Ga naar inhoud

Aanbevolen berichten

Geplaatst:

Ik werk met Windows 7 en als browser google chrome en IE11 

Nu heb ik op mijn site www.vleudeboules.nl  onder Fotoalbum  foto,s geplaatst op

Google foto,s

Als ik nu op de site van Vleudeboules op fotoalbum klik krijg ik in de browser van IE te zien dat ik

een van de browsers  moet downloaden .

Klik ik nu in de Browser Chrome  www.vleudeboules.nl dan kom ik op de site van Vleudeboules

en klik op fotoalbum, en dan kom ik wel bij mijn foto,s biij google foto,s

Het vervelende is dat de leden van Vleudeboules ook niet de google foto,s te zien krijgen

Waarom als ik de browser google Chrome gebruik lukt het wel en niet in IE

post-25691-0-65716000-1445447211_thumb.j

  • Reacties 45
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Beste reacties in dit topic

Geplaatste afbeeldingen

Geplaatst:

Werkt hier perfect en ik beschik over exact dezelfde up-to-date IE-versie als jij.

 

Download 51a5f5d096dae-icon_RSIT.png RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hoe je controleert of je met een 32- of 64-bitversie van Windows werkt kan je 
hier bekijken.

Dubbelklik op RSIT.exe om de tool te starten.

  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  • Wanneer de tool gereed is worden er twee kladblok bestanden geopend genaamd "Log.txt" en "Info.txt" .

RSIT Logbestanden plaatsen

  • Voeg het logbestand met de naam "Log.txt" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden in de map ""C:\\rsit")
  • Het logbestand met de naam "Info.txt" wat geminimaliseerd is hoeft u niet te plaatsen. (Dit logbestand wordt enkel de eerst keer bij het uitvoeren aangemaakt).
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

De handleiding voor het gebruik van RSIT kan je HIER bekijken en we hebben ook nog een 

.
Geplaatst:

Logfile of random's system information tool 1.10 (written by random/random)
Run by DELL at 2015-10-21 19:21:20
Microsoft Windows 7 Ultimate  Service Pack 1
System drive C: has 63 GB (41%) free of 153 GB
Total RAM: 1910 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:21:30, on 21-10-2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18057)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Users\DELL\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\KPN\Servicetool\KPNServicetool_Launcher.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\KPN\Servicetool\KPNServicetool_Repair.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\DELL.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.nl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130888778694303579&GUID=D65B2921-B0CC-43B9-BB9C-8A5B4F036528
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://stopblock.me/wpad.dat?7bb70cd778f22b1aa1d11c8c956e355a565530
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [servicetool] C:\Program Files (x86)\KPN\Servicetool\KPNServicetool_Launcher.exe /auto
O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\DELL\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKCU\..\Run: [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
O4 - HKCU\..\Run: [simple Sticky Notes] C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [spotify] "C:\Users\DELL\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKCU\..\Run: [EPLTarget\P0000000000000003] C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTU.EXE /EPT "EPLTarget\P0000000000000003" /M "Epson Stylus Office BX535WD" /EF "HKCU"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_4061A3059D27C63A84FB99ECD0D22755] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKUS\S-1-5-18\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTU.EXE /EPT "EPLTarget\P0000000000000000" /M "Epson Stylus Office BX535WD" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTU.EXE /EPT "EPLTarget\P0000000000000000" /M "Epson Stylus Office BX535WD" (User 'Default user')
O4 - Startup: FastStone Capture.lnk = C:\Program Files (x86)\FastStone Capture\FSCapture.exe
O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files (x86)\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: 
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\Windows\system32\brsvc01a.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Epson Redirect Agent (ENAgent) - SEIKO EPSON CORPORATION - C:\Windows\SysWOW64\ENAgent.exe
O23 - Service: EPSON V3 Service4(05) (EPSON_PM_RPCV4_05) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Corel License Validation Service V2, Powered by arvato (PSI_SVC_2) - arvato digital services llc - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Corel License Validation Service V2 x64, Powered by arvato (PSI_SVC_2_x64) - arvato digital services llc - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12854 bytes

======Listing Processes======

 

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
C:\Windows\SysWOW64\brsvc01a.exe
brss01a.exe
C:\Windows\System32\spoolsv.exe
taskeng.exe {70DE48CF-241D-4345-AB03-E1D2578A12E9}
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
taskeng.exe {4768E8D5-570E-4505-9A4A-42EE33BAA65B}
"c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" /rep_new
"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\SysWOW64\ENAgent.exe
"C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE"
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9b345d52-d24f-4201-b9a1-056cef3f011a -SystemEventPortName:HostProcess-021455e1-77e5-4f8d-bbd2-7e68549af1a8 -IoCancelEventPortName:HostProcess-942e1044-e110-4178-b8a5-eeb6ef2312ca -NonStateChangingEventPortName:HostProcess-a42fbcc2-d330-40dc-9686-f2e35ec2ba20 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:bbdbe5a9-00fe-4835-a5d2-ba89afdeea03 -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a48dc9f5-f93d-4c7b-8a19-b8274e81940d -SystemEventPortName:HostProcess-83aaaf97-21e9-4835-8760-3ca2609dd3e7 -IoCancelEventPortName:HostProcess-b26c9d45-3bda-4be5-a62d-ff1203b74317 -NonStateChangingEventPortName:HostProcess-2585543d-4ac6-4659-8d53-718c19e311fe -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2b988ed9-cc00-482b-96f4-a6739a85b137 -DeviceGroupId:WpdFsGroup
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Users\DELL\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe"
"C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe"
"C:\Windows\System32\spool\drivers\x64\3\E_YATIHTU.EXE" /EPT "EPLTarget\P0000000000000003" /M "Epson Stylus Office BX535WD" /EF "HKCU"
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window --flag-switches-begin --flag-switches-end
"C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
"C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\KPN\Servicetool\KPNServicetool_Launcher.exe" /auto
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="904.0.900625666\1639536817" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,8,20,45 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0046 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2622 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AffiliationBasedMatching/Enabled/AppBannerTriggering/Aggressive/AudioProcessing48kHzSupport/Default/*AutofillClassifier/Enabled/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/ChromotingQUIC/Disabled/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableGoogleCachedCopyTextExperiment/Button/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/OmniboxBundledExperimentV1/NewSuggestType_A3_Stable_R1/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledForLargePopulation/*RefreshTokenDeviceId/Enabled/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingReportPhishingErrorLink/Disabled/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/*VarationsServiceControl/Default/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="904.1.281090074\1039132457" --font-cache-shared-handle=1944 /prefetch:673131151
"C:\Program Files (x86)\KPN\Servicetool\KPNServicetool_Repair.exe" /auto
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
"C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe"
"C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"

