Problemen met pop-ups

dwuyten · 15 december 2013

Sinds vanmorgen blokkeerde het geluid op de laptop van mijn zoon en worden er in bepaalde webpagina's ongevraagde pop-ups aangeboden.

In deze webpagina's worden bepaalde woorden groen en (dubbel) onderstreept opgelicht.

Als je daar dan met de muis voer gaat, krijg je melding zodals "U kan een Ipad winnen"...

Ik heb al een log via RSIT aangemaakt:

Logfile of random's system information tool 1.08 (written by random/random)

Run by Sander at 2013-12-15 14:09:02

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 444 GB (67%) free of 663 GB

Total RAM: 3991 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 14:09:11, on 15/12/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.16428)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe

C:\Program Files (x86)\GoforFiles\GFFUpdater.exe

C:\Program Files (x86)\ExpressFiles\EFUpdater.exe

C:\Users\Sander\AppData\Roaming\Desk 365\update\desk365_update_v1.14.20.exe

C:\Users\Sander\AppData\Local\Temp\Desk365\eUpgrade\eUpgrade.exe

C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

C:\Users\Sander\AppData\Local\Facebook\Update\FacebookUpdate.exe

C:\Program Files (x86)\Skype\Phone\Skype.exe

C:\Program Files (x86)\Clownfish\Clownfish.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Sander\AppData\Roaming\Yontoo\YontooDesktop.exe

C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe

C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe

C:\Program Files (x86)\Desk 365\desk365.exe

C:\Windows\SysWOW64\jmdp\stij.exe

C:\Users\Sander\AppData\Local\Softonic\Softonic.exe

C:\Windows\SysWOW64\rundll32.exe

C:\Users\Sander\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe

C:\Program Files (x86)\AVG\AVG2014\avgui.exe

C:\Program Files (x86)\Ask.com\Updater\Updater.exe

C:\Program Files (x86)\Iminent\Iminent.exe

C:\Program Files (x86)\Iminent\Iminent.Messengers.exe

C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe

C:\Program Files (x86)\AVG Secure Search\vprot.exe

C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

C:\Users\Sander\AppData\Local\VNT\vntldr.exe

C:\Program Files (x86)\PHotkey\HCSynApi.exe

C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Sander\Downloads\RSIT-1.06.exe

C:\Program Files (x86)\trend micro\Sander.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = PortalDoSites

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=BE&userid=9f2a002c-94f7-42b6-85bc-48816f4b11a8&searchtype=ds&q={searchTerms}

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=BE&userid=9f2a002c-94f7-42b6-85bc-48816f4b11a8&searchtype=ds&q={searchTerms}

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=BE&userid=9f2a002c-94f7-42b6-85bc-48816f4b11a8&searchtype=ds&q={searchTerms}

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=BE&userid=9f2a002c-94f7-42b6-85bc-48816f4b11a8&searchtype=ds&q={searchTerms}

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: YoutubeAdblocker - {2292F6A8-EC3A-B1B1-2146-1990AF038892} - C:\Program Files (x86)\YoutubeAdblocker\bPc1amRJuy.dll

O2 - BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - mscoree.dll (file missing)

O2 - BHO: mixidj Helper Object - {4D6A9BBF-402C-4301-B1EF-28D04F71D761} - C:\Program Files (x86)\mixidj\mixidj\1.8.18.8\bh\mixidj.dll

O2 - BHO: SearchNewTab - {638B2114-1E7C-FA36-C994-F2D90AD5BEF9} - C:\Program Files (x86)\SearchNewTab\g5I.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\PROGRA~2\Funmoods\1.5.23.22\bh\escort.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Sander\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll

O2 - BHO: ssurF anDo keep - {82D57C9F-8346-CA45-F63A-AB06421BB4A2} - C:\Program Files (x86)\ssurF anDo keep\uVXkN.dll

O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)

O2 - BHO: DefaultTabToolbarBHO - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Sander\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll

O2 - BHO: IMinent WebBooster - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll

O2 - BHO: SearchNewTab - {AD80073C-5C93-88E2-3D79-29E2EB555770} - C:\Program Files (x86)\SearchNewTab\WWvYo.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: DownlOAD keeper - {B11E0F7A-2051-EF8D-4077-88E517717704} - C:\Program Files (x86)\DownlOAD keeper\ZFw41g2t.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll

O3 - Toolbar: Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll (file missing)

O3 - Toolbar: VirtualDJ Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)

O3 - Toolbar: MixiDJ Toolbar - {CA9B9C89-4662-4ADC-9C23-A452BECD5D19} - C:\Program Files (x86)\mixidj\mixidj\1.8.18.8\mixidjTlbr.dll

O3 - Toolbar: Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Sander\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll

O4 - HKLM\..\Run: [uSB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart

O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"

O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"

O4 - HKLM\..\Run: [sSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY

O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"

O4 - HKLM\..\Run: [iminent] C:\Program Files (x86)\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C"

