Ga naar inhoud

Kapotte muis of toch geinfecteerd?

User2015
 Delen

Aanbevolen berichten

User2015 Leerling

User2015

Geplaatst:
Geplaatst: (aangepast)

Ok,

graag zou ik even wat hulp willen met de diagnose van mijn PC.

Een tijdje geleden vertoonde deze symptomen van een hacker.

Mijn muis scrolde vaak uitzichzelf,dikwijls leek het alsof er iemand een 2de keer op vorige pagina klikte.

Graag zou ik willen dat iemand me helpt met het vinden van een mogelijke hacker.

Als ik MBAM & MSE moet geloven zou mijn pc vrij moeten zijn van bedreigingen.

Maar omdat ik zekerheid wil kom ik hier even hulp vragen.

Nu las ik dat er nieuw type diagnose programma is (RSIT)

Moet ik dit beide posten dan of is Hijackthis genoeg?

aangepast door User2015
Link naar reactie
Delen op andere sites
  • Reacties 29
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Populaire dagen

Beste reacties in dit topic

Populaire dagen

Geplaatste afbeeldingen

User2015 Leerling

User2015

Geplaatst:
  • Auteur
Geplaatst:

WhyIGotInfected 1.10.0.0(by Tigzy)
********************************

Run : 6/03/2015 12:34:29 [Normal Mode]
Machine : IKKE-PC (2 CPUs) [ikke : ADMIN]
OS: Windows 7  Service Pack 1 (x64)

~~ Plugins check: ~~

UPTODATE [Windows 7  Service Pack 1] Current : Service Pack 1 -- Latest : Service Pack 1
OUTDATED [Firefox (x86)] Current : 36.0 -- Latest : 35.0.1
OUTDATED [internet Explorer] Current : 9.10.9200.17229 -- Latest : 9.11.9600.17239
OUTDATED [internet Explorer (x86)] Current : 9.10.9200.17229 -- Latest : 9.11.9600.17239
UPTODATE [Adobe Flash] Current : 16.0.0.305 -- Latest : 16.0.0.305
UPTODATE [Adobe Flash (x86)] Current : 16.0.0.305 -- Latest : 16.0.0.305
UPTODATE [Adobe Flash ActiveX] Current : 16.0.0.305 -- Latest : 16.0.0.305
UPTODATE [Adobe Flash ActiveX (x86)] Current : 16.0.0.305 -- Latest : 16.0.0.305
UPTODATE [Adobe Flash FF Plugin] Current : 16.0.0.305 -- Latest : 16.0.0.305
UPTODATE [Adobe Flash FF Plugin (x86)] Current : 16.0.0.305 -- Latest : 16.0.0.305


Finished
<C:\Users\ikke\Desktop\WIGIReport[0].txt>
WIGIReport[0].txt
 

 

------------------------

Security Check is nog altijd bij 'Performing system health check'

 

------------------------

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 12:37:56, on 6/03/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.17229)

FIREFOX: 36.0 (x86 nl)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\ManyCam\ManyCam.exe
C:\Program Files (x86)\Screen Recorder\NSR.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Users\ikke\Downloads\ProcessExplorer\procexp.exe
C:\Users\ikke\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ijtwsoft] regsvr32.exe C:\Users\ikke\AppData\Local\Ijtwsoft\WEBAPPDBG.DLL
O4 - HKCU\..\Run: [Ahcbworks] C:\Windows\SysWOW64\regsvr32.exe C:\Users\ikke\AppData\Local\AZCworks\cpuz.dll
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Mikogo] "C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-host.exe" -asp
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_80EFCD58332697325F19C231D17DEA21] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mikogo-Service - BeamYourScreen GmbH - C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Service.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe

--
End of file - 9684 bytes
 

Link naar reactie
Delen op andere sites
User2015 Leerling

User2015

Geplaatst:
  • Auteur
Geplaatst:

Security check:
 Results of screen317's Security Check version 0.99.97  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10 Out of date!
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Disabled!  
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:`````````
 Java 8 Update 31  
 Java version 32-bit out of Date!
  Java 64-bit 8 Update 31  
 Adobe Flash Player 16.0.0.305  
 Mozilla Firefox (36.0)
 Google Chrome (40.0.2214.115)
 Google Chrome (41.0.2272.76)
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
 CheckPoint ZoneAlarm vsmon.exe  
 CheckPoint ZoneAlarm ZaPrivacyService.exe  
 CheckPoint ZoneAlarm zatray.exe  
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 2%
````````````````````End of Log``````````````````````

Link naar reactie
Delen op andere sites
User2015 Leerling

User2015

Geplaatst:
  • Auteur
Geplaatst:

Logfile of random's system information tool 1.10 (written by random/random)
Run by ikke at 2015-03-06 12:44:07
Microsoft Windows 7 Home Premium  Service Pack 1
System drive C: has 499 GB (52%) free of 954 GB
Total RAM: 4061 MB (31% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:44:15, on 6/03/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.17229)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\ManyCam\ManyCam.exe
C:\Program Files (x86)\Screen Recorder\NSR.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Users\ikke\Downloads\ProcessExplorer\procexp.exe
C:\Users\ikke\Desktop\SecurityCheck.exe
C:\Windows\SysWOW64\cmd.exe
C:\Users\ikke\Desktop\WIGI.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Users\ikke\Desktop\HijackThis.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Windows\SysWOW64\notepad.exe
C:\Program Files\trend micro\ikke.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ijtwsoft] regsvr32.exe C:\Users\ikke\AppData\Local\Ijtwsoft\WEBAPPDBG.DLL
O4 - HKCU\..\Run: [Ahcbworks] C:\Windows\SysWOW64\regsvr32.exe C:\Users\ikke\AppData\Local\AZCworks\cpuz.dll
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Mikogo] "C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-host.exe" -asp
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_80EFCD58332697325F19C231D17DEA21] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mikogo-Service - BeamYourScreen GmbH - C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Service.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe

--
End of file - 10385 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe" -service
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Service.exe
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe"
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe"
C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Screen-Service.exe
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a2d862ce-ece1-4866-a90d-44a0e8f743e6 -SystemEventPortName:HostProcess-32034dbd-e1a1-44d0-97e8-969dfd69ac7a -IoCancelEventPortName:HostProcess-b22a4375-51f0-42aa-b56c-35d3b718b76e -NonStateChangingEventPortName:HostProcess-07470047-8854-4bc8-8d76-a05800d4d443 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:195ef4e0-c3e6-48c9-a455-b20112370f72 -DeviceGroupId:WpdFsGroup
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window --flag-switches-begin --flag-switches-end
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4192.0.369210294\1992498175" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,18,40 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x2e32 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2226 --ignored=" --type=renderer " /prefetch:822062411

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "http://go.microsoft.com/fwlink/?LinkId=89429&OSV=6.1.7601.2.00010300.1.0.003.09.1033&LS=3&LegitCheckError=00000052&GenuineInfo=C004F063&Channel=8&ErrCode=C004F063"
"taskhost.exe"
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\ikke\Documents\crf.txt
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5344.2245acf0.560034044 "C:\Windows\system32\Wat\npWatWeb.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 5344 "\\.\pipe\gecko-crash-server-pipe.5344" plugin
"C:\Program Files (x86)\ManyCam\ManyCam.exe"
"C:\Program Files (x86)\Screen Recorder\NSR.exe"
"C:\Program Files\iTunes\iTunes.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe" --pipe \\.\pipe\30431029-128910065611314864 --parentPipe
\??\C:\Windows\system32\conhost.exe "-608134338-1836574478-1990624144147599541325170722899255777079966489673559586
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe"
\??\C:\Windows\system32\conhost.exe "74184609654287314815336720539011934842059443565337126446-1769652339-1871652043
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe"
\??\C:\Windows\system32\conhost.exe "2144366170-2103217651-943511294-38262269-6857043379507032681264706978-90710500
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe"
"C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" /CookieProxy
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5344.1e21a8b0.1423247737 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 5344 "\\.\pipe\gecko-crash-server-pipe.5344" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe" --proxy-stub-channel=Flash8136.5EC70590.12638 --host-broker-channel=Flash8136.5EC70590.5261 --host-pid=8136 --host-npapi-version=28 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe" --channel=4332.0039F884.2100749848 --proxy-stub-channel=Flash8136.5EC70590.12638 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll" --host-npapi-version=28 --type=renderer
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
"C:\Users\ikke\Downloads\ProcessExplorer\procexp.exe"
"C:\Users\ikke\Downloads\ProcessExplorer\procexp.exe"
"C:\Users\ikke\Desktop\SecurityCheck.exe"
C:\Windows\system32\cmd.exe /c ""C:\Users\ikke\AppData\Local\Temp\RarSFX0\SecurityCheck\SecurityCheck.bat" "
\??\C:\Windows\system32\conhost.exe "-1248754439-537073100-1514016980-1523536914-1914891037412973270378110724973338905
