09-15 14:38:02 ----A---- C:\Windows\system32\D3DX9_38.dll

2013-09-15 14:38:02 ----A---- C:\Windows\system32\d3dx10_38.dll

2013-09-15 14:38:02 ----A---- C:\Windows\system32\D3DCompiler_38.dll

2013-09-15 14:38:01 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll

2013-09-15 14:38:01 ----A---- C:\Windows\system32\XAudio2_0.dll

2013-09-15 14:38:00 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll

2013-09-15 14:38:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll

2013-09-15 14:38:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll

2013-09-15 14:38:00 ----A---- C:\Windows\system32\xactengine3_0.dll

2013-09-15 14:38:00 ----A---- C:\Windows\system32\X3DAudio1_3.dll

2013-09-15 14:38:00 ----A---- C:\Windows\system32\D3DCompiler_37.dll

2013-09-15 14:37:59 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll

2013-09-15 14:37:59 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll

2013-09-15 14:37:59 ----A---- C:\Windows\system32\D3DX9_37.dll

2013-09-15 14:37:59 ----A---- C:\Windows\system32\d3dx10_37.dll

2013-09-15 14:37:57 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll

2013-09-15 14:37:57 ----A---- C:\Windows\system32\xactengine2_10.dll

2013-09-15 14:37:54 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll

2013-09-15 14:37:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll

2013-09-15 14:37:54 ----A---- C:\Windows\system32\d3dx10_36.dll

2013-09-15 14:37:54 ----A---- C:\Windows\system32\D3DCompiler_36.dll

2013-09-15 14:37:43 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll

2013-09-15 14:37:43 ----A---- C:\Windows\system32\d3dx9_36.dll

2013-09-15 14:37:41 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll

2013-09-15 14:37:41 ----A---- C:\Windows\system32\xactengine2_9.dll

2013-09-15 14:37:40 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll

2013-09-15 14:37:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll

2013-09-15 14:37:40 ----A---- C:\Windows\system32\d3dx10_35.dll

2013-09-15 14:37:40 ----A---- C:\Windows\system32\D3DCompiler_35.dll

2013-09-15 14:37:39 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll

2013-09-15 14:37:39 ----A---- C:\Windows\system32\d3dx9_35.dll

2013-09-15 14:37:37 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll

2013-09-15 14:37:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll

2013-09-15 14:37:37 ----A---- C:\Windows\system32\xactengine2_8.dll

2013-09-15 14:37:37 ----A---- C:\Windows\system32\X3DAudio1_2.dll

2013-09-15 14:37:32 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll

2013-09-15 14:37:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll

2013-09-15 14:37:32 ----A---- C:\Windows\system32\d3dx10_34.dll

2013-09-15 14:37:32 ----A---- C:\Windows\system32\D3DCompiler_34.dll

2013-09-15 14:37:30 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll

2013-09-15 14:37:30 ----A---- C:\Windows\system32\d3dx9_34.dll

2013-09-15 14:37:29 ----A---- C:\Windows\system32\xinput1_3.dll

2013-09-15 14:37:28 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll

2013-09-15 14:37:28 ----A---- C:\Windows\system32\xactengine2_7.dll

2013-09-15 14:37:24 ----A---- C:\Windows\system32\d3dx10_33.dll

2013-09-15 14:37:24 ----A---- C:\Windows\system32\D3DCompiler_33.dll

2013-09-15 14:37:20 ----A---- C:\Windows\system32\d3dx9_33.dll

2013-09-15 14:37:18 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll

2013-09-15 14:37:18 ----A---- C:\Windows\system32\xactengine2_6.dll

2013-09-15 14:37:17 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll

2013-09-15 14:37:17 ----A---- C:\Windows\system32\xactengine2_5.dll

2013-09-15 14:37:16 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll

2013-09-15 14:37:16 ----A---- C:\Windows\SYSWOW64\d3dx10.dll

2013-09-15 14:37:16 ----A---- C:\Windows\system32\d3dx9_32.dll

2013-09-15 14:37:16 ----A---- C:\Windows\system32\d3dx10.dll

2013-09-15 14:37:15 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll

2013-09-15 14:37:15 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll

2013-09-15 14:37:15 ----A---- C:\Windows\system32\xactengine2_4.dll

2013-09-15 14:37:15 ----A---- C:\Windows\system32\x3daudio1_1.dll

2013-09-15 14:37:13 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll

2013-09-15 14:37:13 ----A---- C:\Windows\system32\d3dx9_31.dll

2013-09-15 14:37:11 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll

2013-09-15 14:37:11 ----A---- C:\Windows\system32\xactengine2_3.dll

2013-09-15 14:37:10 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll

2013-09-15 14:37:10 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll

2013-09-15 14:37:10 ----A---- C:\Windows\system32\xinput1_2.dll

2013-09-15 14:37:10 ----A---- C:\Windows\system32\xactengine2_2.dll

2013-09-15 14:37:06 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll

2013-09-15 14:37:06 ----A---- C:\Windows\system32\xinput1_1.dll

