draadloos internet valt steeds weg.

brentt17 · 13 december 2013

Beste

Wij hebben al zeer lang Belgacom internet maar het probleem was dat ik vond dat het internet veel te traag ging, telkens als een ander op de pc ging dan duurde het echt een uur voordat de internetpagina's waren geladen. Daarna heeft mijn pa een nieuwe digibox (dus we hebben er2) aangesloten waardoor ons internet veel sneller gaat. Maar daarna zijn de problemen begonnen. Als ik spelletjes speel (League of Legends of Smite) dan werkt het internet nagenoeg perfect en valt het zeer zelden even uit maar zodra ik op Google chrome op facebook, youtube, google, µtorrent ga, dan valt het internet elke 1 of 2 minuten weg waardoor ik op het kruisje moet klikken en die de problemen 'zelf' oplost. Maar regelmatig krijg ik de melding dat die dan de ethernetkabel niet heeft aangesloten. Als ik dan op oplossen klik maakt die het probleem en kan ik weer 2 hele minuten verder. Soms krijg ik ook de melding dat die de standaardgateway niet kan vinden. Ik heb absoluut geen idee wat ik moet doen en ik ken ook niks van netwerken dus als iemand mij wil helpen, gelieve dan alles duidelijk uit te leggen. Wel kan ik nog mijn ipconfig hierbij zetten (mocht dit bruikbaar zijn?). Ook heb ik geen IP dat statisch is ofzoeits, khad hier iets van gevonden maar geen idee hoe dit werkt zie afbeelding.

Alvast bedankt

kweezie wabbit · 15 december 2013

Dit probleem kan verschillende oorzaken hebben.

Daarom gaan we eerst proberen te achterhalen welke hardware en welke driver versie je gebruikt.

Download en installeer Speccy.

Speccy is er ook in Nederlandstalige versie, bij de installatie (of update) kan je de taal wijzigen van Engels naar Nederlands ... als je op het driehoekje klikt, krijg je een uitrolmenu waarin je Nederlands kan selecteren.

Wanneer, tijdens het installeren van Speccy, de optie aangeboden wordt om Google Chrome of Google Toolbar "gratis" mee te installeren dien je de vinkjes weg te halen, tenzij dit een bewuste keuze is.

Start nu het programma en er zal een overzicht gemaakt worden van je hardware.

Als dit gereed is selecteer je bovenaan "Bestand - Publiceer Snapshot" en vervolgens bevestig je die keuze met " Ja ".

In het venster dat nu opent krijg je een link te zien, kopieer nu die link en plak die in je volgende bericht. Zo krijgen we een gedetailleerd overzicht van je hardware.

Meer info over deze procedure lees je HIER.

Druk op de Windows + R toets en typ in het uitvoervenster devmgmt.msc en druk op Enter.

Dubbelklik in apparaatbeheer op de netwerkadapters om ze open te klappen.

Dubbelklik dan op de RT2500 USB wireless LAN card

Ga naar het tabblad Details.

Onder Eigenschap: kies je Hardware-id's.

Onder Waarde: vermeld de gegevens in de eerste regel en post deze in je volgende bericht.

Je kan de waarde kopieren door er met rechts op te klikken en dan kiezen voor kopieren.

Je kan er ook een afbeelding van maken.

Ga dan naar het tabblad stuurprogramma en maak daarvan een afbeelding.

Het probleem kan ook veroorzaakt worden door een malware infectie en dat gaanwe ook eens bekijken.

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

RSIT 32 bit (RSIT.exe)
RSIT 64 bit (RSITx64.exe)

Dubbelklik op RSIT.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
Plaats de inhoud hiervan in het volgende bericht.

Plaats het RSIT logje, de link naar het speccy logje, de hardware-ID en de afbeelding in een volgend bericht.

brentt17 · 15 december 2013

Dankje voor de reactie

Speccy had ik al (gelukkig ) en hier is de link die je vroeg: http://speccy.piriform.com/results/ytfvBboNY6TOfR4cSktLHj8

Dan is hier de waarde: USB\VID_148F&PID_2570&REV_0001

Ik weet niet als je dit bedoelt met stuurprogramma:

En dan nog iets: ik heb gisteren mijn IP aangepast (ik had een link gevonden om mijn IP statisch te maken en dit werkt maar het internet valt wel nog uit

En dan nog het log bestand wat echt lang is? :

Logfile of random's system information tool 1.09 (written by random/random)

Run by Brent at 2013-12-15 10:06:18

Microsoft Windows 7 Ultimate Service Pack 1

System drive C: has 14 GB (12%) free of 119 GB

Total RAM: 3070 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 10:06:26, on 15/12/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.16428)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

C:\Program Files\Erazer\MEDION Gaming Mouse\hid.exe

C:\Program Files\Erazer\MEDION Gaming Mouse\trayicon.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\Alwil Software\Avast5\avastui.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\EXPERTool\TBPANEL.exe

C:\Users\Brent\AppData\Local\Akamai\netsession_win.exe

C:\Program Files\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\system32\mmc.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Users\Brent\Downloads\RSIT.exe

C:\Program Files\trend micro\Brent.exe

C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O2 - BHO: surf anod ukaeep - {FFB49063-AA6D-64B6-A454-D2B1CB222E31} - C:\Program Files\surf anod ukaeep\2C.dll

O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll

O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s

O4 - HKLM\..\Run: [Erazer MEDION] C:\Program Files\Erazer\MEDION Gaming Mouse\Hid.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Aeria Ignite] "C:\Program Files\Aeria Games\Ignite\aeriaignite.exe" silent

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui

O4 - HKLM\..\Run: [20131121] C:\Program Files\Alwil Software\Avast5\setup\emupdate\86ae3368-84b4-4712-9f59-8fdc2f7daabc.exe /check

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A

O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount

O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Brent\AppData\Local\Akamai\netsession_win.exe"

O4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam.exe" -silent

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: ctfmon.lnk = C:\ProgramData\lsass.exe

O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500.exe

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{C3EB25B7-EDD3-4462-95B8-0BEAB85AD7F3}: NameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{C3EB25B7-EDD3-4462-95B8-0BEAB85AD7F3}: NameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{C3EB25B7-EDD3-4462-95B8-0BEAB85AD7F3}: NameServer = 192.168.1.1

O20 - AppInit_DLLs: c:\progra~2\browse~1\261519~1.190\{c16c1~1\browse~1.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files\Hi-Rez Studios\HiPatchService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--

End of file - 7365 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]

avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-10-21 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFB49063-AA6D-64B6-A454-D2B1CB222E31}]

surf anod ukaeep - C:\Program Files\surf anod ukaeep\2C.dll [2012-11-24 425984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-10-21 606544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2011-12-13 11487848]

"Erazer MEDION"=C:\Program Files\Erazer\MEDION Gaming Mouse\Hid.exe [2012-09-24 1507840]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

"Aeria Ignite"=C:\Program Files\Aeria Games\Ignite\aeriaignite.exe [2013-06-06 1925656]

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

"AvastUI.exe"=C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2013-10-22 3567800]

"20131121"=C:\Program Files\Alwil Software\Avast5\setup\emupdate\86ae3368-84b4-4712-9f59-8fdc2f7daabc.exe [2013-11-23 180184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]

"GAINWARD"=C:\Program Files\EXPERTool\TBPanel.exe [2011-06-02 2265416]

"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2009-11-15 33120]

"Akamai NetSession Interface"=C:\Users\Brent\AppData\Local\Akamai\netsession_win.exe [2013-06-05 4489472]