C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Mail\WinMail.exe"
"C:\Program Files\Internet Explorer\iexplore.exe" http://track.pc-helpforum.be/track/click/30483147/www.pc-helpforum.be?p=eyJzIjoiRHRJc2dneHVBTUJQZ05qVGtlQUwzQ3YyZEFrIiwidiI6MSwicCI6IntcInVcIjozMDQ4MzE0NyxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnBjLWhlbHBmb3J1bS5iZVxcXC90b3BpY1xcXC80Njc1OS0zMi1vZi02NC1iaXR2ZXJzaWVcXFwvXCIsXCJpZFwiOlwiZmJhOTJiYWVlNjVkNGY0NWI4NWQ3YmYzMjVjOWU3ZTNcIixcInVybF9pZHNcIjpbXCJjYzVlODAxYzNjY2VjMTlhOTI1OTBhMGM1NjVhM2QzODZmMDhhYjg2XCJdfSJ9
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:7092 CREDAT:78849 /prefetch:2
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:7092 CREDAT:2561295 /prefetch:2
"C:\Users\DELL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GAV4AGO9\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2412325288-324325390-2824101589-1000Core.job - C:\Users\DELL\AppData\Local\Google\Update\GoogleUpdate.exe  /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2412325288-324325390-2824101589-1000UA.job - C:\Users\DELL\AppData\Local\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-30 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-30 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-01-10 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-01-10 392984]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-01-10 417560]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2009-10-31 361568]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-06-29 170280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"=C:\Users\DELL\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-10-11 2541160]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2015-04-26 43816]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2015-04-26 43816]
"OfficeSyncProcess"=C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [2015-09-02 721504]
"AppleIEDAV"=C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [2015-04-26 1079592]
"Simple Sticky Notes"=C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe [2014-06-01 570224]
"iCloudDrive"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [2015-04-26 43816]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE [2013-03-06 945856]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088]
"Spotify"=C:\Users\DELL\AppData\Roaming\Spotify\Spotify.exe [2015-10-11 7660648]
"EPLTarget\P0000000000000003"=C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTU.EXE [2012-07-12 241280]
"GoogleChromeAutoLaunch_4061A3059D27C63A84FB99ECD0D22755"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-10-09 811848]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2009-10-31 5106808]
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2010-10-12 979328]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-05-15 60712]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2015-02-15 2694320]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2015-06-17 421888]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]
"Servicetool"=C:\Program Files (x86)\KPN\Servicetool\KPNServicetool_Launcher.exe [2015-07-29 11631184]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files (x86)\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\Users\DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
FastStone Capture.lnk - C:\Program Files (x86)\FastStone Capture\FSCapture.exe
OneNote 2010 Schermopname en Snel starten.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-01-10 390656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPath"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "E:\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2015-10-21 19:21:20 ----D---- C:\rsit
2015-10-15 08:25:24 ----A---- C:\Windows\system32\appraiser.dll
2015-10-15 08:25:23 ----A---- C:\Windows\system32\invagent.dll
2015-10-15 08:25:23 ----A---- C:\Windows\system32\generaltel.dll
2015-10-15 08:25:23 ----A---- C:\Windows\system32\devinv.dll
2015-10-15 08:25:23 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-10-15 08:25:23 ----A---- C:\Windows\system32\aeinv.dll
2015-10-15 08:25:23 ----A---- C:\Windows\system32\acmigration.dll
2015-10-14 08:48:32 ----A---- C:\Windows\system32\shell32.dll
2015-10-14 08:48:30 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-10-14 08:48:29 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2015-10-14 08:48:29 ----A---- C:\Windows\system32\ExplorerFrame.dll
2015-10-14 08:48:09 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-10-14 08:48:09 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-10-14 08:48:09 ----A---- C:\Windows\SYSWOW64\occache.dll
2015-10-14 08:48:09 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-10-14 08:48:09 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-10-14 08:48:09 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-10-14 08:48:09 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-10-14 08:48:09 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-10-14 08:48:09 ----A---- C:\Windows\system32\iernonce.dll
2015-10-14 08:48:09 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-10-14 08:48:09 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-10-14 08:48:09 ----A---- C:\Windows\system32\ie4uinit.exe
2015-10-14 08:48:08 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-10-14 08:48:08 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-10-14 08:48:08 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-10-14 08:48:08 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-10-14 08:48:07 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-10-14 08:48:07 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-10-14 08:48:07 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-10-14 08:48:07 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-10-14 08:48:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-10-14 08:48:07 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-10-14 08:48:07 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-10-14 08:48:07 ----A---- C:\Windows\system32\urlmon.dll
2015-10-14 08:48:07 ----A---- C:\Windows\system32\occache.dll
2015-10-14 08:48:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-10-14 08:48:07 ----A---- C:\Windows\system32\iedkcs32.dll
2015-10-14 08:48:06 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-10-14 08:48:06 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-10-14 08:48:06 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-10-14 08:48:06 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-10-14 08:48:06 ----A---- C:\Windows\system32\msfeeds.dll
2015-10-14 08:48:06 ----A---- C:\Windows\system32\iesetup.dll
2015-10-14 08:48:06 ----A---- C:\Windows\system32\dxtrans.dll
2015-10-14 08:48:05 ----A---- C:\Windows\system32\ieapfltr.dll
2015-10-14 08:48:04 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-10-14 08:48:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-10-14 08:48:04 ----A---- C:\Windows\system32\iertutil.dll
2015-10-14 08:48:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-10-14 08:48:03 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-10-14 08:48:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-10-14 08:48:03 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-10-14 08:48:03 ----A---- C:\Windows\system32\vbscript.dll
2015-10-14 08:48:03 ----A---- C:\Windows\system32\jsproxy.dll
2015-10-14 08:48:02 ----A---- C:\Windows\system32\ieui.dll
2015-10-14 08:48:02 ----A---- C:\Windows\system32\ieframe.dll
2015-10-14 08:48:02 ----A---- C:\Windows\system32\dxtmsft.dll
2015-10-14 08:48:01 ----A---- C:\Windows\system32\webcheck.dll
2015-10-14 08:48:01 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-10-14 08:48:01 ----A---- C:\Windows\system32\mshtmled.dll
2015-10-14 08:48:01 ----A---- C:\Windows\system32\jscript9diag.dll
2015-10-14 08:48:01 ----A---- C:\Windows\system32\jscript.dll
2015-10-14 08:48:01 ----A---- C:\Windows\system32\ieUnatt.exe
2015-10-14 08:48:00 ----A---- C:\Windows\system32\wininet.dll
2015-10-14 08:48:00 ----A---- C:\Windows\system32\jscript9.dll
2015-10-14 08:47:59 ----A---- C:\Windows\system32\msrating.dll
2015-10-14 08:47:59 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-10-14 08:47:59 ----A---- C:\Windows\system32\mshtml.dll
2015-10-14 08:47:15 ----A---- C:\Windows\system32\wucltux.dll
2015-10-14 08:47:15 ----A---- C:\Windows\system32\wuaueng.dll
2015-10-14 08:47:15 ----A---- C:\Windows\system32\wuapi.dll
2015-10-14 08:47:14 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-10-14 08:47:14 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-10-14 08:47:14 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-10-14 08:47:14 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-10-14 08:47:14 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-10-14 08:47:14 ----A---- C:\Windows\system32\wuwebv.dll
2015-10-14 08:47:14 ----A---- C:\Windows\system32\wups2.dll
2015-10-14 08:47:14 ----A---- C:\Windows\system32\wups.dll
2015-10-14 08:47:14 ----A---- C:\Windows\system32\wudriver.dll
2015-10-14 08:47:14 ----A---- C:\Windows\system32\wuauclt.exe
2015-10-14 08:47:14 ----A---- C:\Windows\system32\wuapp.exe
2015-10-14 08:47:14 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-10-14 08:47:14 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-10-14 08:46:53 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-10-14 08:46:51 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-10-14 08:46:50 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-10-14 08:46:48 ----A---- C:\Windows\system32\lsasrv.dll
2015-10-14 08:46:48 ----A---- C:\Windows\system32\kernel32.dll
2015-10-14 08:46:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-10-14 08:46:48 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-10-14 08:46:47 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-10-14 08:46:47 ----A---- C:\Windows\system32\ntdll.dll
2015-10-14 08:46:47 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-10-14 08:46:46 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-10-14 08:46:46 ----A---- C:\Windows\system32\wow64.dll
2015-10-14 08:46:46 ----A---- C:\Windows\system32\srcore.dll
2015-10-14 08:46:46 ----A---- C:\Windows\system32\rpcrt4.dll
2015-10-14 08:46:46 ----A---- C:\Windows\system32\KernelBase.dll
2015-10-14 08:46:46 ----A---- C:\Windows\system32\conhost.exe
2015-10-14 08:46:45 ----A---- C:\Windows\system32\winsrv.dll
2015-10-14 08:46:44 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-10-14 08:46:44 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-10-14 08:46:44 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-10-14 08:46:44 ----A---- C:\Windows\system32\schannel.dll
2015-10-14 08:46:44 ----A---- C:\Windows\system32\rstrui.exe
2015-10-14 08:46:44 ----A---- C:\Windows\system32\kerberos.dll
2015-10-14 08:46:43 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-10-14 08:46:43 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-10-14 08:46:43 ----A---- C:\Windows\system32\wdigest.dll
2015-10-14 08:46:43 ----A---- C:\Windows\system32\TSpkg.dll
2015-10-14 08:46:43 ----A---- C:\Windows\system32\ncrypt.dll
2015-10-14 08:46:43 ----A---- C:\Windows\system32\msv1_0.dll
2015-10-14 08:46:42 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-10-14 08:46:42 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-10-14 08:46:42 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-10-14 08:46:42 ----A---- C:\Windows\system32\sspicli.dll
2015-10-14 08:46:42 ----A---- C:\Windows\system32\smss.exe
2015-10-14 08:46:42 ----A---- C:\Windows\system32\lsass.exe
2015-10-14 08:46:42 ----A---- C:\Windows\system32\auditpol.exe
2015-10-14 08:46:41 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-10-14 08:46:41 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-10-14 08:46:41 ----A---- C:\Windows\system32\srclient.dll
2015-10-14 08:46:41 ----A---- C:\Windows\system32\ntvdm64.dll
2015-10-14 08:46:41 ----A---- C:\Windows\system32\csrsrv.dll
2015-10-14 08:46:41 ----A---- C:\Windows\system32\cryptbase.dll
2015-10-14 08:46:40 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-10-14 08:46:40 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-10-14 08:46:40 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-10-14 08:46:40 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-10-14 08:46:40 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-10-14 08:46:40 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-10-14 08:46:40 ----A---- C:\Windows\system32\wow64win.dll
2015-10-14 08:46:40 ----A---- C:\Windows\system32\wow64cpu.dll
2015-10-14 08:46:40 ----A---- C:\Windows\system32\sspisrv.dll
2015-10-14 08:46:40 ----A---- C:\Windows\system32\secur32.dll
2015-10-14 08:46:40 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-10-14 08:46:40 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-10-14 08:46:40 ----A---- C:\Windows\system32\credssp.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 08:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 08:46:39 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-10-14 08:46:39 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-10-14 08:46:39 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-10-14 08:46:39 ----A---- C:\Windows\system32\apisetschema.dll
2015-10-14 08:46:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 08:46:38 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-14 08:46:38 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 08:46:38 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 08:46:38 ----A---- C:\Windows\SYSWOW64\user.exe
2015-10-14 08:46:38 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-10-14 08:46:38 ----A---- C:\Windows\system32\adtschema.dll
2015-10-14 08:46:37 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-10-14 08:46:37 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-10-14 08:46:37 ----A---- C:\Windows\system32\msobjs.dll
2015-10-14 08:46:37 ----A---- C:\Windows\system32\msaudite.dll
2015-10-14 08:42:29 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-10-14 08:42:29 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-10-14 08:42:28 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-10-14 08:42:28 ----A---- C:\Windows\system32\appidsvc.dll
2015-10-14 08:42:28 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-10-14 08:42:28 ----A---- C:\Windows\system32\appidapi.dll
2015-10-14 08:42:26 ----A---- C:\Windows\system32\drivers\appid.sys
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\ucrtbase.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 08:40:48 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-14 08:40:47 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2015-10-13 09:24:05 ----D---- C:\Users\DELL\AppData\Roaming\AdobeUM
2015-10-10 17:18:30 ----SHD---- C:\$RECYCLE.BIN
2015-10-10 17:07:54 ----D---- C:\Windows\Temp
2015-10-10 17:07:54 ----A---- C:\Windows\zoek-delete.exe
2015-10-09 18:47:28 ----A---- C:\Windows\SYSWOW64\GPhotos.scr

