Logfile of random's system information tool 1.09 (written by random/random) Run by Kristof at 2014-05-07 09:09:06 Microsoft Windows 7 Ultimate Service Pack 1 System drive C: has 97 GB (65%) free of 150 GB Total RAM: 4095 MB (60% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 9:09:16, on 7/05/2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17041) Boot mode: Normal Running processes: C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\AVG\AVG2014\avgui.exe C:\Windows\SysWOW64\ctfmon.exe C:\Program Files (x86)\Hewlett-Packard\KBD\kbd.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files\trend micro\Kristof.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Smart File Advisor] "C:\Program Files (x86)\Smart File Advisor\sfa.exe" /checkassoc O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [KBD] C:\Program Files (x86)\Hewlett-Packard\KBD\KbdStub.EXE O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [EPSON SX100 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEDE.EXE /FU "C:\Users\Kristof\AppData\Local\Temp\E_SFB46.tmp" /EF "HKCU" O4 - HKCU\..\Run: [DAEMON Tools Ultra Agent] "C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe" -autorun O4 - HKCU\..\Run: [Smart Driver Updater] C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Disc Soft Bus Service - Disc Soft Ltd - C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Splashtop® Remote Service (SplashtopRemoteService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Splashtop Software Updater Service (SSUService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: WinArchiver Service - Unknown owner - C:\Program Files (x86)\WinArchiver\WAService.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11597 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe c:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=d5a3cb1c-c9aa-4502-84d2-dc0f2e7fe149 /coreSdkOptions=4382 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\446e5843-e4d5-401b-8abd-705868c48433-27c-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" /logPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\log\" %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" "C:\Program Files (x86)\WinArchiver\WAService.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS "C:\Program Files\HitmanPro\hmpsched.exe" C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files (x86)\AVG\AVG2014\avgfws.exe" "C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe" "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE taskeng.exe {B7D81E0C-F8C7-4B29-9893-AE24E85E9E69} "C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe" "c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe" "c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe" "C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe" "C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe" "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" "C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe" "C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe" C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted "C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" -hidden "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp \??\C:\Windows\system32\conhost.exe "-1800333400106676293-1132714097-14382908191988876858571255979-1912391317-927043987 WLIDSvcM.exe 3528 C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe" "C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe" "C:\Program Files (x86)\AVG\AVG2014\avgemca.exe" "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 ctfmon.exe C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=7e08bb1a-1977-487a-86ae-1139b7a5e970 /coreSdkOptions=4114 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\53a2dc6b-2e08-4018-963e-9f34b87c4d7d-11bc-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe" /DisableUI "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\Hewlett-Packard\KBD\kbd.exe" C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\wbem\wmiprvse.exe taskeng.exe {411EEEC3-5D06-4FD2-B16E-E870E6ABF3CC} "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c taskhost.exe $(Arg0) "C:\Windows\System32\osk.exe" "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2672 CREDAT:275457 /prefetch:2 "C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -scheduled "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2672 CREDAT:406552 /prefetch:2 "C:\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job C:\Windows\tasks\WinZipDriverUpdater_UPDATES.