2013-09-15 14:37:00 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll

2013-09-15 14:37:00 ----A---- C:\Windows\system32\xactengine2_1.dll

2013-09-15 14:36:55 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll

2013-09-15 14:36:55 ----A---- C:\Windows\system32\d3dx9_30.dll

2013-09-15 14:36:53 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll

2013-09-15 14:36:53 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll

2013-09-15 14:36:53 ----A---- C:\Windows\system32\xactengine2_0.dll

2013-09-15 14:36:53 ----A---- C:\Windows\system32\x3daudio1_0.dll

2013-09-15 14:36:52 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll

2013-09-15 14:36:52 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll

2013-09-15 14:36:52 ----A---- C:\Windows\system32\d3dx9_29.dll

2013-09-15 14:36:52 ----A---- C:\Windows\system32\d3dx9_28.dll

2013-09-15 14:36:50 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll

2013-09-15 14:36:50 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll

2013-09-15 14:36:50 ----A---- C:\Windows\system32\d3dx9_27.dll

2013-09-15 14:36:50 ----A---- C:\Windows\system32\d3dx9_26.dll

2013-09-15 14:36:47 ----A---- C:\Windows\system32\d3dx9_25.dll

2013-09-15 14:36:46 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll

2013-09-15 14:36:46 ----A---- C:\Windows\system32\d3dx9_24.dll

2013-09-15 14:35:02 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll

2013-09-15 14:35:01 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll

2013-09-15 14:35:01 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll

2013-09-15 14:35:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll

2013-09-15 14:34:33 ----D---- C:\Windows\SYSWOW64\xlive

2013-09-14 21:01:44 ----SHD---- C:\found.000

2013-09-14 14:18:48 ----A---- C:\Windows\system32\drivers\usbport.sys

2013-09-14 14:18:48 ----A---- C:\Windows\system32\drivers\usbhub.sys

2013-09-14 14:18:48 ----A---- C:\Windows\system32\drivers\usbehci.sys

2013-09-14 14:18:47 ----A---- C:\Windows\system32\drivers\usbuhci.sys

2013-09-14 14:18:47 ----A---- C:\Windows\system32\drivers\usbohci.sys

2013-09-14 14:18:47 ----A---- C:\Windows\system32\drivers\usbd.sys

2013-09-14 14:18:47 ----A---- C:\Windows\system32\drivers\usbccgp.sys

2013-09-14 14:18:45 ----A---- C:\Windows\system32\esent.dll

2013-09-14 14:18:44 ----A---- C:\Windows\SYSWOW64\fsutil.exe

2013-09-14 14:18:44 ----A---- C:\Windows\SYSWOW64\esent.dll

2013-09-14 14:18:44 ----A---- C:\Windows\system32\fsutil.exe

2013-09-14 14:18:44 ----A---- C:\Windows\system32\drivers\storport.sys

2013-09-14 14:18:44 ----A---- C:\Windows\system32\drivers\nvstor.sys

2013-09-14 14:18:44 ----A---- C:\Windows\system32\drivers\nvraid.sys

2013-09-14 14:18:44 ----A---- C:\Windows\system32\drivers\iaStorV.sys

2013-09-14 14:18:44 ----A---- C:\Windows\system32\drivers\amdxata.sys

2013-09-14 14:18:44 ----A---- C:\Windows\system32\drivers\amdsata.sys

2013-09-14 14:18:43 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS

2013-09-14 03:16:16 ----A---- C:\Windows\system32\Wdfres.dll

2013-09-14 03:16:16 ----A---- C:\Windows\system32\drivers\WdfLdr.sys

2013-09-14 03:16:16 ----A---- C:\Windows\system32\drivers\Wdf01000.sys

2013-09-14 03:07:20 ----A---- C:\Windows\SYSWOW64\fontsub.dll

2013-09-14 03:07:20 ----A---- C:\Windows\SYSWOW64\atmlib.dll

2013-09-14 03:07:20 ----A---- C:\Windows\system32\atmlib.dll

2013-09-14 03:07:19 ----A---- C:\Windows\SYSWOW64\atmfd.dll

2013-09-14 03:07:19 ----A---- C:\Windows\system32\fontsub.dll

2013-09-14 03:07:19 ----A---- C:\Windows\system32\atmfd.dll

2013-09-14 03:06:26 ----A---- C:\Windows\system32\WUDFSvc.dll

2013-09-14 03:06:26 ----A---- C:\Windows\system32\WUDFPlatform.dll

2013-09-14 03:06:26 ----A---- C:\Windows\system32\drivers\WUDFRd.sys

2013-09-14 03:06:26 ----A---- C:\Windows\system32\drivers\WUDFPf.sys

2013-09-14 03:06:25 ----A---- C:\Windows\system32\WUDFx.dll

2013-09-14 03:06:25 ----A---- C:\Windows\system32\WUDFHost.exe

2013-09-14 03:06:25 ----A---- C:\Windows\system32\WUDFCoinstaller.dll

2013-09-13 15:35:20 ----D---- C:\Program Files\CCleaner

2013-09-13 15:32:42 ----A---- C:\DelFix.txt

2013-09-13 08:54:39 ----A---- C:\Windows\SYSWOW64\xmllite.dll

2013-09-13 08:54:39 ----A---- C:\Windows\system32\xmllite.dll

2013-09-13 08:53:43 ----A---- C:\Windows\system32\drivers\dxgmms1.sys

2013-09-13 08:53:43 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys

2013-09-13 08:53:43 ----A---- C:\Windows\system32\cdd.dll

2013-09-13 08:53:16 ----A---- C:\Windows\SYSWOW64\odbctrac.dll

2013-09-13 08:53:16 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll

2013-09-13 08:53:16 ----A---- C:\Windows\SYSWOW64\odbccu32.dll

2013-09-13 08:53:16 ----A---- C:\Windows\SYSWOW64\odbccr32.dll

2013-09-13 08:53:16 ----A---- C:\Windows\SYSWOW64\odbccp32.dll

2013-09-13 08:53:16 ----A---- C:\Windows\system32\odbctrac.dll

2013-09-13 08:53:16 ----A---- C:\Windows\system32\odbccu32.dll