C:\Windows\system32\svchost.exe -k defragsvc
"C:\Users\ikke\Desktop\WIGI.exe"
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\ikke\Desktop\WIGIReport[0].txt
"C:\Users\ikke\Desktop\HijackThis.exe"
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\ikke\Desktop\hijackthis.log
"C:\Users\ikke\Desktop\RSITx64.exe"
NOTEPAD  checkup.txt
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe  
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\ikke\AppData\Roaming\Mozilla\Firefox\Profiles\azl0lchs.default

prefs.js - "browser.startup.homepage" -  "google.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6]
"Description"=Yahoo Messenger State Plugin
"Path"=C:\Program Files (x86)\Yahoo!\Shared\npYState.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll


C:\Users\ikke\AppData\Roaming\Mozilla\Firefox\Profiles\azl0lchs.default\extensions\
ffxtlbr@zonealarm.com
{0C743D11-F0D9-032E-7453-F2EF2F185D55}
{635abd67-4fe9-1b23-4f01-e679fa7484c1}

C:\Users\ikke\AppData\Roaming\Mozilla\Firefox\Profiles\azl0lchs.default\searchplugins\
zonealarm.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-01-28 357376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll [2013-08-07 1561880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-25 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-25 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-01-28 297128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll [2013-08-07 1561880]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 1332296]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-10-16 162328]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-10-16 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-10-16 415256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Ijtwsoft"=regsvr32.exe C:\Users\ikke\AppData\Local\Ijtwsoft\WEBAPPDBG.DLL []
"Ahcbworks"=C:\Windows\SysWOW64\regsvr32.exe [2009-07-14 14848]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2015-02-20 3619160]
"Messenger (Yahoo!)"=C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe [2012-05-25 6595928]
"Mikogo"=C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-host.exe [2014-12-12 6666568]
"GoogleChromeAutoLaunch_80EFCD58332697325F19C231D17DEA21"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-02-28 809288]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17 508800]
"ZoneAlarm"=C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [2014-08-13 137352]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-10-16 271360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-06 12:44:08 ----D---- C:\Program Files\trend micro
2015-03-06 12:44:06 ----D---- C:\rsit
2015-03-04 12:38:44 ----D---- C:\Windows\SYSWOW64\RTCOM
2015-03-04 12:38:44 ----D---- C:\Program Files\Realtek
2015-03-01 17:23:35 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2015-03-01 17:22:32 ----D---- C:\Program Files\Adobe
2015-03-01 17:20:46 ----D---- C:\Program Files (x86)\Adobe
2015-03-01 17:15:45 ----D---- C:\Program Files\Common Files\Adobe
2015-03-01 17:10:56 ----D---- C:\ProgramData\Adobe
2015-02-28 19:04:51 ----D---- C:\Users\ikke\AppData\Roaming\Rylstim Screen Recorder
2015-02-28 17:56:22 ----D---- C:\Program Files (x86)\XviD
2015-02-28 17:56:02 ----D---- C:\Program Files (x86)\Screen Recorder
2015-02-28 11:01:31 ----HD---- C:\Program Files (x86)\Temp
2015-02-27 19:29:08 ----A---- C:\Users\ikke\AppData\Roaming\CamShapes.ini
2015-02-27 19:29:08 ----A---- C:\Users\ikke\AppData\Roaming\CamLayout.ini
2015-02-27 19:29:08 ----A---- C:\Users\ikke\AppData\Roaming\Camdata.ini
2015-02-27 14:19:34 ----D---- C:\Program Files\CamStudio 2.7
2015-02-27 12:58:45 ----D---- C:\Program Files (x86)\Check Point Software Technologies LTD
2015-02-27 12:58:40 ----D---- C:\Users\ikke\AppData\Roaming\Check Point Software Technologies LTD
2015-02-27 12:58:35 ----D---- C:\Program Files (x86)\CheckPoint
2015-02-26 13:45:43 ----D---- C:\Users\ikke\AppData\Roaming\Mikogo
2015-02-26 13:33:30 ----D---- C:\Program Files (x86)\Google
2015-02-25 20:49:45 ----D---- C:\ProgramData\Yahoo! Companion
2015-02-25 20:49:31 ----D---- C:\Users\ikke\AppData\Roaming\Yahoo!
2015-02-25 20:49:10 ----D---- C:\ProgramData\Yahoo!
2015-02-25 20:48:01 ----D---- C:\Program Files (x86)\Yahoo!
2015-02-25 20:37:20 ----D---- C:\Users\ikke\AppData\Roaming\ManyCam
2015-02-25 20:36:58 ----D---- C:\ProgramData\ManyCam
2015-02-25 20:36:57 ----D---- C:\Program Files (x86)\ManyCam
2015-02-25 20:36:46 ----D---- C:\ProgramData\EmailNotifier
2015-02-25 20:36:30 ----D---- C:\ProgramData\Visicom Media
2015-02-25 20:36:27 ----D---- C:\Program Files\Visicom Media
2015-02-25 20:22:36 ----D---- C:\Users\ikke\AppData\Roaming\Macromedia
2015-02-25 20:21:53 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-02-25 20:21:48 ----D---- C:\Windows\SYSWOW64\Macromed
2015-02-25 20:21:43 ----D---- C:\Windows\system32\Macromed
2015-02-25 20:08:13 ----D---- C:\ProgramData\Sun
2015-02-25 20:08:08 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-02-25 20:07:41 ----D---- C:\ProgramData\Oracle
2015-02-25 20:07:36 ----D---- C:\Program Files (x86)\Java
2015-02-25 20:03:51 ----D---- C:\Users\ikke\AppData\Roaming\Skype
2015-02-25 20:03:36 ----RD---- C:\Program Files (x86)\Skype
2015-02-25 20:03:24 ----D---- C:\ProgramData\Skype
2015-02-25 19:14:59 ----A---- C:\Windows\system32\powertracker.dll
2015-02-25 19:14:58 ----A---- C:\Windows\system32\perftrack.dll
2015-02-25 19:14:57 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-02-25 19:14:57 ----A---- C:\Windows\system32\wdi.dll
2015-02-25 15:19:31 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-02-24 15:50:01 ----HDC---- C:\ProgramData\{C2A88E6D-FA3D-462B-BDFF-A09B1EFA8FBE}
2015-02-24 15:37:50 ----HDC---- C:\ProgramData\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
2015-02-24 13:36:43 ----D---- C:\Users\ikke\AppData\Roaming\Teragon Audio
2015-02-20 22:46:35 ----D---- C:\Program Files\Sonic Charge
2015-02-20 13:28:37 ----D---- C:\Program Files (x86)\iTunes
