Opkuis

ricardo425 · 9 mei 2016

Hallo,

Ik heb problemen met de opstart van deze laptop.

Graag had ik hulp gekregen om samen met jullie deze laptop in orde te krijgen.

Heb al van alles wat geprobeerd maar er komt weinig verandering.

Deze is een laptop van DELL en ik werk met Windows 10.

Ook gebruik ik steeds Firefox, en steeds word er gevraagd om deze als standaard te gebruiken wat niet gebeurd met mijn vaste pc.

Dank bij voorbaat en ik volg jullie raad op.

Groeten

kape · 9 mei 2016

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

RSIT 32 bit (RSIT.exe)
RSIT 64 bit (RSITx64.exe)

Dubbelklik op RSIT.exe om de tool te starten.

Gebruikers van Windows Vista en later dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
Wanneer de tool gereed is worden er twee kladblok bestanden geopend genaamd "Log.txt" en "Info.txt" .

RSIT Logbestanden plaatsen

Voeg het logbestand met de naam "Log.txt" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden in de map ""C:\rsit")
Het logbestand met de naam "Info.txt" wat geminimaliseerd is hoeft u niet te plaatsen. (Dit logbestand wordt enkel de eerst keer bij het uitvoeren aangemaakt).
Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Bekijk ook de

.

ricardo425 · 9 mei 2016

Bedankt voor de vlugge reactie.

Hopelijk de goede bijlage.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Cecile at 2016-05-09 21:29:25
Microsoft Windows 10 Home
System drive C: has 310 GB (67%) free of 465 GB
Total RAM: 3977 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:29:30, on 9/05/2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.16603)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
C:\Users\Cecile\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_213.exe
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_213.exe
C:\Program Files\trend micro\Cecile.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1427743649&from=sien&uid=WDCXWD5000LPVX-75V0TT0_WX71A14L9878A14L9878
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1432911602&z=7464be4cd0d6e9d8ae34f82g6zdc5obtageg3qce1w&from=wpm052932&uid=WDCXWD5000LPVX-75V0TT0_WX71A14L9878A14L9878&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/search?q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1432911602&z=7464be4cd0d6e9d8ae34f82g6zdc5obtageg3qce1w&from=wpm052932&uid=WDCXWD5000LPVX-75V0TT0_WX71A14L9878A14L9878&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.bing.com/search?q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/search?q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.2.9.726\AVG Web TuneUp.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O4 - HKLM\..\Run: [iMSS] "C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Cecile\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Cecile\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Cecile\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
O23 - Service: @oem190.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dell Data Vault (DellDataVault) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVault.exe
O23 - Service: Dell Data Vault Wizard (DellDataVaultWiz) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel® Integrated Clock Controller Service - Intel® ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® Capability Licensing Service TCP IP Interface - Intel® Corporation - c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: YAC Service (iSafeService) - Elex do Brasil Participações Ltda - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - CyberLink - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Dell SupportAssist Agent (SupportAssistAgent) - Dell Inc. - C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater40.2.9 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.9\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 13384 bytes

======Listing Processes======

c:\PROGRA~2\AVG\Av\avgrsa.exe /boot
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-0c11-03248d4a1753 /binaryPath="C:\Program Files (x86)\AVG\Av\\" /logPath=C:\WINDOWS\system32\config\systemprofile\AppData\Local\Avg\log\av16 /logCfgPath=C:\ProgramData\Avg\log\av16

winlogon.exe

C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch
c:\windows\system32\svchost.exe -k rpcss
"dwm.exe"
c:\windows\system32\svchost.exe -k localservice
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted
"C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe"
dashost.exe {6bc798e0-5e08-4584-b5441d00e63daa1b}
c:\windows\system32\svchost.exe -k localservicenetworkrestricted
"C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe"
c:\windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe"
C:\WINDOWS\system32\igfxCUIService.exe
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
c:\windows\system32\svchost.exe -k networkservice
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k localservicenonetwork
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
"C:\Program Files (x86)\AVG\Av\avgwdsvca.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\system32\BtwRSupportService.exe

"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
c:\windows\system32\svchost.exe -k utcsvc
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
c:\windows\system32\svchost.exe -k appmodel
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.9\ToolbarUpdater.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.9\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\AVG\Av\avgnsa.exe"
"C:\Program Files (x86)\AVG\Av\avgemca.exe"
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted
C:\WINDOWS\System32\alg.exe
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Users\Cecile\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
/TRAYONLY
/fmw.trayonly
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"fontdrvhost.exe"
"C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
ctfmon.exe
"C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe"
c:\windows\system32\svchost.exe -k unistacksvcgroup