"Steam"=C:\Program Files\Steam\Steam.exe [2013-12-11 1823656]

"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

ALCMTR.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]

ALCWZRD.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]

C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe /s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmiboot]

C:\Windows\cmiboot.exe [2007-02-07 65536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CmUCRRun]

C:\Windows\system32\CmUCReye.exe [2005-08-04 237568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner]

C:\Program Files\Uniblue\DriverScanner\launcher.exe delay 20000 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ExpressFiles]

C:\Program Files\ExpressFiles\ExpressFiles.exe -tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]

C:\Users\Brent\AppData\Local\Google\Update\GoogleUpdate.exe /c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstallIQUpdater]

C:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe [2011-10-11 1179648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]

C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

Ralink Wireless Utility.lnk - C:\Program Files\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500.exe

C:\Users\Brent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

ctfmon.lnk - C:\ProgramData\lsass.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="c:\progra~2\browse~1\261519~1.190\{c16c1~1\browse~1.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"LogonHoursAction"=2

"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=0

"ConsentPromptBehaviorUser"=3

"EnableLUA"=0

"EnableUIADesktopToggle"=0

"PromptOnSecureDesktop"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"mixer"=wdmaud.drv

"wave1"=wdmaud.drv

"mixer1"=wdmaud.drv

"wave2"=wdmaud.drv

"midi"=wdmaud.drv

"mixer2"=wdmaud.drv

"aux"=wdmaud.drv

"wave3"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer3"=wdmaud.drv

"wave4"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-12-15 10:06:18 ----D---- C:\rsit

2013-12-15 10:06:18 ----D---- C:\Program Files\trend micro

2013-12-14 18:27:55 ----D---- C:\Program Files\Network Stumbler

2013-12-13 20:52:06 ----D---- C:\ProgramData\Turbine

2013-12-13 20:52:04 ----D---- C:\Program Files\InfiniteCrisis

2013-12-13 20:41:20 ----D---- C:\Users\Brent\AppData\Roaming\DawngateData

2013-12-13 16:44:11 ----D---- C:\Users\Brent\AppData\Roaming\vlc

2013-12-13 16:41:52 ----D---- C:\Program Files\Graboid

2013-12-12 19:06:04 ----A---- C:\Windows\system32\ie4uinit.exe

2013-12-12 19:06:02 ----A---- C:\Windows\system32\jsproxy.dll

2013-12-12 19:06:01 ----A---- C:\Windows\system32\ieui.dll

2013-12-12 19:06:01 ----A---- C:\Windows\system32\ieetwcollectorres.dll

2013-12-12 19:06:00 ----A---- C:\Windows\system32\iesetup.dll

2013-12-12 19:06:00 ----A---- C:\Windows\system32\iernonce.dll

2013-12-12 19:06:00 ----A---- C:\Windows\system32\ieapfltr.dll

2013-12-12 19:05:59 ----A---- C:\Windows\system32\jscript9diag.dll

2013-12-12 19:05:58 ----A---- C:\Windows\system32\ieUnatt.exe

2013-12-12 19:05:58 ----A---- C:\Windows\system32\ieetwproxystub.dll

2013-12-12 19:05:58 ----A---- C:\Windows\system32\ieetwcollector.exe

2013-12-12 19:05:56 ----A---- C:\Windows\system32\wininet.dll

2013-12-12 19:05:54 ----A---- C:\Windows\system32\urlmon.dll

2013-12-12 19:05:54 ----A---- C:\Windows\system32\iertutil.dll

2013-12-12 19:05:52 ----A---- C:\Windows\system32\ieframe.dll

2013-12-12 19:05:50 ----A---- C:\Windows\system32\mshtml.dll

2013-12-12 19:05:49 ----A---- C:\Windows\system32\jscript9.dll

2013-12-12 19:00:58 ----A---- C:\Windows\system32\wmp.dll

2013-12-12 19:00:56 ----A---- C:\Windows\system32\wmploc.DLL

2013-12-12 13:12:28 ----A---- C:\Windows\system32\wscript.exe

2013-12-12 13:12:27 ----A---- C:\Windows\system32\scrrun.dll

2013-12-12 13:12:27 ----A---- C:\Windows\system32\cscript.exe

2013-12-12 13:12:26 ----A---- C:\Windows\system32\imagehlp.dll

2013-12-12 13:12:24 ----A---- C:\Windows\system32\msieftp.dll

2013-12-12 13:12:23 ----A---- C:\Windows\system32\WMPhoto.dll

2013-12-12 13:12:21 ----A---- C:\Windows\system32\tzres.dll

2013-12-12 13:12:18 ----A---- C:\Windows\system32\win32k.sys

2013-12-12 13:12:17 ----A---- C:\Windows\system32\drivers\portcls.sys

2013-12-12 13:12:17 ----A---- C:\Windows\system32\drivers\drmk.sys

2013-12-10 17:17:14 ----D---- C:\Program Files\Teach2000

2013-12-10 15:31:18 ----A---- C:\Windows\system32\FNTCACHE.DAT

2013-12-06 23:19:34 ----D---- C:\Program Files\Internet Explorer

2013-12-06 23:15:57 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-06 23:15:57 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-06 23:15:57 ----A---- C:\Windows\system32\msls31.dll

2013-12-06 23:15:57 ----A---- C:\Windows\system32\jsIntl.dll

2013-12-06 23:15:57 ----A---- C:\Windows\system32\elshyph.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\wextract.exe

2013-12-06 23:15:56 ----A---- C:\Windows\system32\webcheck.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\vbscript.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\url.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\SetIEInstalledDate.exe

2013-12-06 23:15:56 ----A---- C:\Windows\system32\pngfilt.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\occache.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\msrating.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\mshtmlmedia.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\mshtmler.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\mshtmled.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\MshtmlDac.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\mshta.exe

2013-12-06 23:15:56 ----A---- C:\Windows\system32\msfeedssync.exe

2013-12-06 23:15:56 ----A---- C:\Windows\system32\msfeedsbs.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\msfeeds.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\licmgr10.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\jscript.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\inseng.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\imgutil.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\iexpress.exe

2013-12-06 23:15:56 ----A---- C:\Windows\system32\iesysprep.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\iepeers.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\iedkcs32.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\ieapfltr.dat

2013-12-06 23:15:56 ----A---- C:\Windows\system32\IEAdvpack.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\icardie.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\dxtrans.dll

