Ga naar inhoud

Stom geweest

danthius
 Delen

Aanbevolen berichten

danthius Meewerkend lid

danthius

Geplaatst:
Geplaatst:

Beste

Ik ben echt dom geweest... :hmpf:

ik wou films downloaden via een site (torrents)

Nu moest ik ook speciaal een codec downloaden via het readme bestandje

en wat blijkt...........

ik werd ineens afgelogd en opnieuw opgestart en toen ik opstarte kwam er doodleuk "Thank You"

op te staan :pcguru:

Nu heb ik het via msconfig me terug kunnen aanmelden wel via mijn vrouw haar account en vandaar zo mijn account terug hersteld

maar ik wil zeker weten dat alles terug in orde is

mijn virusscan zegt dat alles ok is

maar aangezien deze mij niet waarschuwde toen ik de "codec" wou downloaden ben ik er toch niet gerust in

graag uw antwoord.....

Een bange persoon.... :(

Link naar reactie
Delen op andere sites
Dasle Grootmeester

Dasle

Geplaatst:
Geplaatst:

Download icon_RSIT.pngRSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.


Dubbelklik op RSIT.exe om de tool te starten.

  • Gebruikers van Windows Vista en later dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  • Wanneer de tool gereed is worden er twee kladblok bestanden geopend genaamd "Log.txt" en "Info.txt" .


RSIT Logbestanden plaatsen

  • Voeg het logbestand met de naam "Log.txt" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden in de map ""C:\rsit")
  • Het logbestand met de naam "Info.txt" wat geminimaliseerd is hoeft u niet te plaatsen. (Dit logbestand wordt enkel de eerst keer bij het uitvoeren aangemaakt).
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.


Bekijk ook de

.
Link naar reactie
Delen op andere sites
danthius Meewerkend lid

danthius

Geplaatst:
  • Auteur
Geplaatst:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Daniel at 2016-06-15 18:33:46
Microsoft Windows 7 Ultimate  Service Pack 1
System drive C: has 54 GB (44%) free of 122 GB
Total RAM: 8190 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:36:10, on 15/06/2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18347)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Daniel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: Shell=C:\Program Files (x86)\Update\systemerror.exe
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: JMB36X - Unknown owner - C:\Windows\SysWOW64\XSrvSetup.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8510 bytes

======Listing Processes======

 

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\SysWOW64\XSrvSetup.exe
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe  -first
"taskhost.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-6728106771137737793-1677336713-500749869-472979907-18497032-1172626370-867055715
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4904 CREDAT:267521 /prefetch:2
C:\Windows\system32\Macromed\Flash\FlashUtil64_21_0_0_242_ActiveX.exe -Embedding
"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding

"C:\Users\Daniel\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-848342433-1523551660-2986467489-10006_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-848342433-1523551660-2986467489-10006 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"  "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 540 544 552 65536 548