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08 77424] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-23 13667032] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-02-05 2234144] "ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-02-05 1179576] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2010-11-22 2736128] "EPSON SX100 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEDE.EXE [2009-07-29 221696] "DAEMON Tools Ultra Agent"=C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe [2013-05-23 3123744] "Smart Driver Updater"=C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe [2014-02-20 392304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-01-28 59720] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2013-05-20 450560] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-02-13 1263952] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-02-20 152392] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2013-04-04 532040] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmileboxTray] C:\Users\Kristof\AppData\Roaming\Smilebox\SmileboxTray.exe [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] "Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2013-05-08 41056] "Smart File Advisor"=C:\Program Files (x86)\Smart File Advisor\sfa.exe [2011-04-04 280824] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] "KBD"=C:\Program Files (x86)\Hewlett-Packard\KBD\KbdStub.EXE [2008-07-21 12288] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-04-06 5180432] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=0 "ConsentPromptBehaviorUser"=0 "EnableLUA"=0 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2014-05-07 09:09:06 ----D---- C:\rsit 2014-05-07 09:09:06 ----D---- C:\Program Files\trend micro 2014-05-07 09:08:39 ----A---- C:\RSITx64.exe 2014-05-06 14:02:02 ----D---- C:\Windows\LastGood 2014-05-06 12:49:22 ----A---- C:\Windows\system32\mshtml.dll 2014-05-06 12:49:20 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2014-05-06 12:45:26 ----D---- C:\Program Files (x86)\Intel 2014-05-06 12:45:26 ----A---- C:\Windows\SYSWOW64\CSVer.dll 2014-05-06 12:45:02 ----D---- C:\Intel 2014-05-06 12:41:46 ----A---- C:\Windows\SYSWOW64\nvspcap.dll 2014-05-06 12:41:46 ----A---- C:\Windows\system32\nvspcap64.dll 2014-05-06 12:40:42 ----D---- C:\Program Files (x86)\AGEIA Technologies 2014-05-06 12:39:55 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe 2014-05-06 12:35:30 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll 2014-05-06 12:35:30 ----A---- C:\Windows\system32\nvaudcap64v.dll 2014-05-06 12:35:30 ----A---- C:\Windows\system32\drivers\nvvad64v.sys 2014-05-06 12:35:28 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll 2014-05-06 12:35:28 ----A---- C:\Windows\SYSWOW64\nvopencl.dll 2014-05-06 12:35:28 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll 2014-05-06 12:35:28 ----A---- C:\Windows\system32\nvopencl.dll 2014-05-06 12:35:28 ----A---- C:\Windows\system32\nvoglv64.dll 2014-05-06 12:35:27 ----A---- C:\Windows\SYSWOW64\NvIFR.dll 2014-05-06 12:35:27 ----A---- C:\Windows\SYSWOW64\NvFBC.dll 2014-05-06 12:35:27 ----A---- C:\Windows\system32\NvIFR64.dll 2014-05-06 12:35:27 ----A---- C:\Windows\system32\NvFBC64.dll 2014-05-06 12:35:27 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys 2014-05-06 12:35:26 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll 2014-05-06 12:35:26 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll 2014-05-06 12:35:26 ----A---- C:\Windows\SYSWOW64\nvcuda.dll 2014-05-06 12:35:26 ----A---- C:\Windows\system32\nvd3dumx.dll 2014-05-06 12:35:26 ----A---- C:\Windows\system32\nvcuvid.dll 2014-05-06 12:35:26 ----A---- C:\Windows\system32\nvcuvenc.dll 2014-05-06 12:35:26 ----A---- C:\Windows\system32\nvcuda.dll 2014-05-06 12:35:24 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll 2014-05-06 12:35:24 ----A---- C:\Windows\SYSWOW64\nvapi.dll 2014-05-06 12:35:24 ----A---- C:\Windows\system32\nvcompiler.dll 2014-05-06 12:16:04 ----D---- C:\kristof 2014-05-06 12:13:37 ----D---- C:\Program Files (x86)\SlimDrivers 2014-05-06 11:28:14 ----D---- C:\Users\Kristof\AppData\Roaming\WinZip 2014-05-06 11:28:12 ----D---- C:\Program Files (x86)\WinZip Driver Updater 2014-05-06 11:10:22 ----D---- C:\Program Files (x86)\DriverToolkit 2014-04-29 20:09:56 ----SD---- C:\Windows\system32\CompatTel 2014-04-29 20:09:14 ----A---- C:\Windows\system32\aepdu.dll 2014-04-29 20:09:14 ----A---- C:\Windows\system32\aeinv.dll 2014-04-23 11:21:05 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys 2014-04-23 11:21:01 ----A---- C:\Windows\system32\RtkAPO64.dll 2014-04-23 11:20:59 ----A---- C:\Windows\system32\RtkApi64.dll 2014-04-23 11:20:59 ----A---- C:\Windows\system32\RtDataProc64.dll 2014-04-23 11:20:58 ----A---- C:\Windows\system32\RTCOM64.dll 2014-04-23 11:20:58 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT 2014-04-23 11:20:55 ----A---- C:\Windows\system32\RCoRes64.dat 2014-04-23 11:20:55 ----A---- C:\Windows\system32\RCoInstII64.dll 2014-04-23 11:19:57 ----A---- C:\Windows\system32\FMAPO64.dll 2014-04-23 11:18:38 ----A---- C:\Windows\system32\RtNicProp64.dll 2014-04-23 11:18:38 ----A---- C:\Windows\system32\drivers\Rt64win7.sys 2014-04-23 11:10:19 ----A---- C:\Windows\system32\nvdispgenco6433523.dll 2014-04-23 11:10:19 ----A---- C:\Windows\system32\nvdispco6433523.dll 2014-04-23 09:15:12 ----D---- C:\Users\Kristof\AppData\Roaming\AVG2014 2014-04-23 09:14:37 ----D---- C:\Users\Kristof\AppData\Roaming\TuneUp Software 2014-04-23 09:14:12 ----HD---- C:\$AVG 2014-04-23 09:14:12 ----D---- C:\ProgramData\AVG2014 2014-04-23 09:13:36 ----D---- C:\Program Files (x86)\AVG 2014-04-23 09:03:30 ----SD---- C:\Windows\SYSWOW64\Microsoft 2014-04-21 10:24:09 ----A---- C:\Windows\system32\ieui.dll 2014-04-21 10:24:08 ----A---- C:\Windows\SYSWOW64\ieui.dll 2014-04-21 10:24:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2014-04-21 10:24:07 ----A---- C:\Windows\system32\vbscript.dll 2014-04-21 10:24:03 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-21 10:24:03 ----A---- C:\Windows\system32\iernonce.dll 2014-04-21 10:24:03 ----A---- C:\Windows\system32\ie4uinit.exe 2014-04-21 10:24:02 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-04-21 10:24:01 ----A---- C:\Windows\SYSWOW64\msrating.dll 2014-04-21 10:24:01 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2014-04-21 10:24:01 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2014-04-21 10:24:01 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2014-04-21 10:24:01 ----A---- C:\Windows\system32\msrating.dll 2014-04-21 10:24:01 ----A---- C:\Windows\system32\jsproxy.dll 2014-04-21 10:24:01 ----A---- C:\Windows\system32\jscript9diag.dll 2014-04-21 10:24:01 ----A---- C:\Windows\system32\dxtrans.dll 2014-04-21 10:24:01 ----A---- C:\Windows\system32\dxtmsft.dll 2014-04-21 10:24:00 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2014-04-21 10:24:00 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2014-04-21 10:24:00 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2014-04-21 10:24:00 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2014-04-21 10:24:00 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2014-04-21 10:24:00 ----A---- C:\Windows\system32\msfeeds.dll 2014-04-21 10:24:00 ----A---- C:\Windows\system32\ieUnatt.exe 2014-04-21 10:24:00 ----A---- C:\Windows\system32\iesetup.dll 2014-04-21 10:23:58 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2014-04-21 10:23:58 