2013-12-06 23:15:56 ----A---- C:\Windows\system32\dxtmsft.dll

2013-12-06 22:24:41 ----D---- C:\Windows\Migration

2013-12-06 22:10:06 ----D---- C:\Program Files\Common Files\Adobe AIR

2013-12-06 17:48:44 ----D---- C:\Users\Brent\AppData\Roaming\Awesomium

2013-12-06 17:48:19 ----D---- C:\ProgramData\Hi-Rez Studios

2013-12-06 17:47:50 ----D---- C:\Program Files\Hi-Rez Studios

2013-12-04 14:06:37 ----D---- C:\Users\Brent\AppData\Roaming\ParetoLogic

2013-12-04 14:06:37 ----D---- C:\Users\Brent\AppData\Roaming\DriverCure

2013-12-04 14:06:23 ----D---- C:\ProgramData\ParetoLogic

2013-12-02 17:36:38 ----D---- C:\Program Files\TornTV.com

2013-11-25 21:22:52 ----D---- C:\Users\Brent\AppData\Roaming\Graboid Inc

2013-11-25 20:26:10 ----D---- C:\ProgramData\MGTEK

2013-11-24 13:35:07 ----D---- C:\ProgramData\surfa ANd kEoep

2013-11-24 13:35:07 ----D---- C:\Program Files\surfa ANd kEoep

2013-11-24 12:33:34 ----D---- C:\ProgramData\YoutubeAdblocker

2013-11-24 12:33:34 ----D---- C:\Program Files\YoutubeAdblocker

2013-11-24 12:33:28 ----D---- C:\ProgramData\surf anod ukaeep

2013-11-24 12:33:27 ----D---- C:\Program Files\surf anod ukaeep

2013-11-20 16:19:14 ----D---- C:\ProgramData\QuickSet

2013-11-20 16:18:27 ----D---- C:\ProgramData\3d8ae864dc408a07

2013-11-20 14:57:39 ----D---- C:\Users\Brent\AppData\Roaming\PFStaticIP

2013-11-19 21:39:04 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys

2013-11-19 21:33:43 ----D---- C:\Program Files\DAEMON Tools Lite

2013-11-19 19:36:33 ----D---- C:\Users\Brent\AppData\Roaming\.minecraft

2013-11-16 10:22:27 ----D---- C:\Users\Brent\AppData\Roaming\DVDVideoSoft

2013-11-16 10:22:27 ----D---- C:\Program Files\DVDVideoSoft

2013-11-16 10:22:27 ----D---- C:\Program Files\Common Files\DVDVideoSoft

======List of files/folders modified in the last 1 month======

2013-12-15 10:06:26 ----D---- C:\Windows\Prefetch

2013-12-15 10:06:21 ----D---- C:\Windows\Temp

2013-12-15 10:06:18 ----RD---- C:\Program Files

2013-12-15 09:59:27 ----D---- C:\Program Files\Steam

2013-12-15 09:48:05 ----D---- C:\Windows\system32\config

2013-12-15 09:39:17 ----SHD---- C:\Windows\Installer

2013-12-15 09:39:17 ----A---- C:\Windows\win.ini

2013-12-15 09:39:16 ----HD---- C:\Config.Msi

2013-12-15 09:32:40 ----D---- C:\ProgramData\NVIDIA

2013-12-14 22:33:19 ----D---- C:\Windows\system32\NDF

2013-12-14 22:29:51 ----D---- C:\Users\Brent\AppData\Roaming\uTorrent

2013-12-14 21:42:21 ----D---- C:\ProgramData\PMB Files

2013-12-14 19:38:37 ----SHD---- C:\System Volume Information

2013-12-14 19:38:36 ----D---- C:\Windows\rescache

2013-12-14 18:27:55 ----D---- C:\Windows\System32

2013-12-14 09:45:27 ----AD---- C:\Windows

2013-12-13 21:04:49 ----D---- C:\Windows\winsxs

2013-12-13 20:55:26 ----A---- C:\Windows\system32\FlashPlayerApp.exe

2013-12-13 20:53:06 ----RSD---- C:\Windows\assembly

2013-12-13 20:52:12 ----D---- C:\Windows\Logs

2013-12-13 20:52:06 ----HD---- C:\ProgramData

2013-12-13 20:40:59 ----D---- C:\Program Files\Electronic Arts

2013-12-13 20:22:35 ----D---- C:\Windows\inf

2013-12-13 20:22:35 ----A---- C:\Windows\system32\PerfStringBackup.INI

2013-12-13 17:24:50 ----D---- C:\Windows\system32\LogFiles

2013-12-13 16:46:27 ----D---- C:\Windows\Tasks

2013-12-13 16:46:27 ----D---- C:\Windows\system32\Tasks

2013-12-12 22:06:17 ----D---- C:\Windows\system32\nl-NL

2013-12-12 22:06:16 ----D---- C:\Windows\system32\DriverStore

2013-12-12 22:06:15 ----D---- C:\Windows\system32\drivers

2013-12-12 19:06:18 ----D---- C:\Windows\system32\catroot2

2013-12-12 19:06:18 ----D---- C:\Windows\system32\catroot

2013-12-12 19:01:50 ----D---- C:\Windows\system32\MRT

2013-12-12 19:01:49 ----D---- C:\Windows\debug

2013-12-12 19:01:43 ----A---- C:\Windows\system32\MRT.exe

2013-12-12 19:01:17 ----D---- C:\Program Files\Windows Media Player

2013-12-09 16:16:56 ----D---- C:\Windows\Panther

2013-12-07 12:47:53 ----D---- C:\Windows\Microsoft.NET

2013-12-06 23:19:35 ----D---- C:\Windows\system32\migration

2013-12-06 23:19:35 ----D---- C:\Windows\PolicyDefinitions

2013-12-06 23:19:34 ----D---- C:\Windows\system32\en-US

2013-12-06 22:24:41 ----SD---- C:\ProgramData\Microsoft

2013-12-06 22:10:08 ----D---- C:\Program Files\Adobe

2013-12-06 22:10:06 ----D---- C:\Program Files\Common Files

2013-12-06 17:47:49 ----HD---- C:\Program Files\InstallShield Installation Information

2013-12-04 13:57:54 ----D---- C:\Windows\servicing

2013-12-04 13:39:21 ----D---- C:\Program Files\Common Files\microsoft shared

2013-11-29 17:23:31 ----D---- C:\Program Files\uTorrent

2013-11-25 20:51:22 ----D---- C:\ProgramData\LockHunter

2013-11-24 13:34:47 ----D---- C:\ProgramData\InstallMate

2013-11-21 22:58:53 ----D---- C:\Users\Brent\AppData\Roaming\DAEMON Tools Lite

2013-11-16 10:05:12 ----D---- C:\Users\Brent\AppData\Roaming\Music Recognition

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-21 49944]

R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-10-21 178304]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-11-19 324096]

R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]

R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-10-21 79720]

R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-10-21 774392]

R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-11-08 403440]

R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-10-21 57672]

R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-11-19 243128]

R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-10-21 35656]

R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-10-21 70384]

R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]

R2 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys [2007-03-16 12256]

R3 CMISTOR;CMIUCR.SYS CM320/CM220 Card Reader Driver; C:\Windows\system32\DRIVERS\cmiucr.SYS [2007-01-12 93056]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-12-13 3921448]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2012-04-18 148800]

R3 rt70x86;RT2500 USB Wireless LAN Driver for Vista; C:\Windows\system32\DRIVERS\netr70.sys [2010-04-27 306016]

R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2009-07-23 43008]

R3 SGIDGMS;MEDION Gaming Mouse; C:\Windows\System32\Drivers\SGIDGMS.sys [2012-09-19 18944]

R3 XUIF;X10 USB Wireless Transceiver; C:\Windows\System32\Drivers\x10ufx2.sys [2006-11-30 27416]

S0 rseb;rseb; C:\Windows\system32\drivers\rseb.sys []

S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-08-13 1163328]

S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]

S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]

S3 apf003;apf003; \??\C:\Windows\system32\apf003.sys [2012-06-18 13232]

S3 ase8cwq7;ase8cwq7; C:\Windows\system32\drivers\ase8cwq7.sys []

S3 auv3wq7b;auv3wq7b; C:\Windows\system32\drivers\auv3wq7b.sys []

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]

S3 Cardex;Cardex; \??\C:\Windows\system32\drivers\TBPANEL.SYS [2007-03-16 12256]

S3 KMWDFILTERx86;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]

S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2009-07-13 1311232]

S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 15872]

S3 RT2500USB;RT2500 USB Wireless LAN Driver; C:\Windows\system32\DRIVERS\rt2500usb.sys []

S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]

S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]

S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]

S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]

S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []

S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]

S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-03-27 14336]

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2013-10-21 50344]

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]

R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files\Hi-Rez Studios\HiPatchService.exe [2013-11-25 9216]

R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 20992]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]

R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 639776]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]

R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]

R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-03-01 136176]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-13 257416]

S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]

S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-03-01 136176]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 108032]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2013-10-30 566696]

S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

kweezie wabbit · 15 december 2013

Blijkbaar is er een proces actief dat steeds probeert de XP drivers voor je RT2500 USB Wireless LAN Card te installeren.

