Ga naar inhoud

Virus in laptop

denzel1990
 Delen

Aanbevolen berichten

denzel1990 Bijdrager

denzel1990

Geplaatst:
Geplaatst:

Mijn laptop heeft rare kuren de laatste tijd. MBAM en windows defender kunnen niks vinden, dus hopelijk kunnen jullie mij helpen.

 

Het RSIT logje:

 

 

Logfile of random's system information tool 1.10 (written by random/random)
Run by d at 2015-12-21 09:37:07
Microsoft Windows 8.1
System drive C: has 486 GB (69%) free of 701 GB
Total RAM: 6013 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:37:14, on 21-12-2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Dell Update\DellUpTray.exe
C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Users\d\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe
C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Dell Backup and Recovery\TOASTER.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfService.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\d.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dell13.msn.com/?pc=DCJB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [Redirector] "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [uTorrent] "C:\Users\d\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\d\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - Startup: Dropbox.lnk = C:\Users\d\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: Verzenden naar Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Verzenden naar Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU)
O9 - Extra 'Tools' menuitem: Verzenden naar Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: CxUtilSvc - Conexant Systems, Inc. - C:\Program Files\Conexant\SA3\CxUtilSvc.exe
O23 - Service: Dell Digital Delivery Service (DellDigitalDelivery) - Dell Products, LP. - c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
O23 - Service: Dell Update Service (DellUpdate) - Dell Inc. - C:\Program Files (x86)\Dell Update\DellUpService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel® Rapid Storage Technologie (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Motorola Device Manager Service (Motorola Device Manager) - Motorola Mobility LLC - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: postgresql-x64-9.0 - PostgreSQL Server 9.0 (postgresql-x64-9.0) - PostgreSQL Global Development Group - C:/Program Files/PostgreSQL/9.0/bin/pg_ctl.exe
O23 - Service: PST Service - Motorola - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Intel® Turbo Boost Technology Monitor 2.6 (TurboBoost) - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 15751 bytes

======Listing Processes======






wininit.exe
winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 475403165232
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Conexant\SA3\CxUtilSvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
dashost.exe {493b48a6-09e8-46b8-856daf77fb4f81d7}
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe"
"C:/Program Files/PostgreSQL/9.0/bin/pg_ctl.exe" runservice -N "postgresql-x64-9.0" -D "C:/Program Files/PostgreSQL/9.0/data" -w
"C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:/Program Files/PostgreSQL/9.0/bin/postgres.exe" -D "C:/Program Files/PostgreSQL/9.0/data"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"

"C:/Program Files/PostgreSQL/9.0/bin/postgres.exe" "--forklog" "4640" "4644"
"C:/Program Files/PostgreSQL/9.0/bin/postgres.exe" "--forkboot" "4520" "-x3"
"C:/Program Files/PostgreSQL/9.0/bin/postgres.exe" "--forkboot" "4516" "-x4"
"C:/Program Files/PostgreSQL/9.0/bin/postgres.exe" "--forkavlauncher" "4488"
"C:/Program Files/PostgreSQL/9.0/bin/postgres.exe" "--forkcol" "4480"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
atieclxx
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Dell Update\DellUpService.exe"
"C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\WINDOWS\Explorer.EXE
/x /hideintroballoon /launchedbywindowsservice
"C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe"
igfxEM.exe
igfxHK.exe
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
C:\Windows\System32\skydrive.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files\Conexant\SA3\SmartAudio3.exe" /sa3 /nv:3.0+ /dne /s
taskhostex.exe
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Elantech\ETDGesture.exe"
"C:\Users\d\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\WINDOWS\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe" -autoupdate -startplugins -disableshowcontrolpanel
"C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe"
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Dell Backup and Recovery\TOASTER.EXE" C:\Users\d
"C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
taskhost.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" /PRODUCT:Reader /VERSION:11.0 /MODE:3
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\WinStore\WSHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_6.3.9600.20278_x64__8wekyb3d8bbwe\Numbers.exe" -ServerName:App.AppXs41tg2tx0k37vmfvyzc3vf6ap3bj1ae6.mca
"C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfService.exe" -reconnectappsatstartup