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2014-04-21 10:23:58 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2014-04-21 10:23:58 ----A---- C:\Windows\system32\ieapfltr.dll 2014-04-21 10:23:57 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-21 10:23:57 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-04-21 10:23:57 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-04-21 10:23:56 ----A---- C:\Windows\SYSWOW64\wininet.dll 2014-04-21 10:23:56 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2014-04-21 10:23:56 ----A---- C:\Windows\system32\iertutil.dll 2014-04-21 10:23:55 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2014-04-21 10:23:55 ----A---- C:\Windows\system32\wininet.dll 2014-04-21 10:23:55 ----A---- C:\Windows\system32\urlmon.dll 2014-04-21 10:23:55 ----A---- C:\Windows\system32\ieframe.dll 2014-04-21 10:23:54 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2014-04-21 10:23:53 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2014-04-21 10:23:53 ----A---- C:\Windows\system32\jscript9.dll 2014-04-19 15:42:56 ----D---- C:\Program Files\Microsoft Mouse and Keyboard Center 2014-04-18 15:01:30 ----A---- C:\Windows\system32\drivers\avgidsdrivera.sys 2014-04-17 14:40:46 ----D---- C:\Program Files (x86)\Future Dance Simulatie 2014-04-10 09:02:15 ----A---- C:\Windows\SYSWOW64\iologmsg.dll 2014-04-10 09:02:15 ----A---- C:\Windows\system32\iologmsg.dll 2014-04-10 09:02:15 ----A---- C:\Windows\system32\drivers\storport.sys 2014-04-10 09:02:15 ----A---- C:\Windows\system32\drivers\msiscsi.sys 2014-04-10 09:02:15 ----A---- C:\Windows\system32\drivers\Diskdump.sys 2014-04-10 09:02:04 ----A---- C:\Windows\system32\kernel32.dll 2014-04-10 09:02:03 ----A---- C:\Windows\SYSWOW64\setup16.exe 2014-04-10 09:02:03 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2014-04-10 09:02:03 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2014-04-10 09:02:03 ----A---- C:\Windows\system32\wow64win.dll 2014-04-10 09:02:03 ----A---- C:\Windows\system32\wow64cpu.dll 2014-04-10 09:02:03 ----A---- C:\Windows\system32\wow64.dll 2014-04-10 09:02:03 ----A---- C:\Windows\system32\ntvdm64.dll 2014-04-10 09:02:01 ----A---- C:\Windows\SYSWOW64\wow32.dll 2014-04-10 09:02:01 ----A---- C:\Windows\SYSWOW64\user.exe 2014-04-10 09:02:01 ----A---- C:\Windows\SYSWOW64\instnm.exe 2014-04-10 09:01:59 ----A---- C:\Windows\system32\drivers\ntfs.sys ======List of files/folders modified in the last 1 month====== 2014-05-07 09:09:06 ----RD---- C:\Program Files 2014-05-07 09:08:05 ----D---- C:\Windows\Temp 2014-05-06 14:18:29 ----D---- C:\Windows\system32\config 2014-05-06 14:08:03 ----D---- C:\Windows\System32 2014-05-06 14:08:03 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-05-06 14:07:52 ----D---- C:\Windows\system32\drivers 2014-05-06 14:05:59 ----D---- C:\Windows\Tasks 2014-05-06 14:05:59 ----D---- C:\Windows\system32\Tasks 2014-05-06 14:02:29 ----D---- C:\Windows 2014-05-06 14:01:48 ----D---- C:\ProgramData\NVIDIA 2014-05-06 13:47:28 ----D---- C:\ProgramData\MFAData 2014-05-06 13:23:42 ----D---- C:\Users\Kristof\AppData\Roaming\Smart Driver Updater 2014-05-06 12:51:58 ----D---- C:\Windows\SysWOW64 2014-05-06 12:49:31 ----D---- C:\Windows\system32\catroot 2014-05-06 12:49:27 ----D---- C:\Windows\winsxs 2014-05-06 12:49:14 ----SHD---- C:\System Volume Information 2014-05-06 12:45:26 ----RD---- C:\Program Files (x86) 2014-05-06 12:44:39 ----D---- C:\ProgramData\NVIDIA Corporation 2014-05-06 12:41:46 ----D---- C:\Windows\Logs 2014-05-06 12:41:46 ----D---- C:\Program Files\NVIDIA Corporation 2014-05-06 12:41:44 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2014-05-06 12:41:35 ----D---- C:\Windows\Microsoft.NET 2014-05-06 12:40:44 ----SHD---- C:\Windows\Installer 2014-05-06 12:40:43 ----SHD---- C:\Config.Msi 2014-05-06 12:40:24 ----D---- C:\Windows\inf 2014-05-06 12:40:23 ----D---- C:\Windows\system32\DriverStore 2014-05-06 12:36:03 ----D---- C:\Users 2014-05-06 09:02:30 ----D---- C:\Windows\Prefetch 2014-04-29 