Waarschijnlijk zorgt dit ervoor dat de verbinding steeds uitvalt.

Download Zoek.zip naar het bureaublad.

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.
Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

chromelook; 
firefoxlook; 
emptyfolderscheck;delete 
startupall; 
filesrcm;

Klik op de knop "Options" en vink nu de onderstaande opties aan.
Running processes
Installed Programs
HijackThis Log
Empty Temp Folders
Auto Clean
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post nu de inhoud van het geopende logje in het volgende bericht.

brentt17 · 15 december 2013

bedankt voor de uitleg en na toch wel lang wachten en het opstarten van de pc kreeg ik nog een langere log Echt fijn dat je dit alles begrijpt want ik heb geen idee wat er in die logs staat ok hier komt die:

Zoek.exe Version 4.0.0.5 Updated 14-December-2013

Tool run by Brent on zo 15/12/2013 at 17:38:23,86.

Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Brent\Desktop\zoek.exe [script inserted] [Checkboxes used]

==== Running Processes ======================

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\services.exe

C:\Windows\system32\winlogon.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Windows\Explorer.EXE

C:\Program Files\LSI SoftModem\agrsmsvc.exe

C:\Program Files\Hi-Rez Studios\HiPatchService.exe

C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

C:\Windows\system32\svchost.exe -k hpdevmgmt

C:\Windows\System32\svchost.exe -k HPZ12

C:\Program Files\Erazer\MEDION Gaming Mouse\hid.exe

C:\Program Files\Erazer\MEDION Gaming Mouse\trayicon.exe

C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\Alwil Software\Avast5\avastui.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\EXPERTool\TBPANEL.exe

C:\Users\Brent\AppData\Local\Akamai\netsession_win.exe

C:\Program Files\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\System32\WUDFHost.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\system32\svchost.exe -k SDRSVC

C:\Users\Brent\AppData\Roaming\uTorrent\uTorrent.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Users\Brent\Desktop\zoek.exe

C:\Windows\system32\conhost.exe

==== System Restore Info ======================

15/12/2013 17:40:01 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\Program Files\dumps deleted successfully

C:\Program Files\surfa ANd kEoep deleted successfully

C:\Program Files\YoutubeAdblocker deleted successfully

C:\ProgramData\Oracle deleted successfully

C:\ProgramData\Origin deleted successfully

C:\ProgramData\surfa ANd kEoep deleted successfully

C:\ProgramData\YoutubeAdblocker deleted successfully

C:\Users\Brent\AppData\Roaming\.StarMade deleted successfully

C:\Users\Brent\AppData\Roaming\Awesomium deleted successfully

C:\Users\Brent\AppData\Roaming\Vso deleted successfully

C:\Users\Brent\AppData\Local\ms-drivers deleted successfully

C:\Users\Brent\AppData\Local\Updater3491 deleted successfully

==== Creating Sample_20131512_1754.zip ======================

Process chrome.exe killed

Copied file C:\ProgramData\lsass.exe to sample\lsass.exe

sample\lsass.exe renamed to 51138BEEA3E2C21EC44D0932C71762A8

C:\Users\Public\Desktop\sample_20131512_1754.zip created successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958)

æTorrent

32 Bit HP CIO Components Installer

Able MIDI Editor 1.32 (remove only)

Adobe AIR

Adobe Community Help

Adobe Flash Player 10 Plugin

Adobe Flash Player 11 ActiveX

Adobe Reader XI (11.0.05) - Nederlands

Aeria Ignite

AIO_CDB_ProductContext

AIO_CDB_Software

AIO_Scan

Akamai NetSession Interface

Angry Birds Rio

Ashampoo Burning Studio 10.0.1

avast Free Antivirus

BufferChm

C-Media Card Reader Driver USB2.0

CCleaner

Command & Conquer 3

Command & Conquer 3 Kane's Wrath Worldbuilder

Command & Conquer The First Decade

Command & ConquerT 3: Kane's Wrath

Command & ConquerT 4 Tiberian Twilight

ConvertXtoDVD 4.1.19.365

Creeper World

Creeper World 2

Creeper World 2 Editor

Creeper World Map Editor

DAEMON Tools Lite

Dawngate

Dota 2

Dungeon Siege 2

Eden Eternal

EpicBot

Erazer MEDION Gamingmuis stuurprogramma V1.0

EXPERTool 7.20

Fax

FoxTab FLV Player

FoxTab PDF Converter

Free Mouse Auto Clicker 3.1

Free YouTube to MP3 Converter version 3.12.16.1030

Google Chrome

Google Drive

Google Earth

Google Update Helper

Hi-Rez Studios Authenticate and Update Service

HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B

InfiniteCrisis_6EDD581C692E

InstallIQ Updater

Java 7 Update 45

Java Auto Updater

JavaFX 2.1.1

League of Legends

LockHunter 3.0, 32/64 bit

LSI PCI-SV92PP Soft Modem

Microsoft .NET Framework 4.5.1

Microsoft .NET Framework 4.5.1 (Nederlands)

Microsoft .NET Framework 4.5.1 (NLD)

Microsoft Application Error Reporting

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (Dutch) 2007

Microsoft Office Enterprise 2007

Microsoft Office Excel MUI (Dutch) 2007

Microsoft Office File Validation Add-In

Microsoft Office Groove MUI (Dutch) 2007

Microsoft Office InfoPath MUI (Dutch) 2007

Microsoft Office OneNote MUI (Dutch) 2007

Microsoft Office Outlook MUI (Dutch) 2007

Microsoft Office PowerPoint MUI (Dutch) 2007

Microsoft Office Proof (Dutch) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (German) 2007

Microsoft Office Proofing (Dutch) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (Dutch) 2007

Microsoft Office Shared MUI (Dutch) 2007

Microsoft Office Word MUI (Dutch) 2007

Microsoft Silverlight

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft Visual Studio 2010 Tools for Office Runtime (x86)

Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - NLD

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFCLOC_x86

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Network Stumbler 0.4.0 (remove only)

Notebook Interactive Viewer

NVIDIA-configuratiescherm 311.06

NVIDIA 3D Vision Controller Driver

NVIDIA 3D Vision controllerstuurprogramma 301.42

NVIDIA 3D Vision stuurprogramma 311.06

NVIDIA Display Control Panel

NVIDIA Grafisch stuurprogramma 311.06

NVIDIA HD Audio-stuurprogramma 1.3.16.0

NVIDIA Install Application

NVIDIA Stereoscopic 3D Driver

OpenTTD 1.1.5

Pando Media Booster

Plants vs. Zombies

PVSonyDll

Realtek High Definition Audio Driver

Realtek PCI Fast Ethernet Controller Driver For Vista and Win7

Recuva

RT2500 USB Wireless LAN Card

RuneScape Launcher 1.2.3

Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition

Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition

Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition

ShockWave 1.1

Sid Meier's Civilization V

Smite

Speccy

Steam

Subtitle Workshop 2.51

Synthesia

Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x86) - NLD

Teach2000 versie 8.53

Toolbox

UnloadSupport

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2687267) 32-Bit Edition

Update voor Microsoft Office Excel 2007 Help (KB963678)