"C:\Program Files\My Dell\uaclauncher.exe" -silentenumeration -st SystemToolsDailyTest --ignoresecondarysplash --runsilently
"C:\Program Files\Windows Defender\MSASCui.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe92_ Global\UsGthrCtrlFltPipeMssGthrPipe92 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 580 588 65536 584
"C:\Users\d\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe  
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1543731264-2182944065-3015055004-1001Core.job - C:\Users\d\AppData\Local\Dropbox\Update\DropboxUpdate.exe  /c
C:\WINDOWS\tasks\DropboxUpdateTaskUserS-1-5-21-1543731264-2182944065-3015055004-1001UA.job - C:\Users\d\AppData\Local\Dropbox\Update\DropboxUpdate.exe  /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\d\AppData\Roaming\Mozilla\Firefox\Profiles\ec9sa9mv.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.235 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Citrix.com/npican]
"Description"=Citrix ICA Client Plugin
"Path"=C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nexon.net/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonUS\NGM\npNxGameUS.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.235 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2013-07-10 205472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2013-07-13 2328776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01 139368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL [2013-07-13 1724616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-01-10 2774864]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-10-01 448912]
"QuickSet"=c:\Program Files\Dell\QuickSet\QuickSet.exe [2013-03-05 5762408]
"SmartAudio"=C:\Program Files\CONEXANT\SA3\SACpl.exe [2012-06-13 1647616]
"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2012-09-30 11582848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-05 1305408]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2015-11-04 22790776]
"uTorrent"=C:\Users\d\AppData\Roaming\uTorrent\uTorrent.exe [2015-12-03 2026520]
"Dropbox Update"=C:\Users\d\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16 134512]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-07-04 766688]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe [2012-11-30 56128]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-10-23 102928]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2015-09-13 518456]
"Redirector"=C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [2015-09-13 231736]