2015-02-20 13:28:36 ----D---- C:\Program Files\iPod
2015-02-20 13:28:35 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-20 13:28:35 ----D---- C:\Program Files\iTunes
2015-02-20 11:32:08 ----D---- C:\Program Files (x86)\Origin Games
2015-02-20 11:30:06 ----D---- C:\Users\ikke\AppData\Roaming\Origin
2015-02-20 11:27:15 ----D---- C:\ProgramData\Origin
2015-02-20 11:27:13 ----D---- C:\ProgramData\Electronic Arts
2015-02-20 11:26:39 ----D---- C:\Program Files (x86)\Origin
2015-02-17 12:22:45 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2015-02-17 12:22:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2015-02-17 12:22:45 ----A---- C:\Windows\system32\XAudio2_7.dll
2015-02-17 12:22:45 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2015-02-17 12:22:44 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2015-02-17 12:22:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2015-02-17 12:22:44 ----A---- C:\Windows\system32\xactengine3_7.dll
2015-02-17 12:22:44 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2015-02-17 12:22:43 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2015-02-17 12:22:43 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2015-02-17 12:22:43 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-02-17 12:22:43 ----A---- C:\Windows\system32\d3dcsx_43.dll
2015-02-17 12:22:42 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2015-02-17 12:22:42 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2015-02-17 12:22:42 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-02-17 12:22:42 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-02-17 12:22:41 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2015-02-17 12:22:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2015-02-17 12:22:41 ----A---- C:\Windows\system32\XAudio2_6.dll
2015-02-17 12:22:41 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2015-02-17 12:22:40 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2015-02-17 12:22:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2015-02-17 12:22:40 ----A---- C:\Windows\system32\xactengine3_6.dll
2015-02-17 12:22:40 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2015-02-17 12:22:38 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2015-02-17 12:22:38 ----A---- C:\Windows\system32\XAudio2_5.dll
2015-02-17 12:22:37 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2015-02-17 12:22:37 ----A---- C:\Windows\system32\xactengine3_5.dll
2015-02-17 12:22:36 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2015-02-17 12:22:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2015-02-17 12:22:36 ----A---- C:\Windows\system32\d3dcsx_42.dll
2015-02-17 12:22:36 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2015-02-17 12:22:35 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2015-02-17 12:22:35 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2015-02-17 12:22:35 ----A---- C:\Windows\system32\d3dx11_42.dll
2015-02-17 12:22:35 ----A---- C:\Windows\system32\d3dx10_42.dll
2015-02-17 12:22:34 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2015-02-17 12:22:34 ----A---- C:\Windows\system32\D3DX9_42.dll
2015-02-17 12:22:33 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2015-02-17 12:22:33 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2015-02-17 12:22:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2015-02-17 12:22:33 ----A---- C:\Windows\system32\D3DX9_41.dll
2015-02-17 12:22:33 ----A---- C:\Windows\system32\d3dx10_41.dll
2015-02-17 12:22:33 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2015-02-17 12:22:32 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2015-02-17 12:22:32 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2015-02-17 12:22:32 ----A---- C:\Windows\system32\XAudio2_4.dll
2015-02-17 12:22:32 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2015-02-17 12:22:31 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2015-02-17 12:22:31 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2015-02-17 12:22:31 ----A---- C:\Windows\system32\xactengine3_4.dll
2015-02-17 12:22:31 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2015-02-17 12:22:30 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2015-02-17 12:22:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2015-02-17 12:22:30 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-02-17 12:22:30 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-02-17 12:22:29 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2015-02-17 12:22:29 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-02-17 12:22:28 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2015-02-17 12:22:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2015-02-17 12:22:28 ----A---- C:\Windows\system32\XAudio2_3.dll
2015-02-17 12:22:28 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2015-02-17 12:22:27 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2015-02-17 12:22:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2015-02-17 12:22:27 ----A---- C:\Windows\system32\xactengine3_3.dll
2015-02-17 12:22:27 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2015-02-17 12:22:26 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2015-02-17 12:22:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2015-02-17 12:22:26 ----A---- C:\Windows\system32\XAudio2_2.dll
2015-02-17 12:22:26 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2015-02-17 12:22:25 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2015-02-17 12:22:25 ----A---- C:\Windows\system32\xactengine3_2.dll
2015-02-17 12:22:24 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2015-02-17 12:22:24 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2015-02-17 12:22:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2015-02-17 12:22:24 ----A---- C:\Windows\system32\D3DX9_39.dll
2015-02-17 12:22:24 ----A---- C:\Windows\system32\d3dx10_39.dll