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25 2111616]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25 1637504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-01-19 9996320]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-06-03 2398776]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2016-01-29 1340192]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-06-03 1767944]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]
"NUSB3MON"=C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2009-11-20 106496]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2016-06-08 5565960]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2016-05-31 1010144]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-06-15 18:33:46 ----D---- C:\rsit
2016-06-15 18:33:46 ----D---- C:\Program Files\trend micro
2016-06-15 17:15:51 ----A---- C:\Windows\ntbtlog.txt
2016-06-15 17:10:16 ----D---- C:\Program Files\DivX
2016-06-15 17:10:11 ----D---- C:\Users\Daniel\AppData\Roaming\DivX
2016-06-15 17:05:27 ----D---- C:\Program Files (x86)\DivX
2016-06-15 17:05:00 ----D---- C:\ProgramData\DivX
2016-06-15 03:26:05 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2016-06-15 01:09:13 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-06-15 01:09:13 ----A---- C:\Windows\system32\tzres.dll
2016-06-15 01:09:11 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-06-15 01:09:11 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-06-15 01:09:11 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-06-15 01:09:11 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2016-06-15 01:09:11 ----A---- C:\Windows\system32\wdigest.dll
2016-06-15 01:09:11 ----A---- C:\Windows\system32\rpcrt4.dll
2016-06-15 01:09:11 ----A---- C:\Windows\system32\ncrypt.dll
2016-06-15 01:09:11 ----A---- C:\Windows\system32\drivers\srvnet.sys
2016-06-15 01:09:11 ----A---- C:\Windows\system32\drivers\srv2.sys
2016-06-15 01:09:11 ----A---- C:\Windows\system32\drivers\srv.sys
2016-06-15 01:09:11 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-06-15 01:09:11 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-06-15 01:09:11 ----A---- C:\Windows\system32\drivers\cng.sys
2016-06-15 01:09:11 ----A---- C:\Windows\system32\certcli.dll
2016-06-15 01:09:11 ----A---- C:\Windows\system32\bcryptprimitives.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-06-15 01:09:10 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-06-15 01:09:10 ----A---- C:\Windows\system32\TSpkg.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\sspisrv.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\sspicli.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\secur32.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\schannel.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\rpchttp.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\msv1_0.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\lsass.exe
2016-06-15 01:09:10 ----A---- C:\Windows\system32\lsasrv.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\kerberos.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-06-15 01:09:10 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-06-15 01:09:10 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-06-15 01:09:10 ----A---- C:\Windows\system32\cryptbase.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\credssp.dll
2016-06-15 01:09:10 ----A---- C:\Windows\system32\auditpol.exe
2016-06-15 01:09:09 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-06-15 01:09:09 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-06-15 01:09:09 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-06-15 01:09:09 ----A---- C:\Windows\system32\msobjs.dll
2016-06-15 01:09:09 ----A---- C:\Windows\system32\msaudite.dll
2016-06-15 01:09:09 ----A---- C:\Windows\system32\adtschema.dll
2016-06-15 01:09:06 ----A---- C:\Windows\system32\invagent.dll
2016-06-15 01:09:06 ----A---- C:\Windows\system32\generaltel.dll
2016-06-15 01:09:06 ----A---- C:\Windows\system32\devinv.dll
2016-06-15 01:09:06 ----A---- C:\Windows\system32\centel.dll
2016-06-15 01:09:06 ----A---- C:\Windows\system32\appraiser.dll
2016-06-15 01:09:06 ----A---- C:\Windows\system32\aeinv.dll
2016-06-15 01:09:05 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2016-06-15 01:09:05 ----A---- C:\Windows\SYSWOW64\lpk.dll
2016-06-15 01:09:05 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-06-15 01:09:05 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2016-06-15 01:09:05 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-06-15 01:09:05 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-06-15 01:09:05 ----A---- C:\Windows\system32\StructuredQuery.dll
2016-06-15 01:09:05 ----A---- C:\Windows\system32\lpk.dll
2016-06-15 01:09:05 ----A---- C:\Windows\system32\fontsub.dll
2016-06-15 01:09:05 ----A---- C:\Windows\system32\dciman32.dll