======List of files/folders modified in the last 1 month======

2015-10-21 19:21:30 ----D---- C:\Windows\Prefetch
2015-10-21 19:21:25 ----D---- C:\Program Files\trend micro
2015-10-21 18:41:24 ----D---- C:\Users\DELL\AppData\Roaming\FileZilla
2015-10-21 18:18:34 ----D---- C:\Windows\system32\config
2015-10-21 18:15:46 ----D---- C:\Users\DELL\AppData\Roaming\Spotify
2015-10-21 18:11:20 ----HD---- C:\Windows\msdownld.tmp
2015-10-21 18:11:20 ----D---- C:\Program Files\Internet Explorer
2015-10-21 18:11:20 ----D---- C:\Program Files (x86)
2015-10-20 20:41:41 ----D---- C:\Windows
2015-10-20 09:57:13 ----A---- C:\DelFix.txt
2015-10-20 09:56:42 ----SHD---- C:\System Volume Information
2015-10-20 09:56:07 ----D---- C:\AdwCleaner
2015-10-19 08:22:06 ----D---- C:\Windows\System32
2015-10-19 08:22:05 ----D---- C:\Windows\inf
2015-10-19 08:22:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-10-18 10:13:12 ----D---- C:\ProgramData\NCH Software
2015-10-18 10:13:00 ----D---- C:\Program Files (x86)\NCH Software
2015-10-17 16:39:27 ----D---- C:\Windows\SysWOW64
2015-10-17 16:39:22 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-16 19:55:02 ----D---- C:\Windows\system32\Tasks
2015-10-16 19:55:00 ----D---- C:\Windows\Tasks
2015-10-16 08:32:50 ----D---- C:\Windows\winsxs
2015-10-16 08:32:11 ----SD---- C:\Windows\system32\CompatTel
2015-10-16 08:32:10 ----D---- C:\Windows\system32\appraiser
2015-10-16 08:32:10 ----D---- C:\Windows\AppPatch
2015-10-15 11:30:49 ----D---- C:\Windows\rescache
2015-10-15 09:05:59 ----D---- C:\Config.Msi
2015-10-15 09:02:16 ----D---- C:\Windows\SYSWOW64\nl-NL
2015-10-15 09:02:16 ----D---- C:\Windows\SYSWOW64\en-US
2015-10-15 09:02:15 ----D---- C:\Windows\system32\nl-NL
2015-10-15 09:02:15 ----D---- C:\Windows\system32\en-US
2015-10-15 09:02:13 ----D---- C:\Program Files (x86)\Internet Explorer
2015-10-15 09:02:06 ----D---- C:\Windows\system32\drivers
2015-10-15 09:02:02 ----D---- C:\Windows\system32\CodeIntegrity
2015-10-15 09:02:02 ----D---- C:\Windows\system32\Boot
2015-10-15 08:43:29 ----SHD---- C:\Windows\Installer
2015-10-15 08:43:28 ----D---- C:\ProgramData\Microsoft Help
2015-10-15 08:41:57 ----D---- C:\Windows\system32\MRT
2015-10-15 08:19:26 ----D---- C:\Windows\debug
2015-10-15 08:19:17 ----A---- C:\Windows\system32\MRT.exe
2015-10-15 08:16:07 ----D---- C:\Windows\Microsoft.NET
2015-10-15 07:50:55 ----A---- C:\Windows\win.ini
2015-10-14 08:31:55 ----D---- C:\Windows\system32\catroot2
2015-10-14 08:28:56 ----D---- C:\Program Files (x86)\Google
2015-10-13 12:05:48 ----D---- C:\Program Files (x86)\FileZilla FTP Client
2015-10-10 16:59:39 ----D---- C:\ProgramData
2015-10-10 16:59:39 ----D---- C:\Program Files (x86)\Common Files
2015-10-09 09:46:26 ----D---- C:\ProgramData\Ulead Systems
2015-10-09 09:24:47 ----D---- C:\Program Files (x86)\Corel
2015-10-09 09:24:46 ----D---- C:\Users\DELL\AppData\Roaming\Ulead Systems
2015-10-09 09:24:14 ----D---- C:\ProgramData\Corel
2015-10-09 09:19:30 ----RSD---- C:\Windows\Fonts
2015-10-09 08:33:41 ----D---- C:\Program Files
2015-10-08 21:42:02 ----RSD---- C:\Windows\assembly
2015-10-08 19:06:36 ----SD---- C:\Windows\SYSWOW64\GWX
2015-10-08 19:06:36 ----SD---- C:\Windows\system32\GWX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2013-01-10 257120]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258); C:\Windows\system32\DRIVERS\tdrpm258.sys [2013-01-10 1477728]
R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2013-01-10 943712]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2013-01-10 251488]
R3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth-apparaat (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 HECIx64;Intel® Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-18 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-01-10 12311904]
R3 NETwNv64;___ Intel® Wireless WiFi Link 5000 Series adapter stuurprogramma onder Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\NETwNv64.sys [2011-01-19 7886848]
R3 RFCOMM;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 stdriver;Sound tap driver Upper Class Filter Driver v2.0.0.0; C:\Windows\system32\DRIVERS\stdriver64.sys [2014-03-17 56408]
R3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
R3 WinUsb;WinUsb-stuurprogramma; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
R3 WsAudioDevice_383S(1);WsAudioDevice_383S(1); C:\Windows\system32\drivers\WsAudioDevice_383S(1).sys [2013-05-30 29288]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BrSerIb;Brother Serial Interface Driver(WDM); C:\Windows\system32\DRIVERS\BrSerIb.sys [2009-11-03 87552]
S3 BrUsbSIb;Brother Serial USB Driver(WDM); C:\Windows\system32\DRIVERS\BrUsbSIb.sys [2009-11-03 14592]
S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cleanhlp;cleanhlp; \??\C:\EEK\bin\cleanhlp64.sys [2014-11-25 57024]
S3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2014-03-19 76496]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver; C:\Windows\system32\DRIVERS\point64.sys [2014-03-19 50896]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2015-06-11 20992]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RTL8187B;Realtek RTL8187B 802.11b/g 54 Mbps draadloze USB 2.0-netwerkadapter; C:\Windows\system32\DRIVERS\RTL8187B.sys [2009-06-10 416768]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
S3 WSDScan;Ondersteuning voor WSD-scan via UMB; C:\Windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2009-10-31 894080]
R2 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2013-01-10 2480048]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-05-29 77128]
R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 Brother XP spl Service;BrSplService; C:\Windows\syswow64\brsvc01a.exe [2002-04-12 57344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ENAgent;Epson Redirect Agent; C:\Windows\SysWOW64\ENAgent.exe [2012-07-05 4209856]
R2 EPSON_PM_RPCV4_05;EPSON V3 Service4(05); C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE [2011-04-25 136576]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 PSI_SVC_2;Corel License Validation Service V2, Powered by arvato; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2014-04-30 277360]
R2 PSI_SVC_2_x64;Corel License Validation Service V2 x64, Powered by arvato; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2014-04-30 337776]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2015-03-12 655624]
R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2015-06-29 644904]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-13 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17 269000]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-13 144200]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-09-16 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office  Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-09 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Geplaatst:

Je topic werd verplaatst naar Bestrijding malware & virussen, zo blijft het forum overzichtelijk.

Na de analyse van je logje door een malware-expert krijg je persoonlijke begeleiding en nieuwe instructies.

Geplaatst:

Nog even dit , ik krijg een melding dat browser verouderd is IE11 , heeft dit er wat mee te maken

post-25691-0-79455500-1445494786.jpg

post-25691-0-60382500-1445494804.jpg

Geplaatst:

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.pngZoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows];r64
"AppInit_DLLs"=-;r64
C:\Windows\zoek-delete.exe;f
CHRdefaults;
torpigcheck;
emptyfolderscheck;delete
startupall;
filesrcm;
  • Klik op de knop "More options" en vink nu de onderstaande opties aan.
  • Do a Quick Scan
  • Auto Clean
  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.
Zoek.exe logbestand plaatsen
  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
Geplaatst:

Zoek.exe v5.0.0.1 Updated 20-October-2015
Tool run by DELL on do 22-10-2015 at  8:43:30,98.
Microsoft Windows 7 Ultimate  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\DELL\Downloads\zoek (15).exe [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

22-10-2015 8:49:24 Zoek.exe System Restore Point Created Successfully.

==== Torpig Check ======================

HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem {217FC9C0-3AEA-1069-A2DB-08002B30309D} %SystemRoot%\system32\shell32.dll
HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileZilla3CopyHook {DB70412E-EEC9-479C-BBA9-BE36BFDDA41B} C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing {40dd6e20-7c17-11ce-a804-00aa003ca9f6} %SystemRoot%\system32\ntshrui.dll