2015-02-17 12:22:24 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2015-02-17 12:22:22 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2015-02-17 12:22:22 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2015-02-17 12:22:22 ----A---- C:\Windows\system32\XAudio2_1.dll
2015-02-17 12:22:22 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2015-02-17 12:22:21 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2015-02-17 12:22:21 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2015-02-17 12:22:21 ----A---- C:\Windows\system32\xactengine3_1.dll
2015-02-17 12:22:21 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2015-02-17 12:22:20 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2015-02-17 12:22:20 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2015-02-17 12:22:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2015-02-17 12:22:20 ----A---- C:\Windows\system32\D3DX9_38.dll
2015-02-17 12:22:20 ----A---- C:\Windows\system32\d3dx10_38.dll
2015-02-17 12:22:20 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2015-02-17 12:22:19 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2015-02-17 12:22:19 ----A---- C:\Windows\system32\XAudio2_0.dll
2015-02-17 12:22:17 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2015-02-17 12:22:17 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2015-02-17 12:22:17 ----A---- C:\Windows\system32\xactengine3_0.dll
2015-02-17 12:22:17 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2015-02-17 12:22:16 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2015-02-17 12:22:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2015-02-17 12:22:16 ----A---- C:\Windows\system32\d3dx10_37.dll
2015-02-17 12:22:16 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2015-02-17 12:22:15 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2015-02-17 12:22:15 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2015-02-17 12:22:15 ----A---- C:\Windows\system32\xactengine2_10.dll
2015-02-17 12:22:15 ----A---- C:\Windows\system32\D3DX9_37.dll
2015-02-17 12:22:14 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2015-02-17 12:22:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2015-02-17 12:22:14 ----A---- C:\Windows\system32\d3dx10_36.dll
2015-02-17 12:22:14 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2015-02-17 12:22:13 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2015-02-17 12:22:13 ----A---- C:\Windows\system32\d3dx9_36.dll
2015-02-17 12:22:12 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2015-02-17 12:22:12 ----A---- C:\Windows\system32\xactengine2_9.dll
2015-02-17 12:22:11 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2015-02-17 12:22:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2015-02-17 12:22:11 ----A---- C:\Windows\system32\d3dx10_35.dll
2015-02-17 12:22:11 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2015-02-17 12:22:10 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2015-02-17 12:22:10 ----A---- C:\Windows\system32\d3dx9_35.dll
2015-02-17 12:22:09 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2015-02-17 12:22:09 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2015-02-17 12:22:09 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2015-02-17 12:22:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2015-02-17 12:22:09 ----A---- C:\Windows\system32\xactengine2_8.dll
2015-02-17 12:22:09 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2015-02-17 12:22:09 ----A---- C:\Windows\system32\d3dx10_34.dll
2015-02-17 12:22:09 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2015-02-17 12:22:08 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2015-02-17 12:22:08 ----A---- C:\Windows\system32\d3dx9_34.dll
2015-02-17 12:22:07 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2015-02-17 12:22:07 ----A---- C:\Windows\system32\xinput1_3.dll
2015-02-17 12:22:06 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2015-02-17 12:22:06 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2015-02-17 12:22:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2015-02-17 12:22:06 ----A---- C:\Windows\system32\xactengine2_7.dll
2015-02-17 12:22:06 ----A---- C:\Windows\system32\d3dx10_33.dll
2015-02-17 12:22:06 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2015-02-17 12:22:05 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2015-02-17 12:22:05 ----A---- C:\Windows\system32\d3dx9_33.dll
2015-02-17 12:22:04 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2015-02-17 12:22:04 ----A---- C:\Windows\system32\xactengine2_6.dll
2015-02-17 12:22:03 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2015-02-17 12:22:03 ----A---- C:\Windows\system32\xactengine2_5.dll
2015-02-17 12:22:02 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2015-02-17 12:22:02 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2015-02-17 12:22:02 ----A---- C:\Windows\system32\d3dx9_32.dll
2015-02-17 12:22:02 ----A---- C:\Windows\system32\d3dx10.dll
2015-02-17 12:22:01 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2015-02-17 12:22:01 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2015-02-17 12:22:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2015-02-17 12:22:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2015-02-17 12:22:00 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2015-02-17 12:22:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2015-02-17 12:21:59 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2015-02-17 12:21:59 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2015-02-17 12:21:59 ----A---- C:\Windows\system32\xinput1_2.dll
2015-02-17 12:21:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2015-02-17 12:21:58 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2015-02-17 12:21:58 ----A---- C:\Windows\system32\xactengine2_2.dll
2015-02-17 12:21:57 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2015-02-17 12:21:57 ----A---- C:\Windows\system32\xinput1_1.dll