C:\Users\d\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\d\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2015-12-21 09:37:07 ----D---- C:\rsit
2015-12-21 09:37:07 ----D---- C:\Program Files\trend micro
2015-12-20 12:10:20 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-12-19 10:40:04 ----D---- C:\be926f25b7b4728bd5040484563326
2015-12-08 21:20:13 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2015-12-08 21:19:37 ----A---- C:\WINDOWS\system32\win32k.sys
2015-12-08 21:19:37 ----A---- C:\WINDOWS\system32\DWrite.dll
2015-12-08 21:19:36 ----A---- C:\WINDOWS\system32\user32.dll
2015-12-08 21:19:36 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2015-12-08 21:19:36 ----A---- C:\WINDOWS\system32\FntCache.dll
2015-12-08 21:19:35 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2015-12-08 21:19:35 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2015-12-08 21:19:35 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2015-12-08 21:19:31 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2015-12-08 21:19:04 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-08 21:19:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2015-12-08 21:18:59 ----A---- C:\WINDOWS\SYSWOW64\KBDAZE.DLL
2015-12-08 21:18:59 ----A---- C:\WINDOWS\system32\KBDAZST.DLL
2015-12-08 21:18:59 ----A---- C:\WINDOWS\system32\KBDAZE.DLL
2015-12-08 21:18:58 ----A---- C:\WINDOWS\SYSWOW64\kbdgeoqw.dll
2015-12-08 21:18:58 ----A---- C:\WINDOWS\SYSWOW64\KBDAZST.DLL
2015-12-08 21:18:58 ----A---- C:\WINDOWS\SYSWOW64\KBDAZEL.DLL
2015-12-08 21:18:58 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2015-12-08 21:18:58 ----A---- C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-08 21:18:58 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2015-12-08 21:18:57 ----A---- C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-08 21:18:51 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-12-08 21:18:48 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-12-08 21:18:30 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-12-08 21:18:27 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-12-08 21:18:24 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-12-08 21:18:23 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-12-08 21:18:21 ----A---- C:\WINDOWS\system32\wininet.dll
2015-12-08 21:18:20 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-12-08 21:18:20 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-12-08 21:18:20 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-12-08 21:18:20 ----A---- C:\WINDOWS\system32\ieui.dll
2015-12-08 21:18:19 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-12-08 21:18:19 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-12-08 21:18:18 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-12-08 21:18:17 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-12-08 21:18:17 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-12-08 21:18:17 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-12-08 21:18:17 ----A---- C:\WINDOWS\system32\jscript.dll
2015-12-08 21:18:16 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-12-08 21:18:16 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-12-08 21:18:15 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-12-08 21:18:15 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-12-08 21:18:14 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-12-08 21:18:14 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-12-08 21:18:14 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2015-12-08 21:18:13 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-12-08 21:18:13 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-12-08 21:18:12 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-12-08 21:18:12 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-12-08 21:18:12 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-12-08 21:18:12 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-12-08 21:18:11 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-12-08 21:18:11 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-12-08 21:18:11 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-12-08 21:18:11 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-12-08 21:18:10 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-12-08 21:18:10 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-12-08 21:17:05 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2015-12-08 21:17:05 ----A---- C:\WINDOWS\system32\msctf.dll
2015-12-08 21:17:02 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-12-08 21:17:01 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-12-08 21:17:01 ----A---- C:\WINDOWS\system32\winload.exe
2015-12-08 21:17:01 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-12-08 21:17:01 ----A---- C:\WINDOWS\system32\comsvcs.dll
2015-12-08 21:17:00 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2015-12-08 21:17:00 ----A---- C:\WINDOWS\system32\winresume.exe
2015-12-08 21:16:59 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2015-12-08 21:16:59 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2015-12-08 21:16:59 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2015-12-08 21:16:59 ----A---- C:\WINDOWS\system32\catsrvut.dll
2015-12-08 21:16:40 ----A---- C:\WINDOWS\system32\authui.dll
2015-12-08 21:16:39 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-12-08 21:16:37 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-12-08 21:16:37 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-12-08 21:16:37 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-12-08 21:16:37 ----A---- C:\WINDOWS\system32\wups2.dll