O4 - HKLM\..\Run: [iminentMessenger] C:\Program Files (x86)\Iminent\Iminent.Messengers.exe

O4 - HKLM\..\Run: [sweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe

O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"

O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"

O4 - HKLM\..\Run: [VNT] C:\Program Files (x86)\VNT\vntldr.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Sander\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKCU\..\Run: [ONAIR] C:\Program Files\ONAIR\ONAIR.exe

O4 - HKCU\..\Run: [Clownfish] "C:\Program Files (x86)\Clownfish\Clownfish.exe"

O4 - HKCU\..\Run: [C32B1C3B921A67FAB6F28E040698993296D706C3._service_run] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service

O4 - HKCU\..\Run: [browser Infrastructure Helper] C:\Users\Sander\AppData\Local\Smartbar\Application\SnapDo.exe startup

O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_A004FB8DD7882703A7DF346DFAB7630E] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

O4 - HKCU\..\Run: [Yontoo Desktop] "C:\Users\Sander\AppData\Roaming\Yontoo\YontooDesktop.exe"

O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe

O4 - HKCU\..\Run: [PC Speed Maximizer] C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe

O4 - HKCU\..\Run: [smart Driver Updater] C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe

O4 - HKCU\..\Run: [softonic for Windows] "C:\Users\Sander\AppData\Local\Softonic\Softonic.exe" -minimize

O4 - HKCU\..\Run: [se] C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe /minimized

O4 - HKCU\..\Run: [TBHostSupport] "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Sander\AppData\Local\TBHostSupport\TBHostSupport.dll",DLLRunTBHostSupportPlugin

O4 - HKCU\..\Run: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe /minimized

O4 - HKCU\..\Run: [Desk 365] "C:\Program Files (x86)\Desk 365\desk365.exe" /autorun

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [7F40E4A695C918917DEEAF2190EC6E5DA33B0F9B._service_run] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [7F40E4A695C918917DEEAF2190EC6E5DA33B0F9B._service_run] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service (User 'Default user')

O4 - Startup: Facebook Messenger.lnk = Sander\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: eBay.be - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - Elektronica, auto's, kleding, verzamelobjecten, cadeaubons en meer | eBay (file missing)

O9 - Extra 'Tools' menuitem: eBay.be - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - Elektronica, auto's, kleding, verzamelobjecten, cadeaubons en meer | eBay (file missing)

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: eBay.be - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - Elektronica, auto's, kleding, verzamelobjecten, cadeaubons en meer | eBay (file missing) (HKCU)

O9 - Extra 'Tools' menuitem: eBay.be - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - Elektronica, auto's, kleding, verzamelobjecten, cadeaubons en meer | eBay (file missing) (HKCU)

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.2.0\ViProtocol.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

O23 - Service: Ask-updateservice (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files (x86)\PHotkey\ASLDRSrv.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe

O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Security Service (BTHSSecurityMgr) - Intel® Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

O23 - Service: CyberLink PowerDVD 10 MS Monitor Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe

O23 - Service: CyberLink PowerDVD 10 MS Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

O23 - Service: DefaultTabUpdate - Unknown owner - C:\Users\Sander\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe

O23 - Service: Desk 365 service (desksvc) - 337 Technology Limited. - C:\Program Files (x86)\Desk 365\deskSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe

O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe

O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

O23 - Service: GFNEX Service (GFNEXSrv) - Unknown owner - C:\Program Files (x86)\PHotkey\GFNEXSrv.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: IBUpdaterService - Unknown owner - C:\Windows\system32\dmwu.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe

O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: MemeoBackgroundService - Memeo - C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: SProtection - Iminent - C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: vToolbarUpdater17.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: Intel® PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--

End of file - 23404 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3072491271-985545072-1069970057-1000Core.job

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3072491271-985545072-1069970057-1000UA.job

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3072491271-985545072-1069970057-1002Core.job

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3072491271-985545072-1069970057-1002UA.job

C:\Windows\tasks\FindLyrics Update.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\RMAutoUpdate.job

C:\Windows\tasks\RMSchedule.job

C:\Windows\tasks\ROC_REG_JAN_DELETE.job

C:\Windows\tasks\spmonitor.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2292F6A8-EC3A-B1B1-2146-1990AF038892}]

YoutubeAdblocker - C:\Program Files (x86)\YoutubeAdblocker\bPc1amRJuy.dll [2013-11-28 425984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}]

Snap.DoEngine - C:\Windows\system32\mscoree.dll [2010-11-21 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D6A9BBF-402C-4301-B1EF-28D04F71D761}]

mixidj Helper Object - C:\Program Files (x86)\mixidj\mixidj\1.8.18.8\bh\mixidj.dll [2013-04-26 307608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{638B2114-1E7C-FA36-C994-F2D90AD5BEF9}]

SearchNewTab - C:\Program Files (x86)\SearchNewTab\g5I.dll [2013-11-01 371712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}]

Funmoods Helper Object - C:\PROGRA~2\Funmoods\1.5.23.22\bh\escort.dll [2013-04-10 243664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}]