"C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe"
"C:\Program Files\Dell\DellDataVault\DellDataVault.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.19761.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
C:\WINDOWS\system32\WLANExt.exe 46148679104
\??\C:\WINDOWS\system32\conhost.exe 0x4

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "http://www.pc-helpforum.be/"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel="3952.0.1570064802\458150193" "C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3952 "\\.\pipe\gecko-crash-server-pipe.3952" plugin
"C:\WINDOWS\SYSTEM32\Macromed\Flash\FlashPlayerPlugin_21_0_0_213.exe" --proxy-stub-channel=Flash9028.5F680EA8.32480 --host-broker-channel=Flash9028.5F680EA8.15265 --host-pid=9028 --host-npapi-version=28 --plugin-path="C:\WINDOWS\SYSTEM32\Macromed\Flash\NPSWF32_21_0_0_213.dll"
"C:\WINDOWS\SYSTEM32\Macromed\Flash\FlashPlayerPlugin_21_0_0_213.exe" --channel=7660.0103F66C.1363968916 --proxy-stub-channel=Flash9028.5F680EA8.32480 --plugin-path="C:\WINDOWS\SYSTEM32\Macromed\Flash\NPSWF32_21_0_0_213.dll" --host-npapi-version=28 --type=renderer
C:\WINDOWS\system32\wbem\WmiApSrv.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe11_ Global\UsGthrCtrlFltPipeMssGthrPipe11 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 616 620 628 8192 624
"C:\Program Files (x86)\AVG\Av\avgmfapx.exe" /AppMode=UPDATE /pri=2 /sched=2 /source=inet /path="" /caller=SCHEDULER
c:\windows\system32\svchost.exe -k wersvcgroup
"C:\Users\Cecile\Downloads\RSITx64.exe"
C:\WINDOWS\system32\msiexec.exe /V
C:\Windows\System32\MsiExec.exe -Embedding B5A043669D2FE7BFFAD0784F6F11B48D E Global\MSI0000

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\SpeedUpMyPC Maintenance.job - C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe -m
C:\WINDOWS\tasks\SpeedUpMyPC Startup.job - C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Cecile\AppData\Roaming\Mozilla\Firefox\Profiles\9we6mpt6.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.nicesearches.com?type=hp&ts=1462764438&from=87640509&uid=wdcxwd5000lpvx-75v0tt0_wx71a14l9878a14l9878&z=d9b716da76410687feeb918g5z4q5oamdq2z6z1w0q"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.213 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.9\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.213 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll

C:\Users\Cecile\AppData\Roaming\Mozilla\Firefox\Profiles\9we6mpt6.default\extensions\
1427743657_xpi
arthurj8283@gmail.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-03-17 228552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.2.9.726\AVG Web TuneUp.dll [2016-04-26 2476104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-03-15 2348848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-09-19 357376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-08 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files (x86)\AVG Web TuneUp\4.2.9.726\AVG Web TuneUp.dll [2016-04-26 2439240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-08 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-09-23 323752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{ae07101b-46d4-4a98-af68-0333ea26e113}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{ae07101b-46d4-4a98-af68-0333ea26e113}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-06-24 8492800]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-06-24 1402624]
"RtHDVBg_PushButton"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-06-24 1402624]
"IAStorIcon"=C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-11-22 2796272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Cecile\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-04-26 554176]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50599552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Cecile\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-07-10 232448]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [2013-09-04 134616]
"AVG_UI"=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-04-20 32528]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-04-14 186640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe]
"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2016-05-09 21:28:50 ----D---- C:\Program Files\trend micro
2016-05-09 21:28:49 ----D---- C:\rsit
2016-05-09 17:25:40 ----D---- C:\WINDOWS\Minidump
2016-05-08 08:35:15 ----D---- C:\Program Files\CCleaner
2016-04-14 19:42:34 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-04-14 19:42:32 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-04-14 19:42:30 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-04-14 19:42:28 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-04-14 19:42:22 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-04-14 19:42:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-04-14 19:42:18 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-04-14 19:42:15 ----A---- C:\WINDOWS\system32\WSService.dll
2016-04-14 19:42:14 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-04-14 19:42:13 ----A---- C:\WINDOWS\system32\win32spl.dll
2016-04-14 19:42:12 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-04-14 19:42:11 ----A---- C:\WINDOWS\system32\wmp.dll
2016-04-14 19:42:09 ----A---- C:\WINDOWS\system32\WMASF.DLL
2016-04-14 19:42:08 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-04-14 19:42:07 ----A---- C:\WINDOWS\system32\shell32.dll
2016-04-14 19:42:02 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-04-14 19:42:00 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-04-14 19:41:52 ----A---- C:\WINDOWS\SYSWOW64\WMASF.DLL
2016-04-14 19:41:50 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-04-14 19:41:45 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-04-14 19:41:44 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-04-14 19:41:44 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-04-14 19:41:43 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-04-14 19:41:42 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-04-14 19:41:38 ----A---- C:\WINDOWS\system32\ole32.dll
2016-04-14 19:41:37 ----A---- C:\WINDOWS\system32\drivers\http.sys
2016-04-14 19:41:34 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-04-14 19:41:32 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-04-14 19:41:26 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2016-04-14 19:41:26 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-04-14 19:41:26 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-04-14 19:41:25 ----A---- C:\WINDOWS\system32\samsrv.dll
2016-04-14 19:41:25 ----A---- C:\WINDOWS\system32\samlib.dll
2016-04-14 19:41:24 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2016-04-14 19:41:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-04-14 19:41:22 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2016-04-14 19:41:22 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-14 19:41:21 ----A---- C:\WINDOWS\system32\msi.dll
2016-04-14 19:41:20 ----A---- C:\WINDOWS\system32\scapi.dll
2016-04-14 19:41:19 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-04-14 19:41:18 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-04-14 19:41:18 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-04-14 19:41:18 ----A---- C:\WINDOWS\system32\werui.dll
2016-04-14 19:41:17 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-04-14 19:41:16 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-04-14 19:41:16 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-04-14 19:41:16 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-04-14 19:41:16 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-04-14 19:41:15 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-04-14 19:41:14 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2016-04-14 19:41:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-04-14 19:41:07 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-04-14 19:41:06 ----A---- C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2016-04-14 19:41:05 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2016-04-14 19:41:05 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-04-14 19:41:02 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-04-14 19:41:01 ----A---- C:\WINDOWS\system32\msxml3.dll