2009-07-14 03:20:08 d-----w- \Windows
2010-11-20 13:24:27 71168 ----a-w- 317CD1CE327B6520BF4EE007BCD39E61 \windows\bfsvc.exe
2015-10-22 05:26:16 67584 --s-a-w- D03D587E53EBB93BBA039F501FBEB43D \windows\bootstat.dat
2003-11-28 17:57:12 0 ----a-w- D41D8CD98F00B204E9800998ECF8427E \windows\brdfxspd.dat
2013-03-15 15:20:49 8858 ----a-w- 5CD6C62BBB4F5EDD71037A6B9939B247 \windows\BRPARAM.INI
2013-03-09 07:30:28 93 ----a-w- AB94EDDD08F4EFF2A7D50563F6FAD791 \windows\brpcfx.ini
2013-03-15 11:35:35 776 ----a-w- B1B230C204377E4E5EEA29BC2F2610D1 \windows\Brpfx04a.ini
2013-07-01 14:52:43 116 ----a-w- 8677D6D7B481237E09A282D393D26CC4 \windows\DeleteOnReboot.bat
2015-10-08 19:42:19 225775 ----a-w- 4A7505AC966BE40F71E96DA1A90A2ED7 \windows\DirectX.log
2015-05-23 13:55:14 2155 ----a-w- 9FFBB8A29E2DCC69A6DC5B034C7C7654 \windows\epplauncher.mif
2011-02-25 06:19:30 2871808 ----a-w- 332FEAB1435662FC6C672E25BEB37BE3 \windows\explorer.exe
1999-09-21 12:19:02 373248 ----a-w- DACF3BFD4FD0F1F805CD5D901383A6E9 \windows\EyeCand3.INI
2009-07-14 01:39:10 15360 ----a-w- 92BB2E9AA28542C685C59EFCBAC2490B \windows\fveupdate.exe
2009-07-14 01:39:12 733696 ----a-w- CD47548A52B02D254BF6D7F7A5F2BFD3 \windows\HelpPane.exe
2009-07-14 01:39:12 16896 ----a-w- 3D0B9EA79BF1F828324447D84AA9DCE2 \windows\hh.exe
2015-10-21 16:11:30 15217 ----a-w- 297DC3E985EA9A1934367CB63A67ED08 \windows\IE11_main.log
2014-02-28 08:01:54 65536 ----a-w- 9C17BCA3EF837BACDED7E4299508E71D \windows\IFinst27.exe
2013-09-18 19:32:04 33 ----a-w- F915014CBCA5AC5DDE60AD6E7A7F258E \windows\iltwain.ini
1998-11-13 11:08:20 308224 ----a-w- 65541F7F9075194CDA176FBAE8977560 \windows\IsUn0413.exe
2009-07-13 23:06:54 43131 ----a-w- 23AF90D2355D8C83AA4567EF1763B467 \windows\mib.bin
2009-06-10 20:36:48 1405 ----a-w- B9FB94A8DA62711C6955825DEFB25C5A \windows\msdfmap.ini
2015-07-09 17:57:57 193536 ----a-w- B32189BDFF6E577A92BAA61AD49264E6 \windows\notepad.exe
2015-10-15 07:05:59 4262 ----a-w- E4FCFD80ED31D9B8B700F9ED3B02690A \windows\PFRO.log
2009-07-14 01:39:29 427008 ----a-w- 2E2C937846A0B8789E5E91739284D17A \windows\regedit.exe
2013-04-04 15:46:21 308 ----a-w- BA3AFC9419A11D6C28E80ECD524F0380 \windows\setup.iss
2015-10-21 16:14:35 896 ----a-w- 17A4098E98F7DFD73D90E7215A236BDD \windows\setupact.log
2015-10-09 06:45:51 0 ----a-w- D41D8CD98F00B204E9800998ECF8427E \windows\setuperr.log
2012-02-11 06:36:01 67072 ----a-w- 127AA81343A7C6F665C22CB1293B0A90 \windows\splwow64.exe
2009-06-10 20:31:02 48201 ----a-w- 9060C3C745E7B2D8E1A81DD061021546 \windows\Starter.xml
2013-07-01 17:49:57 215 ----a-w- 3CF3D4A45CC2AF973DBC30EC8D33252B \windows\system.ini
2009-06-10 21:41:17 94784 ----a-w- 0BEA3F79A36B1F67B2CE0F595524C77C \windows\twain.dll
2010-11-20 12:21:32 51200 ----a-w- 163A95975E1D8819E653AA3E961371CA \windows\twain_32.dll
2009-06-10 21:41:17 49680 ----a-w- F36A271706EDD23C94956AFB56981184 \windows\twunk_16.exe
2009-07-14 01:14:42 31232 ----a-w- 0BD6E68F3EA0DD62CD86283D86895381 \windows\twunk_32.exe
2009-06-10 20:31:02 51867 ----a-w- BE9ABBA239905C914B050195978E4D02 \windows\Ultimate.xml
2003-09-11 08:09:12 86016 ----a-w- 2752E7A7AA397A7CA62D6B92CAF459EE \windows\unvise32.exe
1998-04-30 12:56:44 129024 ----a-w- 5C4CD45CA58A12CD8C99056B4128AF68 \windows\UNWISE.EXE
2015-10-15 05:50:55 541 ----a-w- 74F3E92A16B3127FC4DE99AF1F56ECD9 \windows\win.ini
2009-07-14 04:54:24 749 ---ha-r- 5A5CFF37F1BD0F86B9BDAAD7A9445882 \windows\WindowsShell.Manifest
2015-10-22 05:43:05 1244469 ----a-w- 6E8E0A9D8C38310D9678AF837728B39B \windows\WindowsUpdate.log
2009-07-14 01:14:45 9728 ----a-w- 1D420D66250BCAAAED05724FB34008CF \windows\winhlp32.exe
2015-10-08 19:51:13 561 ----a-w- 785F8D204B33DC8AC3F582BBE3ADCE24 \windows\wmsetup.log
2009-06-10 20:52:44 316640 ----a-w- DC17DD0189B0C36D863B4DD0A036C10F \windows\WMSysPr9.prx
2009-07-14 01:39:57 10240 ----a-w- F8ED3B4B209E2CB49028E36CF06CA851 \windows\write.exe
1998-10-09 09:18:54 296448 ----a-w- 33E746A73C2F17379BF8A5134D118A25 \windows\Xenofex.ini

==== Empty Folders Check ======================

C:\Users\DELL\AppData\Roaming\AdobeUM deleted successfully
C:\Users\DELL\AppData\Local\CrashDumps deleted successfully
C:\Users\DELL\AppData\Local\kpn deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=-