2015-12-08 21:16:37 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-12-08 21:16:37 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-12-08 21:16:37 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-12-08 21:16:37 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-12-08 21:16:36 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-12-08 21:16:36 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-12-08 21:16:36 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-12-08 21:16:36 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-12-08 21:16:36 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-12-08 21:16:31 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2015-12-08 21:16:31 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2015-12-08 21:16:29 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2015-12-08 21:16:29 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2015-12-08 21:16:29 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2015-12-08 21:16:29 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2015-12-08 21:16:28 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2015-12-08 21:16:28 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys
2015-12-08 21:16:28 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2015-12-08 21:16:27 ----A---- C:\WINDOWS\system32\winlogon.exe
2015-12-08 21:16:27 ----A---- C:\WINDOWS\system32\wininit.exe
2015-11-17 21:08:57 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2015-11-17 21:08:57 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2015-11-17 21:08:57 ----A---- C:\WINDOWS\system32\schannel.dll
2015-11-17 21:08:57 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2015-11-17 21:08:57 ----A---- C:\WINDOWS\system32\ncrypt.dll
2015-11-17 21:08:57 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-11-17 21:08:57 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2015-11-17 21:08:57 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2015-11-17 21:08:56 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2015-11-17 21:08:56 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2015-11-17 21:08:56 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2015-11-17 21:08:56 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2015-11-17 21:08:56 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2015-11-17 21:08:56 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2015-11-17 21:08:56 ----A---- C:\WINDOWS\system32\certcli.dll
2015-11-17 21:08:55 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2015-11-17 21:08:54 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2015-11-17 21:08:54 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-11-17 21:08:50 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2015-11-17 21:08:50 ----A---- C:\WINDOWS\system32\untfs.dll
2015-11-17 21:08:50 ----A---- C:\WINDOWS\system32\drivers\tunnel.sys
2015-11-17 21:08:49 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2015-11-17 21:08:49 ----A---- C:\WINDOWS\system32\puiobj.dll
2015-11-17 21:08:49 ----A---- C:\WINDOWS\system32\localspl.dll
2015-11-17 21:08:49 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2015-11-17 21:08:49 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2015-11-17 21:08:49 ----A---- C:\WINDOWS\system32\AuthHost.exe
2015-11-17 21:08:48 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-11-17 21:08:48 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-11-17 21:03:35 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2015-11-17 21:03:35 ----A---- C:\WINDOWS\system32\nshwfp.dll
2015-11-17 21:03:35 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2015-11-17 21:03:35 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2015-11-17 21:03:35 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2015-11-17 21:03:35 ----A---- C:\WINDOWS\system32\BFE.DLL
2015-11-17 21:03:34 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2015-11-17 21:03:22 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-10-25 17:13:03 ----D---- C:\Users\d\AppData\Roaming\ICAClient
2015-10-25 17:12:43 ----D---- C:\ProgramData\Citrix
2015-10-25 17:12:02 ----D---- C:\Program Files (x86)\Citrix
2015-10-25 00:53:05 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-10-25 00:53:04 ----A---- C:\WINDOWS\system32\msv1_0.dll
2015-10-25 00:53:02 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-10-25 00:53:02 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2015-10-25 00:53:02 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2015-10-25 00:52:49 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-10-25 00:52:48 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2015-10-25 00:52:48 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-10-25 00:52:43 ----A---- C:\WINDOWS\system32\msi.dll
2015-10-25 00:52:42 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2015-10-25 00:52:38 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2015-10-25 00:52:33 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-10-24 09:30:57 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-10-24 09:30:57 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-10-24 07:34:53 ----D---- C:\Program Files (x86)\Dell Update
2015-10-24 07:34:16 ----D---- C:\Program Files (x86)\Dell Customer Connect
2015-10-24 07:22:20 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2015-10-24 07:22:20 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2015-10-24 07:22:20 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-10-24 07:22:18 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-10-24 07:22:17 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2015-10-24 07:22:17 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2015-10-24 07:22:17 ----A---- C:\WINDOWS\system32\d2d1.dll
2015-10-24 07:22:16 ----A---- C:\WINDOWS\system32\shell32.dll
2015-10-24 07:22:15 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-10-24 07:22:13 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2015-10-24 07:22:13 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2015-10-24 07:22:13 ----A---- C:\WINDOWS\system32\msxml6.dll
2015-10-24 07:22:13 ----A---- C:\WINDOWS\system32\msxml3.dll
2015-10-24 07:22:12 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2015-10-24 07:22:12 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2015-10-24 07:22:12 ----A---- C:\WINDOWS\system32\WebClnt.dll