2015-02-17 12:21:56 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2015-02-17 12:21:56 ----A---- C:\Windows\system32\xactengine2_1.dll
2015-02-17 12:21:52 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2015-02-17 12:21:52 ----A---- C:\Windows\system32\d3dx9_30.dll
2015-02-17 12:21:51 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2015-02-17 12:21:51 ----A---- C:\Windows\system32\xactengine2_0.dll
2015-02-17 12:21:50 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2015-02-17 12:21:50 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2015-02-17 12:21:50 ----A---- C:\Windows\system32\x3daudio1_0.dll
2015-02-17 12:21:50 ----A---- C:\Windows\system32\d3dx9_29.dll
2015-02-17 12:21:48 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2015-02-17 12:21:48 ----A---- C:\Windows\system32\d3dx9_28.dll
2015-02-17 12:21:47 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2015-02-17 12:21:47 ----A---- C:\Windows\system32\d3dx9_27.dll
2015-02-17 12:21:43 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2015-02-17 12:21:43 ----A---- C:\Windows\system32\d3dx9_26.dll
2015-02-17 12:21:41 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2015-02-17 12:21:41 ----A---- C:\Windows\system32\d3dx9_25.dll
2015-02-17 12:21:38 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2015-02-17 12:21:38 ----A---- C:\Windows\system32\d3dx9_24.dll
2015-02-17 12:18:08 ----HD---- C:\Windows\msdownld.tmp
2015-02-17 12:17:57 ----D---- C:\Windows\SYSWOW64\directx
2015-02-16 20:36:33 ----D---- C:\Program Files (x86)\GMT-MAX.ORG
2015-02-14 10:45:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-14 10:45:09 ----A---- C:\Windows\system32\jscript9.dll
2015-02-13 12:25:40 ----D---- C:\Users\ikke\AppData\Roaming\Audacity
2015-02-13 12:23:39 ----D---- C:\Program Files (x86)\Audacity
2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-13 12:05:43 ----A---- C:\Windows\system32\iernonce.dll
2015-02-13 12:05:43 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-13 12:05:43 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-13 12:05:42 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-02-13 12:05:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-13 12:05:42 ----A---- C:\Windows\system32\urlmon.dll
2015-02-13 12:05:42 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-13 12:05:42 ----A---- C:\Windows\system32\iesetup.dll
2015-02-13 12:05:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-13 12:05:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-02-13 12:05:41 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-13 12:05:41 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-13 12:05:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-13 12:05:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-02-13 12:05:39 ----A---- C:\Windows\system32\vbscript.dll
2015-02-13 12:05:39 ----A---- C:\Windows\system32\msrating.dll
2015-02-13 12:05:39 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-13 12:05:38 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-02-13 12:05:37 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-13 12:05:37 ----A---- C:\Windows\system32\ieui.dll
2015-02-13 12:05:37 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-13 12:05:35 ----A---- C:\Windows\system32\ieframe.dll
2015-02-13 12:05:33 ----A---- C:\Windows\system32\mshtml.dll
2015-02-13 12:05:32 ----A---- C:\Windows\system32\wininet.dll
2015-02-13 12:05:32 ----A---- C:\Windows\system32\jscript.dll
2015-02-13 12:05:31 ----A---- C:\Windows\system32\iertutil.dll
2015-02-13 12:05:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-13 12:05:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-02-13 12:05:27 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-02-13 12:05:25 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-13 12:05:21 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2015-02-13 12:05:21 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2015-02-13 12:05:21 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2015-02-13 12:05:21 ----A---- C:\Windows\system32\iesysprep.dll
2015-02-13 03:04:54 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-13 03:04:53 ----A---- C:\Windows\SYSWOW64\msls31.dll
2015-02-13 03:04:53 ----A---- C:\Windows\SYSWOW64\inseng.dll
2015-02-13 03:04:53 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2015-02-13 03:04:53 ----A---- C:\Windows\system32\elshyph.dll
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\wextract.exe
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\occache.dll
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\mshta.exe
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\url.dll
2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\icardie.dll
2015-02-13 03:04:50 ----A---- C:\Windows\system32\msls31.dll
2015-02-13 03:04:49 ----A---- C:\Windows\system32\wextract.exe
2015-02-13 03:04:49 ----A---- C:\Windows\system32\webcheck.dll
2015-02-13 03:04:49 ----A---- C:\Windows\system32\url.dll
2015-02-13 03:04:49 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-02-13 03:04:49 ----A---- C:\Windows\system32\licmgr10.dll
2015-02-13 03:04:49 ----A---- C:\Windows\system32\inseng.dll
2015-02-13 03:04:49 ----A---- C:\Windows\system32\iexpress.exe
2015-02-13 03:04:49 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-13 03:04:49 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-13 03:04:49 ----A---- C:\Windows\system32\ieapfltr.dat
2015-02-13 03:04:49 ----A---- C:\Windows\system32\icardie.dll
2015-02-13 03:04:48 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2015-02-13 03:04:48 ----A---- C:\Windows\system32\pngfilt.dll
2015-02-13 03:04:48 ----A---- C:\Windows\system32\occache.dll
2015-02-13 03:04:48 ----A---- C:\Windows\system32\mshtmler.dll
2015-02-13 03:04:48 ----A---- C:\Windows\system32\mshta.exe
2015-02-13 03:04:48 ----A---- C:\Windows\system32\msfeedssync.exe
2015-02-13 03:04:48 ----A---- C:\Windows\system32\msfeedsbs.dll
2015-02-13 03:04:48 ----A---- C:\Windows\system32\imgutil.dll