==== Deleting Files \ Folders ======================

"C:\Windows\zoek-delete.exe" not found

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\DELL\AppData\Local\Temp ====
2015-10-21 14:05:19 FF268EA07017CD003568AAA9324B7C49 215368 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\psmachine_64.dll
2015-10-21 14:05:19 999E70D8EB63347DA959B832EEA506A9 185160 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\psmachine.dll
2015-10-21 14:05:19 7D127425BBE91DF37448A7F44C1DDA52 591176 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\npGoogleUpdate3.dll
2015-10-21 14:05:19 661E6BBB51EDBE0B247D0BA1A24BDCCB 185160 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\psuser.dll
2015-10-21 14:05:19 0AEA2DAB21B381CC00CA94E157FB5506 215368 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\psuser_64.dll
2015-10-21 14:05:18 871C8235001610F08854525DEB29E981 1680712 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\goopdate.dll
2015-10-21 14:05:17 FAC17E42199598C0352B9F5DC2EFFC85 88392 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateOnDemand.exe
2015-10-21 14:05:17 E337785DA1958E9AB02DDB2369EF46E8 307016 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleCrashHandler64.exe
2015-10-21 14:05:17 D9A15F83CB6E5901A63F24CD7D58DBAF 929872 ----a-w- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateSetup.exe
2015-10-21 14:05:17 BFDCC0375C492C524E78647CEED3F77D 130888 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateComRegisterShell64.exe
2015-10-21 14:05:17 A72BB48D9014A7D7C05F02F595F52D60 245576 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleCrashHandler.exe
2015-10-21 14:05:17 77352A5A0833B1CA3B771148DA535CB6 88392 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateWebPlugin.exe
2015-10-21 14:05:17 61A77DDEF5E8D85E8B0955C4E5127B39 88392 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateBroker.exe
2015-10-21 14:05:17 219BD7B6DBE4A1A1D62C6BF622FDC130 45056 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateHelper.msi
2015-10-21 14:05:17 053EEEE1ABAE53F044F1E386E22AE525 144200 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdate.exe
2015-10-18 08:12:45 6BA44138A12512CEA696F6CECE82A5AB 634432 ----a-w- C:\Users\DELL\AppData\Local\Temp\pixsetup.exe
2015-10-13 09:26:42 A379901C2B15F242B0E36A86365A7FC2 151040 ----a-w- C:\Users\DELL\AppData\Local\Temp\in1C2ACCFB\67427EFA_stp\RAM.dll
====== Java Cache =====
====== C:\Windows\SysWOW64 =====
2015-10-14 06:48:30 F811B932E3DBA308014F8C870F752F16 12875776 ----a-w- C:\Windows\SysWOW64\shell32.dll
2015-10-14 06:48:29 5CB2886338C82E388F68557E2745200F 1498624 ----a-w- C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-14 06:48:09 C848E013BB85C48C787001E1EA36905F 60416 ----a-w- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-14 06:48:09 A7028D5D5E3DCF820B3C0AFE0137A87E 130048 ----a-w- C:\Windows\SysWOW64\occache.dll
2015-10-14 06:48:09 9F36964CDB9A920779314395E3911503 504832 ----a-w- C:\Windows\SysWOW64\vbscript.dll
2015-10-14 06:48:09 908BBA41A5B57DDB126B85EC14DD58EF 76288 ----a-w- C:\Windows\SysWOW64\mshtmled.dll
2015-10-14 06:48:09 0E036A353DB9D8F4F642AC0F9412F09E 47616 ----a-w- C:\Windows\SysWOW64\ieetwproxystub.dll
2015-10-14 06:48:09 098F6097F919EE77EA490E16D11E427A 1311232 ----a-w- C:\Windows\SysWOW64\urlmon.dll
2015-10-14 06:48:09 04BB7AF8E0DAE83982155F0752308666 64000 ----a-w- C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-14 06:48:09 00FBEDF0E74AD8815469A95271C0E562 345688 ----a-w- C:\Windows\SysWOW64\iedkcs32.dll
2015-10-14 06:48:08 D586CB95B4EADC0525E8929A241898F5 20357632 ----a-w- C:\Windows\SysWOW64\mshtml.dll
2015-10-14 06:48:08 C89372B642726F1CF3EB479397976DA3 279040 ----a-w- C:\Windows\SysWOW64\dxtrans.dll
2015-10-14 06:48:08 060409834CC8FAC3F1231DA3F0648CC5 689152 ----a-w- C:\Windows\SysWOW64\msfeeds.dll
2015-10-14 06:48:07 F274AF14C7DB6C52C023BCBDA4197D17 47104 ----a-w- C:\Windows\SysWOW64\jsproxy.dll
2015-10-14 06:48:07 B87A11C95703AB19ACB43993DDA0F1A3 62464 ----a-w- C:\Windows\SysWOW64\iesetup.dll
2015-10-14 06:48:07 9F4234838400CC3A964AF53DE4410A50 2279936 ----a-w- C:\Windows\SysWOW64\iertutil.dll
2015-10-14 06:48:07 8C9BCE16E894D4FBCE151F4A5FE05F55 30720 ----a-w- C:\Windows\SysWOW64\iernonce.dll
2015-10-14 06:48:07 816B489E2BBFE2479C844AAD486ABB42 2052608 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl
2015-10-14 06:48:07 7E8EABA6A2B10FE11E2381378A57322B 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb
2015-10-14 06:48:07 73189A2739491ABB556872737C501F8E 663552 ----a-w- C:\Windows\SysWOW64\jscript.dll
2015-10-14 06:48:07 584E6632F1F4027AB64DEB0F4139E7D7 620032 ----a-w- C:\Windows\SysWOW64\jscript9diag.dll
2015-10-14 06:48:07 12DCE9300FF5B74DC2F7DBAC96B0614E 710144 ----a-w- C:\Windows\SysWOW64\ieapfltr.dll
2015-10-14 06:48:06 BE1263EE0CB8CF942FC35CC86E0C3941 12853760 ----a-w- C:\Windows\SysWOW64\ieframe.dll
2015-10-14 06:48:06 AFC4F34507B555D1C9C4F049CCA1475F 416256 ----a-w- C:\Windows\SysWOW64\dxtmsft.dll
2015-10-14 06:48:06 4A3CA2C73C4D66A90C63E9E532746020 480256 ----a-w- C:\Windows\SysWOW64\ieui.dll
2015-10-14 06:48:04 CEDBC9DBD9800E0EE81B0840EBC2BAC5 1155072 ----a-w- C:\Windows\SysWOW64\mshtmlmedia.dll
2015-10-14 06:48:04 17B66052348D3A3681A9411EDD839E18 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe
2015-10-14 06:48:03 E401E66CCB2AE219CF41F7F901C410C1 2011136 ----a-w- C:\Windows\SysWOW64\wininet.dll
2015-10-14 06:48:03 DE53F76D63CA64E172B336BC7CFF6EDA 4527616 ----a-w- C:\Windows\SysWOW64\jscript9.dll
2015-10-14 06:48:03 A7012A7032207D1C16B7236EDF91F4BB 168960 ----a-w- C:\Windows\SysWOW64\msrating.dll
2015-10-14 06:48:03 A25C9DD040CA9799C2A7E41732D0752A 230400 ----a-w- C:\Windows\SysWOW64\webcheck.dll
2015-10-14 06:48:03 5EE17D52CAF79663211C01C614594620 341504 ----a-w- C:\Windows\SysWOW64\html.iec
2015-10-14 06:47:14 DDCABBADA6116E8E3472D93FDF56FE66 93696 ----a-w- C:\Windows\SysWOW64\wudriver.dll
2015-10-14 06:47:14 C4240CA64E6B3523110DE3CAF4066F07 566784 ----a-w- C:\Windows\SysWOW64\wuapi.dll
2015-10-14 06:47:14 7902FB8C129A6DCAA9E0002BD3600F00 35328 ----a-w- C:\Windows\SysWOW64\wuapp.exe
2015-10-14 06:47:14 6CE7ACA0022C27A3FAECB600E097F81B 30208 ----a-w- C:\Windows\SysWOW64\wups.dll
2015-10-14 06:47:14 693F6EC2312B8B3F57B7277B069B91A3 174080 ----a-w- C:\Windows\SysWOW64\wuwebv.dll
2015-10-14 06:46:51 C19537A50B723E0F7B53D413163B35EE 3936192 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe
2015-10-14 06:46:50 63FD03CED9739062E9B94F0D1E54A406 3990976 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe
2015-10-14 06:46:47 9E83A4F6E776F7A3E5F7FB90180FBC0B 1114112 ----a-w- C:\Windows\SysWOW64\kernel32.dll
2015-10-14 06:46:46 CA504606753BD62FA3128D3056320264 552960 ----a-w- C:\Windows\SysWOW64\kerberos.dll
2015-10-14 06:46:44 4EB6A0445891D56D56BB4580B3906BEA 1311768 ----a-w- C:\Windows\SysWOW64\ntdll.dll
2015-10-14 06:46:44 22BF275468F714A4F7E6F36449D1DCE2 259584 ----a-w- C:\Windows\SysWOW64\msv1_0.dll
2015-10-14 06:46:44 0834E70A068360D85CDC47697A4B7898 248832 ----a-w- C:\Windows\SysWOW64\schannel.dll
2015-10-14 06:46:43 C7293C9340BDC8291F6718913F3F7B14 221184 ----a-w- C:\Windows\SysWOW64\ncrypt.dll
2015-10-14 06:46:43 6D16D1B9DB2526B985BBB9B27A56B70B 172032 ----a-w- C:\Windows\SysWOW64\wdigest.dll
2015-10-14 06:46:42 C00E4CD3AC3A0D8E339635E06546B77D 50176 ----a-w- C:\Windows\SysWOW64\auditpol.exe
2015-10-14 06:46:42 5FC0F48FD38D0AC7FC54EBEFBC3F69C5 25600 ----a-w- C:\Windows\SysWOW64\setup16.exe
2015-10-14 06:46:42 3FA49981A847AE62259E6AEB585C84B8 65536 ----a-w- C:\Windows\SysWOW64\TSpkg.dll
2015-10-14 06:46:41 8A4ED460B6557EDCA637236073794DFF 43008 ----a-w- C:\Windows\SysWOW64\srclient.dll
2015-10-14 06:46:41 15192FC6BFCB37AE43A645A9C84AEF2F 36864 ----a-w- C:\Windows\SysWOW64\cryptbase.dll
2015-10-14 06:46:40 D8269205300BB593C3698BB77178E8D3 17408 ----a-w- C:\Windows\SysWOW64\credssp.dll
2015-10-14 06:46:40 C142CBB756205146B88DDB66D00BFE66 274944 ----a-w- C:\Windows\SysWOW64\KernelBase.dll
2015-10-14 06:46:40 6848FA8B421A0CEC8990AFE7A615574F 96768 ----a-w- C:\Windows\SysWOW64\sspicli.dll
2015-10-14 06:46:40 2464CEAC16185B73774662AC625F695D 22016 ----a-w- C:\Windows\SysWOW64\secur32.dll
2015-10-14 06:46:40 2421C989BF8485B6A9EBBAC35ACADF1D 665088 ----a-w- C:\Windows\SysWOW64\rpcrt4.dll
2015-10-14 06:46:40 1ADCC4F94981430FE968EE992353C535 14336 ----a-w- C:\Windows\SysWOW64\ntvdm64.dll
2015-10-14 06:46:39 D9F5F78F8EA5749CA651B71335A96421 5120 ----a-w- C:\Windows\SysWOW64\wow32.dll
2015-10-14 06:46:39 B421B311420FD650BE3B25EAC217E685 7680 ----a-w- C:\Windows\SysWOW64\instnm.exe
2015-10-14 06:46:39 1BE5DF925C30D9D1FAD1212FB215E469 6656 ----a-w- C:\Windows\SysWOW64\apisetschema.dll
2015-10-14 06:46:38 D414A645F6853BB2C8A24B85C1C86581 686080 ----a-w- C:\Windows\SysWOW64\adtschema.dll
2015-10-14 06:46:38 09BA6677E9CCBB1884CD0FB24F6EF584 2048 ----a-w- C:\Windows\SysWOW64\user.exe
2015-10-14 06:46:37 FE7B23203C757148CBCCA0A39EAD3C59 60416 ----a-w- C:\Windows\SysWOW64\msobjs.dll
2015-10-14 06:46:37 64B92847AA0945992BB49B62D9B0440E 146432 ----a-w- C:\Windows\SysWOW64\msaudite.dll
2015-10-14 06:42:29 0D0FF2A38473552DDFF4F21756700F9B 50688 ----a-w- C:\Windows\SysWOW64\appidapi.dll
2015-10-14 06:40:48 CBF3CFC9EE1FD29707D95C63A5E7A78B 19808 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 06:40:48 C1096DA4634AD3356A10C00B24F53393 22368 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 06:40:48 B23936CF83DAC4B64660A88711B5234A 12128 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 06:40:48 9F9FE5F52E9B2AD655C896B849883B1A 12128 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 06:40:48 9D66FCC681389EC619D4E801F1DDBB2F 17760 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 06:40:48 94FEB4417CF3E39C8C58A1B73620687E 66400 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 06:40:48 8E534F49C77D787DB69BABFF931A497A 12640 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 06:40:48 85CEBA9A21CE5D51B35EF2DE9EBFBAC4 12128 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 06:40:48 80BEB858D2EEE9CA657647B599E5D844 11616 ----a-w- C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 06:40:48 73CED8B30963E54D262DAE2559116E46 13664 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 06:40:48 6C7F782FDBF9AEFFE7663FA1579A610E 17760 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 06:40:48 4669249FB01EA369C7FD40A530966FA1 12640 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 06:40:48 408019E57D3D2DA62A9F28389EED0AC1 16224 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 06:40:48 39F9D0F1B698D53D78C79576C7C60526 14176 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 06:40:48 33E8CCBE05123C8146CD16293B688417 15712 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 06:40:48 00A0A24BB2E9AADE11494B627EB164C4 12640 ----a-w- C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 06:40:47 5B55E9A1360A6C52CC988DA6804D6CA2 901264 ----a-w- C:\Windows\SysWOW64\ucrtbase.dll
2015-10-09 16:47:28 404C6C3C3A59784456DA52660F86C52B 4587520 ----a-w- C:\Windows\SysWOW64\GPhotos.scr
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2015-10-15 06:25:24 21C89857E5671990BBF2B430BD75B9C9 1291264 ----a-w- C:\Windows\Sysnative\appraiser.dll
2015-10-15 06:25:23 F03EA93F045D009830C890010750B34A 25432 ----a-w- C:\Windows\Sysnative\CompatTelRunner.exe
2015-10-15 06:25:23 AFE7905DD772DEA54B9C443C6634740A 700416 ----a-w- C:\Windows\Sysnative\invagent.dll
2015-10-15 06:25:23 9F780E22C79AACBF3A93F6ACDE2A4E0A 766464 ----a-w- C:\Windows\Sysnative\generaltel.dll
2015-10-15 06:25:23 952D66DCA6CB744381B7298F8AAE994F 73216 ----a-w- C:\Windows\Sysnative\acmigration.dll
2015-10-15 06:25:23 1AC3E0E57844764B0CA6D2BF0F76C773 503808 ----a-w- C:\Windows\Sysnative\devinv.dll
2015-10-15 06:25:23 14A5CC0EE60278D483A88124B88F3524 1163776 ----a-w- C:\Windows\Sysnative\aeinv.dll
2015-10-14 06:48:32 885B08E5EC912D2680F533094B87770D 14176768 ----a-w- C:\Windows\Sysnative\shell32.dll
2015-10-14 06:48:29 0F08BB62CD162883E9A3004BBE7914BD 1866752 ----a-w- C:\Windows\Sysnative\ExplorerFrame.dll
2015-10-14 06:48:09 BF8A5B4E696F4E8F3B2B5E9902467418 720896 ----a-w- C:\Windows\Sysnative\ie4uinit.exe
2015-10-14 06:48:09 9E0D0522908C1106E0D77708CB9926FE 34304 ----a-w- C:\Windows\Sysnative\iernonce.dll
2015-10-14 06:48:09 9AEE2A881FD10E6A463588303D8027AD 114688 ----a-w- C:\Windows\Sysnative\ieetwcollector.exe
2015-10-14 06:48:09 80E9DF296F127B3BC965EBC5A2C8F044 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb
2015-10-14 06:48:09 3A0773E21355B41176ACAD8BB099D9B3 48640 ----a-w- C:\Windows\Sysnative\ieetwproxystub.dll
2015-10-14 06:48:08 521E1A87D4F750FD9694DBF3AB37B38F 77824 ----a-w- C:\Windows\Sysnative\JavaScriptCollectionAgent.dll