2013-09-13 08:53:16 ----A---- C:\Windows\system32\odbccr32.dll

2013-09-13 08:53:16 ----A---- C:\Windows\system32\odbccp32.dll

2013-09-13 08:52:22 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll

2013-09-13 08:52:22 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll

2013-09-13 08:52:22 ----A---- C:\Windows\system32\dhcpcsvc6.dll

2013-09-13 08:52:22 ----A---- C:\Windows\system32\dhcpcore6.dll

2013-09-13 08:52:15 ----A---- C:\Windows\SYSWOW64\tsgqec.dll

2013-09-13 08:52:15 ----A---- C:\Windows\SYSWOW64\mstscax.dll

2013-09-13 08:52:15 ----A---- C:\Windows\SYSWOW64\aaclient.dll

2013-09-13 08:52:15 ----A---- C:\Windows\system32\tsgqec.dll

2013-09-13 08:52:15 ----A---- C:\Windows\system32\mstscax.dll

2013-09-13 08:52:15 ----A---- C:\Windows\system32\aaclient.dll

2013-09-13 08:52:04 ----A---- C:\Windows\SYSWOW64\crypt32.dll

2013-09-13 08:52:04 ----A---- C:\Windows\system32\wintrust.dll

2013-09-13 08:52:04 ----A---- C:\Windows\system32\crypt32.dll

2013-09-13 08:52:03 ----A---- C:\Windows\SYSWOW64\wintrust.dll

2013-09-13 08:52:03 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll

2013-09-13 08:52:03 ----A---- C:\Windows\SYSWOW64\cryptnet.dll

2013-09-13 08:52:03 ----A---- C:\Windows\system32\cryptsvc.dll

2013-09-13 08:52:03 ----A---- C:\Windows\system32\cryptnet.dll

2013-09-13 08:51:52 ----A---- C:\Windows\SYSWOW64\explorer.exe

2013-09-13 08:51:52 ----A---- C:\Windows\explorer.exe

2013-09-13 08:51:51 ----A---- C:\Windows\SYSWOW64\sbe.dll

2013-09-13 08:51:51 ----A---- C:\Windows\SYSWOW64\CPFilters.dll

2013-09-13 08:51:51 ----A---- C:\Windows\system32\sbe.dll

2013-09-13 08:51:51 ----A---- C:\Windows\system32\CPFilters.dll

2013-09-13 08:51:42 ----A---- C:\Windows\SYSWOW64\ntshrui.dll

2013-09-13 08:51:42 ----A---- C:\Windows\system32\ntshrui.dll

2013-09-13 08:51:25 ----A---- C:\Windows\system32\tquery.dll

2013-09-13 08:51:24 ----A---- C:\Windows\SYSWOW64\mssrch.dll

2013-09-13 08:51:24 ----A---- C:\Windows\system32\SearchIndexer.exe

2013-09-13 08:51:24 ----A---- C:\Windows\system32\mssrch.dll

2013-09-13 08:51:23 ----A---- C:\Windows\SYSWOW64\tquery.dll

2013-09-13 08:51:23 ----A---- C:\Windows\system32\SearchProtocolHost.exe

2013-09-13 08:51:22 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe

2013-09-13 08:51:22 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe

2013-09-13 08:51:22 ----A---- C:\Windows\SYSWOW64\mssph.dll

2013-09-13 08:51:22 ----A---- C:\Windows\system32\mssph.dll

2013-09-13 08:51:21 ----A---- C:\Windows\SYSWOW64\mssvp.dll

2013-09-13 08:51:21 ----A---- C:\Windows\system32\SearchFilterHost.exe

2013-09-13 08:51:21 ----A---- C:\Windows\system32\mssvp.dll

2013-09-13 08:51:21 ----A---- C:\Windows\system32\mssphtb.dll

2013-09-13 08:51:20 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe

2013-09-13 08:51:20 ----A---- C:\Windows\SYSWOW64\mssphtb.dll

2013-09-13 08:51:20 ----A---- C:\Windows\system32\msscntrs.dll

2013-09-13 08:51:18 ----A---- C:\Windows\SYSWOW64\msscntrs.dll

2013-09-13 08:51:13 ----A---- C:\Windows\SYSWOW64\authui.dll

2013-09-13 08:51:13 ----A---- C:\Windows\system32\consent.exe

2013-09-13 08:51:13 ----A---- C:\Windows\system32\authui.dll

2013-09-13 08:51:13 ----A---- C:\Windows\system32\appinfo.dll

2013-09-13 08:50:41 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys

2013-09-13 08:50:41 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys

2013-09-13 08:50:41 ----A---- C:\Windows\system32\drivers\mrxsmb.sys

2013-09-13 08:50:33 ----A---- C:\Windows\system32\wwansvc.dll

2013-09-13 08:50:33 ----A---- C:\Windows\system32\wwanprotdim.dll

2013-09-13 08:50:22 ----A---- C:\Windows\SYSWOW64\tzres.dll

2013-09-13 08:50:22 ----A---- C:\Windows\system32\tzres.dll

2013-09-13 08:50:13 ----A---- C:\Windows\system32\drivers\ataport.sys

2013-09-13 08:50:06 ----A---- C:\Windows\SYSWOW64\mfc42u.dll

2013-09-13 08:50:06 ----A---- C:\Windows\SYSWOW64\mfc42.dll

2013-09-13 08:50:06 ----A---- C:\Windows\system32\mfc42u.dll

2013-09-13 08:50:06 ----A---- C:\Windows\system32\mfc42.dll

2013-09-13 08:50:01 ----A---- C:\Windows\system32\drivers\RNDISMP.sys

2013-09-13 08:50:01 ----A---- C:\Windows\system32\drivers\ndis.sys

2013-09-13 08:49:46 ----A---- C:\Windows\system32\ntoskrnl.exe

2013-09-13 08:49:45 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe

2013-09-13 08:49:45 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe

2013-09-13 08:49:45 ----A---- C:\Windows\SYSWOW64\ntdll.dll

2013-09-13 08:49:45 ----A---- C:\Windows\system32\wow64win.dll

2013-09-13 08:49:45 ----A---- C:\Windows\system32\winsrv.dll

2013-09-13 08:49:45 ----A---- C:\Windows\system32\ntdll.dll

2013-09-13 08:49:45 ----A---- C:\Windows\system32\KernelBase.dll

2013-09-13 08:49:45 ----A---- C:\Windows\system32\kernel32.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-13 08:49:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-13 08:49:44 ----A---- C:\Windows\SYSWOW64\wow32.dll