2016-06-15 01:09:05 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-06-15 01:09:05 ----A---- C:\Windows\system32\atmlib.dll
2016-06-15 01:09:05 ----A---- C:\Windows\system32\atmfd.dll
2016-06-15 01:09:05 ----A---- C:\Windows\system32\acmigration.dll
2016-06-15 01:09:04 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2016-06-15 01:09:04 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2016-06-15 01:09:04 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2016-06-15 01:09:04 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2016-06-15 01:09:04 ----A---- C:\Windows\system32\ws2_32.dll
2016-06-15 01:09:04 ----A---- C:\Windows\system32\winhttp.dll
2016-06-15 01:09:04 ----A---- C:\Windows\system32\win32k.sys
2016-06-15 01:09:04 ----A---- C:\Windows\system32\netbtugc.exe
2016-06-15 01:09:04 ----A---- C:\Windows\system32\mswsock.dll
2016-06-15 01:09:04 ----A---- C:\Windows\system32\drivers\netbt.sys
2016-06-15 01:09:03 ----A---- C:\Windows\SYSWOW64\polstore.dll
2016-06-15 01:09:03 ----A---- C:\Windows\SYSWOW64\gpscript.exe
2016-06-15 01:09:03 ----A---- C:\Windows\SYSWOW64\gpscript.dll
2016-06-15 01:09:03 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2016-06-15 01:09:03 ----A---- C:\Windows\SYSWOW64\gpapi.dll
2016-06-15 01:09:03 ----A---- C:\Windows\SYSWOW64\FwRemoteSvr.dll
2016-06-15 01:09:03 ----A---- C:\Windows\system32\polstore.dll
2016-06-15 01:09:03 ----A---- C:\Windows\system32\IPSECSVC.DLL
2016-06-15 01:09:03 ----A---- C:\Windows\system32\gpsvc.dll
2016-06-15 01:09:03 ----A---- C:\Windows\system32\gpscript.exe
2016-06-15 01:09:03 ----A---- C:\Windows\system32\gpscript.dll
2016-06-15 01:09:03 ----A---- C:\Windows\system32\gpprefcl.dll
2016-06-15 01:09:03 ----A---- C:\Windows\system32\gpapi.dll
2016-06-15 01:09:02 ----A---- C:\Windows\SYSWOW64\winipsec.dll
2016-06-15 01:09:02 ----A---- C:\Windows\system32\winipsec.dll
2016-06-15 01:09:02 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2016-06-15 01:08:59 ----A---- C:\Windows\SYSWOW64\webio.dll
2016-06-15 01:08:59 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-06-15 01:08:59 ----A---- C:\Windows\system32\webio.dll
2016-06-15 01:08:59 ----A---- C:\Windows\system32\gdi32.dll
2016-06-15 01:08:58 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-06-15 01:08:58 ----A---- C:\Windows\system32\shell32.dll
2016-06-15 01:08:57 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2016-06-15 01:08:57 ----A---- C:\Windows\SYSWOW64\explorer.exe
2016-06-15 01:08:57 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-06-15 01:08:57 ----A---- C:\Windows\explorer.exe
2016-06-15 01:08:52 ----A---- C:\Windows\SYSWOW64\msi.dll
2016-06-15 01:08:52 ----A---- C:\Windows\SYSWOW64\authui.dll
2016-06-15 01:08:52 ----A---- C:\Windows\system32\msiexec.exe
2016-06-15 01:08:52 ----A---- C:\Windows\system32\msi.dll
2016-06-15 01:08:52 ----A---- C:\Windows\system32\consent.exe
2016-06-15 01:08:52 ----A---- C:\Windows\system32\authui.dll
2016-06-15 01:08:52 ----A---- C:\Windows\system32\appinfo.dll
2016-06-15 01:08:51 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2016-06-15 01:08:51 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2016-06-15 01:08:51 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2016-06-15 01:08:51 ----A---- C:\Windows\system32\msimsg.dll
2016-06-15 01:08:51 ----A---- C:\Windows\system32\msihnd.dll
2016-06-15 01:08:47 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-06-15 01:08:47 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-06-15 01:08:47 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-06-15 01:08:47 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-06-15 01:08:47 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-06-15 01:08:47 ----A---- C:\Windows\system32\iernonce.dll
2016-06-15 01:08:47 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-06-15 01:08:47 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-06-15 01:08:46 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-06-15 01:08:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-06-15 01:08:46 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-06-15 01:08:46 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-06-15 01:08:46 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-06-15 01:08:46 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-06-15 01:08:46 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-06-15 01:08:46 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-06-15 01:08:46 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-06-15 01:08:46 ----A---- C:\Windows\system32\inseng.dll
2016-06-15 01:08:46 ----A---- C:\Windows\system32\ie4uinit.exe