2015-02-13 03:04:48 ----A---- C:\Windows\system32\iepeers.dll
2015-02-13 03:04:48 ----A---- C:\Windows\system32\IEAdvpack.dll
2015-02-11 23:59:29 ----D---- C:\ProgramData\CheckPoint
2015-02-11 17:44:26 ----D---- C:\Windows\Minidump
2015-02-11 16:45:22 ----A---- C:\Windows\system32\generaltel.dll
2015-02-11 16:45:21 ----A---- C:\Windows\system32\invagent.dll
2015-02-11 16:45:21 ----A---- C:\Windows\system32\devinv.dll
2015-02-11 16:45:21 ----A---- C:\Windows\system32\appraiser.dll
2015-02-11 16:45:21 ----A---- C:\Windows\system32\aitstatic.exe
2015-02-11 16:45:21 ----A---- C:\Windows\system32\aepdu.dll
2015-02-11 16:45:21 ----A---- C:\Windows\system32\aeinv.dll
2015-02-11 16:45:20 ----A---- C:\Windows\system32\aepic.dll
2015-02-11 16:44:33 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-11 16:44:33 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-11 16:44:27 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-11 16:44:27 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-11 16:44:27 ----A---- C:\Windows\system32\adtschema.dll
2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-11 16:44:26 ----A---- C:\Windows\system32\sspisrv.dll
2015-02-11 16:44:26 ----A---- C:\Windows\system32\sspicli.dll
2015-02-11 16:44:26 ----A---- C:\Windows\system32\secur32.dll
2015-02-11 16:44:26 ----A---- C:\Windows\system32\msobjs.dll
2015-02-11 16:44:26 ----A---- C:\Windows\system32\lsass.exe
2015-02-11 16:44:26 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-11 16:44:26 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-11 16:44:26 ----A---- C:\Windows\system32\auditpol.exe
2015-02-11 16:44:25 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-11 16:44:25 ----A---- C:\Windows\system32\msaudite.dll
2015-02-11 16:44:14 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-02-11 16:44:14 ----A---- C:\Windows\system32\wintrust.dll
2015-02-11 16:44:14 ----A---- C:\Windows\system32\cryptsvc.dll
2015-02-11 16:44:14 ----A---- C:\Windows\system32\crypt32.dll
2015-02-11 16:44:13 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-02-11 16:44:13 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-02-11 16:44:07 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-02-11 16:44:07 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-11 16:44:04 ----A---- C:\Windows\system32\mstscax.dll
2015-02-11 16:44:03 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-02-11 16:44:03 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2015-02-11 16:43:30 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-11 16:43:30 ----A---- C:\Windows\system32\scesrv.dll
2015-02-11 16:43:21 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-11 16:43:20 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-02-11 16:43:20 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-02-11 16:43:17 ----A---- C:\Windows\system32\srcore.dll
2015-02-11 16:43:17 ----A---- C:\Windows\system32\rstrui.exe
2015-02-11 16:43:16 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-02-11 16:43:16 ----A---- C:\Windows\system32\srclient.dll
2015-02-11 16:42:30 ----A---- C:\Windows\system32\win32k.sys
2015-02-11 11:56:39 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2015-02-11 11:56:06 ----D---- C:\ProgramData\Malwarebytes
2015-02-11 11:56:06 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-11 11:56:06 ----A---- C:\Windows\system32\drivers\mwac.sys
2015-02-11 11:56:06 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2015-02-11 11:56:06 ----A---- C:\Windows\system32\drivers\mbam.sys
2015-02-10 13:27:27 ----D---- C:\Program Files (x86)\Reveal Sound
2015-02-08 23:43:50 ----D---- C:\Program Files (x86)\Rob Papen

======List of files/folders modified in the last 1 month======

2015-03-06 12:44:08 ----RD---- C:\Program Files
2015-03-06 12:41:48 ----D---- C:\Windows\Temp
2015-03-06 12:34:01 ----D---- C:\Windows\Prefetch
2015-03-06 10:53:36 ----D---- C:\Windows\system32\config
2015-03-04 16:00:01 ----D---- C:\Windows\System32
2015-03-04 16:00:01 ----D---- C:\Windows\inf
2015-03-04 16:00:01 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-04 15:10:32 ----SHD---- C:\System Volume Information
2015-03-04 13:03:56 ----D---- C:\Windows
2015-03-04 13:02:49 ----D---- C:\Windows\SysWOW64
2015-03-04 12:39:54 ----D---- C:\Windows\system32\drivers
2015-03-04 12:39:46 ----D---- C:\Windows\system32\DriverStore
2015-03-04 12:35:38 ----D---- C:\Windows\SoftwareDistribution
2015-03-03 14:17:35 ----N---- C:\Windows\system32\MpSigStub.exe
2015-03-02 17:53:21 ----D---- C:\Users\ikke\AppData\Roaming\Adobe
2015-03-01 17:36:27 ----D---- C:\Windows\ModemLogs
2015-03-01 17:36:27 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-01 17:34:18 ----D---- C:\Users\ikke\AppData\Roaming\tixati
2015-03-01 17:23:35 ----HD---- C:\ProgramData
2015-03-01 17:21:59 ----RSD---- C:\Windows\Fonts
2015-03-01 17:21:42 ----SHD---- C:\Windows\Installer
2015-03-01 17:20:46 ----RD---- C:\Program Files (x86)
2015-03-01 17:17:28 ----D---- C:\Windows\winsxs
2015-03-01 17:15:45 ----D---- C:\Program Files\Common Files
2015-03-01 17:10:58 ----D---- C:\Program Files (x86)\Common Files
2015-02-26 13:33:38 ----D---- C:\Windows\Tasks
2015-02-26 13:33:38 ----D---- C:\Windows\system32\Tasks
2015-02-25 20:22:35 ----SD---- C:\Users\ikke\AppData\Roaming\Microsoft
2015-02-25 19:45:08 ----D---- C:\Windows\tracing
2015-02-24 15:40:42 ----D---- C:\Program Files (x86)\VstPlugins
2015-02-24 15:40:27 ----D---- C:\Program Files\Common Files\Native Instruments
2015-02-24 15:37:45 ----D---- C:\Program Files\Native Instruments
2015-02-20 13:28:35 ----D---- C:\Program Files\Common Files\Apple
2015-02-20 13:26:13 ----D---- C:\Windows\system32\catroot
2015-02-17 13:34:17 ----SHD---- C:\$Recycle.Bin
2015-02-17 12:24:24 ----D---- C:\Windows\Cursors
2015-02-17 12:21:56 ----RSD---- C:\Windows\assembly
2015-02-17 12:21:33 ----D---- C:\Windows\Microsoft.NET
2015-02-17 12:17:56 ----D---- C:\Windows\Logs
2015-02-17 12:17:05 ----D---- C:\ProgramData\Package Cache