2013-09-13 08:49:44 ----A---- C:\Windows\SYSWOW64\user.exe

2013-09-13 08:49:44 ----A---- C:\Windows\SYSWOW64\setup16.exe

2013-09-13 08:49:44 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll

2013-09-13 08:49:44 ----A---- C:\Windows\SYSWOW64\KernelBase.dll

2013-09-13 08:49:44 ----A---- C:\Windows\SYSWOW64\kernel32.dll

2013-09-13 08:49:44 ----A---- C:\Windows\SYSWOW64\instnm.exe

2013-09-13 08:49:44 ----A---- C:\Windows\SYSWOW64\apisetschema.dll

2013-09-13 08:49:44 ----A---- C:\Windows\system32\wow64cpu.dll

2013-09-13 08:49:44 ----A---- C:\Windows\system32\wow64.dll

2013-09-13 08:49:44 ----A---- C:\Windows\system32\smss.exe

2013-09-13 08:49:44 ----A---- C:\Windows\system32\ntvdm64.dll

2013-09-13 08:49:44 ----A---- C:\Windows\system32\csrsrv.dll

2013-09-13 08:49:44 ----A---- C:\Windows\system32\conhost.exe

2013-09-13 08:49:44 ----A---- C:\Windows\system32\apisetschema.dll

2013-09-13 08:49:32 ----A---- C:\Windows\system32\drivers\usb8023.sys

2013-09-13 08:49:30 ----A---- C:\Windows\system32\rdrmemptylst.exe

2013-09-13 08:49:30 ----A---- C:\Windows\system32\rdpwsx.dll

2013-09-13 08:49:30 ----A---- C:\Windows\system32\rdpcorekmts.dll

2013-09-13 08:49:29 ----A---- C:\Windows\SYSWOW64\sspicli.dll

2013-09-13 08:49:29 ----A---- C:\Windows\SYSWOW64\secur32.dll

2013-09-13 08:49:29 ----A---- C:\Windows\SYSWOW64\schannel.dll

2013-09-13 08:49:29 ----A---- C:\Windows\system32\sspisrv.dll

2013-09-13 08:49:29 ----A---- C:\Windows\system32\sspicli.dll

2013-09-13 08:49:29 ----A---- C:\Windows\system32\secur32.dll

2013-09-13 08:49:29 ----A---- C:\Windows\system32\schannel.dll

2013-09-13 08:49:29 ----A---- C:\Windows\system32\lsass.exe

2013-09-13 08:49:29 ----A---- C:\Windows\system32\lsasrv.dll

2013-09-13 08:49:29 ----A---- C:\Windows\system32\drivers\ksecpkg.sys

2013-09-13 08:49:29 ----A---- C:\Windows\system32\drivers\ksecdd.sys

2013-09-13 08:49:29 ----A---- C:\Windows\system32\drivers\cng.sys

2013-09-13 08:49:28 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll

2013-09-13 08:49:28 ----A---- C:\Windows\system32\rpcrt4.dll

2013-09-13 08:49:27 ----A---- C:\Windows\system32\msxml6.dll

2013-09-13 08:49:26 ----A---- C:\Windows\system32\msxml3.dll

2013-09-13 08:49:23 ----A---- C:\Windows\SYSWOW64\msxml6.dll

2013-09-13 08:49:22 ----A---- C:\Windows\SYSWOW64\msxml3r.dll

2013-09-13 08:49:22 ----A---- C:\Windows\SYSWOW64\msxml3.dll

2013-09-13 08:49:22 ----A---- C:\Windows\system32\msxml3r.dll

2013-09-13 08:48:56 ----A---- C:\Windows\SYSWOW64\ncsi.dll

2013-09-13 08:48:56 ----A---- C:\Windows\system32\netcorehc.dll

2013-09-13 08:48:56 ----A---- C:\Windows\system32\ncsi.dll

2013-09-13 08:48:55 ----A---- C:\Windows\SYSWOW64\nlaapi.dll

2013-09-13 08:48:55 ----A---- C:\Windows\SYSWOW64\netcorehc.dll

2013-09-13 08:48:55 ----A---- C:\Windows\system32\nlasvc.dll

2013-09-13 08:48:55 ----A---- C:\Windows\system32\iphlpsvc.dll

2013-09-13 08:48:54 ----A---- C:\Windows\SYSWOW64\netevent.dll

2013-09-13 08:48:54 ----A---- C:\Windows\system32\nlaapi.dll

2013-09-13 08:48:54 ----A---- C:\Windows\system32\netevent.dll

2013-09-13 08:48:54 ----A---- C:\Windows\system32\drivers\tcpipreg.sys

2013-09-13 08:48:46 ----A---- C:\Windows\system32\profsvc.dll

2013-09-13 08:48:46 ----A---- C:\Windows\system32\drivers\Diskdump.sys

2013-09-13 08:48:45 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe

2013-09-13 08:48:45 ----A---- C:\Windows\SYSWOW64\dnsapi.dll

2013-09-13 08:48:45 ----A---- C:\Windows\system32\dnsrslvr.dll

2013-09-13 08:48:45 ----A---- C:\Windows\system32\dnscacheugc.exe

2013-09-13 08:48:45 ----A---- C:\Windows\system32\dnsapi.dll

2013-09-13 08:47:18 ----A---- C:\Windows\SYSWOW64\qedit.dll

2013-09-13 08:47:18 ----A---- C:\Windows\system32\qedit.dll

2013-09-13 08:47:17 ----A---- C:\Windows\SYSWOW64\ncrypt.dll

2013-09-13 08:47:17 ----A---- C:\Windows\system32\ncrypt.dll

2013-09-13 08:47:17 ----A---- C:\Windows\system32\drivers\srvnet.sys

2013-09-13 08:47:17 ----A---- C:\Windows\system32\drivers\srv2.sys

2013-09-13 08:47:17 ----A---- C:\Windows\system32\drivers\srv.sys

2013-09-13 08:47:15 ----A---- C:\Windows\SYSWOW64\Wpc.dll

2013-09-13 08:47:15 ----A---- C:\Windows\SYSWOW64\gameux.dll

2013-09-13 08:47:15 ----A---- C:\Windows\system32\Wpc.dll

2013-09-13 08:47:15 ----A---- C:\Windows\system32\gameux.dll

2013-09-13 08:47:06 ----A---- C:\Windows\system32\drivers\rdpwd.sys

2013-09-13 08:46:53 ----A---- C:\Windows\system32\win32k.sys

2013-09-13 08:46:52 ----A---- C:\Windows\system32\drivers\afd.sys

2013-09-13 08:46:50 ----A---- C:\Windows\SYSWOW64\kerberos.dll

2013-09-13 08:46:50 ----A---- C:\Windows\system32\kerberos.dll

2013-09-13 08:27:33 ----A---- C:\Windows\system32\msi.dll

2013-09-13 08:27:32 ----A---- C:\Windows\SYSWOW64\msi.dll

2013-09-13 08:25:28 ----A---- C:\Windows\system32\synceng.dll

2013-09-13 08:25:27 ----A---- C:\Windows\SYSWOW64\synceng.dll

2013-09-13 08:24:59 ----A---- C:\Windows\system32\winresume.exe

2013-09-13 08:24:59 ----A---- C:\Windows\system32\winload.exe

2013-09-13 08:24:59 ----A---- C:\Windows\system32\kdusb.dll

2013-09-13 08:24:59 ----A---- C:\Windows\system32\kdcom.dll

2013-09-13 08:24:59 ----A---- C:\Windows\system32\kd1394.dll

2013-09-13 08:24:38 ----A---- C:\Windows\SYSWOW64\shell32.dll

2013-09-13 08:24:38 ----A---- C:\Windows\SYSWOW64\shdocvw.dll

2013-09-13 08:24:38 ----A---- C:\Windows\system32\shell32.dll

2013-09-13 08:24:38 ----A---- C:\Windows\system32\shdocvw.dll

2013-09-13 08:24:01 ----A---- C:\Windows\SYSWOW64\win32spl.dll

2013-09-13 08:24:01 ----A---- C:\Windows\system32\win32spl.dll

2013-09-13 08:23:33 ----A---- C:\Windows\system32\taskhost.exe