2016-06-15 01:08:45 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-06-15 01:08:45 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-06-15 01:08:44 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-06-15 01:08:44 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-06-15 01:08:44 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-06-15 01:08:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-06-15 01:08:44 ----A---- C:\Windows\system32\urlmon.dll
2016-06-15 01:08:44 ----A---- C:\Windows\system32\occache.dll
2016-06-15 01:08:44 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-06-15 01:08:44 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-06-15 01:08:44 ----A---- C:\Windows\system32\iedkcs32.dll
2016-06-15 01:08:43 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-06-15 01:08:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-06-15 01:08:43 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-06-15 01:08:43 ----A---- C:\Windows\system32\msfeeds.dll
2016-06-15 01:08:43 ----A---- C:\Windows\system32\iesetup.dll
2016-06-15 01:08:43 ----A---- C:\Windows\system32\ieapfltr.dll
2016-06-15 01:08:43 ----A---- C:\Windows\system32\dxtrans.dll
2016-06-15 01:08:42 ----A---- C:\Windows\system32\iertutil.dll
2016-06-15 01:08:41 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-06-15 01:08:41 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-06-15 01:08:41 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-06-15 01:08:41 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-06-15 01:08:41 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-06-15 01:08:41 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-06-15 01:08:41 ----A---- C:\Windows\system32\vbscript.dll
2016-06-15 01:08:41 ----A---- C:\Windows\system32\jsproxy.dll
2016-06-15 01:08:40 ----A---- C:\Windows\system32\ieui.dll
2016-06-15 01:08:40 ----A---- C:\Windows\system32\ieframe.dll
2016-06-15 01:08:40 ----A---- C:\Windows\system32\dxtmsft.dll
2016-06-15 01:08:39 ----A---- C:\Windows\system32\webcheck.dll
2016-06-15 01:08:39 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-06-15 01:08:39 ----A---- C:\Windows\system32\mshtmled.dll
2016-06-15 01:08:39 ----A---- C:\Windows\system32\jscript9diag.dll
2016-06-15 01:08:39 ----A---- C:\Windows\system32\jscript.dll
2016-06-15 01:08:39 ----A---- C:\Windows\system32\ieUnatt.exe
2016-06-15 01:08:38 ----A---- C:\Windows\system32\wininet.dll
2016-06-15 01:08:38 ----A---- C:\Windows\system32\jscript9.dll
2016-06-15 01:08:37 ----A---- C:\Windows\system32\msrating.dll
2016-06-15 01:08:37 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-06-15 01:08:36 ----A---- C:\Windows\system32\mshtml.dll
2016-06-14 18:12:08 ----A---- C:\Windows\system32\NvRtmpStreamer64.dll
2016-06-14 18:10:55 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2016-06-14 18:10:26 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2016-06-14 18:10:26 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2016-06-14 18:10:26 ----A---- C:\Windows\system32\vulkaninfo.exe
2016-06-14 18:10:26 ----A---- C:\Windows\system32\vulkan-1.dll
2016-06-14 18:10:22 ----D---- C:\Program Files (x86)\VulkanRT
2016-06-14 18:10:10 ----A---- C:\Windows\system32\nv3dappshextr.dll
2016-06-14 18:10:10 ----A---- C:\Windows\system32\nv3dappshext.dll
2016-06-14 18:08:48 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2016-06-14 18:08:48 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2016-06-14 18:08:47 ----A---- C:\Windows\system32\nvhdap64.dll
2016-06-14 18:08:47 ----A---- C:\Windows\system32\nvhdagenco64.dll
2016-06-14 18:08:47 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2016-06-14 18:08:46 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\nvumdshimx.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\nvopencl.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\nvoglv64.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\nvoglshim64.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\nvinitx.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\NvIFR64.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\NvFBC64.dll
2016-06-14 18:08:46 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2016-06-14 18:08:45 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2016-06-14 18:08:45 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2016-06-14 18:08:45 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2016-06-14 18:08:45 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2016-06-14 18:08:45 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2016-06-14 18:08:45 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2016-06-14 18:08:45 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2016-06-14 18:08:45 ----A---- C:\Windows\system32\nvdispgenco6436839.dll
2016-06-14 18:08:45 ----A---- C:\Windows\system32\nvdispco6436839.dll
2016-06-14 18:08:45 ----A---- C:\Windows\system32\nvcuvid.dll
2016-06-14 18:08:45 ----A---- C:\Windows\system32\nvcuda.dll
2016-06-14 18:08:45 ----A---- C:\Windows\system32\nvcompiler.dll