2016-04-14 19:40:59 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-04-14 19:40:58 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-04-14 19:40:58 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-04-14 19:40:57 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-04-14 19:40:56 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-04-14 19:40:55 ----A---- C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-04-14 19:40:55 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-04-14 19:40:54 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-04-14 19:40:53 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2016-04-14 19:40:52 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-04-14 19:40:52 ----A---- C:\WINDOWS\system32\cemapi.dll
2016-04-14 19:40:49 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-04-14 19:40:49 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-04-14 19:40:48 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-04-14 19:40:45 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-04-14 19:40:45 ----A---- C:\WINDOWS\system32\basesrv.dll
2016-04-14 19:40:45 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-04-14 19:40:44 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-04-14 19:40:42 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-04-14 19:40:42 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-04-14 19:40:41 ----A---- C:\WINDOWS\system32\winload.exe
2016-04-14 19:40:40 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-04-14 19:40:40 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-04-14 19:40:40 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-04-14 19:40:40 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-04-14 19:40:38 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-04-14 19:40:37 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-04-14 19:40:35 ----A---- C:\WINDOWS\system32\RDXService.dll
2016-04-14 19:40:34 ----A---- C:\WINDOWS\system32\SharedStartModelShim.dll
2016-04-14 19:40:34 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-04-14 19:40:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-04-14 19:40:33 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-04-14 19:40:33 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-04-14 19:40:33 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-04-14 19:40:32 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-04-14 19:40:32 ----A---- C:\WINDOWS\system32\winresume.exe
2016-04-14 19:40:29 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-04-14 19:40:27 ----A---- C:\WINDOWS\system32\browser.dll
2016-04-14 19:40:27 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-04-14 19:40:26 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-04-14 19:40:26 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-04-14 19:40:25 ----A---- C:\WINDOWS\system32\FontProvider.dll
2016-04-14 19:40:24 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-04-14 19:40:24 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-04-14 19:40:23 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2016-04-14 19:40:22 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-04-14 19:40:22 ----A---- C:\WINDOWS\system32\usocore.dll
2016-04-14 19:40:21 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-04-14 19:40:21 ----A---- C:\WINDOWS\SYSWOW64\browcli.dll
2016-04-14 19:40:21 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-04-14 19:40:21 ----A---- C:\WINDOWS\system32\mfds.dll
2016-04-14 19:40:20 ----A---- C:\WINDOWS\SYSWOW64\netapi32.dll
2016-04-14 19:40:20 ----A---- C:\WINDOWS\system32\wkscli.dll
2016-04-14 19:40:20 ----A---- C:\WINDOWS\system32\srvcli.dll
2016-04-14 19:40:20 ----A---- C:\WINDOWS\system32\netapi32.dll
2016-04-14 19:40:20 ----A---- C:\WINDOWS\system32\browcli.dll
2016-04-14 19:40:19 ----A---- C:\WINDOWS\SYSWOW64\wkscli.dll
2016-04-14 19:40:19 ----A---- C:\WINDOWS\SYSWOW64\srvcli.dll
2016-04-14 19:40:18 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-04-14 19:40:18 ----A---- C:\WINDOWS\system32\wer.dll
2016-04-14 19:40:17 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-04-14 19:40:17 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-04-14 19:40:16 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-04-14 19:40:16 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-04-14 19:40:16 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-04-14 19:40:16 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-04-14 19:40:15 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-04-14 19:40:15 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-04-14 19:40:15 ----A---- C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-04-14 19:40:14 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2016-04-14 19:40:12 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-04-14 19:40:12 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-04-14 19:40:12 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-04-14 19:40:08 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-04-14 19:40:08 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-04-14 19:40:08 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-04-14 19:40:07 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-04-14 19:40:07 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2016-04-14 19:40:07 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-04-14 19:40:06 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-04-14 19:40:06 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-04-14 19:40:06 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-04-14 19:40:05 ----A---- C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-04-14 19:40:05 ----A---- C:\WINDOWS\system32\ieproxy.dll
2016-04-14 19:40:04 ----A---- C:\WINDOWS\SYSWOW64\NetSetupApi.dll
2016-04-14 19:40:04 ----A---- C:\WINDOWS\system32\MusNotification.exe
2016-04-14 19:40:03 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-04-14 19:40:03 ----A---- C:\WINDOWS\system32\vaultcli.dll
2016-04-14 19:40:03 ----A---- C:\WINDOWS\system32\shutdownux.dll
2016-04-14 19:40:03 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-04-14 19:40:03 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-04-14 19:40:02 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-04-14 19:40:01 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-04-14 19:40:01 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-04-14 19:39:59 ----A---- C:\WINDOWS\system32\wups2.dll
2016-04-14 19:39:58 ----A---- C:\WINDOWS\SYSWOW64\NetCfgNotifyObjectHost.exe