2013-09-13 08:23:13 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll

2013-09-13 08:23:13 ----A---- C:\Windows\system32\cryptdlg.dll

2013-09-13 08:21:39 ----A---- C:\Windows\system32\drivers\tcpip.sys

2013-09-13 08:21:38 ----A---- C:\Windows\system32\drivers\netio.sys

2013-09-13 08:21:38 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS

2013-09-13 08:21:11 ----A---- C:\Windows\SYSWOW64\netapi32.dll

2013-09-13 08:21:11 ----A---- C:\Windows\SYSWOW64\browcli.dll

2013-09-13 08:21:11 ----A---- C:\Windows\system32\netapi32.dll

2013-09-13 08:21:11 ----A---- C:\Windows\system32\browser.dll

2013-09-13 08:21:11 ----A---- C:\Windows\system32\browcli.dll

2013-09-13 08:20:46 ----A---- C:\Windows\SYSWOW64\prevhost.exe

2013-09-13 08:20:46 ----A---- C:\Windows\system32\prevhost.exe

2013-09-13 08:20:44 ----A---- C:\Windows\system32\drivers\fvevol.sys

2013-09-13 08:20:42 ----A---- C:\Windows\SYSWOW64\srclient.dll

2013-09-13 08:20:42 ----A---- C:\Windows\system32\srcore.dll

2013-09-13 08:20:40 ----A---- C:\Windows\system32\msvcrt.dll

2013-09-13 08:20:39 ----A---- C:\Windows\SYSWOW64\msvcrt.dll

2013-09-13 08:20:34 ----A---- C:\Windows\system32\certutil.exe

2013-09-13 08:20:33 ----A---- C:\Windows\SYSWOW64\certutil.exe

2013-09-13 08:20:33 ----A---- C:\Windows\system32\certenc.dll

2013-09-13 08:20:32 ----A---- C:\Windows\SYSWOW64\certenc.dll

2013-09-13 08:20:08 ----A---- C:\Windows\system32\localspl.dll

2013-09-13 08:20:06 ----A---- C:\Windows\system32\drivers\bowser.sys

2013-09-13 08:20:03 ----A---- C:\Windows\SYSWOW64\oleaut32.dll

2013-09-13 08:20:03 ----A---- C:\Windows\SYSWOW64\oleacc.dll

2013-09-13 08:20:03 ----A---- C:\Windows\system32\oleaut32.dll

2013-09-13 08:20:03 ----A---- C:\Windows\system32\oleacc.dll

2013-09-13 08:20:01 ----A---- C:\Windows\system32\EncDec.dll

2013-09-13 08:20:00 ----A---- C:\Windows\SYSWOW64\EncDec.dll

2013-09-13 08:19:42 ----A---- C:\Windows\SYSWOW64\DWrite.dll

2013-09-13 08:19:42 ----A---- C:\Windows\system32\DWrite.dll

2013-09-13 08:19:35 ----A---- C:\Windows\SYSWOW64\packager.dll

2013-09-13 08:19:35 ----A---- C:\Windows\system32\packager.dll

2013-09-13 08:18:41 ----A---- C:\Windows\SYSWOW64\poqexec.exe

2013-09-13 08:18:41 ----A---- C:\Windows\system32\poqexec.exe

2013-09-13 08:18:35 ----A---- C:\Windows\SYSWOW64\quartz.dll

2013-09-13 08:18:35 ----A---- C:\Windows\system32\quartz.dll

2013-09-13 08:18:34 ----A---- C:\Windows\SYSWOW64\qdvd.dll

2013-09-13 08:18:34 ----A---- C:\Windows\system32\qdvd.dll

2013-09-13 08:18:31 ----A---- C:\Windows\SYSWOW64\webio.dll

2013-09-13 08:18:31 ----A---- C:\Windows\system32\webio.dll

2013-09-13 08:18:29 ----A---- C:\Windows\system32\drivers\ntfs.sys

2013-09-13 08:18:24 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL

2013-09-13 08:18:24 ----A---- C:\Windows\system32\WMVDECOD.DLL

2013-09-13 08:18:23 ----A---- C:\Windows\system32\dpnet.dll

2013-09-13 08:18:22 ----A---- C:\Windows\SYSWOW64\dpnet.dll

2013-09-13 08:18:20 ----A---- C:\Windows\system32\OxpsConverter.exe

2013-09-13 08:17:54 ----A---- C:\Windows\SYSWOW64\usp10.dll

2013-09-13 08:17:54 ----A---- C:\Windows\system32\usp10.dll

2013-09-13 08:17:52 ----A---- C:\Windows\system32\drivers\tssecsrv.sys

2013-09-13 08:17:51 ----A---- C:\Windows\SYSWOW64\psisdecd.dll

2013-09-13 08:17:51 ----A---- C:\Windows\system32\psisdecd.dll

2013-09-13 08:17:10 ----A---- C:\Windows\system32\drivers\partmgr.sys

2013-09-13 08:17:01 ----A---- C:\Windows\SYSWOW64\drvinst.exe

2013-09-13 08:17:01 ----A---- C:\Windows\SYSWOW64\devrtl.dll

2013-09-13 08:17:01 ----A---- C:\Windows\SYSWOW64\devobj.dll

2013-09-13 08:17:01 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll

2013-09-13 08:17:01 ----A---- C:\Windows\system32\umpnpmgr.dll

2013-09-13 08:16:59 ----A---- C:\Windows\system32\FXSCOVER.exe

2013-09-13 08:16:58 ----A---- C:\Windows\SYSWOW64\inetcomm.dll

2013-09-13 08:16:58 ----A---- C:\Windows\system32\inetcomm.dll

2013-09-13 08:16:55 ----A---- C:\Windows\SYSWOW64\cdosys.dll

2013-09-13 08:16:54 ----A---- C:\Windows\system32\cdosys.dll

2013-09-13 08:16:04 ----A---- C:\Windows\system32\spoolsv.exe

2013-09-13 08:16:04 ----A---- C:\Windows\splwow64.exe

2013-09-13 03:02:50 ----A---- C:\Windows\system32\browserchoice.exe

2013-09-13 03:02:01 ----A---- C:\Windows\SYSWOW64\imagehlp.dll

2013-09-13 03:02:01 ----A---- C:\Windows\system32\imagehlp.dll

2013-09-13 03:02:01 ----A---- C:\Windows\system32\drivers\fs_rec.sys

2013-09-13 03:01:59 ----A---- C:\Windows\SYSWOW64\wmi.dll

2013-09-13 03:01:59 ----A---- C:\Windows\system32\wmi.dll

2013-09-12 21:12:35 ----SHD---- C:\$RECYCLE.BIN

2013-09-12 21:08:42 ----D---- C:\Windows\Temp

2013-09-12 21:08:42 ----A---- C:\Windows\zoek-delete.exe

2013-09-12 19:57:52 ----D---- C:\Users\Jamie\AppData\Roaming\WinRAR

2013-09-12 19:57:51 ----D---- C:\Program Files\WinRAR

2013-09-12 19:18:11 ----D---- C:\Program Files\trend micro

2013-09-12 15:40:59 ----D---- C:\AdwCleaner

2013-09-12 15:05:54 ----D---- C:\Users\Jamie\AppData\Roaming\mIRC

2013-09-12 15:05:54 ----D---- C:\Program Files (x86)\mIRC

2013-09-11 23:47:47 ----D---- C:\ProgramData\WindSolutions

2013-09-11 23:47:26 ----D---- C:\Users\Jamie\AppData\Roaming\WindSolutions

2013-09-11 23:47:26 ----D---- C:\Program Files (x86)\CopyTrans Suite

2013-09-11 23:34:43 ----D---- C:\Users\Jamie\AppData\Roaming\Apple Computer

2013-09-11 23:34:25 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys

2013-09-11 23:33:52 ----D---- C:\Program Files\iPod

2013-09-11 23:33:51 ----D---- C:\ProgramData\Apple Computer

2013-09-11 23:33:51 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-11 23:33:51 ----D---- C:\Program Files\iTunes