Update voor Microsoft Office Powerpoint 2007 Help (KB963669)

Update voor Microsoft Office Word 2007 Help (KB963665)

VideoMate T, M, P, S Series Driver

VLC media player 2.1.2

Warcraft III

WebReg

WinRAR 5.00 beta 8 (32-bit)

X-Men Legends 2 Demo

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Users\Brent\AppData\Roaming\Mozilla\Firefox\Profiles\0

---- FireFox user.js and prefs.js backups ----

user_20131512_1756_.backup

prefs_20131512_1756_.backup

ProfilePath: C:\Users\Brent\AppData\Roaming\Mozilla\Firefox\Profiles\extensions

---- FireFox user.js and prefs.js backups ----

user_20131512_1756_.backup

prefs_20131512_1756_.backup

==== Deleting Files \ Folders ======================

C:\Users\Brent\AppData\LocalLow\{FFB49063-AA6D-64B6-A454-D2B1CB222E31} deleted

C:\Program Files\TornTV.com deleted

C:\ProgramData\surf anod ukaeep deleted

C:\Program Files\surf anod ukaeep deleted

C:\Program Files\Uninstall Information\ib_uninst_383 deleted

C:\Program Files\Uninstall Information\ib_uninst_518 deleted

C:\Program Files\Uninstall Information\ib_uninst_519 deleted

C:\Program Files\Common Files\DVDVideoSoft\bin deleted

C:\Program Files\W3i deleted

C:\Users\Brent\AppData\Roaming\Uniblue deleted

C:\Users\Brent\AppData\Roaming\Thinstall deleted

C:\Users\Brent\AppData\Roaming\ParetoLogic deleted

C:\Users\Brent\AppData\Roaming\DriverCure deleted

C:\ProgramData\23lldnur.pad deleted

C:\ProgramData\QuickSet deleted

C:\ProgramData\ParetoLogic deleted

C:\ProgramData\CloudSoft deleted

C:\ProgramData\Cloud Software LTD deleted

C:\ProgramData\InstallMate deleted

C:\Users\Brent\AppData\Local\IAC deleted

C:\Users\Brent\AppData\Local\Thinstall deleted

C:\Users\Brent\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx deleted

C:\Users\Brent\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted

C:\Users\Brent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com deleted

C:\Users\Brent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk deleted

C:\Windows\System32\Tasks\Your File Updater deleted

C:\Users\Brent\AppData\LocalLow\DataMngr deleted

C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted

C:\Windows\System32\AI_RecycleBin deleted

C:\Windows\System32\searchplugins deleted

C:\Windows\System32\Extensions deleted

C:\Users\Brent\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\OneClickDownloader@OneClickDownloader.com.xpi deleted

C:\ProgramData\lsass.exe deleted

C:\Users\Brent\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com deleted

"C:\Users\Brent\AppData\Roaming\Timer Preferences" deleted

"C:\ProgramData\3d8ae864dc408a07\{4820778D-AB0D-6D18-C316-52A6A0E1D507}" deleted

"C:\ProgramData\3d8ae864dc408a07\{4820778D-AB0D-6D18-C316-52A6A0E1D507}.old" deleted

"C:\ProgramData\3d8ae864dc408a07\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}" deleted

"C:\ProgramData\3d8ae864dc408a07\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}.old" deleted

"C:\ProgramData\3d8ae864dc408a07" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\Brent\AppData\Local\Temp ====

2013-12-13 15:51:17 B91FE1536AB4D680DDD77469EA3FD4BF 24097311 ----a-w- C:\Users\Brent\AppData\Local\Temp\vlc-2.1.2-win32.exe

2013-12-13 15:41:41 FFC4D7CC03CA23C5D0CA30A6FBA636A0 276992 ----a-w- C:\Users\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\aipackagechainer.exe

2013-12-13 15:41:41 D2E391CF7E11F691DCA65E94DAC3B71A 351744 ----a-w- C:\Users\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\ResourceCleaner.dll

2013-12-13 15:41:41 9A4968FE67C177850163DEAFEC64D0A6 80896 ----a-w- C:\Users\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\aicustact.dll

2013-12-13 15:41:41 30EE500E69F06A463F668522FC789945 294400 ----a-w- C:\Users\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\Prereq.dll

2013-12-13 15:41:41 0979CEA9804FBCD758F60649F29D01EA 9880 ----a-w- C:\Users\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\viewer.exe

2013-12-13 15:41:41 068476A4EFC71E260553750D352640A6 69632 ----a-w- C:\Users\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\DataUploader.dll

====== Java Cache =====

2013-12-01 10:54:28 0BC1F4863133ECB25CD25200E104C59D 83 ----a-w- C:\Users\Brent\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\3d9e380d-6.0.lap

2013-12-01 10:54:37 ABE7DA7E2C92312C18644D36FB9AEC8C 25646 ----a-w- C:\Users\Brent\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\2fb889a6-202673ea

2013-12-01 10:54:34 F4605F5C9F29E2F93345C03CBB0BFB13 18079 ----a-w- C:\Users\Brent\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\7c8e77b7-32d7910f

====== C:\Windows\system32 =====

2013-12-12 18:06:05 C74500A1BCB4113A7310295DD3FA4440 2724864 ----a-w- C:\Windows\System32\mshtml.tlb

2013-12-12 18:06:04 A6B0B7F006F1CB84B48981499F6B7210 208896 ----a-w- C:\Windows\System32\ie4uinit.exe

2013-12-12 18:06:02 3D43EAC957F2F797BE82CF6B04A933F8 43008 ----a-w- C:\Windows\System32\jsproxy.dll

2013-12-12 18:06:01 BE8480727660354B93E32B0ED709BF0E 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll

2013-12-12 18:06:01 355BF103E2CF862B00EEB3731E25E802 440832 ----a-w- C:\Windows\System32\ieui.dll

2013-12-12 18:06:00 491B4F34BA2CD7EFCAC934C7EFF48F52 61952 ----a-w- C:\Windows\System32\iesetup.dll

2013-12-12 18:06:00 36D150C4F80DF88ED97D14598C24692F 32768 ----a-w- C:\Windows\System32\iernonce.dll

2013-12-12 18:06:00 08881C59F795C356DE12067E44FFD260 703488 ----a-w- C:\Windows\System32\ieapfltr.dll

2013-12-12 18:05:59 35DE59C975A0C97E8DBBE095BCC3644E 553472 ----a-w- C:\Windows\System32\jscript9diag.dll

2013-12-12 18:05:58 C8AF3CF3030C3962B978FA3871D759FF 108032 ----a-w- C:\Windows\System32\ieetwcollector.exe

2013-12-12 18:05:58 7C7FF72C48AF9DD8CA7ABA2EA97A6670 51200 ----a-w- C:\Windows\System32\ieetwproxystub.dll

2013-12-12 18:05:58 3DE9521C90F7CC4413CBF6569A8B85B5 112128 ----a-w- C:\Windows\System32\ieUnatt.exe

2013-12-12 18:05:56 927FA6456AD6D7630F6854828D2FD16B 1820160 ----a-w- C:\Windows\System32\wininet.dll

2013-12-12 18:05:54 B2E1F7B212502BB49AAD4EFAD37C5CF5 2166784 ----a-w- C:\Windows\System32\iertutil.dll