2016-04-14 19:39:58 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-04-14 19:39:57 ----A---- C:\WINDOWS\SYSWOW64\vaultcli.dll
2016-04-14 19:39:57 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2016-04-14 19:39:57 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-04-14 19:39:57 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2016-04-14 19:39:56 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-04-14 19:39:55 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-04-14 19:39:55 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2016-04-14 19:39:55 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-04-14 19:39:54 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-04-14 19:39:54 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-04-14 19:39:54 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-04-14 19:39:53 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-04-14 19:39:53 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2016-04-14 19:39:45 ----A---- C:\WINDOWS\SYSWOW64\fwbase.dll
2016-04-14 19:39:44 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-04-14 19:39:43 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-04-14 19:39:43 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2016-04-14 19:39:42 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-04-14 19:39:42 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-04-14 19:39:41 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-04-14 19:39:40 ----A---- C:\WINDOWS\system32\browserbroker.dll
2016-04-14 19:39:39 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-04-14 19:39:36 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2016-04-14 19:39:36 ----A---- C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-04-14 19:39:35 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2016-04-14 19:39:35 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-04-14 19:39:32 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-04-14 19:39:30 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-04-14 19:39:30 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-04-14 19:39:30 ----A---- C:\WINDOWS\system32\dssvc.dll
2016-04-14 19:39:28 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2016-04-14 19:39:28 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-04-14 19:39:28 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2016-04-14 19:39:28 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-04-14 19:39:26 ----A---- C:\WINDOWS\SYSWOW64\PimIndexMaintenanceClient.dll
2016-04-14 19:39:26 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2016-04-14 19:39:20 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-04-14 19:39:20 ----A---- C:\WINDOWS\system32\fwbase.dll
2016-04-14 19:39:19 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-04-14 19:39:19 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-04-14 19:39:19 ----A---- C:\WINDOWS\system32\profsvc.dll
2016-04-14 19:39:19 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-04-14 19:39:18 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-04-14 19:39:18 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-04-14 19:01:13 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
2016-03-29 16:39:50 ----A---- C:\WINDOWS\system32\drivers\avgmfx64.sys
2016-03-12 15:05:54 ----D---- C:\Users\Cecile\AppData\Roaming\Audacity
2016-03-12 15:05:12 ----D---- C:\Program Files (x86)\Audacity
2016-03-12 14:52:08 ----A---- C:\WINDOWS\SYSWOW64\CMUSBDACASIO.dll
2016-03-12 14:52:08 ----A---- C:\WINDOWS\system32\drivers\CMUSBDAC.sys
2016-03-12 14:52:08 ----A---- C:\WINDOWS\system32\CMUSBDACASIO64.dll
2016-02-16 16:07:34 ----A---- C:\WINDOWS\system32\drivers\avgdiska.sys
2016-02-16 16:05:56 ----A---- C:\WINDOWS\system32\drivers\avgloga.sys
2016-02-13 16:36:37 ----HD---- C:\$WINDOWS.~BT
2016-02-12 20:23:59 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-02-12 20:23:59 ----A---- C:\WINDOWS\system32\combase.dll
2016-02-12 20:23:54 ----A---- C:\WINDOWS\system32\twinui.dll
2016-02-12 20:23:54 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-02-12 20:23:53 ----A---- C:\WINDOWS\system32\hlink.dll
2016-02-12 20:23:52 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-02-12 20:23:51 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-02-12 20:23:50 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2016-02-12 20:23:50 ----A---- C:\WINDOWS\system32\msctf.dll
2016-02-12 20:23:49 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-02-12 20:23:48 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-02-12 20:23:47 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-02-12 20:23:47 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-02-12 20:23:47 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-02-12 20:23:47 ----A---- C:\WINDOWS\system32\wininet.dll
2016-02-12 20:23:47 ----A---- C:\WINDOWS\system32\rasmans.dll
2016-02-12 20:23:41 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-02-12 20:23:41 ----A---- C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-02-12 20:23:40 ----A---- C:\WINDOWS\SYSWOW64\rasman.dll
2016-02-12 20:23:40 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-02-12 20:23:40 ----A---- C:\WINDOWS\system32\wuapi.dll
2016-02-12 20:23:40 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-02-12 20:23:40 ----A---- C:\WINDOWS\system32\rasman.dll
2016-02-12 20:23:40 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-02-12 20:23:39 ----A---- C:\WINDOWS\SYSWOW64\ztrace_maps.dll
2016-02-12 20:23:39 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2016-02-12 20:23:39 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-02-12 20:23:39 ----A---- C:\WINDOWS\SYSWOW64\IoTAssignedAccessLockFramework.dll
2016-02-12 20:23:39 ----A---- C:\WINDOWS\system32\ztrace_maps.dll
2016-02-12 20:23:39 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-02-12 20:23:39 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-02-12 20:23:39 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-12 20:23:39 ----A---- C:\WINDOWS\system32\IoTAssignedAccessLockFramework.dll
2016-02-12 20:23:38 ----A---- C:\WINDOWS\system32\wups.dll
2016-02-12 20:23:37 ----A---- C:\WINDOWS\system32\ngckeyenum.dll