2015-10-24 07:22:12 ----A---- C:\WINDOWS\system32\davclnt.dll
2015-10-24 07:22:10 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2015-10-24 07:22:10 ----A---- C:\WINDOWS\system32\netcfgx.dll
2015-10-24 07:22:10 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-10-24 07:22:10 ----A---- C:\WINDOWS\system32\csrsrv.dll
2015-10-24 07:22:10 ----A---- C:\WINDOWS\system32\basesrv.dll
2015-10-24 07:22:09 ----A---- C:\WINDOWS\system32\mstscax.dll
2015-10-24 07:22:08 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2015-10-24 07:22:08 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2015-10-24 07:22:08 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2015-10-24 07:22:08 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2015-10-24 07:22:08 ----A---- C:\WINDOWS\system32\NcdAutoSetup.dll
2015-10-24 07:22:07 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2015-10-24 07:22:07 ----A---- C:\WINDOWS\SYSWOW64\schtasks.exe
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\taskeng.exe
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\schtasks.exe
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\schedsvc.dll
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\drivers\sermouse.sys
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2015-10-24 07:22:07 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2015-10-24 07:22:03 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2015-10-24 07:22:02 ----A---- C:\WINDOWS\system32\sysmain.dll
2015-10-24 07:22:01 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-24 07:22:01 ----A---- C:\WINDOWS\system32\invagent.dll
2015-10-24 07:22:01 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-10-24 07:22:01 ----A---- C:\WINDOWS\system32\devinv.dll
2015-10-24 07:22:01 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2015-10-24 07:22:01 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-10-24 07:22:01 ----A---- C:\WINDOWS\system32\aeinv.dll
2015-10-24 07:22:01 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-24 07:22:00 ----A---- C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-24 07:21:59 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2015-10-24 07:21:59 ----A---- C:\WINDOWS\system32\notepad.exe
2015-10-24 07:21:59 ----A---- C:\WINDOWS\system32\fhcpl.dll
2015-10-24 07:21:59 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2015-10-24 07:21:59 ----A---- C:\WINDOWS\notepad.exe
2015-10-24 07:21:58 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2015-10-24 07:21:58 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2015-10-24 07:21:58 ----A---- C:\WINDOWS\system32\KernelBase.dll
2015-10-24 07:21:58 ----A---- C:\WINDOWS\system32\advapi32.dll
2015-10-24 07:21:53 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2015-10-24 07:21:53 ----A---- C:\WINDOWS\system32\wups.dll
2015-10-24 07:21:53 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2015-10-24 07:21:46 ----A---- C:\WINDOWS\SYSWOW64\InkEd.dll
2015-10-24 07:21:46 ----A---- C:\WINDOWS\system32\InkEd.dll
2015-10-24 07:21:45 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2015-10-24 07:21:44 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2015-10-24 07:21:44 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2015-10-24 07:21:43 ----A---- C:\WINDOWS\system32\WSShared.dll
2015-10-24 07:21:42 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2015-10-24 07:21:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-24 07:21:42 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-24 07:21:39 ----A---- C:\WINDOWS\system32\apphelp.dll
2015-10-24 07:21:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2015-10-24 07:21:38 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2015-10-24 07:21:38 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2015-10-24 07:21:38 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-10-24 07:21:38 ----A---- C:\WINDOWS\system32\shacct.dll
2015-10-24 07:21:38 ----A---- C:\WINDOWS\system32\SettingSync.dll
2015-10-24 07:21:37 ----A---- C:\WINDOWS\system32\consent.exe
2015-10-24 07:21:36 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-10-24 07:21:36 ----A---- C:\WINDOWS\system32\profsvc.dll
2015-10-24 07:21:36 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-10-24 07:21:35 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2015-10-24 07:21:35 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-24 07:21:35 ----A---- C:\WINDOWS\system32\UtcResources.dll
2015-10-24 07:21:35 ----A---- C:\WINDOWS\system32\tdh.dll
2015-10-24 07:21:35 ----A---- C:\WINDOWS\system32\diagtrack.dll
2015-10-24 07:21:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2015-10-24 07:21:30 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2015-10-24 07:21:29 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2015-10-24 07:21:29 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2015-10-24 07:21:09 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2015-10-24 07:21:09 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2015-10-24 07:21:08 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2015-10-24 07:21:07 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2015-10-24 07:21:02 ----A---- C:\WINDOWS\system32\tzsync.exe
2015-10-24 07:20:59 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2015-10-24 07:20:59 ----A---- C:\WINDOWS\system32\fveapi.dll
2015-10-24 07:20:59 ----A---- C:\WINDOWS\system32\bdesvc.dll
2015-10-24 07:20:59 ----A---- C:\WINDOWS\system32\appidsvc.dll
2015-10-24 07:20:59 ----A---- C:\WINDOWS\system32\appidapi.dll
2015-10-24 07:20:50 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-10-24 07:20:50 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-10-24 07:20:50 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-10-24 07:20:50 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-10-24 07:19:25 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-10-24 07:19:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll

======List of files/folders modified in the last 3 months======

2015-12-21 09:37:07 ----RD---- C:\Program Files
2015-12-21 09:36:46 ----D---- C:\WINDOWS\Prefetch
2015-12-21 09:32:31 ----D---- C:\Users\d\AppData\Roaming\uTorrent
2015-12-21 09:32:09 ----RD---- C:\WINDOWS\System32
2015-12-21 09:32:08 ----D---- C:\WINDOWS\Inf
2015-12-21 09:32:03 ----D---- C:\WINDOWS\SoftwareDistribution
2015-12-21 09:32:03 ----D---- C:\WINDOWS\debug
2015-12-21 09:32:03 ----D---- C:\Windows
2015-12-21 09:32:01 ----D---- C:\WINDOWS\Temp
2015-12-21 09:00:00 ----D---- C:\WINDOWS\system32\sru
2015-12-21 08:51:00 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-21 08:50:55 ----RD---- C:\Program Files (x86)
2015-12-19 12:25:48 ----D---- C:\WINDOWS\system32\config
2015-12-19 12:13:19 ----SHD---- C:\System Volume Information
2015-12-19 11:59:26 ----D---- C:\WINDOWS\Microsoft.NET
2015-12-19 11:53:18 ----RD---- C:\WINDOWS\assembly
2015-12-19 11:50:49 ----D---- C:\WINDOWS\WinSxS
2015-12-19 11:49:47 ----D---- C:\WINDOWS\SysWOW64
2015-12-19 10:53:43 ----D---- C:\Program Files (x86)\Dell Backup and Recovery
2015-12-19 10:52:09 ----D---- C:\WINDOWS\CbsTemp
2015-12-19 10:50:23 ----D---- C:\Users\d\AppData\Roaming\Dropbox
2015-12-19 10:48:42 ----D---- C:\Temp
2015-12-19 10:45:19 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-12-19 10:39:40 ----D---- C:\WINDOWS\system32\DriverStore
2015-12-19 10:39:39 ----D---- C:\WINDOWS\system32\drivers
2015-12-19 10:31:44 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2015-12-19 10:31:44 ----D---- C:\WINDOWS\system32\nl-NL
2015-12-19 10:31:43 ----D---- C:\Program Files\Internet Explorer
2015-12-19 10:31:43 ----D---- C:\Program Files (x86)\Internet Explorer
2015-12-19 10:31:42 ----RSD---- C:\WINDOWS\Fonts
2015-12-11 18:57:33 ----D---- C:\Users\d\AppData\Roaming\vlc
2015-12-10 21:26:24 ----D---- C:\WINDOWS\system32\MRT
2015-12-10 21:20:17 ----A---- C:\WINDOWS\system32\MRT.exe
2015-12-09 04:39:31 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-12-08 21:14:04 ----D---- C:\WINDOWS\system32\catroot2
2015-12-04 05:44:02 ----SHD---- C:\WINDOWS\Installer
2015-12-04 05:39:36 ----D---- C:\WINDOWS\Tasks
2015-12-01 18:19:27 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-11-28 19:49:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-18 21:54:02 ----D---- C:\WINDOWS\rescache
2015-11-18 21:06:12 ----RD---- C:\WINDOWS\ToastData
2015-11-18 21:06:07 ----D---- C:\WINDOWS\apppatch
2015-11-18 21:05:57 ----D---- C:\Program Files\Windows Defender
2015-11-18 21:05:56 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-11-18 21:05:56 ----SD---- C:\WINDOWS\system32\GWX
2015-11-18 21:05:56 ----D---- C:\WINDOWS\WinStore
2015-11-18 21:05:56 ----D---- C:\Program Files (x86)\Windows Defender
2015-11-18 21:05:55 ----SD---- C:\WINDOWS\system32\CompatTel
2015-11-18 21:05:54 ----D---- C:\WINDOWS\system32\wbem
2015-11-18 21:05:54 ----D---- C:\WINDOWS\system32\appraiser
2015-11-18 21:05:51 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-11-18 21:05:48 ----D---- C:\WINDOWS\system32\drivers\nl-NL
2015-11-18 21:05:47 ----D---- C:\Program Files\Windows Journal
2015-11-18 21:05:46 ----D---- C:\WINDOWS\system32\Boot
2015-11-18 21:05:41 ----D---- C:\WINDOWS\PolicyDefinitions
2015-10-25 17:12:43 ----HD---- C:\ProgramData
2015-10-25 17:12:03 ----D---- C:\Program Files (x86)\Common Files
2015-10-24 16:06:26 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem112.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2014-07-21 36096]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-12-04 652344]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2012-06-25 92536]
R1 ctxusbm;Citrix USB Monitor Driver; C:\WINDOWS\system32\DRIVERS\ctxusbm.sys [2015-07-01 144464]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 TurboB;Turbo Boost UI Monitor driver; C:\WINDOWS\system32\DRIVERS\TurboB.sys [2012-05-30 16168]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2014-07-21 626688]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 btmhsf;btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [2012-10-01 1337216]
R3 CnxtHdAudService;@oem2.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2012-08-07 1607328]
R3 dtsoftbus01;@oem37.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2015-01-02 254528]
R3 ETD;@oem30.inf,%PS2.DeviceDesc%;Dell Touchpad; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-01-10 211280]
R3 iBtFltCoex;iBtFltCoex; C:\WINDOWS\system32\DRIVERS\iBtFltCoex.sys [2012-08-06 68136]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-10-01 3828152]
R3 IntcDAud;@oem11.inf,%IntcDAud.SvcDesc%;Intel® Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem18.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-08-01 27032]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2015-10-05 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2015-12-21 192216]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2015-10-05 64216]
R3 MEIx64;@oem79.inf,%HECI_SvcDesc%;Intel® Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 NETwNe64;@oem21.inf,%NIC_Service_DispName_WIN8_64%;Intel® Wireless WiFi Link 5000 Series adapter stuurprogramma onder Windows 8 64 Bit; C:\WINDOWS\system32\DRIVERS\Netwew00.sys [2013-10-08 3345376]
R3 RSUSBVSTOR;@oem7.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2012-06-15 315536]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT-stuurprogramma; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 usb3Hub;@oem19.inf,%usb3Hub.SVCDESC%;USB-IF USB 3.0 Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [2012-10-09 47072]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtuele adapter; C:\WINDOWS\System32\drivers\AMPPAL.sys [2013-04-11 165344]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-09-24 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 EagleX64;EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys []
S3 intaud_WaveExtensible;@oem17.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-08-01 38296]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;USB RNDIS-adapter; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-08-22 20992]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-05-01 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2014-07-21 239616]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-09-30 1112000]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2012-09-30 1132480]
R2 CxUtilSvc;CxUtilSvc; C:\Program Files\Conexant\SA3\CxUtilSvc.exe [2012-08-07 109184]
R2 DellUpdate;Dell Update Service; C:\Program Files (x86)\Dell Update\DellUpService.exe [2015-08-27 237272]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2013-08-28 626416]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technologie; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-11-19 14904]
R2 igfxCUIService1.0.0.0;Intel® HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-10-01 319376]
R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
R2 Motorola Device Manager;Motorola Device Manager Service; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2014-04-08 137528]
R2 postgresql-x64-9.0;postgresql-x64-9.0 - PostgreSQL Server 9.0; C:/Program Files/PostgreSQL/9.0/bin/pg_ctl.exe runservice -N postgresql-x64-9.0 -D C:/Program Files/PostgreSQL/9.0/data -w []
R2 PST Service;PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [2011-09-02 65657]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2013-08-28 149744]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-04-25 254512]
R2 SftService;SoftThinks Agent Service; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [2013-05-23 1915480]
R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-07-18 364416]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S2 DellDigitalDelivery;Dell Digital Delivery Service; c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [2013-06-25 196104]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-24 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09 269504]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel® Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-10-01 281488]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-24 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-12-20 147624]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2013-08-28 273136]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-10-01 178824]
S3 TurboBoost;Intel® Turbo Boost Technology Monitor 2.6; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2012-05-30 149544]