2013-12-12 18:05:54 84EAF0A08C7742697816E148C066D757 1928192 ----a-w- C:\Windows\System32\inetcpl.cpl

2013-12-12 18:05:54 0763C5D8660436D4D961F72609E33BBE 1157632 ----a-w- C:\Windows\System32\urlmon.dll

2013-12-12 18:05:52 4B638CE3DAA3A082E576C0DDF9D635D4 11221504 ----a-w- C:\Windows\System32\ieframe.dll

2013-12-12 18:05:50 BFAFE990C4A191E83843362B5AC64A9B 17112576 ----a-w- C:\Windows\System32\mshtml.dll

2013-12-12 18:05:49 A60A222D3126DD9E380F9D8B651BC13D 4243968 ----a-w- C:\Windows\System32\jscript9.dll

2013-12-12 18:00:58 6C4B2E1A25841077084EB9F76FF6FFA7 11410432 ----a-w- C:\Windows\System32\wmp.dll

2013-12-12 18:00:56 02DF0628BE8B64B84D50FBE53549AA3B 12625408 ----a-w- C:\Windows\System32\wmploc.DLL

2013-12-12 12:12:28 979D74799EA6C8B8167869A68DF5204A 141824 ----a-w- C:\Windows\System32\wscript.exe

2013-12-12 12:12:28 09F65975C1C9793B923BB52A7FA83453 121856 ----a-w- C:\Windows\System32\wshom.ocx

2013-12-12 12:12:27 A3B1D1312602280839A4A2AFBDFD066E 163840 ----a-w- C:\Windows\System32\scrrun.dll

2013-12-12 12:12:27 A3A35EE79C64A640152B3113E6E254E2 126976 ----a-w- C:\Windows\System32\cscript.exe

2013-12-12 12:12:26 E7B9D5FF20FFDD4AAE2EF1D1B8C27A37 159232 ----a-w- C:\Windows\System32\imagehlp.dll

2013-12-12 12:12:24 AFA53BD631FB0509A91A99391209BB70 301568 ----a-w- C:\Windows\System32\msieftp.dll

2013-12-12 12:12:23 E9504E484076585F6DA3C59F0E20E122 417792 ----a-w- C:\Windows\System32\WMPhoto.dll

2013-12-12 12:12:21 4EC2C3B15B9EC41AD0D6CD918D20376E 2048 ----a-w- C:\Windows\System32\tzres.dll

2013-12-12 12:12:18 8ACB33EF85F9EA87D18FECEAD593A255 2349056 ----a-w- C:\Windows\System32\win32k.sys

2013-12-10 14:31:18 CCBCCF281FC26F26146E4AA9F8DF82CF 3765440 ----a-w- C:\Windows\System32\FNTCACHE.DAT

2013-12-06 22:15:57 C611C6ED5ECFE4608BA79472DFE3D49C 646144 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe

2013-12-06 22:15:57 C1A6E565B2782C09BC40AD749B46D9ED 71680 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

2013-12-06 22:15:57 AD27563BC16AB1EAACAE3033E99C2F78 194048 ----a-w- C:\Windows\System32\elshyph.dll

2013-12-06 22:15:57 9B8701A380CEE1B05D651B4ED4048C8F 645120 ----a-w- C:\Windows\System32\jsIntl.dll

2013-12-06 22:15:57 298FDE634538B62CEEEC266D8773B21A 182272 ----a-w- C:\Windows\System32\msls31.dll

2013-12-06 22:15:56 FB0D1CC2911A0645DDA6C0608473EB55 34816 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll

2013-12-06 22:15:56 F862CD08F1AD4EE39BD506853F3C6103 16284 ----a-w- C:\Windows\System32\ieuinit.inf

2013-12-06 22:15:56 F7B6E341F4B1947BEC0E14EEBE3C627E 111616 ----a-w- C:\Windows\System32\IEAdvpack.dll

2013-12-06 22:15:56 EC7038154490E50ACD405A022F51B204 83456 ----a-w- C:\Windows\System32\inseng.dll

2013-12-06 22:15:56 D9F12F54E3B5A092F1D5F191F5286E53 337408 ----a-w- C:\Windows\System32\html.iec

2013-12-06 22:15:56 CFCE4EFF1D6D909EE2EA3AFCB8F1E677 233472 ----a-w- C:\Windows\System32\url.dll

2013-12-06 22:15:56 C3B0DBD04CC18574B0706CA119902474 367104 ----a-w- C:\Windows\System32\dxtmsft.dll

2013-12-06 22:15:56 C17139EAF939964142C7A1AEEE02DC81 616104 ----a-w- C:\Windows\System32\ieapfltr.dat

2013-12-06 22:15:56 AE6A2C5ECD3E96556E22F12816842F60 48640 ----a-w- C:\Windows\System32\mshtmler.dll

2013-12-06 22:15:56 ABDFC692D9FE43E2BA8FE6CB5A8CB95A 13312 ----a-w- C:\Windows\System32\mshta.exe

2013-12-06 22:15:56 AB3B2CA52AFB695AFCDD2620A21E5B21 24576 ----a-w- C:\Windows\System32\licmgr10.dll

2013-12-06 22:15:56 9E170B0AF156B478BD2B1FD6A2250C9E 62464 ----a-w- C:\Windows\System32\tdc.ocx

2013-12-06 22:15:56 9A33FDDD687A836A1FD478B43C5A95FD 151552 ----a-w- C:\Windows\System32\iexpress.exe

2013-12-06 22:15:56 887055A3C8DD6C87D200D11EAFDBD45B 74240 ----a-w- C:\Windows\System32\SetIEInstalledDate.exe

2013-12-06 22:15:56 83F49FD1BC0A999B006D564C540C7258 86016 ----a-w- C:\Windows\System32\iesysprep.dll

2013-12-06 22:15:56 779E142FE2159935E78C0FA2E190FF1E 610304 ----a-w- C:\Windows\System32\jscript.dll

2013-12-06 22:15:56 71144A47CD02FDDC77DDF5EB5315767F 523776 ----a-w- C:\Windows\System32\msfeeds.dll

2013-12-06 22:15:56 6EB0B7301E00F717BD68A742D1391FAF 36352 ----a-w- C:\Windows\System32\imgutil.dll

2013-12-06 22:15:56 6A92CEC8532056791C6832B2725D170D 139264 ----a-w- C:\Windows\System32\wextract.exe

2013-12-06 22:15:56 6A794439B6612E43FEDE0217C919B652 454656 ----a-w- C:\Windows\System32\vbscript.dll

2013-12-06 22:15:56 6922D7ED84AE102504174922D5D42F49 238288 ----a-w- C:\Windows\System32\iedkcs32.dll

2013-12-06 22:15:56 64831CAD496A073398853A34A5813675 69632 ----a-w- C:\Windows\System32\mshtmled.dll

2013-12-06 22:15:56 5EC13202430A3EB68DFF44CF1FEEA2BE 61952 ----a-w- C:\Windows\System32\MshtmlDac.dll

2013-12-06 22:15:56 55969AADF0210A614700F89B48976F68 43008 ----a-w- C:\Windows\System32\msfeedsbs.dll

2013-12-06 22:15:56 53FC62C51CB18C9100A7DFAF2D2A6C47 12800 ----a-w- C:\Windows\System32\msfeedssync.exe

2013-12-06 22:15:56 4F032F1FDEFEA5EC8EEA3562643B5EE8 69120 ----a-w- C:\Windows\System32\icardie.dll