======List of files/folders modified in the last 3 months======

2016-05-09 21:29:30 ----SHD---- C:\WINDOWS\Installer
2016-05-09 21:29:27 ----D---- C:\WINDOWS\Temp
2016-05-09 21:29:11 ----D---- C:\ProgramData\MFAData
2016-05-09 21:28:57 ----D---- C:\WINDOWS\Prefetch
2016-05-09 21:28:50 ----RD---- C:\Program Files
2016-05-09 21:08:24 ----D---- C:\WINDOWS\system32\NDF
2016-05-09 21:02:01 ----D---- C:\WINDOWS\INF
2016-05-09 21:02:00 ----D---- C:\WINDOWS\SoftwareDistribution
2016-05-09 21:02:00 ----D---- C:\Windows
2016-05-09 20:55:19 ----D---- C:\WINDOWS\System32
2016-05-09 20:43:02 ----D---- C:\WINDOWS\system32\sru
2016-05-09 19:44:03 ----D---- C:\Users\Cecile\AppData\Roaming\Skype
2016-05-09 19:40:29 ----SHD---- C:\Config.Msi
2016-05-09 19:35:04 ----RD---- C:\Program Files (x86)
2016-05-09 19:35:03 ----D---- C:\WINDOWS\Tasks
2016-05-09 19:35:03 ----D---- C:\WINDOWS\system32\Tasks
2016-05-09 19:33:21 ----D---- C:\Program Files (x86)\Google
2016-05-09 19:32:31 ----SHD---- C:\System Volume Information
2016-05-09 18:52:07 ----D---- C:\WINDOWS\system32\DriverStore
2016-05-09 18:42:02 ----D---- C:\WINDOWS\Microsoft.NET
2016-05-09 18:41:56 ----D---- C:\WINDOWS\system32\config
2016-05-09 05:08:08 ----D---- C:\WINDOWS\AppReadiness
2016-05-07 19:03:24 ----D---- C:\WINDOWS\system32\drivers
2016-05-07 19:02:29 ----D---- C:\WINDOWS\WinSxS
2016-05-07 18:06:19 ----HD---- C:\Program Files\WindowsApps
2016-05-06 08:24:22 ----D---- C:\WINDOWS\system32\CatRoot
2016-05-05 10:58:32 ----DC---- C:\WINDOWS\Panther
2016-05-05 10:09:10 ----D---- C:\WINDOWS\debug
2016-05-05 10:04:44 ----RSD---- C:\WINDOWS\assembly
2016-05-05 09:40:16 ----D---- C:\WINDOWS\system32\catroot2
2016-05-05 08:41:56 ----D---- C:\ProgramData\SoftwareDistribution
2016-05-05 08:21:54 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2016-05-05 08:19:31 ----D---- C:\Program Files\Microsoft Office 15
2016-05-03 07:17:06 ----D---- C:\WINDOWS\system32\MRT
2016-05-03 07:12:48 ----A---- C:\WINDOWS\system32\MRT.exe
2016-05-03 07:12:39 ----D---- C:\WINDOWS\CbsTemp
2016-04-27 17:52:34 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-27 01:28:56 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2016-04-27 01:28:56 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-04-27 01:28:56 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-04-27 01:28:56 ----D---- C:\WINDOWS\SysWOW64
2016-04-27 01:28:38 ----D---- C:\WINDOWS\system32\nl-NL
2016-04-27 01:28:38 ----D---- C:\WINDOWS\system32\migration
2016-04-27 01:28:38 ----D---- C:\WINDOWS\system32\en-US
2016-04-27 01:28:38 ----D---- C:\WINDOWS\system32\Boot
2016-04-27 01:28:31 ----RSD---- C:\WINDOWS\Fonts
2016-04-27 01:28:31 ----D---- C:\WINDOWS\AppPatch
2016-04-27 01:28:31 ----D---- C:\Program Files\Windows Portable Devices
2016-04-27 01:28:31 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-04-27 01:28:31 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-04-27 01:28:31 ----D---- C:\Program Files (x86)\Internet Explorer
2016-04-27 01:28:30 ----D---- C:\Program Files\Windows Multimedia Platform
2016-04-27 01:28:30 ----D---- C:\Program Files\Windows Media Player
2016-04-27 01:28:30 ----D---- C:\Program Files\Internet Explorer
2016-04-26 22:32:05 ----D---- C:\ProgramData\AVG Web TuneUp
2016-04-26 22:30:16 ----D---- C:\Program Files (x86)\AVG Web TuneUp
2016-04-26 22:21:45 ----HD---- C:\ProgramData
2016-04-14 18:47:01 ----D---- C:\Program Files\AVG Web TuneUp
2016-04-14 18:45:51 ----RD---- C:\Users
2016-04-14 18:45:02 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-04-06 20:32:41 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-31 18:52:24 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-03-31 14:29:27 ----D---- C:\ProgramData\Skype
2016-03-13 13:07:07 ----D---- C:\Program Files (x86)\WinZipper
2016-03-06 18:44:39 ----D---- C:\Program Files\Windows Journal
2016-02-14 19:32:47 ----D---- C:\Users\Cecile\AppData\Roaming\vlc
2016-02-13 22:59:53 ----D---- C:\WINDOWS\rescache
2016-02-12 23:02:15 ----D---- C:\WINDOWS\LiveKernelReports