2015-02-13 17:07:30 ----D---- C:\Program Files (x86)\Internet Explorer
2015-02-13 17:07:29 ----D---- C:\Program Files\Internet Explorer
2015-02-13 12:04:27 ----D---- C:\Windows\system32\catroot2
2015-02-13 11:53:36 ----D---- C:\Windows\rescache
2015-02-13 03:23:52 ----D---- C:\Windows\SYSWOW64\migration
2015-02-13 03:23:52 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-13 03:23:52 ----D---- C:\Windows\system32\migration
2015-02-13 03:23:52 ----D---- C:\Windows\system32\en-US
2015-02-13 03:23:52 ----D---- C:\Windows\PolicyDefinitions
2015-02-12 11:48:27 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-02-12 03:23:05 ----SD---- C:\Windows\system32\CompatTel
2015-02-12 03:23:05 ----D---- C:\Windows\system32\appraiser
2015-02-12 03:05:48 ----D---- C:\Program Files\Microsoft Security Client
2015-02-12 03:05:47 ----D---- C:\Program Files (x86)\Microsoft Security Client
2015-02-12 03:05:08 ----D---- C:\Windows\system32\MRT
2015-02-12 03:02:14 ----A---- C:\Windows\system32\MRT.exe
2015-02-11 12:38:45 ----D---- C:\Windows\ehome
2015-02-11 00:48:33 ----D---- C:\Users\ikke\AppData\Roaming\FabFilter
2015-02-07 13:38:00 ----D---- C:\Program Files (x86)\FabFilter

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 274696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2014-08-13 450456]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 124560]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-10-16 10619296]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-09-20 3074664]
R3 ManyCam;ManyCam Virtual Webcam; C:\Windows\system32\DRIVERS\mcvidrv.sys [2014-12-29 49304]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-11-21 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-03-06 129752]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-11-21 63704]
R3 mcaudrv_simple;ManyCam Virtual Microphone; C:\Windows\system32\drivers\mcaudrv_x64.sys [2014-12-29 35992]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128]
R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016]
R2 Mikogo-Service;Mikogo-Service; C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Service.exe [2014-12-12 944480]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 23784]
R2 vsmon;TrueVector Internet Monitor; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2014-08-13 3596752]
R2 YahooAUService;Yahoo! Updater; C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe [2008-11-09 602392]
R2 ZAPrivacyService;ZoneAlarm Privacy Service; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [2014-08-13 96272]
R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 366512]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-26 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-25 267440]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-26 107848]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-25 148080]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-03-03 1910640]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-02-01 1255736]

-----------------EOF-----------------
 

Link naar reactie
Delen op andere sites
kweezie wabbit Grootmeester

kweezie wabbit

Geplaatst:
Geplaatst:

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.pngZoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
{0C743D11-F0D9-032E-7453-F2EF2F185D55};c
emptyclsid;
chromelook;
firefoxlook;
emptyfolderscheck;delete
startupall;
filesrcm;
  • Klik op de knop "More options" en vink nu de onderstaande opties aan.
     
  • Do a Deep Scan
  • Installed Programs
  • Auto Clean
     
  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
Link naar reactie
Delen op andere sites
kweezie wabbit Grootmeester

kweezie wabbit

Geplaatst:
Geplaatst:

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
[HKEY_USERS\S-1-5-21-755594152-3724653302-3261122093-1000\Software\Microsoft\Windows\CurrentVersion\Run];r
"Ijtwsoft"=-;r
"Ahcbworks"=-;r
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r
"Ijtwsoft"=-;r
"Ahcbworks"=-;r
[HKEY_USERS\S-1-5-21-755594152-3724653302-3261122093-1000\Software\Microsoft\Windows\CurrentVersion\Run];r64
"Ijtwsoft"=-;r64
"Ahcbworks"=-;r64
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r64
"Ijtwsoft"=-;r64
"Ahcbworks"=-;r64
emptyfolderscheck;delete
  • Klik op de knop "More options" en vink nu de onderstaande opties aan.
     
  • Do a Deep Scan
  • Auto Clean
     
  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
Link naar reactie
Delen op andere sites
kweezie wabbit Grootmeester

kweezie wabbit

Geplaatst:
Geplaatst:

Download adwcleaner.pngAdwCleaner by Xplode naar het bureaublad (verwijder eerst eventuele aanwezige oudere versies van deze tool op je PC, zodat je nu de meest recente database van AdwCleaner kan gebruiken).

  • Sluit alle openstaande vensters.
  • Dubbelklik op AdwCleaner om hem te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren,
  • Door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Klik op Scan.
  • Klik vervolgens op Clean.
  • Klik bij Herstarten Noodzakelijk op OK

Nadat de PC opnieuw is opgestart, opent meestal een logfile.

Anders is het hier terug te vinden C:\AdwCleaner\AdwCleaner[s0].txt.

Logbestand plaatsen

  • Voeg het logbestand met de naam C:\AdwCleaner\AdwCleaner[s0].txt als bijlage toe aan het volgende bericht.
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Link naar reactie
Delen op andere sites
User2015 Leerling

User2015

Geplaatst:
  • Auteur
Geplaatst:

Zoals gewenst..

Ik ben dus toch geinfecteerd?

Voor ik de applicatie starte,heb ik internet verbroken.

voor het geval de mogelijke hacker zijn exe plaatst waar de scanner niet komt.

heeft de software internet nodig voor de scan voor definities?

denk ik nu pas aan.

hoe spoor ik deze trouwens op via een netwerk applicatie?

heb het gevoel dat mijn iphone ook geinfecteerd is.

kan dit? een netwerk logger bv?

 

mvg

AdwCleanerS0.txt

Link naar reactie
Delen op andere sites
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.