2013-12-06 22:15:56 4BCC7EB5F20840DA67943BD86AE95735 56832 ----a-w- C:\Windows\System32\pngfilt.dll

2013-12-06 22:15:56 44D5C650C971910827EA65B4D989ED94 164864 ----a-w- C:\Windows\System32\msrating.dll

2013-12-06 22:15:56 2AF48780D879AFC43733159CB29CD8BD 1051136 ----a-w- C:\Windows\System32\mshtmlmedia.dll

2013-12-06 22:15:56 1AFBAA54BDF637F69B8E02A5578286B0 116736 ----a-w- C:\Windows\System32\iepeers.dll

2013-12-06 22:15:56 1200D9C7DB0ADC1B8143A0A9921BF7DA 127488 ----a-w- C:\Windows\System32\occache.dll

2013-12-06 22:15:56 08B56CF57B7CE44315034247CC76D0F1 244736 ----a-w- C:\Windows\System32\dxtrans.dll

2013-12-06 22:15:56 03B3541AE6986602CF9CB5B3AD169C33 208384 ----a-w- C:\Windows\System32\webcheck.dll

====== C:\Windows\system32\drivers =====

2013-12-12 12:12:17 EB6137D696A9B4E9718AC6F8641CB4C9 177152 ----a-w- C:\Windows\System32\drivers\portcls.sys

2013-12-12 12:12:17 9842041E2F5ACE1E2F5FB4EF02053DC8 81408 ----a-w- C:\Windows\System32\drivers\drmk.sys

2013-11-19 20:39:04 E6B7D1B24E16FB24CE1FEA964E144EBC 243128 ----a-w- C:\Windows\System32\drivers\dtsoftbus01.sys

====== C:\Windows\Tasks ======

2013-12-06 22:22:34 FA07317FD3FB71C045AB90B2B1560E29 3950 ----a-w- C:\Windows\system32\Tasks\User_Feed_Synchronization-{AB794A2B-9602-4BEF-9FB5-C626E7298CDD}

2013-12-06 21:10:09 9CB8F73034AD9538BA78DFEAFC74CF03 3138 ----a-w- C:\Windows\system32\Tasks\{78803DFA-523D-41E5-A75A-B3CCC93D14E3}

2013-12-03 15:55:23 D7AA78BF77936E03D5DD88701CF3B1D5 3120 ----a-w- C:\Windows\system32\Tasks\{2E8F3870-6082-464D-B10A-20C0ADCEB914}

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-12-15 09:06:18 -------- d-----w- C:\Program Files\trend micro

2013-12-14 17:27:55 -------- d-----w- C:\Program Files\Network Stumbler

2013-12-13 19:52:04 -------- d-----w- C:\Program Files\InfiniteCrisis

2013-12-13 15:41:52 -------- d-----w- C:\Program Files\Graboid

2013-12-10 16:17:14 -------- d-----w- C:\Program Files\Teach2000

2013-12-06 22:19:34 -------- d-----w- C:\Program Files\Internet Explorer

2013-12-06 21:10:06 -------- d-----w- C:\Program Files\Common Files\Adobe AIR

2013-12-06 16:47:50 -------- d-----w- C:\Program Files\Hi-Rez Studios

2013-11-19 20:33:43 -------- d-----w- C:\Program Files\DAEMON Tools Lite

2013-11-16 09:22:27 -------- d-----w- C:\Program Files\DVDVideoSoft

2013-11-16 09:22:27 -------- d-----w- C:\Program Files\Common Files\DVDVideoSoft

======= C: =====

====== C:\Users\Brent\AppData\Roaming ======

2013-12-13 20:42:55 -------- d-----w- C:\Users\Brent\AppData\Local\InfiniteCrisis

2013-12-13 19:55:00 -------- d-----w- C:\Users\Brent\AppData\Local\Turbine

2013-12-13 19:41:21 -------- d-----w- C:\Users\Brent\AppData\Local\CrashRpt

2013-12-13 19:41:20 -------- d-----w- C:\Users\Brent\AppData\Roaming\DawngateData

2013-12-13 15:44:11 -------- d-----w- C:\Users\Brent\AppData\Roaming\vlc

2013-12-10 14:35:05 2FDC5F8985A6429B000E5EBF099E1CF7 110400 ----a-w- C:\Users\Brent\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-09 15:27:26 -------- d-----w- C:\Users\Brent\AppData\Local\ElevatedDiagnostics

2013-11-25 20:22:52 -------- d-----w- C:\Users\Brent\AppData\Roaming\Graboid Inc

2013-11-25 19:26:43 -------- d-----w- C:\Users\Brent\AppData\Local\MGTEK

2013-11-25 18:25:25 -------- d-----w- C:\Users\Brent\AppData\Local\MetaGeek,_LLC

2013-11-25 18:25:18 2334A3D6965412F0E8CC32EC533FE093 37 --sh--w- C:\Users\Brent\AppData\Local\70149b02515b3bb20dd492.47983420

2013-11-24 12:35:07 -------- d-----w- C:\Users\Brent\AppData\Locallow\{FBF349A8-B0C4-D8F7-51BE-3C6E72CD07D7}

2013-11-24 11:33:34 -------- d-----w- C:\Users\Brent\AppData\Locallow\{4E40FF5F-83AA-1E2D-91DB-E8CB915C233B}

2013-11-20 13:57:39 -------- d-----w- C:\Users\Brent\AppData\Roaming\PFStaticIP

2013-11-19 18:36:33 -------- d-----w- C:\Users\Brent\AppData\Roaming\.minecraft

2013-11-19 18:04:03 -------- d-----w- C:\Users\Brent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portforward.com

2013-11-16 09:22:27 -------- d-----w- C:\Users\Brent\AppData\Roaming\DVDVideoSoft

====== C:\Users\Brent ======

2013-12-13 19:52:06 -------- d-----w- C:\ProgramData\Turbine

2013-12-13 19:52:06 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infinite Crisis

2013-12-13 19:41:04 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dawngate

2013-12-13 15:51:05 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2013-12-11 10:02:17 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth

2013-12-10 16:17:19 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teach2000

2013-12-07 12:20:41 B9A75DE4130C1309C1EA09B9A8C730F4 7209984 ----a-w- C:\Users\Brent\Downloads\dsofinder.exe

2013-12-06 16:48:20 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios

2013-12-06 16:48:19 -------- d-----w- C:\ProgramData\Hi-Rez Studios

2013-12-03 15:54:13 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RAR Password Cracker

2013-11-25 19:26:10 -------- d-----w- C:\ProgramData\MGTEK

2013-11-19 20:34:31 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite

2013-11-16 09:22:59 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

====== C: exe-files ==

2013-12-15 09:06:19 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Brent.exe

2013-12-14 17:27:55 7C2A97B82497C4FD1A296096470894A5 64258 ----a-w- C:\Program Files\Network Stumbler\uninst.exe

2013-12-14 09:04:21 E718964FF769DA3690ADFB1EB745D17A 108032 ----a-w- C:\Program Files\Steam\SteamApps\common\dota 2 beta\bin\vtex.exe

2013-12-13 20:40:38 0E5A050F3ABE3B8CBE20612A9BB61D5B 1515792 ----a-w- C:\Program Files\InfiniteCrisis\turbineclientlauncher.exe

2013-12-13 20:34:11 7D676CD913CC3E0503B1902818C3FA48 25536784 ----a-w- C:\Program Files\InfiniteCrisis\InfiniteCrisis.exe

2013-12-13 19:41:44 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Program Files\Electronic Arts\Dawngate\game\Dawngate.exe