DefaultTab Browser Helper - C:\Users\Sander\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll [2013-12-14 471160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82D57C9F-8346-CA45-F63A-AB06421BB4A2}]

ssurF anDo keep - C:\Program Files (x86)\ssurF anDo keep\uVXkN.dll [2012-11-28 425984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96A25A24-2E87-4374-8A50-CC6F943FCE4D}]

Related Searches - C:\Users\Sander\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll [2013-12-14 398968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]

IMinent WebBooster (BHO) - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll [2013-11-07 299600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AD80073C-5C93-88E2-3D79-29E2EB555770}]

SearchNewTab - C:\Program Files (x86)\SearchNewTab\WWvYo.dll [2013-11-28 425984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02 4119744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B11E0F7A-2051-EF8D-4077-88E517717704}]

DownlOAD keeper - C:\Program Files (x86)\DownlOAD keeper\ZFw41g2t.dll [2012-11-01 371712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

VirtualDJ Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-11-17 1515688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]

Yontoo - C:\Program Files (x86)\Yontoo\YontooIEClient.dll [2012-10-24 194928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{ae07101b-46d4-4a98-af68-0333ea26e113} - Snap.Do - C:\Windows\system32\mscoree.dll [2010-11-21 297808]

{D4027C7F-154A-4066-A1AD-4243D8127440} - VirtualDJ Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-11-17 1515688]

{95B7759C-8C7F-4BF1-B163-73684A933233}

{CA9B9C89-4662-4ADC-9C23-A452BECD5D19} - MixiDJ Toolbar - C:\Program Files (x86)\mixidj\mixidj\1.8.18.8\mixidjTlbr.dll [2013-04-26 300952]

{96A25A24-2E87-4374-8A50-CC6F943FCE4D} - Related Searches - C:\Users\Sander\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll [2013-12-14 398968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"USB3MON"=C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-02-27 291608]

"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2011-12-21 507744]

"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2010-08-03 107816]

"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2011-03-30 87336]

"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2012-03-21 103896]

"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2013-11-07 4956176]

""= []

"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2011-11-17 901800]

"Iminent"=C:\Program Files (x86)\Iminent\Iminent.exe [2013-04-02 1074736]

"IminentMessenger"=C:\Program Files (x86)\Iminent\Iminent.Messengers.exe [2013-04-02 884784]

"SweetIM"=C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [2012-10-04 115032]

"vProt"=C:\Program Files (x86)\AVG Secure Search\vprot.exe [2013-12-09 2471448]

"ApnTBMon"=C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2013-10-29 1707472]

"VNT"=C:\Program Files (x86)\VNT\vntldr.exe [2013-10-29 202192]

"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]

"msnmsgr"=~C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background []

"Facebook Update"=C:\Users\Sander\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-30 138096]

"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14 20584608]

"ONAIR"=C:\Program Files\ONAIR\ONAIR.exe [2012-10-21 3410944]

"Clownfish"=C:\Program Files (x86)\Clownfish\Clownfish.exe [2013-08-21 1277688]

"C32B1C3B921A67FAB6F28E040698993296D706C3._service_run"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2013-12-04 863184]

"Browser Infrastructure Helper"=C:\Users\Sander\AppData\Local\Smartbar\Application\SnapDo.exe startup []

"GoogleChromeAutoLaunch_A004FB8DD7882703A7DF346DFAB7630E"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2013-12-04 863184]

"Yontoo Desktop"=C:\Users\Sander\AppData\Roaming\Yontoo\YontooDesktop.exe [2013-01-31 42784]

"Pando Media Booster"=C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2013-02-27 3093624]

"PC Speed Maximizer"=C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe [2012-12-11 82304]

"Smart Driver Updater"=C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe [2012-09-20 338576]

"Softonic for Windows"=C:\Users\Sander\AppData\Local\Softonic\Softonic.exe [2013-12-04 4124144]

"se"=C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe /minimized []

"TBHostSupport"=C:\Users\Sander\AppData\Local\TBHostSupport\TBHostSupport.dll [2013-11-06 458016]

"ooVoo.exe"=C:\Program Files (x86)\ooVoo\oovoo.exe /minimized []

"Desk 365"=C:\Program Files (x86)\Desk 365\desk365.exe [2013-12-15 1011792]

C:\Users\Sander\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Facebook Messenger.lnk - C:\Users\Sander\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"LogonHoursAction"=2

"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2013-12-15 14:09:03 ----D---- C:\Program Files (x86)\trend micro

2013-12-15 14:09:02 ----D---- C:\rsit

2013-12-15 14:05:36 ----D---- C:\ProgramData\Oracle

2013-12-15 14:05:32 ----D---- C:\Program Files (x86)\Common Files\Java

2013-12-15 14:05:13 ----A---- C:\Windows\SysWOW64\javaws.exe

2013-12-15 14:05:04 ----A---- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-12-15 14:05:04 ----A---- C:\Windows\SysWOW64\javaw.exe