======List of files/folders modified in the last 1 month======

2016-06-15 18:33:50 ----D---- C:\Windows\Temp
2016-06-15 18:33:46 ----RD---- C:\Program Files
2016-06-15 18:18:09 ----D---- C:\Windows\System32
2016-06-15 18:18:09 ----D---- C:\Windows\inf
2016-06-15 18:18:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-06-15 18:12:33 ----D---- C:\Windows\winsxs
2016-06-15 18:12:33 ----D---- C:\Windows\system32\config
2016-06-15 18:12:26 ----D---- C:\Windows\system32\catroot2
2016-06-15 18:11:14 ----D---- C:\Windows
2016-06-15 18:11:13 ----D---- C:\ProgramData\NVIDIA
2016-06-15 17:45:39 ----RD---- C:\Program Files (x86)
2016-06-15 17:12:35 ----D---- C:\Users\Daniel\AppData\Roaming\BitTorrent
2016-06-15 17:10:39 ----D---- C:\Windows\system32\Tasks
2016-06-15 17:10:09 ----SHD---- C:\System Volume Information
2016-06-15 17:10:01 ----D---- C:\Windows\SysWOW64
2016-06-15 17:09:59 ----SHD---- C:\Windows\Installer
2016-06-15 17:09:51 ----D---- C:\Program Files (x86)\Common Files
2016-06-15 17:05:00 ----HD---- C:\ProgramData
2016-06-15 17:03:02 ----D---- C:\Users\Daniel\AppData\Roaming\vlc
2016-06-15 03:50:54 ----D---- C:\Windows\rescache
2016-06-15 03:24:02 ----D---- C:\Windows\SYSWOW64\nl-NL
2016-06-15 03:24:02 ----D---- C:\Windows\system32\wbem
2016-06-15 03:24:02 ----D---- C:\Windows\system32\nl-NL
2016-06-15 03:24:02 ----D---- C:\Windows\system32\drivers
2016-06-15 03:24:02 ----D---- C:\Windows\system32\appraiser
2016-06-15 03:24:02 ----D---- C:\Windows\AppPatch
2016-06-15 03:24:01 ----D---- C:\Windows\SYSWOW64\en-US
2016-06-15 03:24:01 ----D---- C:\Windows\system32\en-US
2016-06-15 03:24:01 ----D---- C:\Windows\nl-NL
2016-06-15 03:24:01 ----D---- C:\Program Files\Internet Explorer
2016-06-15 03:24:01 ----D---- C:\Program Files (x86)\Internet Explorer
2016-06-15 03:08:50 ----D---- C:\Windows\system32\MRT
2016-06-15 03:04:24 ----A---- C:\Windows\system32\MRT.exe
2016-06-14 18:35:50 ----D---- C:\ProgramData\NVIDIA Corporation
2016-06-14 18:11:34 ----D---- C:\Windows\system32\DriverStore
2016-06-14 18:10:42 ----D---- C:\ProgramData\Package Cache
2016-06-14 18:09:42 ----D---- C:\Program Files\NVIDIA Corporation
2016-06-12 13:58:55 ----D---- C:\Program Files (x86)\Rockstar Games
2016-06-12 13:58:44 ----D---- C:\Program Files\Rockstar Games
2016-06-03 09:38:10 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2016-06-03 09:38:10 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2016-06-03 09:38:10 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2016-06-03 09:38:10 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2016-06-03 09:38:10 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2016-06-03 09:38:10 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2016-06-03 09:38:10 ----A---- C:\Windows\system32\OpenCL.dll
2016-06-03 09:38:10 ----A---- C:\Windows\system32\nvwgf2umx.dll
2016-06-03 09:38:10 ----A---- C:\Windows\system32\nvspcap64.dll
2016-06-03 09:38:10 ----A---- C:\Windows\system32\nvspbridge64.dll
2016-06-03 09:38:10 ----A---- C:\Windows\system32\nvd3dumx.dll
2016-06-03 09:38:10 ----A---- C:\Windows\system32\nvaudcap64v.dll
2016-06-03 09:38:10 ----A---- C:\Windows\system32\nvapi64.dll
2016-06-03 05:26:20 ----A---- C:\Windows\system32\nvsvc64.dll
2016-06-03 05:26:20 ----A---- C:\Windows\system32\nvcpl.dll
2016-06-03 05:26:19 ----A---- C:\Windows\system32\nvvsvc.exe
2016-06-03 05:26:19 ----A---- C:\Windows\system32\nvsvcr.dll
2016-06-03 05:26:19 ----A---- C:\Windows\system32\nvshext.dll
2016-06-03 05:26:19 ----A---- C:\Windows\system32\nvmctray.dll
2016-05-27 21:15:14 ----SD---- C:\Windows\SYSWOW64\GWX
2016-05-27 21:15:14 ----SD---- C:\Windows\system32\GWX
2016-05-27 18:41:21 ----D---- C:\Users\Daniel\AppData\Roaming\New Technology Studio
2016-05-27 15:52:54 ----SD---- C:\Users\Daniel\AppData\Roaming\Microsoft
2016-05-27 15:31:58 ----RD---- C:\Program Files (x86)\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2009-10-29 115824]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-11-13 289120]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2015-11-12 34720]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-01-19 2242720]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-11-13 133816]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2009-11-20 75776]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2009-11-20 177152]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2016-06-03 141256]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-06-03 28216]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2016-06-03 56384]
R3 RDID1046;UA-25; C:\Windows\system32\Drivers\rdwm1046.sys [2009-09-18 199296]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2016-01-08 120416]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 rt61x64;Linksys Wireless-G PCI Adapter Driver; C:\Windows\system32\DRIVERS\WMP54Gv41x64.sys [2010-04-07 446304]
S3 RTL8192cu;300Mbps Wireless USB Adapter; C:\Windows\system32\DRIVERS\RTL8192cu.sys [2012-10-25 926824]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2016-01-08 213088]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-05-25 1364096]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-05-25 1687680]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-06-03 1165368]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2016-06-08 2552840]
R2 JMB36X;JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [2009-08-06 65536]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2016-06-07 419248]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-01-29 23808]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-06-03 1881144]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-06-03 2522680]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2016-06-03 1351104]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [2016-01-08 754784]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe [2016-06-03 426040]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2016-01-29 374344]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2016-06-03 3634232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-21 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-21 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-05-20 114688]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-03-27 1255736]
S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Link naar reactie
Delen op andere sites
abbs Grootmeester