2013-12-13 19:41:44 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Program Files\Electronic Arts\Dawngate\game\CrashSender1402.exe

2013-12-13 19:41:28 E64473E5BDC050DA8C8BB4425EB47D40 853848 ----a-w- C:\Program Files\Electronic Arts\Dawngate\launcher\Launcher.exe

2013-12-13 19:41:28 92F01D765C6E52E20D1BB02074E986F1 1296384 ----a-w- C:\Program Files\Electronic Arts\Dawngate\launcher\CrashSender1402.exe

2013-12-13 15:51:17 B91FE1536AB4D680DDD77469EA3FD4BF 24097311 ----a-w- C:\Users\Brent\AppData\Local\Temp\vlc-2.1.2-win32.exe

2013-12-13 15:51:17 B91FE1536AB4D680DDD77469EA3FD4BF 24097311 ----a-w- C:\Documents and Settings\Brent\AppData\Local\Temp\vlc-2.1.2-win32.exe

2013-12-13 15:51:09 F5F17DDD84E5AC1DB954470EF3065F8E 228217 ----a-w- C:\Program Files\VideoLAN\VLC\uninstall.exe

2013-12-13 15:41:41 FFC4D7CC03CA23C5D0CA30A6FBA636A0 276992 ----a-w- C:\Users\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\aipackagechainer.exe

2013-12-13 15:41:41 FFC4D7CC03CA23C5D0CA30A6FBA636A0 276992 ----a-w- C:\Documents and Settings\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\aipackagechainer.exe

2013-12-13 15:41:41 0979CEA9804FBCD758F60649F29D01EA 9880 ----a-w- C:\Users\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\viewer.exe

2013-12-13 15:41:41 0979CEA9804FBCD758F60649F29D01EA 9880 ----a-w- C:\Documents and Settings\Brent\AppData\Local\Temp\AI_EXTUI_BIN_5416\viewer.exe

2013-12-13 12:30:11 94118BEBD029F0CCB035D18C5B267DB3 2757632 ----a-w- C:\Program Files\Steam\SteamApps\common\dota 2 beta\bin\hlmv.exe

2013-12-13 12:30:11 7A102CFE4065D4987216DA31031FA3BC 735744 ----a-w- C:\Program Files\Steam\SteamApps\common\dota 2 beta\bin\dmxconvert.exe

2013-12-13 12:30:11 11FF6BBEE30852B60E19027051CF6423 8506880 ----a-w- C:\Program Files\Steam\SteamApps\common\dota 2 beta\bin\studiomdl.exe

2013-12-12 18:05:55 0E1D755673453108415F802C90704327 469504 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe

2013-12-12 18:00:54 9AED8E824CF5FAAB67957EDBC5512060 164864 ----a-w- C:\Program Files\Windows Media Player\wmplayer.exe

2013-12-11 10:00:54 30E11BF11AF1A52333CDC66CFAF6B4A3 25469280 ----a-w- C:\Program Files\Google\Update\Download\{74AF07D8-FB8F-4D51-8AC7-927721D56EBB}\7.1.2.2041\GoogleEarth-Win-Bundle-7.1.2.2041.exe

2013-12-10 16:17:15 6D85391FAF779F9C1A4FDFEB6D9C93AD 444216 ----a-w- C:\Program Files\Teach2000\FileAssociationsManager.exe

2013-12-10 16:17:14 E25D2FE920F239BC688B3143795632ED 3326264 ----a-w- C:\Program Files\Teach2000\Teach2000.exe

2013-12-10 16:17:14 50A8F69DA1BEAF6A1E0B2357C526D22E 789816 ----a-w- C:\Program Files\Teach2000\Uninstall\unins000.exe

2013-12-09 12:11:21 D97484A89FF5AD1552677435AA724746 254656 ----a-w- C:\Program Files\Steam\SteamApps\common\dota 2 beta\dota.exe

2013-12-09 00:19:10 214F923C91A71101911BB5D7DFFF10D7 114176 ----a-w- C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe

2013-12-09 00:18:16 73A6BF01391CD65DBE9BBCB7300A9863 126464 ----a-w- C:\Program Files\VideoLAN\VLC\vlc.exe

=== C: other files ==

2013-12-15 16:54:44 952617AE687079E343145F59C1F1C698 20424 ----a-w- C:\Users\Public\Desktop\sample_20131512_1754.zip

2013-12-15 16:54:44 952617AE687079E343145F59C1F1C698 20424 ----a-w- C:\Documents and Settings\Public\Desktop\sample_20131512_1754.zip

2013-12-14 17:43:07 AB121302B99AF52970F97F7F47B4DEB9 358302 ----a-w- C:\Users\Brent\Application Data\uTorrent\utorrent-help.zip

2013-12-14 17:43:07 AB121302B99AF52970F97F7F47B4DEB9 358302 ----a-w- C:\Users\Brent\AppData\Roaming\uTorrent\utorrent-help.zip

2013-12-14 17:43:07 AB121302B99AF52970F97F7F47B4DEB9 358302 ----a-w- C:\Documents and Settings\Brent\Application Data\uTorrent\utorrent-help.zip

2013-12-14 17:43:07 AB121302B99AF52970F97F7F47B4DEB9 358302 ----a-w- C:\Documents and Settings\Brent\AppData\Roaming\uTorrent\utorrent-help.zip

2013-12-12 12:12:18 8ACB33EF85F9EA87D18FECEAD593A255 2349056 ----a-w- C:\Windows\System32\win32k.sys

2013-12-12 12:12:17 EB6137D696A9B4E9718AC6F8641CB4C9 177152 ----a-w- C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_x86_neutral_df2ea65e936720f7\portcls.sys

2013-12-12 12:12:17 EB6137D696A9B4E9718AC6F8641CB4C9 177152 ----a-w- C:\Windows\System32\drivers\portcls.sys

2013-12-12 12:12:17 9842041E2F5ACE1E2F5FB4EF02053DC8 81408 ----a-w- C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_x86_neutral_df2ea65e936720f7\drmk.sys

2013-12-12 12:12:17 9842041E2F5ACE1E2F5FB4EF02053DC8 81408 ----a-w- C:\Windows\System32\drivers\drmk.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-3766965112-3222834027-1711910579-1003\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"GAINWARD"="C:\Program Files\EXPERTool\TBPanel.exe /A"

"AlcoholAutomount"="C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -automount"

"Akamai NetSession Interface"="C:\Users\Brent\AppData\Local\Akamai\netsession_win.exe"

"Steam"="C:\Program Files\Steam\Steam.exe -silent"

"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s"

"Erazer MEDION"="C:\Program Files\Erazer\MEDION Gaming Mouse\Hid.exe"

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"Aeria Ignite"="C:\Program Files\Aeria Games\Ignite\aeriaignite.exe silent"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"AvastUI.exe"="C:\Program Files\Alwil Software\Avast5\AvastUI.exe /nogui"

"20131121"="C:\Program Files\Alwil Software\Avast5\setup\emupdate\86ae3368-84b4-4712-9f59-8fdc2f7daabc.exe /check"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"GAINWARD"="C:\Program Files\EXPERTool\TBPanel.exe /A"

"AlcoholAutomount"="C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -automount"

"Akamai NetSession Interface"="C:\Users\Brent\AppData\Local\Akamai\netsession_win.exe"

"Steam"="C:\Program Files\Steam\Steam.exe -silent"

"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="c:\\progra~2\\browse~1\\261519~1.190\\{c16c1~1\\browse~1.dll"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Alcmtr]