2015-10-14 06:48:07 8A2A46DD0C51E5D2D0A2EF2AA289DA4D 1546752 ----a-w- C:\Windows\Sysnative\urlmon.dll
2015-10-14 06:48:07 4AEB3F2FB0CC23A18ED997F6C0476819 391784 ----a-w- C:\Windows\Sysnative\iedkcs32.dll
2015-10-14 06:48:07 3295B811A0260C0A5B346ECB73C5FCF0 152064 ----a-w- C:\Windows\Sysnative\occache.dll
2015-10-14 06:48:07 12C1DECE9502828C0A5ADB50AB1673A0 4096 ----a-w- C:\Windows\Sysnative\ieetwcollectorres.dll
2015-10-14 06:48:06 F6F91F217D760981017E4AA4F1C7E633 66560 ----a-w- C:\Windows\Sysnative\iesetup.dll
2015-10-14 06:48:06 D661A17B4634171C58373699CBD6455B 315392 ----a-w- C:\Windows\Sysnative\dxtrans.dll
2015-10-14 06:48:06 6E1EEB1CE2F9F3AB14A9E8A6B1E82455 801280 ----a-w- C:\Windows\Sysnative\msfeeds.dll
2015-10-14 06:48:06 2A898891EB7FBCF0774F0B96AAD05561 968704 ----a-w- C:\Windows\Sysnative\MsSpellCheckingFacility.exe
2015-10-14 06:48:05 7C3050383491011FEDD40961A37A2D99 2126336 ----a-w- C:\Windows\Sysnative\inetcpl.cpl
2015-10-14 06:48:05 0FA614470B3A78FC5B8F3F3F742B9837 800768 ----a-w- C:\Windows\Sysnative\ieapfltr.dll
2015-10-14 06:48:04 E91FD3ACC10C971CBA991FCD058ABB58 2886656 ----a-w- C:\Windows\Sysnative\iertutil.dll
2015-10-14 06:48:03 A865136AC6436533E0A4A3C67F259401 585728 ----a-w- C:\Windows\Sysnative\vbscript.dll
2015-10-14 06:48:03 84C63F3D2D488A918A947E06BD1105EF 54784 ----a-w- C:\Windows\Sysnative\jsproxy.dll
2015-10-14 06:48:02 BC92D9D88959542FBAF1F8CF21F86B38 14458368 ----a-w- C:\Windows\Sysnative\ieframe.dll
2015-10-14 06:48:02 88D3F690043A1AA43F33DEC6DDA82178 616960 ----a-w- C:\Windows\Sysnative\ieui.dll
2015-10-14 06:48:02 45A56A2CC2D6A4B649B7DC3B5DF259FF 489984 ----a-w- C:\Windows\Sysnative\dxtmsft.dll
2015-10-14 06:48:01 B0917E6238C1675E48CFE64947DD9FD9 144384 ----a-w- C:\Windows\Sysnative\ieUnatt.exe
2015-10-14 06:48:01 5175A9C2C71D49394424C07CA856B803 1359360 ----a-w- C:\Windows\Sysnative\mshtmlmedia.dll
2015-10-14 06:48:01 4A9FFAC9325EFFDEFD7E8C0830B0ABEC 92160 ----a-w- C:\Windows\Sysnative\mshtmled.dll
2015-10-14 06:48:01 454669BB12162610D93954BCC942A41C 817664 ----a-w- C:\Windows\Sysnative\jscript.dll
2015-10-14 06:48:01 373B3EFBBF1A2706F8660C4DE4202694 262144 ----a-w- C:\Windows\Sysnative\webcheck.dll
2015-10-14 06:48:01 1DE918244ED8AB9D3F2C4B9A1F91A24D 814080 ----a-w- C:\Windows\Sysnative\jscript9diag.dll
2015-10-14 06:48:00 E36C7069B9C56DF9A53DD4FA5DCDDE72 5990912 ----a-w- C:\Windows\Sysnative\jscript9.dll
2015-10-14 06:48:00 BD06D875FB79E92DAF724C91DE743AFA 2487808 ----a-w- C:\Windows\Sysnative\wininet.dll
2015-10-14 06:48:00 58DD42AC31D1F86D303BAAF5955A59BA 417792 ----a-w- C:\Windows\Sysnative\html.iec
2015-10-14 06:47:59 BEA081F4F2D507D6461B142AB11995B3 199680 ----a-w- C:\Windows\Sysnative\msrating.dll
2015-10-14 06:47:59 99BA96F5AC545D857E662A9FC576D919 25851904 ----a-w- C:\Windows\Sysnative\mshtml.dll
2015-10-14 06:47:59 0783994A921469A6E97F3117AA0934DD 88064 ----a-w- C:\Windows\Sysnative\MshtmlDac.dll
2015-10-14 06:47:15 ECB1C858D9989C4F19FDCE3B7F8BA1F7 696320 ----a-w- C:\Windows\Sysnative\wuapi.dll
2015-10-14 06:47:15 2FFBB9A44A8BA9CBC9589C31E0A36605 3168768 ----a-w- C:\Windows\Sysnative\wucltux.dll
2015-10-14 06:47:15 291778E1A36716182AFBC1731B2DFEAB 2607104 ----a-w- C:\Windows\Sysnative\wuaueng.dll
2015-10-14 06:47:14 DA4450EE180CBDFB800FB230978BBC58 98816 ----a-w- C:\Windows\Sysnative\wudriver.dll
2015-10-14 06:47:14 C64C6AA9F061E89AE6CA1B484AC3F94E 192512 ----a-w- C:\Windows\Sysnative\wuwebv.dll
2015-10-14 06:47:14 B322CE702FA01DA60876BC5D417B15FE 36864 ----a-w- C:\Windows\Sysnative\wups.dll
2015-10-14 06:47:14 96983751026F0940CAEEB15901B49FF2 37888 ----a-w- C:\Windows\Sysnative\wuapp.exe
2015-10-14 06:47:14 7A2E35CA7131819A8CCE1FA1368D7813 37888 ----a-w- C:\Windows\Sysnative\wups2.dll
2015-10-14 06:47:14 74F288D562E78E1062D4AA2A6C3AB74C 12288 ----a-w- C:\Windows\Sysnative\wu.upgrade.ps.dll
2015-10-14 06:47:14 64B432FB351118B222A5342A7A461696 140288 ----a-w- C:\Windows\Sysnative\wuauclt.exe
2015-10-14 06:47:14 5F1A7C984117F478F7411BDD98411B58 91136 ----a-w- C:\Windows\Sysnative\WinSetupUI.dll
2015-10-14 06:46:53 3FE5671328B8A655F766D872D12DC373 5569472 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe
2015-10-14 06:46:48 6C190505923A971F0474F8BA8DA50789 1461760 ----a-w- C:\Windows\Sysnative\lsasrv.dll
2015-10-14 06:46:48 11C18D613F66CB5CE829B821599ED339 1164800 ----a-w- C:\Windows\Sysnative\kernel32.dll
2015-10-14 06:46:47 91DDAFAFCEC3E360881FE35AF06B9EE4 1730496 ----a-w- C:\Windows\Sysnative\ntdll.dll
2015-10-14 06:46:46 F337ACC4CF6B9DFBE46D9A7E54E10756 503808 ----a-w- C:\Windows\Sysnative\srcore.dll
2015-10-14 06:46:46 CD349AD99C801523B55030AC234CC1EF 243712 ----a-w- C:\Windows\Sysnative\wow64.dll
2015-10-14 06:46:46 A06A96A26FE0BE22B08B641362296B68 424960 ----a-w- C:\Windows\Sysnative\KernelBase.dll
2015-10-14 06:46:46 5401C9D2F4B0A98B60259C621DDF1EB6 338432 ----a-w- C:\Windows\Sysnative\conhost.exe
2015-10-14 06:46:46 338FD40323ADD43B5C94B4A6CB91874B 1216512 ----a-w- C:\Windows\Sysnative\rpcrt4.dll
2015-10-14 06:46:45 4AD1C61152A0199E3D7F9A82C07AC629 215040 ----a-w- C:\Windows\Sysnative\winsrv.dll
2015-10-14 06:46:44 EE035334B7A58C7F748C3D0394574A35 342016 ----a-w- C:\Windows\Sysnative\schannel.dll
2015-10-14 06:46:44 5B9427E47B86AFDA813A8D252713FC35 296960 ----a-w- C:\Windows\Sysnative\rstrui.exe
2015-10-14 06:46:44 365480590A46ECB0E4BF1DBD7BC69713 729088 ----a-w- C:\Windows\Sysnative\kerberos.dll
2015-10-14 06:46:43 E43F36D0B4C674FEA2C992564A3E0F28 210944 ----a-w- C:\Windows\Sysnative\wdigest.dll
2015-10-14 06:46:43 D2BF3CD0F66139B5F1BA1D35C6613E78 315392 ----a-w- C:\Windows\Sysnative\msv1_0.dll
2015-10-14 06:46:43 96DE914D834FD7809A1720AF5D913C96 309760 ----a-w- C:\Windows\Sysnative\ncrypt.dll
2015-10-14 06:46:43 06AA22DBBD294BB40F01E23BF826AA9C 86528 ----a-w- C:\Windows\Sysnative\TSpkg.dll
2015-10-14 06:46:42 E9CCB68290F27837A3D7058FEB51F7A8 136192 ----a-w- C:\Windows\Sysnative\sspicli.dll
2015-10-14 06:46:42 D2E2A613EBD0C959E72556C3A63A6B4A 112640 ----a-w- C:\Windows\Sysnative\smss.exe
2015-10-14 06:46:42 95E4E6C645175731B1DC8084329121AA 64000 ----a-w- C:\Windows\Sysnative\auditpol.exe
2015-10-14 06:46:42 5424EC756808C1002457033D969115C7 31232 ----a-w- C:\Windows\Sysnative\lsass.exe
2015-10-14 06:46:41 8F15F0D6F42A2B8A58EDD1AA55D7FB98 50176 ----a-w- C:\Windows\Sysnative\srclient.dll
2015-10-14 06:46:41 78461527B753B9A6043038AEF25745D3 16384 ----a-w- C:\Windows\Sysnative\ntvdm64.dll
2015-10-14 06:46:41 3CF93F8BA5016A86073F7ACE4A225D69 44032 ----a-w- C:\Windows\Sysnative\cryptbase.dll
2015-10-14 06:46:41 23682AD752DE308760672C84A7E74554 43520 ----a-w- C:\Windows\Sysnative\csrsrv.dll
2015-10-14 06:46:40 FCFE939A325054DFC69E1D8C58751A62 13312 ----a-w- C:\Windows\Sysnative\wow64cpu.dll
2015-10-14 06:46:40 E91002F7EC3A9BF7F62BF1E215A32451 362496 ----a-w- C:\Windows\Sysnative\wow64win.dll
2015-10-14 06:46:40 C0EC18A77CBE5505019AF1BEB6CE824D 22016 ----a-w- C:\Windows\Sysnative\credssp.dll
2015-10-14 06:46:40 8260FD420E49C1E3DD6539BCEA2B376E 28160 ----a-w- C:\Windows\Sysnative\secur32.dll
2015-10-14 06:46:40 4E10C0CD94FD2E9F04B0AA11C4DB1592 29184 ----a-w- C:\Windows\Sysnative\sspisrv.dll
2015-10-14 06:46:39 023394934150F7EC547EBCC2107EEA5F 6656 ----a-w- C:\Windows\Sysnative\apisetschema.dll
2015-10-14 06:46:38 DD01EBF9D35E614CAEA1BF4876B07134 686080 ----a-w- C:\Windows\Sysnative\adtschema.dll
2015-10-14 06:46:37 B5D2DF46AB955A070F67FF192C52E7BD 60416 ----a-w- C:\Windows\Sysnative\msobjs.dll
2015-10-14 06:46:37 7CDA2FE5F02370B5879DF8D35133B0E1 146432 ----a-w- C:\Windows\Sysnative\msaudite.dll
2015-10-14 06:42:32 87FEDB1FF42C3A10FFE2CE95AB2AF306 616360 ----a-w- C:\Windows\Sysnative\winresume.efi
2015-10-14 06:42:31 541B7C53EDA8F84790A593B13FB32E56 692672 ----a-w- C:\Windows\Sysnative\winload.efi
2015-10-14 06:42:29 7030F95F994B2F2CCC1C521E342369DB 147456 ----a-w- C:\Windows\Sysnative\appidpolicyconverter.exe
2015-10-14 06:42:28 B6C85437FDC8EC6464BE359D41BBC3F7 59392 ----a-w- C:\Windows\Sysnative\appidapi.dll
2015-10-14 06:42:28 B17B1E5FB5CE63DA4DB4D49E3683487F 17920 ----a-w- C:\Windows\Sysnative\appidcertstorecheck.exe
2015-10-14 06:42:28 ABC373B9C6275D45F17DB559408FFD1B 32768 ----a-w- C:\Windows\Sysnative\appidsvc.dll
2015-10-14 06:42:28 7503BAD9B2A08B8A95319F7C0CA9F869 63488 ----a-w- C:\Windows\Sysnative\setbcdlocale.dll
2015-10-14 06:40:48 F97E7878A2B372291B1269D80327BBF6 12640 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 06:40:48 ED14B64C94F543974B7FDC592FA0594B 12640 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 06:40:48 ECCF5973B80D771A79643732017CEA9A 17760 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 06:40:48 E9F6D776545843A9817D8ACF38D06D09 19808 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 06:40:48 CC337898E64D9078CB697AC19F995C7F 12128 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 06:40:48 BBAE7B5436D6D1B0FC967FF67E35415F 16224 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 06:40:48 AF851DFD0D9FECB76FF2B403F3C30F5B 12128 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 06:40:48 761DDD8669A661D57D9CF9C335949C06 12128 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 06:40:48 6631C212F79350458589A5281374B38B 12640 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 06:40:48 653CB5DF3CEC6A4A0E402B33D8AA5C08 63840 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 06:40:48 56556659C691DD043DBE24B0A195D64C 20832 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 06:40:48 53E9526AF1FDCE39F799BFE9217397A8 17760 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 06:40:48 32B2264317EA6200DA5DEEEC7DCB0EEB 11616 ----a-w- C:\Windows\Sysnative\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 06:40:48 2381E189321EAD521FF71E72D08A6B17 984448 ----a-w- C:\Windows\Sysnative\ucrtbase.dll
2015-10-14 06:40:48 1908861649E67CDC20C563C234A89914 15712 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 06:40:48 0F143310FADE4DE116070A3917A79C18 13664 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 06:40:48 090DD0BB2BDDEE3EAAE5B6FF15FAE209 14176 ----a-w- C:\Windows\Sysnative\api-ms-win-crt-time-l1-1-0.dll
====== C:\Windows\Sysnative\drivers =====
2015-10-14 06:46:48 C6330F7C2E92A00E6773E82F79078AFC 157016 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys
2015-10-14 06:46:48 3A8C03156C3E31E70EF84E48CA179B46 97112 ----a-w- C:\Windows\Sysnative\drivers\ksecdd.sys
2015-10-14 06:46:47 ACB6782973BD93760D597FC7BB37E692 159232 ----a-w- C:\Windows\Sysnative\drivers\mrxsmb.sys
2015-10-14 06:46:40 8C0376974AA28398FF501E78C04ACB30 129024 ----a-w- C:\Windows\Sysnative\drivers\mrxsmb20.sys
2015-10-14 06:46:40 262BF7BB7D0E44CFAA9B12A1E0A6EDF1 290816 ----a-w- C:\Windows\Sysnative\drivers\mrxsmb10.sys
2015-10-14 06:42:26 27DABFB4A6B0140C34DBEC713469592B 61440 ----a-w- C:\Windows\Sysnative\drivers\appid.sys
====== C:\Windows\Tasks ======
2015-10-13 10:18:11 5157A97DD28E2DF43EF13A88E18B290B 4048 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineUA
2015-10-13 10:18:11 13C9A4253F0836F78627D631E55E46D9 1052 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-13 10:18:10 4B944426DF4E6F301E4697B641139CEA 3796 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineCore
2015-10-13 10:18:09 E9DD149009BE43FD026F000900450E44 1048 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-08 18:14:58 CBA1C2926C3B0FE7D2493EA2B4EAC23D 3464 ----a-w- C:\Windows\Sysnative\Tasks\{6519BD1F-DD19-41AF-8317-3D94DD526724}
====== C:\Windows\Temp ======
======= C:\Program Files =====
======= C:\PROGRA~2 =====
======= C: =====
====== C:\Users\DELL\AppData\Roaming ======
2015-10-10 15:07:54 -------- d-----w- C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp
2015-10-10 15:07:54 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp
2015-10-10 15:07:54 -------- d-----w- C:\Users\Public\AppData\Local\temp
2015-10-10 15:07:54 -------- d-----w- C:\Users\Eye Candy 4000\AppData\Local\temp
2015-10-10 15:07:54 -------- d-----w- C:\Users\DELL\AppData\Local\Temp
2015-10-10 15:07:54 -------- d-----w- C:\Users\Default\AppData\Local\temp
2015-10-10 15:07:54 -------- d-----w- C:\Users\Default User\AppData\Local\temp
====== C:\Users\DELL ======
2015-10-20 17:31:42 EDA5529ADEF17A958F1BFBBD28F205D5 6539752 ----a-w- C:\Users\DELL\Downloads\FileZilla_3.14.1_win64-setup.exe
2015-10-18 08:13:11 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs
2015-10-13 10:18:58 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-13 10:05:27 D9EC66BDE74CDCA7D7D5D9C5F94EEFB4 6282768 ----a-w- C:\Users\DELL\Downloads\FileZilla_3.14.0_win32-setup.exe
2015-10-13 09:27:13 CC1EF87E53A9EF57CF338B840CE7445D 14956872 ----a-w- C:\Users\DELL\Downloads\picasa [1].exe
2015-10-09 07:01:02 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel PaintShop Pro X8