2013-12-15 14:05:04 ----A---- C:\Windows\SysWOW64\java.exe

2013-12-15 13:50:53 ----D---- C:\Users\Sander\AppData\Roaming\AVG2014

2013-12-15 13:45:29 ----D---- C:\ProgramData\AVG2014

2013-12-15 12:07:25 ----D---- C:\8a870a588ac4d255b30c46

2013-12-15 10:58:22 ----SHD---- C:\found.003

2013-12-15 10:45:34 ----D---- C:\Users\Sander\AppData\Roaming\Iminent

2013-12-15 10:44:01 ----D---- C:\Users\Sander\AppData\Roaming\ViberPC

2013-12-15 10:43:30 ----D---- C:\Windows\SysWOW64\jmdp

2013-12-14 19:46:29 ----D---- C:\21f376cb655f3e86bba5

2013-12-14 13:42:56 ----D---- C:\Users\Sander\AppData\Roaming\ooVoo Details

2013-12-13 11:22:04 ----A---- C:\Windows\SysWOW64\wmploc.DLL

2013-12-13 11:22:03 ----A---- C:\Windows\SysWOW64\wmp.dll

2013-12-13 11:16:12 ----A---- C:\Windows\SysWOW64\jsproxy.dll

2013-12-13 11:16:12 ----A---- C:\Windows\SysWOW64\ieui.dll

2013-12-13 11:16:08 ----A---- C:\Windows\SysWOW64\jscript9diag.dll

2013-12-13 11:16:06 ----A---- C:\Windows\SysWOW64\ieapfltr.dll

2013-12-13 11:16:04 ----A---- C:\Windows\SysWOW64\wininet.dll

2013-12-13 11:16:04 ----A---- C:\Windows\SysWOW64\urlmon.dll

2013-12-13 11:16:04 ----A---- C:\Windows\SysWOW64\iertutil.dll

2013-12-13 11:16:00 ----A---- C:\Windows\SysWOW64\ieframe.dll

2013-12-13 11:15:58 ----A---- C:\Windows\SysWOW64\mshtml.dll

2013-12-13 11:15:57 ----A---- C:\Windows\SysWOW64\jscript9.dll

2013-12-12 11:16:47 ----A---- C:\Windows\SysWOW64\msieftp.dll

2013-12-12 11:16:44 ----A---- C:\Windows\SysWOW64\WMPhoto.dll

2013-12-12 11:16:43 ----A---- C:\Windows\SysWOW64\imagehlp.dll

2013-12-12 11:16:40 ----A---- C:\Windows\SysWOW64\tzres.dll

2013-12-12 11:16:35 ----A---- C:\Windows\SysWOW64\wscript.exe

2013-12-12 11:16:34 ----A---- C:\Windows\SysWOW64\scrrun.dll

2013-12-12 11:16:34 ----A---- C:\Windows\SysWOW64\cscript.exe

2013-12-05 13:10:24 ----SHD---- C:\found.002

2013-12-04 13:18:26 ----A---- C:\Windows\SysWOW64\elshyph.dll

2013-12-04 13:18:18 ----A---- C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-04 13:18:18 ----A---- C:\Windows\SysWOW64\msls31.dll

2013-12-04 13:18:18 ----A---- C:\Windows\SysWOW64\jsIntl.dll

2013-12-04 13:18:17 ----A---- C:\Windows\SysWOW64\msrating.dll

2013-12-04 13:18:16 ----A---- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-04 13:18:15 ----A---- C:\Windows\SysWOW64\url.dll

2013-12-04 13:18:15 ----A---- C:\Windows\SysWOW64\iedkcs32.dll

2013-12-04 13:18:15 ----A---- C:\Windows\SysWOW64\dxtrans.dll

2013-12-04 13:18:15 ----A---- C:\Windows\SysWOW64\dxtmsft.dll

2013-12-04 13:18:14 ----A---- C:\Windows\SysWOW64\licmgr10.dll

2013-12-04 13:18:14 ----A---- C:\Windows\SysWOW64\inseng.dll

2013-12-04 13:18:14 ----A---- C:\Windows\SysWOW64\iesetup.dll

2013-12-04 13:18:14 ----A---- C:\Windows\SysWOW64\iernonce.dll

2013-12-04 13:18:14 ----A---- C:\Windows\SysWOW64\icardie.dll

2013-12-04 13:18:13 ----A---- C:\Windows\SysWOW64\wextract.exe

2013-12-04 13:18:13 ----A---- C:\Windows\SysWOW64\webcheck.dll

2013-12-04 13:18:13 ----A---- C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-04 13:18:13 ----A---- C:\Windows\SysWOW64\mshtmled.dll

2013-12-04 13:18:13 ----A---- C:\Windows\SysWOW64\msfeeds.dll

2013-12-04 13:18:13 ----A---- C:\Windows\SysWOW64\iexpress.exe

2013-12-04 13:18:12 ----A---- C:\Windows\SysWOW64\vbscript.dll

2013-12-04 13:18:12 ----A---- C:\Windows\SysWOW64\pngfilt.dll

2013-12-04 13:18:11 ----A---- C:\Windows\SysWOW64\occache.dll

2013-12-04 13:18:11 ----A---- C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-04 13:18:11 ----A---- C:\Windows\SysWOW64\mshta.exe