2013-09-11 23:33:51 ----D---- C:\Program Files (x86)\iTunes

2013-09-11 23:33:13 ----D---- C:\Program Files (x86)\Apple Software Update

2013-09-11 23:32:46 ----D---- C:\Program Files\Common Files\Apple

2013-09-11 23:32:36 ----D---- C:\Program Files\Bonjour

2013-09-11 23:32:36 ----D---- C:\Program Files (x86)\Bonjour

2013-09-11 23:32:22 ----D---- C:\ProgramData\Apple

2013-09-11 20:01:49 ----D---- C:\Program Files (x86)\Rockstar Games

2013-09-11 19:08:50 ----D---- C:\Program Files\Microsoft Silverlight

2013-09-11 19:08:50 ----D---- C:\Program Files (x86)\Microsoft Silverlight

2013-09-11 18:15:31 ----D---- C:\ProgramData\TEMP

2013-09-11 18:03:37 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys

2013-09-11 18:03:26 ----D---- C:\Users\Jamie\AppData\Roaming\DAEMON Tools Lite

2013-09-11 18:03:24 ----D---- C:\Program Files (x86)\DAEMON Tools Lite

2013-09-11 18:02:59 ----D---- C:\ProgramData\DAEMON Tools Lite

2013-09-11 17:51:34 ----D---- C:\Users\Jamie\AppData\Roaming\uTorrent

2013-09-11 17:36:07 ----D---- C:\Users\Jamie\AppData\Roaming\LolClient

2013-09-11 17:29:26 ----D---- C:\ProgramData\Sun

2013-09-11 17:29:17 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll

2013-09-11 17:29:17 ----A---- C:\Windows\SYSWOW64\javaws.exe

2013-09-11 17:29:17 ----A---- C:\Windows\SYSWOW64\deployJava1.dll

2013-09-11 17:29:05 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll

2013-09-11 17:29:05 ----A---- C:\Windows\SYSWOW64\javaw.exe

2013-09-11 17:29:05 ----A---- C:\Windows\SYSWOW64\java.exe

2013-09-11 17:28:54 ----D---- C:\Program Files (x86)\Java

2013-09-11 17:28:51 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll

2013-09-11 17:28:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll

2013-09-11 17:28:51 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll

2013-09-11 17:28:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll

2013-09-11 17:28:50 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll

2013-09-11 17:25:20 ----D---- C:\Program Files (x86)\Pando Networks

2013-09-11 17:25:05 ----D---- C:\Users\Jamie\AppData\Roaming\Riot Games

2013-09-10 22:00:25 ----D---- C:\Users\Jamie\AppData\Roaming\Mozilla

2013-09-10 22:00:19 ----D---- C:\ProgramData\Mozilla

2013-09-10 22:00:19 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service

2013-09-10 22:00:18 ----D---- C:\Program Files (x86)\Mozilla Firefox

2013-09-10 21:47:51 ----D---- C:\Users\Jamie\AppData\Roaming\Skype

2013-09-10 21:47:46 ----RD---- C:\Program Files (x86)\Skype

2013-09-10 21:47:43 ----D---- C:\ProgramData\Skype

2013-09-10 18:50:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

2013-09-10 18:50:13 ----D---- C:\Windows\SYSWOW64\Macromed

2013-09-10 18:50:08 ----D---- C:\Windows\system32\Macromed

2013-09-10 18:44:49 ----D---- C:\ProgramData\NVIDIA

2013-09-10 18:44:28 ----A---- C:\Windows\system32\nvshext.dll

2013-09-10 18:44:27 ----A---- C:\Windows\system32\nvvsvc.exe

2013-09-10 18:44:27 ----A---- C:\Windows\system32\nvsvcr.dll

2013-09-10 18:44:27 ----A---- C:\Windows\system32\nvsvc64.dll

2013-09-10 18:44:27 ----A---- C:\Windows\system32\nvmctray.dll

2013-09-10 18:44:27 ----A---- C:\Windows\system32\nvcpl.dll

2013-09-10 18:44:05 ----A---- C:\Windows\SYSWOW64\OpenCL.dll

2013-09-10 18:44:05 ----A---- C:\Windows\system32\OpenCL.dll

2013-09-10 18:43:45 ----D---- C:\ProgramData\NVIDIA Corporation

2013-09-10 18:43:36 ----D---- C:\Program Files (x86)\NVIDIA Corporation

2013-09-10 18:43:35 ----D---- C:\Program Files\NVIDIA Corporation

2013-09-10 18:41:49 ----A---- C:\Windows\SYSWOW64\rdpcore.dll

2013-09-10 18:41:49 ----A---- C:\Windows\system32\rdpcore.dll

2013-09-10 18:41:49 ----A---- C:\Windows\system32\drivers\tdtcp.sys

2013-09-10 18:37:44 ----D---- C:\Program Files (x86)\Google

2013-09-10 18:37:36 ----D---- C:\Windows\Panther

2013-09-10 18:36:17 ----A---- C:\Windows\system32\wups2.dll

2013-09-10 18:36:17 ----A---- C:\Windows\system32\wucltux.dll

2013-09-10 18:36:17 ----A---- C:\Windows\system32\wuaueng.dll

2013-09-10 18:36:17 ----A---- C:\Windows\system32\wuauclt.exe

2013-09-10 18:19:09 ----D---- C:\Windows.old.002

2013-09-10 18:17:42 ----A---- C:\Windows\system32\wuwebv.dll

2013-09-10 18:17:42 ----A---- C:\Windows\system32\wuapp.exe

2013-09-10 18:08:46 ----D---- C:\Windows\system32\drivers\NISx64

2013-09-10 18:08:44 ----D---- C:\ProgramData\Norton

2013-09-10 18:08:44 ----D---- C:\Program Files (x86)\Norton Internet Security

2013-09-10 18:07:52 ----D---- C:\ProgramData\NortonInstaller

2013-09-10 18:07:52 ----D---- C:\Program Files (x86)\NortonInstaller

2013-09-10 18:02:55 ----A---- C:\Windows\SYSWOW64\cttele32.dll

2013-09-10 18:02:54 ----N---- C:\Windows\Updreg.EXE

2013-09-10 18:02:54 ----N---- C:\Windows\SYSWOW64\ResDefE.exe

2013-09-10 18:02:54 ----N---- C:\Windows\system32\cfgfx.ini

2013-09-10 18:02:54 ----N---- C:\Windows\system32\cfgChain.exe

2013-09-10 18:02:54 ----N---- C:\Windows\system32\AMBSpiE.exe

2013-09-10 18:02:54 ----N---- C:\Windows\system32\AmbRunE.dll

2013-09-10 18:02:54 ----N---- C:\Windows\FF08_Render_Spk_Hp.ini

2013-09-10 18:02:54 ----N---- C:\Windows\FF08_Render.ini

2013-09-10 18:02:54 ----N---- C:\Windows\FF08_Capture.ini

2013-09-10 18:02:54 ----A---- C:\Windows\system32\cttele64.dll

2013-09-10 18:02:41 ----HD---- C:\Program Files (x86)\Creative Installation Information

2013-09-10 18:02:41 ----A---- C:\Windows\SYSWOW64\CmdRtr.DLL

2013-09-10 18:02:41 ----A---- C:\Windows\SYSWOW64\APOMngr.DLL

2013-09-10 18:02:41 ----A---- C:\Windows\system32\CmdRtr64.DLL

2013-09-10 18:02:41 ----A---- C:\Windows\system32\APOMgr64.DLL

2013-09-10 18:02:37 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll

2013-09-10 18:02:37 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll

2013-09-10 18:02:37 ----A---- C:\Windows\system32\wrap_oal.dll

2013-09-10 18:02:37 ----A---- C:\Windows\system32\OpenAL32.dll

2013-09-10 18:02:36 ----N---- C:\Windows\SYSWOW64\Sens_oal.dll

2013-09-10 18:02:36 ----N---- C:\Windows\system32\Sens_oal.dll

2013-09-10 18:01:44 ----D---- C:\Program Files\Creative

2013-09-10 18:01:04 ----N---- C:\Windows\SYSWOW64\AMBSPISyncService.exe

2013-09-10 18:01:02 ----D---- C:\ProgramData\Creative

2013-09-10 18:01:01 ----D---- C:\Program Files (x86)\Creative

2013-09-10 18:00:29 ----D---- C:\Users\Jamie\AppData\Roaming\Macromedia

2013-09-10 18:00:29 ----D---- C:\Users\Jamie\AppData\Roaming\Adobe

2013-09-10 18:00:04 ----D---- C:\ProgramData\Adobe

2013-09-10 18:00:03 ----D---- C:\Program Files (x86)\Adobe

2013-09-10 17:59:33 ----D---- C:\Program Files (x86)\ASRock Utility

2013-09-10 17:59:01 ----D---- C:\Program Files (x86)\NEC Electronics

2013-09-10 17:58:02 ----A---- C:\Windows\system32\RTNUninst64.dll

2013-09-10 17:58:02 ----A---- C:\Windows\system32\RtNicProp64.dll

2013-09-10 17:58:02 ----A---- C:\Windows\system32\drivers\Rt64win7.sys

2013-09-10 17:57:04 ----D---- C:\Windows\SYSWOW64\RTCOM

2013-09-10 17:57:04 ----D---- C:\Program Files\Realtek

2013-09-10 17:56:54 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\WavesGUILib.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\SRSWOW64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\SRSTSX64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\SRSTSH64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\SRSHP64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RtPgEx64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RtlCPAPI64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RtkCfg64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RtkAPO64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RtkApi64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RTEEP64A.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RTEEL64A.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RTEEG64A.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RTEED64A.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RTCOM64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RP3DHT64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RP3DAA64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\RCoInst64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\MBWrp64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\MBppld64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\MBPPCn64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\MBAPO64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\MaxxAudioEQ.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\FMAPO64.dll