====== C: exe-files ==
2015-10-21 17:59:27 81C546AB3CE424DCEAB2CD0F6C2E6829 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2412325288-324325390-2824101589-1000\$IHKN1SI.EXE
2015-10-21 16:08:22 4103B9931B6D961CF5020046E11A1FC3 61253792 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2412325288-324325390-2824101589-1000\$RHKN1SI.EXE
2015-10-21 14:05:49 1CB700150646127956A6335BDF9E2542 43332688 ----a-w- C:\Program Files (x86)\Google\Update\Install\{6B14141D-FEB3-4AB1-8C0C-F9AACF1F27DE}\46.0.2490.71_chrome_installer.exe
2015-10-21 14:05:47 1CB700150646127956A6335BDF9E2542 43332688 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\46.0.2490.71\46.0.2490.71_chrome_installer.exe
2015-10-21 14:05:17 FAC17E42199598C0352B9F5DC2EFFC85 88392 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateOnDemand.exe
2015-10-21 14:05:17 E337785DA1958E9AB02DDB2369EF46E8 307016 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleCrashHandler64.exe
2015-10-21 14:05:17 D9A15F83CB6E5901A63F24CD7D58DBAF 929872 ----a-w- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateSetup.exe
2015-10-21 14:05:17 BFDCC0375C492C524E78647CEED3F77D 130888 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateComRegisterShell64.exe
2015-10-21 14:05:17 A72BB48D9014A7D7C05F02F595F52D60 245576 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleCrashHandler.exe
2015-10-21 14:05:17 77352A5A0833B1CA3B771148DA535CB6 88392 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateWebPlugin.exe
2015-10-21 14:05:17 61A77DDEF5E8D85E8B0955C4E5127B39 88392 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdateBroker.exe
2015-10-21 14:05:17 053EEEE1ABAE53F044F1E386E22AE525 144200 ----atw- C:\Users\DELL\AppData\Local\Temp\{8908331C-0CB4-47BD-8638-5B021BB7F5D2}\GoogleUpdate.exe
2015-10-20 17:31:42 EDA5529ADEF17A958F1BFBBD28F205D5 6539752 ----a-w- C:\Users\DELL\Downloads\FileZilla_3.14.1_win64-setup.exe
2015-10-18 08:13:11 6BA44138A12512CEA696F6CECE82A5AB 634432 ----a-w- C:\Program Files (x86)\NCH Software\Pixillion\pixillionsetup_v2.93.exe
2015-10-18 08:13:00 AAB9B96A3821C013474663C529D93CF0 1712192 ----a-w- C:\Program Files (x86)\NCH Software\Pixillion\pixillion.exe
2015-10-18 08:12:45 6BA44138A12512CEA696F6CECE82A5AB 634432 ----a-w- C:\Users\DELL\AppData\Local\Temp\pixsetup.exe
2015-10-16 07:25:58 635DBF6CD989626ABEE812AF15948A8A 1369416 ----a-w- C:\Users\DELL\AppData\Local\Google\Chrome\User Data\SwReporter\4.32.1\software_reporter_tool.exe
2015-10-15 17:24:08 2378C5CC4237C2B561460C69580E8035 9064016 ----a-w- C:\Program Files (x86)\Google\Update\Install\{6B7760CD-EAE7-448B-810E-060531BC1956}\46.0.2490.71_45.0.2454.101_chrome_updater.exe
2015-10-15 17:24:07 2378C5CC4237C2B561460C69580E8035 9064016 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\46.0.2490.71\46.0.2490.71_45.0.2454.101_chrome_updater.exe
=== C: other files ==
2015-10-21 17:59:39 03B57A0B0FFA3745DFA5C74838750953 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2412325288-324325390-2824101589-1000\$ITJXKGU.com