2013-12-04 13:18:11 ----A---- C:\Windows\SysWOW64\jscript.dll

2013-12-04 13:18:11 ----A---- C:\Windows\SysWOW64\imgutil.dll

2013-12-04 13:18:11 ----A---- C:\Windows\SysWOW64\ieUnatt.exe

2013-12-04 13:18:11 ----A---- C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-04 13:18:10 ----A---- C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-04 13:18:10 ----A---- C:\Windows\SysWOW64\mshtmler.dll

2013-12-04 13:18:10 ----A---- C:\Windows\SysWOW64\msfeedssync.exe

2013-12-04 13:18:10 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-04 13:18:10 ----A---- C:\Windows\SysWOW64\iesysprep.dll

2013-12-04 13:18:10 ----A---- C:\Windows\SysWOW64\iepeers.dll

2013-12-04 13:18:10 ----A---- C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-03 17:33:32 ----SHD---- C:\found.001

2013-11-28 19:12:17 ----D---- C:\ProgramData\QuickSet

2013-11-28 19:11:28 ----D---- C:\ProgramData\YoutubeBookmark

2013-11-28 19:11:21 ----D---- C:\ProgramData\YoutubeAdblocker

2013-11-28 19:11:20 ----D---- C:\Program Files (x86)\YoutubeAdblocker

2013-11-28 19:10:57 ----D---- C:\ProgramData\ssurF anDo keep

2013-11-28 19:10:55 ----D---- C:\Program Files (x86)\ssurF anDo keep

2013-11-17 19:37:21 ----A---- C:\Windows\SysWOW64\sho89A2.tmp

2013-11-13 15:54:03 ----A---- C:\Windows\SysWOW64\nshwfp.dll

2013-11-13 15:54:03 ----A---- C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-11-13 15:52:46 ----A---- C:\Windows\SysWOW64\crypt32.dll

2013-11-13 15:52:34 ----A---- C:\Windows\SysWOW64\SmartcardCredentialProvider.dll

2013-11-13 15:52:34 ----A---- C:\Windows\SysWOW64\credui.dll

2013-11-13 15:52:34 ----A---- C:\Windows\SysWOW64\authui.dll

2013-11-13 15:52:27 ----A---- C:\Windows\SysWOW64\sspicli.dll

2013-11-13 15:52:27 ----A---- C:\Windows\SysWOW64\schannel.dll

2013-11-13 15:52:27 ----A---- C:\Windows\SysWOW64\ncrypt.dll

2013-11-13 15:52:26 ----A---- C:\Windows\SysWOW64\secur32.dll

2013-11-13 15:52:17 ----A---- C:\Windows\SysWOW64\gdi32.dll

2013-11-07 01:52:56 ----A---- C:\Windows\SysWOW64\IntelCpHeciSvc.exe

2013-11-07 01:52:50 ----A---- C:\Windows\SysWOW64\igfxexps32.dll

2013-11-07 01:52:50 ----A---- C:\Windows\SysWOW64\igfxdv32.dll

2013-11-07 01:52:50 ----A---- C:\Windows\SysWOW64\igfxcmrt32.dll

2013-11-07 01:52:50 ----A---- C:\Windows\SysWOW64\igfxcmjit32.dll

2013-11-07 01:52:50 ----A---- C:\Windows\SysWOW64\igfx11cmrt32.dll

2013-11-07 01:52:42 ----A---- C:\Windows\SysWOW64\igdde32.dll

2013-11-07 01:52:40 ----A---- C:\Windows\SysWOW64\igd10umd32.dll

2013-11-07 01:52:36 ----A---- C:\Windows\SysWOW64\ig4icd32.dll

2013-11-06 17:58:39 ----D---- C:\ProgramData\VirtualizedApplications

2013-11-06 15:08:39 ----D---- C:\Program Files (x86)\MSECache

2013-11-06 14:22:52 ----D---- C:\Users\Sander\AppData\Roaming\SoftGrid Client

2013-11-06 14:21:42 ----D---- C:\Program Files (x86)\Common Files\DESIGNER

2013-11-06 14:21:41 ----D---- C:\Program Files (x86)\Microsoft Application Virtualization Client