2013-09-10 17:56:54 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys

2013-09-10 17:56:53 ----RA---- C:\Windows\RtlExUpd.dll

2013-09-10 17:56:53 ----HD---- C:\Program Files (x86)\Temp

2013-09-10 17:56:53 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

2013-09-10 17:56:53 ----D---- C:\Program Files (x86)\Realtek

2013-09-10 17:56:53 ----A---- C:\Windows\system32\AERTAR64.dll

2013-09-10 17:56:53 ----A---- C:\Windows\system32\AERTAC64.dll

2013-09-10 17:56:12 ----D---- C:\Program Files\DIFX

2013-09-10 17:56:10 ----DC---- C:\Windows\system32\DRVSTORE

2013-09-10 17:56:10 ----A---- C:\Windows\system32\drivers\usbfilter.sys

2013-09-10 17:56:09 ----D---- C:\Program Files (x86)\AMD

2013-09-10 17:56:04 ----A---- C:\Windows\system32\drivers\AtiPcie.sys

2013-09-10 17:56:03 ----D---- C:\Program Files\ATI

2013-09-10 17:55:44 ----SHD---- C:\Windows\Installer

2013-09-10 17:52:28 ----D---- C:\Users\Jamie\AppData\Roaming\Identities

2013-09-10 17:52:05 ----SD---- C:\Users\Jamie\AppData\Roaming\Microsoft

2013-09-10 17:52:05 ----D---- C:\Users\Jamie\AppData\Roaming\Media Center Programs

2013-09-10 17:51:51 ----SHD---- C:\ProgramData\Sjablonen

2013-09-10 17:51:51 ----SHD---- C:\ProgramData\Menu Start

2013-09-10 17:51:50 ----SHD---- C:\ProgramData\Favorieten

2013-09-10 17:51:50 ----SHD---- C:\ProgramData\Documenten

2013-09-10 17:51:50 ----SHD---- C:\ProgramData\Bureaublad

2013-09-10 17:42:26 ----D---- C:\Windows\SoftwareDistribution

2013-09-10 17:40:10 ----D---- C:\Windows\Prefetch

2013-09-10 16:35:30 ----D---- C:\Windows.old.001

======List of files/folders modified in the last 1 month======

2013-09-21 17:19:20 ----D---- C:\Windows\SysWOW64

2013-09-21 16:43:00 ----D---- C:\Windows\system32\config

2013-09-21 16:42:23 ----RSD---- C:\Windows\assembly

2013-09-21 16:42:23 ----D---- C:\Windows\Microsoft.NET

2013-09-21 16:34:32 ----D---- C:\Windows\System32

2013-09-21 16:34:32 ----D---- C:\Windows\inf

2013-09-21 16:34:32 ----A---- C:\Windows\system32\PerfStringBackup.INI

2013-09-21 16:03:44 ----D---- C:\Windows\SYSWOW64\nl-NL

2013-09-21 16:03:44 ----D---- C:\Windows\system32\nl-NL

2013-09-21 16:00:07 ----D---- C:\Windows\SYSWOW64\en-US

2013-09-21 16:00:07 ----D---- C:\Windows\system32\en-US

2013-09-21 16:00:06 ----RD---- C:\Program Files (x86)

2013-09-21 15:57:02 ----SHD---- C:\System Volume Information

2013-09-18 14:32:56 ----D---- C:\Windows\winsxs

2013-09-18 14:31:09 ----D---- C:\Program Files\Internet Explorer

2013-09-18 14:31:07 ----D---- C:\Windows\SYSWOW64\wbem

2013-09-18 14:31:07 ----D---- C:\Windows\SYSWOW64\migration

2013-09-18 14:31:02 ----D---- C:\Windows\PolicyDefinitions

2013-09-18 14:31:01 ----D---- C:\Windows\system32\wbem

2013-09-18 14:31:01 ----D---- C:\Windows\system32\migration

2013-09-18 14:30:57 ----D---- C:\Program Files (x86)\Internet Explorer

2013-09-18 07:34:08 ----D---- C:\Windows\Logs

2013-09-18 07:34:06 ----D---- C:\Windows

2013-09-18 07:33:29 ----D---- C:\Windows\system32\catroot2

2013-09-18 07:33:29 ----D---- C:\Windows\system32\catroot

2013-09-18 00:36:24 ----D---- C:\Windows\system32\LogFiles

2013-09-15 20:03:31 ----D---- C:\Windows\rescache

2013-09-15 19:24:23 ----D---- C:\Windows\system32\drivers

2013-09-15 19:24:22 ----D---- C:\Windows\system32\DriverStore

2013-09-15 15:40:57 ----D---- C:\Program Files\Common Files\Microsoft Shared

2013-09-15 15:40:47 ----SD---- C:\ProgramData\Microsoft

2013-09-14 03:41:16 ----D---- C:\Program Files\Common Files\System

2013-09-14 03:41:10 ----D---- C:\Windows\ehome

2013-09-14 03:41:10 ----D---- C:\Windows\AppPatch

2013-09-14 03:41:08 ----RSD---- C:\Windows\Fonts

2013-09-14 03:41:08 ----D---- C:\Windows\system32\drivers\nl-NL

2013-09-14 03:41:08 ----D---- C:\Program Files\Windows Defender

2013-09-14 03:41:08 ----D---- C:\Program Files (x86)\Windows Defender

2013-09-14 03:40:56 ----D---- C:\Windows\system32\Boot

2013-09-14 03:40:54 ----D---- C:\Program Files\Windows Journal

2013-09-13 15:36:57 ----D---- C:\Windows\debug

2013-09-13 15:35:22 ----D---- C:\Windows\system32\Tasks

2013-09-13 15:35:20 ----RD---- C:\Program Files

2013-09-13 08:10:22 ----D---- C:\Windows\LiveKernelReports

2013-09-12 20:02:54 ----D---- C:\Windows\Tasks

2013-09-12 02:16:29 ----D---- C:\Windows\system32\wdi

2013-09-11 23:47:47 ----HD---- C:\ProgramData

2013-09-11 23:32:46 ----D---- C:\Program Files\Common Files

2013-09-11 23:32:22 ----D---- C:\Program Files (x86)\Common Files

2013-09-11 23:30:52 ----D---- C:\Windows\system32\drivers\UMDF

2013-09-10 18:50:17 ----D---- C:\Windows\Downloaded Program Files

2013-09-10 18:44:47 ----RD---- C:\Users

2013-09-10 18:44:26 ----D---- C:\Windows\Help

2013-09-10 18:11:59 ----D---- C:\Windows\SYSWOW64\drivers

2013-09-10 17:58:26 ----D---- C:\Windows\system32\CodeIntegrity

2013-09-10 17:57:25 ----D---- C:\Windows\system32\restore

2013-09-10 17:51:51 ----SHD---- C:\Recovery

2013-09-10 17:51:51 ----D---- C:\Windows\system32\Recovery

2013-09-10 17:51:51 ----D---- C:\Program Files\Windows NT

2013-09-10 17:43:27 ----D---- C:\Windows\system32\sysprep

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-11 283064]