-----------------EOF-----------------
 

  • Reacties 38
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Populaire dagen

Beste reacties in dit topic

Populaire dagen

Geplaatste afbeeldingen

kape Grootmeester

kape

Geplaatst:
Geplaatst:

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.pngZoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
 C:\be926f25b7b4728bd5040484563326
torpigcheck;
emptyfolderscheck;delete
startupall;
filesrcm;
  • Klik op de knop "More options" en vink nu de onderstaande opties aan.
  • Do a Deep Scan
  • Auto Clean
  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.
Zoek.exe logbestand plaatsen
  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Download AdwCleaner by Xplode naar het bureaublad (verwijder eerst eventuele aanwezige oudere versies van deze tool op je PC, zodat je nu de meest recente database van AdwCleaner kan gebruiken).

Als de link naar AdwCleaner niet werkt, probeer dan deze link.

De download start automatisch na enkele seconden.

  • Sluit alle openstaande vensters.
  • Dubbelklik op AdwCleaner om hem te starten.
  • Gebruikers van Windows Vista en later dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Klik op Scan (Engelse versie) of Scannen (Nederlandstalige versie)
  • Mocht u gevonden items willen behouden, verwijder deze dan nu uit het lijstje.
  • Klik vervolgens op Clean (Engelse versie) of Verwijderen (Nederlandstalige versie)
  • Klik bij popup-scherm "AdwCleaner Herstart" op OK


Nadat de PC opnieuw is opgestart, opent meestal onmiddellijk een logfile van AdwCleaner.
Anders is het logfile hier terug te vinden C:\AdwCleaner\AdwCleaner[C0].txt.

Logbestand plaatsen

  • Voeg het logbestand met de naam C:\AdwCleaner\AdwCleaner[C0].txt als bijlage toe aan het volgende bericht.
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.


Meer informatie vind je in de handleiding.

Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.