==== Startup Registry Enabled ======================

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTU.EXE /EPT EPLTarget\P0000000000000000 /M Epson Stylus Office BX535WD"

[HKEY_USERS\S-1-5-21-2412325288-324325390-2824101589-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="C:\Users\DELL\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"ApplePhotoStreams"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"OfficeSyncProcess"="C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
"AppleIEDAV"="C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe"
"Simple Sticky Notes"="C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe"
"iCloudDrive"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe"
"GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE"
"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR"
"Spotify"="C:\Users\DELL\AppData\Roaming\Spotify\Spotify.exe -autostart -minimized"
"EPLTarget\P0000000000000003"="C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTU.EXE /EPT EPLTarget\P0000000000000003 /M Epson Stylus Office BX535WD /EF HKCU"
"GoogleChromeAutoLaunch_4061A3059D27C63A84FB99ECD0D22755"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTU.EXE /EPT EPLTarget\P0000000000000000 /M Epson Stylus Office BX535WD"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TrueImageMonitor.exe"="C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
"EEventManager"="C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
"APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
"BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices"
"Adobe Creative Cloud"="C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --showwindow=false --onOSstartup=true"
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"Servicetool"="C:\Program Files (x86)\KPN\Servicetool\KPNServicetool_Launcher.exe /auto"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="C:\Users\DELL\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"ApplePhotoStreams"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"OfficeSyncProcess"="C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
"AppleIEDAV"="C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe"
"Simple Sticky Notes"="C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe"
"iCloudDrive"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe"
"GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE"
"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR"
"Spotify"="C:\Users\DELL\AppData\Roaming\Spotify\Spotify.exe -autostart -minimized"
"EPLTarget\P0000000000000003"="C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTU.EXE /EPT EPLTarget\P0000000000000003 /M Epson Stylus Office BX535WD /EF HKCU"
"GoogleChromeAutoLaunch_4061A3059D27C63A84FB99ECD0D22755"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\Windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"
"Persistence"="C:\Windows\system32\igfxpers.exe"
"Acronis Scheduler2 Service"="C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
"MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe"

==== Startup Folders ======================

2015-08-06 09:20:18 1125 ----a-w- C:\Users\DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FastStone Capture.lnk
2014-11-26 08:16:57 1256 ----a-w- C:\Users\DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk
2013-01-10 21:05:31 2048 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [17-10-2015 16:39]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [13-10-2015 12:18]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [13-10-2015 12:18]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2412325288-324325390-2824101589-1000Core.job --a------ [undetermined Task]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2412325288-324325390-2824101589-1000UA.job --a------ [undetermined Task]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\Apple Diagnostics" [C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe]
"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2412325288-324325390-2824101589-1000Core" [C:\Users\DELL\AppData\Local\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2412325288-324325390-2824101589-1000UA" [C:\Users\DELL\AppData\Local\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\Opera scheduled Autoupdate 1441048020" [C:\Program Files (x86)\Opera\launcher.exe]
"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{E2B66428-3488-47AF-9D6A-866863E1C636}" [C:\Windows\system32\msfeedssync.exe]
"C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]
"C:\Windows\SysNative\tasks\NCH Software\PixillionSevenDays" [C:\Program Files (x86)\NCH Software\Pixillion\Pixillion.exe]
"C:\Windows\SysNative\tasks\NCH Swift Sound\soundtapShakeIcon" [C:\Program Files (x86)\NCH Swift Sound\SoundTap\SoundTap.exe]
"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions ======================

ProfilePath: C:\Users\DELL\AppData\Roaming\Mozilla\Firefox\Profiles\vvyzlx5u.default
- chineseperakungmailcom - %ProfilePath%\extensions\chineseperakun@gmail.com

ProfilePath: C:\Users\DELL\AppData\Roaming\Thunderbird\Profiles\yee9j9v7.default
- Undetermined - %ProfilePath%\extensions\staged-xpis
- Statusbar Date - %ProfilePath%\extensions\statusbardate@webspirited.com.xpi
- Instrument Test - %ProfilePath%\extensions\tbtestpilot@labs.mozilla.com.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

==== Chromium Look ======================

Google Chrome Version: 46.0.2490.71

Comodo Web Inspector - DELL\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn
Comodo Share Page Service - DELL\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mcmdgbiocnkpnaccjkailibfgepaccgf
Cricwaves - DELL\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ogkedgpbfenekaceibcobmmgdbokmndm
Google Docs - DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Docs Offline - DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi
Chrome Web Store Payments - DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://google.nl/"
"Search Page"="http://www.google.com"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
@="http://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://www.google.com/ie"
"SearchAssistant"="http://www.google.com/ie"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://google.nl/"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Search Provided by Bing Url="http://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-5eeaeb92&q={searchTerms}"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="https://www.google.com/search?q={searchTerms}"
{fcd9f10e-0daa-405f-bca0-0dd3f37c59d9} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\DELL\AppData\Local\Comodo\Dragon\User Data\Default\Web Data was reset successfully
C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\DELL\AppData\Roaming\Opera Software\Opera Stable\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\DELL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\DELL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GAV4AGO9 will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\DELL\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\DELL\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully
C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\DELL\AppData\Local\Temp will be emptied at reboot
C:\Users\Eye Candy 4000\AppData\Local\temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\DELL\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\DELL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GAV4AGO9" deleted

==== EOF on do 22-10-2015 at  9:19:09,31 ======================

Geplaatst:

Download AdwCleaner by Xplode naar het bureaublad (verwijder eerst eventuele aanwezige oudere versies van deze tool op je PC, zodat je nu de meest recente database van AdwCleaner kan gebruiken).

Als de link naar AdwCleaner niet werkt, probeer dan deze link.

De download start automatisch na enkele seconden.

  • Sluit alle openstaande vensters.
  • Dubbelklik op AdwCleaner om hem te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren,
  • Door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Klik op Scan (Engelse versie) of Scannen (Nederlandstalige versie)
  • Mocht u gevonden items willen behouden, verwijder deze dan nu uit het lijstje.
  • Klik vervolgens op Clean (Engelse versie) of Verwijderen (Nederlandstalige versie)
  • Klik bij popup-scherm "AdwCleaner Herstart" op OK


Nadat de PC opnieuw is opgestart, opent meestal onmiddellijk een logfile van AdwCleaner.
Anders is het logfile hier terug te vinden C:\AdwCleaner\AdwCleaner[s0].txt.

Logbestand plaatsen

  • Voeg het logbestand met de naam C:\AdwCleaner\AdwCleaner[s0].txt als bijlage toe aan het volgende bericht.
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.


Meer informatie vind je in de handleiding.

Gast
Dit topic is nu gesloten voor nieuwe reacties.

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.