R1 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\system32\drivers\NISx64\1100000.088\SRTSP64.SYS [2009-08-30 504880]

R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1100000.088\SRTSPX64.SYS [2009-08-30 32304]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-02-08 2267552]

R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20090829.019\ENG64.SYS [2009-08-29 116272]

R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20090829.019\EX64.SYS [2009-08-29 1742896]

R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-01-22 77824]

R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-01-22 180224]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-03-04 346144]

R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]

R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]

R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2009-02-23 307200]

R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe [2009-08-25 126392]

R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 884512]

R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-26 1260320]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]

R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-08-16 641352]

R3 Sound Blaster X-Fi MB Licensing Service;Sound Blaster X-Fi MB Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [2013-09-10 79360]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-10 116648]

S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-07-25 162672]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-21 257416]

S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2013-09-10 79360]

S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2013-09-10 79360]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-10 116648]

S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-14 117656]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-18 1255736]

-----------------EOF-----------------

[Jion]

1.

Download AdwCleaner by Xplode naar je bureaublad.

• 
  
• Sluit alle openstaande vensters.
  
• Dubbelklik op AdwCleaner om hem te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren,
  
• Door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Klik vervolgens op Scan.
  
• Klik vervolgens op Clean als er items zijn gevonden.
  
• Klik bij Herstarten Noodzakelijk op OK
  

Nadat de PC opnieuw is opgestart, opent meestal een logfile.

Anders is het hier terug te vinden C:\AdwCleaner\AdwCleaner[R1].txt.

Post aansluitend de inhoud van dit log in je volgende bericht.

2.

Download de Junkware Removal Tool by Thisisu naar je bureaublad.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met JRT

(hier of hier) kan je lezen hoe je de gebruikte beveiligingssoftware kunt uitschakelen.

• 
  
• Dubbelklik op JRT.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• De tool zal vervolgens het systeem scannen.
  
• De scan kan afhankelijk van je systeemspecificaties soms vrij lang duren, wacht geduldig af.
  
• Als de scan gereed is zal er een logje (JRT.txt) op het bureaublad opgeslagen worden en automatisch worden geopend.
  
• Post de inhoud van deze log in je volgende bericht als bijlage.

[JaMiiE]

# AdwCleaner v3.003 - Report created 12/09/2013 at 15:42:11

# Updated 07/09/2013 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : Jamie - JAMIE-PC

# Running from : C:\Users\Jamie\Downloads\adwcleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\SearchProtect

Folder Deleted : C:\Users\Jamie\AppData\Local\Bundled software uninstaller

Folder Deleted : C:\Users\Jamie\Documents\optimizer pro

File Deleted : C:\Users\Jamie\AppData\Roaming\Mozilla\Firefox\Profiles\k2xjxkoe.default\searchplugins\conduit-search.xml

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0041554.BHO

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0041554.BHO.1

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0041554.Sandbox

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0041554.Sandbox.1

Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411151154}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411151154}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411151154}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411151154}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411151154}

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411151154}

Key Deleted : HKCU\Software\BI

Key Deleted : HKCU\Software\InstalledBrowserExtensions

Key Deleted : HKCU\Software\powerpack

Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [start Page]

-\\ Mozilla Firefox v23.0.1 (nl)

[ File : C:\Users\Jamie\AppData\Roaming\Mozilla\Firefox\Profiles\k2xjxkoe.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "Conduit Search");

Line Deleted : user_pref("browser.search.selectedEngine", "Conduit Search");

Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP84D43732-100B-4FEF-AE6A-F16604D52E6B");

Line Deleted : user_pref("extensions.crossrider.bic", "14112431029bab2dc260907dbae34e12");

-\\ Google Chrome v29.0.1547.66

[ File : C:\Users\Jamie\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [3491 octets] - [12/09/2013 15:41:22]

AdwCleaner[s0].txt - [2968 octets] - [12/09/2013 15:42:11]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [3028 octets] ##########

# AdwCleaner v3.004 - Report created 21/09/2013 at 22:27:03

# Updated 15/09/2013 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : Jamie - JAMIE-PC

# Running from : C:\Users\Jamie\Downloads\adwcleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16506

-\\ Mozilla Firefox v23.0.1 (nl)

[ File : C:\Users\Jamie\AppData\Roaming\Mozilla\Firefox\Profiles\k2xjxkoe.default\prefs.js ]

-\\ Google Chrome v29.0.1547.66

[ File : C:\Users\Jamie\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [4701 octets] - [12/09/2013 15:41:22]

AdwCleaner[s0].txt - [4083 octets] - [12/09/2013 15:42:11]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [4143 octets] ##########

[Jion]

Download de Junkware Removal Tool by Thisisu naar je bureaublad.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met JRT

(hier of hier) kan je lezen hoe je de gebruikte beveiligingssoftware kunt uitschakelen.

• 
  
• Dubbelklik op JRT.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• De tool zal vervolgens het systeem scannen.
  
• De scan kan afhankelijk van je systeemspecificaties soms vrij lang duren, wacht geduldig af.
  
• Als de scan gereed is zal er een logje (JRT.txt) op het bureaublad opgeslagen worden en automatisch worden geopend.
  
• Post de inhoud van deze log in je volgende bericht als bijlage.

[JaMiiE]

[ATTACH]28173[/ATTACH]

JRT.txt

[Jion]

Heb je nu nog last van Monstermarketplace?

[JaMiiE]

Yep, het is er nog steeds

[Jion]

Download MalwareBytes' Anti-Malware (website) en sla het op je bureaublad op.

Zorg dat er na de installatie een vinkje is geplaatst bij:

• 
  
• Update MalwareBytes' Anti-Malware
  
• Start MalwareBytes' Anti-Malware
  
• Je krijgt hier ook de keuze om de evaluatie versie van MBAM te gebruiken, indien je dit niet wilt vink dit dan uit.
  

Klik daarna op "Voltooien".

Indien een update gevonden wordt, zal die gedownload en geïnstalleerd worden.

• 
  
• Zodra het programma gestart is, ga dan naar het tabblad "Instellingen".
  
• Vink hier aan: "Sluit Internet Explorer tijdens verwijdering van malware".
  
• Ga daarna naar het tabblad "Scanner", kies hier voor "Volledige Scan".
  
• Druk vervolgens op "Scannen" om de scan te starten.
  
• Het scannen kan een tijdje duren, dus wees geduldig.
  
• Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
  
• Zorg ervoor dat daar alles aangevinkt is, daarna klik op: "Verwijder geselecteerde".
  
• Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten.
  
• Herstart de computer indien nodig en post hierna de log in het volgende bericht.