2013-11-06 13:39:03 ----A---- C:\Windows\SysWOW64\wksprtPS.dll

2013-11-06 13:39:03 ----A---- C:\Windows\SysWOW64\tsgqec.dll

2013-11-06 13:39:03 ----A---- C:\Windows\SysWOW64\rdpendp_winip.dll

2013-11-06 13:39:03 ----A---- C:\Windows\SysWOW64\MsRdpWebAccess.dll

2013-11-06 13:39:03 ----A---- C:\Windows\SysWOW64\aaclient.dll

2013-11-06 13:39:02 ----A---- C:\Windows\SysWOW64\mstsc.exe

2013-11-06 13:39:01 ----A---- C:\Windows\SysWOW64\mstscax.dll

2013-11-06 13:35:52 ----A---- C:\Windows\SysWOW64\qdvd.dll

2013-11-01 12:00:32 ----D---- C:\ProgramData\WinterSoft

2013-11-01 12:00:30 ----D---- C:\Users\Sander\AppData\Roaming\SkypEmoticons

2013-11-01 12:00:18 ----D---- C:\ProgramData\SearchNewTab

2013-11-01 12:00:18 ----D---- C:\Program Files (x86)\SearchNewTab

2013-11-01 11:59:38 ----D---- C:\Program Files (x86)\ss helper

2013-11-01 11:59:25 ----D---- C:\ProgramData\DownlOAD keeper

2013-11-01 11:59:25 ----D---- C:\ProgramData\504c2cf8db11ac3b

2013-11-01 11:59:21 ----D---- C:\Program Files (x86)\DownlOAD keeper

2013-11-01 11:58:46 ----D---- C:\ProgramData\InstallMate

2013-11-01 11:32:58 ----D---- C:\Program Files (x86)\VNT

2013-10-09 18:25:14 ----A---- C:\Windows\SysWOW64\comctl32.dll

2013-10-09 18:25:11 ----A---- C:\Windows\SysWOW64\lpk.dll

2013-10-09 18:25:11 ----A---- C:\Windows\SysWOW64\fontsub.dll

2013-10-09 18:25:11 ----A---- C:\Windows\SysWOW64\dciman32.dll

2013-10-09 18:25:11 ----A---- C:\Windows\SysWOW64\atmlib.dll

2013-10-09 18:25:11 ----A---- C:\Windows\SysWOW64\atmfd.dll

2013-10-09 18:25:07 ----A---- C:\Windows\SysWOW64\WebClnt.dll

2013-10-09 18:25:07 ----A---- C:\Windows\SysWOW64\davclnt.dll

2013-10-09 18:25:04 ----A---- C:\Windows\SysWOW64\mswsock.dll

2013-10-09 18:24:57 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe

2013-10-09 18:24:56 ----A---- C:\Windows\SysWOW64\tdh.dll

2013-10-09 18:24:56 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe

2013-10-09 18:24:55 ----A---- C:\Windows\SysWOW64\ntdll.dll

2013-10-09 18:24:55 ----A---- C:\Windows\SysWOW64\advapi32.dll

2013-10-09 18:24:52 ----A---- C:\Windows\SysWOW64\ntvdm64.dll

2013-10-09 18:24:50 ----A---- C:\Windows\SysWOW64\wow32.dll

2013-10-09 18:24:48 ----A---- C:\Windows\SysWOW64\setup16.exe

2013-10-09 18:24:48 ----A---- C:\Windows\SysWOW64\instnm.exe

2013-10-09 18:24:46 ----A---- C:\Windows\SysWOW64\user.exe

2013-10-09 18:24:40 ----A---- C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-10-07 17:54:08 ----D---- C:\Program Files (x86)\GameSpy Arcade

2013-09-18 12:18:13 ----SHD---- C:\found.000

======List of files/folders modified in the last 3 months======

2013-12-15 14:09:03 ----RD---- C:\Program Files (x86)