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys [2016-01-26 272304]
R0 Avgloga;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avgloga.sys [2016-02-16 360736]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx64.sys [2016-03-29 248576]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys [2016-04-14 51968]
R0 Avguniva;AVG Universal Driver; C:\WINDOWS\system32\DRIVERS\avguniva.sys [2016-04-18 71936]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-10 644968]
R1 Avgdiska;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiska.sys [2016-02-16 162592]
R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdrivera.sys [2016-04-20 307456]
R1 Avgldx64;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 Avgwfpa;AVG Firewall Driver; C:\WINDOWS\system32\DRIVERS\avgwfpa.sys [2015-12-16 315840]
R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-07-10 83968]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-12-01 8192]
R1 iSafeKrnl;YAC Mini-Filter Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [2015-05-14 260856]
R1 iSafeKrnlMon;YAC Monitor Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [2015-08-19 52440]
R1 iSafeKrnlR3;YAC Ring3 Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [2015-08-19 103904]
R1 iSafeNetFilter;YAC NDIS Driver; C:\WINDOWS\system32\DRIVERS\iSafeNetFilter.sys [2015-06-30 52392]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-07-10 48128]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-07-10 61952]
R3 bcbtums;@oem190.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-03-27 173312]
R3 BCMWL63A;@oem188.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2015-08-13 11259136]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-07-10 105984]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 128512]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-07-10 84992]
R3 DDDriver;DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [2015-01-31 23760]
R3 DellProf;DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [2015-05-22 24240]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-11-20 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2015-06-24 4504320]
R3 IntcDAud;@oem68.inf,%IntcDAud.SvcDesc%;Intel® Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem84.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 MEIx64;@oem120.inf,%TEE_SvcDesc%;Intel® Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-09-04 99288]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-07-10 167936]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2015-07-10 587264]
R3 RTSUER;@oem186.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2015-05-14 402960]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2013-11-22 31472]
R3 SynTP;@oem82.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-11-22 540912]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\WINDOWS\system32\DRIVERS\avgboota.sys [2016-01-07 21632]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-07-10 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-07-10 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-07-10 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-07-10 58720]
S0 storufs;@storufs.inf,sServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-07-10 40288]
S1 iSafeKrnlKit;YAC Kit Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [2015-08-19 110112]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-09-17 929280]
S3 btwampfl;@oem190.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-03-27 188160]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-09-17 36352]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2015-07-10 116736]
S3 CMUSBDAC;@oem185.inf,%CMUSBDAC.DeviceDesc%;USB Audio Class 1.0 and 2.0 DAC Device Driver; C:\WINDOWS\system32\DRIVERS\CMUSBDAC.sys [2016-03-12 3778592]
S3 DellRbtn;Airplane Mode Switch; C:\WINDOWS\System32\drivers\DellRbtn.sys [2013-01-25 10752]
S3 dg_ssudbus;@oem118.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2016-01-10 108800]
S3 fcvsc;fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [2015-07-10 31232]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-07-10 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-07-10 50016]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-07-10 424800]
S3 intaud_WaveExtensible;@oem77.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-07-10 26624]
S3 iSafeKrnlBoot;YAC Boot Driver; C:\WINDOWS\system32\DRIVERS\iSafeKrnlBoot.sys [2015-08-19 55056]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-07-10 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-07-10 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-08-19 934752]
S3 SmbDrv;SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [2013-08-12 30448]
S3 ssudmdm;@oem130.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2016-01-10 206080]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-07-10 61952]
S3 UcmUcsi;@ucmucsi.inf,mUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-08-19 46080]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-07-10 44032]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-07-10 245088]
S3 UfxChipidea;@ufxchipidea.inf,xChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-07-10 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,xsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-07-10 127840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-08-28 43336]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-04-14 1074448]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [2016-04-20 710232]
R2 BcmBtRSupport;@oem190.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-03-27 2251992]
R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2016-03-08 2829552]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 DellDataVault;Dell Data Vault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2015-09-11 2574168]
R2 DellDataVaultWiz;Dell Data Vault Wizard; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [2015-09-11 201560]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 igfxCUIService1.0.0.0;Intel® HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-11-20 330136]
R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-05-12 733696]
R2 iSafeService;YAC Service; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [2015-08-19 118048]
R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2013-09-04 169432]
R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2013-09-04 390616]
R2 OneSyncSvc_Session1;Host synchroniseren_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2013-07-30 253776]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-06-24 303360]
R2 SupportAssistAgent;Dell SupportAssist Agent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [2015-09-30 21160]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-06-17 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
R3 PimIndexMaintenanceSvc_Session1;Contact Data_Session1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [2016-04-20 5155904]
S2 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-14 269504]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-04-20 638968]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 cphs;Intel® Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-11-20 291744]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-07-10 27136]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 ICCS;Intel® Integrated Clock Controller Service - Intel® ICCS; C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 Intel® Capability Licensing Service TCP IP Interface;Intel® Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-05-12 822232]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\lsass.exe [2015-07-10 56344]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-02-01 150600]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-07-10 39856]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-08-19 1031680]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-07-10 39856]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-03-31 147624]