abbs

Geplaatst:
Geplaatst:

Hallo,

Schakel uw antivirussoftware tijdelijk uit en download 51a612a8b27e2-Zoek.pngZoek.exe naar het bureaublad.

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Zoek.exe uitvoeren

Wanneer u problemen ondervindt bij het uitvoeren van dit programma of bepaalde foutmeldingen te zien krijgt laat dit dan even weten in uw bericht.

  • Dubbelklik vervolgens op Zoek.exe om de tool te starten.
  • Windows Vista, 7, 8 en 10 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze computer, gebruik dit dan ook niet op andere computers met een gelijkaardig probleem.

    firefoxlook;
torpigcheck;
emptyfolderscheck;delete
chromelook;
standardsearch;
filesrcm;
services-list;
autoclean;
startupall;
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
  • Voeg nu het geopende logbestand in het volgende bericht als bijlage. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
Link naar reactie
Delen op andere sites
abbs Grootmeester

abbs

Geplaatst:
Geplaatst:

Hallo,

 

Download 51a46ae42d560-malwarebytes_anti_malware.MalwareBytes Anti-Malware bij voorkeur naar het bureaublad.

  • Dubbelklik op mbam-setup-2.1.exe om de installatie van Malwarebytes Anti-Malware te starten.
  • Volg de verdere aanwijzingen, de volledige installatieprocedure kunt u nalezen op de volgende link - Malwarebytes Anti-Malware installeren.
  • Klik vervolgens op de knop Scan nu om een bedreigingsscan uit te voeren. Er zal nu gecontroleerd worden op beschikbare updates.
  • De scan wordt nu automatisch gestart, gebruik de computer bij voorkeur niet tijdens de scan.
Na het scannen:

Als er bedreigingen zijn gevonden:

  • Klik op "Verwijder geselecteerde" en daarna op "Voltooien".
  • Er kan gevraagd worden om de computer opnieuw op te starten. Doe dat dan en start daarna opnieuw MBAM.
Klik in Malwarebytes op "Historie > Programmalogboeken".

Klik op het recenste "Scanlogboek".

Klik op Exporteer en kies Tekstbestand (*.txt).

5557b93ba94ab-Malwarebytes_Exporteer_Sca

Vul een bestandsnaam in en bewaar het op je bureaublad zodat je het makkelijk terugvindt.

Post het logbestand als bijlage in je volgend bericht.

Link naar reactie
Delen op andere sites
Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.