2013-12-15 14:05:36 ----HD---- C:\ProgramData

2013-12-15 14:05:33 ----SHD---- C:\Windows\Installer

2013-12-15 14:05:33 ----D---- C:\Config.Msi

2013-12-15 14:05:32 ----D---- C:\Program Files (x86)\Common Files

2013-12-15 14:05:13 ----D---- C:\Windows\SysWOW64

2013-12-15 14:05:03 ----D---- C:\Program Files (x86)\Java

2013-12-15 14:04:45 ----D---- C:\Windows\Tasks

2013-12-15 14:04:44 ----D---- C:\Users\Sander\AppData\Roaming\Systweak

2013-12-15 14:03:12 ----SHD---- C:\System Volume Information

2013-12-15 14:03:12 ----D---- C:\Windows\System32

2013-12-15 14:03:12 ----D---- C:\Windows\inf

2013-12-15 14:01:28 ----D---- C:\Program Files (x86)\PC Speed Up

2013-12-15 14:00:05 ----D---- C:\Windows\Temp

2013-12-15 14:00:00 ----D---- C:\Users\Sander\AppData\Roaming\Desk 365

2013-12-15 14:00:00 ----A---- C:\Windows\SysWOW64\log.txt

2013-12-15 13:59:01 ----D---- C:\ProgramData\MFAData

2013-12-15 13:56:40 ----D---- C:\Users\Sander\AppData\Roaming\Yontoo

2013-12-15 13:56:21 ----D---- C:\Users\Sander\AppData\Roaming\Skype

2013-12-15 13:55:53 ----D---- C:\Program Files (x86)\Desk 365

2013-12-15 13:54:50 ----AD---- C:\ProgramData\Temp

2013-12-15 13:54:36 ----D---- C:\Program Files (x86)\PC Tools Registry Mechanic

2013-12-15 13:51:25 ----D---- C:\Program Files (x86)\AVG

2013-12-15 13:50:30 ----HD---- C:\$AVG

2013-12-15 13:49:40 ----D---- C:\ProgramData\AVG2013

2013-12-15 13:43:43 ----RD---- C:\Program Files

2013-12-15 13:39:46 ----D---- C:\ProgramData\Norton

2013-12-15 13:17:22 ----D---- C:\Program Files (x86)\Steam

2013-12-15 13:12:22 ----D---- C:\Program Files (x86)\Babylon

2013-12-15 12:55:07 ----D---- C:\Windows

2013-12-15 12:18:56 ----SD---- C:\ProgramData\Microsoft

2013-12-15 12:18:03 ----D---- C:\Windows\SysWOW64\en-US

2013-12-15 12:17:22 ----D---- C:\Windows\Microsoft.NET

2013-12-15 12:04:53 ----D---- C:\ProgramData\eSafe

2013-12-15 11:26:53 ----D---- C:\Windows\registration

2013-12-15 10:43:00 ----RD---- C:\Users

2013-12-15 10:17:21 ----D---- C:\Windows\Panther

2013-12-15 10:17:21 ----D---- C:\Windows\Logs

2013-12-15 10:17:21 ----D---- C:\Windows\debug

2013-12-15 08:26:53 ----RSD---- C:\Windows\assembly

2013-12-15 08:18:58 ----D---- C:\Windows\Prefetch

2013-12-14 19:51:44 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI

2013-12-14 11:58:59 ----D---- C:\Windows\winsxs

2013-12-14 11:53:49 ----D---- C:\Program Files (x86)\Windows Media Player

2013-12-14 11:53:47 ----D---- C:\Program Files (x86)\Internet Explorer

2013-12-14 11:53:44 ----D---- C:\Windows\SysWOW64\nl-NL

2013-12-14 11:53:29 ----D---- C:\Windows\SysWOW64\drivers

2013-12-13 11:20:58 ----D---- C:\ProgramData\Microsoft Help

2013-12-12 11:07:46 ----D---- C:\Program Files (x86)\Common Files\Steam

2013-12-11 14:35:37 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-09 11:04:08 ----D---- C:\Program Files (x86)\Common Files\AVG Secure Search

2013-12-09 11:03:50 ----D---- C:\ProgramData\AVG Secure Search

2013-12-09 11:03:48 ----D---- C:\Program Files (x86)\AVG Secure Search

2013-12-04 16:01:02 ----D---- C:\Windows\rescache

2013-12-04 14:11:00 ----D---- C:\Windows\SysWOW64\migration

2013-12-04 14:10:55 ----D---- C:\Windows\PolicyDefinitions

2013-12-02 18:06:47 ----D---- C:\ProgramData\Skype

2013-12-02 18:06:41 ----RD---- C:\Program Files (x86)\Skype

2013-11-30 10:54:18 ----D---- C:\Program Files (x86)\Common Files\Umbrella

2013-11-28 17:28:06 ----D---- C:\Program Files (x86)\GoforFiles

2013-11-09 11:19:21 ----D---- C:\ProgramData\CyberLink

2013-11-08 17:21:19 ----D---- C:\Program Files (x86)\Iminent

2013-11-07 01:52:48 ----A---- C:\Windows\SysWOW64\igdumd32.dll

2013-11-06 15:08:42 ----D---- C:\Program Files (x86)\Common Files\microsoft shared

2013-11-06 15:08:41 ----D---- C:\Program Files (x86)\Microsoft Office

2013-11-06 14:28:37 ----SD---- C:\Users\Sander\AppData\Roaming\Microsoft

2013-11-06 14:23:08 ----D---- C:\Users\Sander\AppData\Roaming\TP

2013-11-06 13:42:41 ----D---- C:\Windows\SysWOW64\wbem

2013-11-06 13:38:32 ----D---- C:\Program Files (x86)\Intel

2013-10-22 16:12:59 ----D---- C:\Windows\SysWOW64\WNLT

2013-10-21 16:59:32 ----D---- C:\Windows\SysWOW64\ARFC

2013-10-11 16:23:47 ----D---- C:\Program Files (x86)\Skype Recorder

2013-10-10 16:01:13 ----D---- C:\Windows\AppPatch

2013-10-10 15:59:24 ----D---- C:\Program Files (x86)\Microsoft Silverlight

2013-10-09 18:26:48 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

2013-10-07 17:53:49 ----D---- C:\Program Files (x86)\EA Games

2013-09-25 11:56:12 ----D---- C:\Program Files (x86)\DefaultTab

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys []

R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys []

R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys []

R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys []

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys []

R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver; C:\Windows\system32\drivers\iusb3hcs.sys []

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []

R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys []

R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys []

R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys []

R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys []

R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys []

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys []

R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys []

R2 PEGAGFN;PEGAGFN; \??\C:\Program Files (x86)\PHotkey\PEGAGFN.sys [2009-09-11 14344]

R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys []

R3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys []

R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys []

R3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys []

R3 btmaudio;Intel Bluetooth Audio Service; C:\Windows\system32\drivers\btmaud.sys []

R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys []

R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys []

R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys []

R3 ibtfltcoex;ibtfltcoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys []

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys []

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []

R3 IntcDAud;Intel® Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys []

R3 iusb3hub;Intel® USB 3.0 hub-stuurprogramma; C:\Windows\system32\DRIVERS\iusb3hub.sys []

R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\drivers\iusb3xhc.sys []

R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\drivers\iwdbus.sys []

R3 MEIx64;Intel® Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys []

R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys []

R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys []

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []

R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfswin7.sys []

R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaywin7.sys []

R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirwin7.sys []

R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvolwin7.sys []

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\drivers\SynTP.sys []

R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys []

S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys []

S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys []

S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []

S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys []

S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys []

S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys []

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys []

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys []

S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8192su.sys []

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []

S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]

R2 APNMCP;Ask-updateservice; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-10-29 166352]

R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [2009-12-18 104968]

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2013-11-11 3478544]

R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008]

R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-02-22 1014096]

R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2012-02-22 1104208]

R2 BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-18 135952]

R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]

R2 CyberLink PowerDVD 10 MS Monitor Service;CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [2011-04-13 70952]

R2 CyberLink PowerDVD 10 MS Service;CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [2011-04-13 312616]

R2 DefaultTabUpdate;DefaultTabUpdate; C:\Users\Sander\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [2013-09-15 107520]

R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-03-29 626960]

R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]

R2 FreemakeVideoCapture;FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [2012-08-21 8704]

R2 GFNEXSrv;GFNEX Service; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [2011-10-13 156672]

R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-30 13592]

R2 IBUpdaterService;IBUpdaterService; C:\Windows\system32\dmwu.exe []

R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448]

R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2012-03-15 162648]

R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2012-03-15 276824]

R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2012-03-21 793048]

R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-09-22 75136]

R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]

R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-03-29 148752]

R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2010-08-19 386344]

R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]

R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]

R2 SProtection;SProtection; C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe [2013-11-21 2905408]

R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-03-15 362840]

R2 vToolbarUpdater17.2.0;vToolbarUpdater17.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe [2013-12-09 1771544]

R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2012-02-22 1304912]

R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 desksvc;Desk 365 service; C:\Program Files (x86)\Desk 365\deskSvc.exe [2013-12-15 424016]

S2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-06-06 100864]

S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-05 136176]

S2 MemeoBackgroundService;MemeoBackgroundService; C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [2011-09-28 25824]

S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]

S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]

S3 cphs;Intel® Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2013-11-07 279000]

S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]

S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2013-02-05 1512448]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-05 136176]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe /V []

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-03-29 273168]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2011-04-05 149352]

S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2011-04-05 4925184]

S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-12-11 569768]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

dwuyten · 15 december 2013

Vorige scan niet als administrator uitgevoerd.

Daarom opnieuw laten draaien met onderstaand resultaat:

Logfile of random's system information tool 1.08 (written by random/random)

Run by Sander at 2013-12-15 14:43:47

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 444 GB (67%) free of 663 GB

Total RAM: 3991 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 14:43:50, on 15/12/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.16428)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe

C:\Program Files (x86)\GoforFiles\GFFUpdater.exe

C:\Program Files (x86)\ExpressFiles\EFUpdater.exe

C:\Users\Sander\AppData\Roaming\Desk 365\update\desk365_update_v1.14.20.exe

C:\Users\Sander\AppData\Local\Temp\Desk365\eUpgrade\eUpgrade.exe

C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

C:\Users\Sander\AppData\Local\Facebook\Update\FacebookUpdate.exe

C:\Program Files (x86)\Skype\Phone\Skype.exe

C:\Program Files (x86)\Clownfish\Clownfish.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Sander\AppData\Roaming\Yontoo\YontooDesktop.exe

C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe

C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe

C:\Program Files (x86)\Desk 365\desk365.exe

C:\Windows\SysWOW64\jmdp\stij.exe

C:\Windows\SysWOW64\rundll32.exe

C:\Users\Sander\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe

C:\Program Files (x86)\AVG\AVG2014\avgui.exe

C:\Program Files (x86)\Ask.com\Updater\Updater.exe

C:\Program Files (x86)\Iminent\Iminent.exe

C:\Program Files (x86)\Iminent\Iminent.Messengers.exe

C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe

C:\Program Files (x86)\AVG Secure Search\vprot.exe

C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

C:\Users\Sander\AppData\Local\VNT\vntldr.exe

C:\Program Files (x86)\PHotkey\HCSynApi.exe

C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe

C:\Program Files (x86)\AVG\AVG2014\avgcfgex.exe

C:\Windows\SysWOW64\NOTEPAD.EXE