-----------------EOF-----------------

ricardo425 · 9 mei 2016

log.txt

Voor de zekerheid deze nogmaals toegevoegd

9 mei 2016 aangepast door ricardo425

kape · 12 mei 2016

Je Java software is verouderd.
Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.

Ga naar Java en download daar de correcte Java versie.

Klik op "Gratis Java-download".
Ga akkoord met de licentiebepalingen en klik op de button voor de gratis download.
Het bestand JavaSetup wordt aangeboden - kies hier voor "bestand opslaan".
Sluit alle programma's die eventueel open zijn - zeker je web browser!
Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
Vink alles aan met Java Runtime Environment (JRE of J2SE of JAVA) in de naam.
Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
Herhaal dit tot alle oudere versies verdwenen zijn.
Na het verwijderen van alle oudere versies, herstart je pc.
Klik vervolgens op JavaSetup om de nieuwste versie van Java te installeren.
Vink de installatie van de Ask toolbar uit en ga dan verder met de installatie.

kape · 12 mei 2016

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

 {95B7759C-8C7F-4BF1-B163-73684A933233}:c
C:\Program Files (x86)\AVG Web TuneUp;fs
{ae07101b-46d4-4a98-af68-0333ea26e113};c
C:\Program Files (x86)\Common Files\DVDVideoSoft;fs
{EE932B49-D5C0-4D19-A3DA-CE0849258DE6};c
vToolbarUpdater40.2.9;s
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater;fs
WtuSystemSupport;s
C:\WINDOWS\tasks\SpeedUpMyPC Maintenance.job;f
C:\WINDOWS\tasks\SpeedUpMyPC Startup.job;f
C:\Program Files (x86)\Uniblue\SpeedUpMyPC;fs
C:\Users\Cecile\AppData\Roaming\Mozilla\Firefox\Profiles\9we6mpt6.default\extensions\arthurj8283@gmail.com;fs
C:\Users\Cecile\AppData\Roaming\Mozilla\Firefox\Profiles\9we6mpt6.default\extensions\1427743657_xpi;fs
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe];r64
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera];r64
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe];r64
torpigcheck;
emptyfolderscheck;delete
startupall;
filesrcm;

Klik op de knop "More options" en vink nu de onderstaande opties aan.
Do a Quick Scan
Auto Clean
De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

ricardo425 · 13 mei 2016

Heb zoek.exe gedownload en na een zekere tijd is het draadloos internet uitgevallen. Kan geen verbinding meer maken.

Hoe doe ik verder?

13 mei 2016 aangepast door ricardo425

kape · 13 mei 2016

Kan je de PC opstarten in "veilige modus met netwerkverbinding" ? Zo ja, probeer dan eens hetzelfde uit te voeren in die "veilige modus".

ricardo425 · 14 mei 2016

Pc heb ik terug kunnen opstarten.

Had geen internet verbinding. Nadien wel, maar valt regelmatig uit.

Wanneer wel verbinding gaat geen enkele website open

kape · 14 mei 2016

En als je die verbinding wél hebt, kan je dan zoek.exe uitvoeren ... want er zitten inderdaad wel wat besmettingen op de PC die we zouden moeten kunnen aanpakken.

Inloggen

Opkuis

Aanbevolen berichten

ricardo425

Beste reacties in dit topic

Populaire dagen

Beste reacties in dit topic

Populaire dagen

Populaire berichten

kape

kape

kape

kape

ricardo425

ricardo425

kape

kape

ricardo425

kape

ricardo425

kape

kape

kape

kape

Welkom op PC Helpforum

Leden statistieken

OVER ONS

SITEMAP

Home

Info

Handleidingen & Tips

Activiteit

Belangrijke informatie