20:08:35 ----D---- C:\Windows\system32\catroot2 2014-04-29 20:03:46 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2014-04-27 18:43:03 ----D---- C:\Windows\SoftwareDistribution 2014-04-27 18:03:07 ----D---- C:\Users\Kristof\AppData\Roaming\BitTorrent 2014-04-27 18:02:56 ----D---- C:\Windows\debug 2014-04-25 10:21:29 ----HD---- C:\ProgramData 2014-04-23 11:23:51 ----D---- C:\Windows\SYSWOW64\RTCOM 2014-04-23 11:19:43 ----A---- C:\log.txt 2014-04-23 11:18:38 ----A---- C:\Windows\system32\RTNUninst64.dll 2014-04-23 09:08:15 ----D---- C:\ProgramData\AVAST Software 2014-04-21 20:33:17 ----D---- C:\Windows\rescache 2014-04-21 19:55:33 ----D---- C:\Windows\system32\wbem 2014-04-21 19:54:05 ----D---- C:\Program Files (x86)\Internet Explorer 2014-04-21 19:54:04 ----D---- C:\Program Files\Internet Explorer 2014-04-21 19:54:04 ----D---- C:\Program Files\HitmanPro 2014-04-21 19:53:54 ----D---- C:\Windows\AppPatch 2014-04-21 19:53:54 ----D---- C:\Windows\AppCompat 2014-04-21 19:53:51 ----D---- C:\Windows\security 2014-04-21 19:53:51 ----D---- C:\Windows\PolicyDefinitions 2014-04-21 19:53:49 ----D---- C:\Windows\system32\drivers\UMDF 2014-04-21 19:53:49 ----D---- C:\Windows\system32\CodeIntegrity 2014-04-21 19:53:48 ----D---- C:\Windows\SYSWOW64\nl-NL 2014-04-21 19:53:48 ----D---- C:\Windows\SYSWOW64\en-US 2014-04-21 19:53:48 ----D---- C:\Windows\system32\SRSLabs 2014-04-21 19:53:48 ----D---- C:\Windows\system32\nl-NL 2014-04-21 19:53:48 ----D---- C:\Windows\system32\en-US 2014-04-21 19:53:40 ----D---- C:\Windows\registration 2014-04-19 15:00:59 ----D---- C:\Windows\system32\wfp 2014-04-19 14:08:46 ----SHD---- C:\Recovery 2014-04-17 14:17:14 ----D---- C:\ProgramData\Microsoft Help 2014-04-17 14:14:39 ----D---- C:\Windows\system32\MRT 2014-04-11 10:22:36 ----A---- C:\Windows\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2014-03-27 192792] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2014-03-27 324376] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2014-03-31 130840] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2014-03-27 32536] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552] R0 waemu;waemu; C:\Windows\system32\Drivers\waemu.sys [2013-04-16 140184] R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2014-03-27 153368] R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2013-09-26 57144] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2014-04-18 237336] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-03-27 236824] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2014-03-31 274200] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560] R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2012-12-09 126944] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R3 dtscsibus;DAEMON Tools Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtscsibus.sys [2013-06-14 29696] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 HCW85BDA;Hauppauge WinTV 885 Video Capture; C:\Windows\system32\drivers\HCW85BDA.sys [2009-06-10 1192448] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-04-23 3872984] R3 netr7364;RT73 USB Extensible Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\netr7364.sys [2011-10-05 729152] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-12-27 39200] R3 RSUSBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys [2014-03-23 50176] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2014-03-23 271064] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-04-23 901848] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920] S3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2011-08-10 52584] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688] S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832] S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-09-28 53760] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496] S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760] S3 WinUsb;WinUsb-stuurprogramma; C:\Windows\system32\drivers\WinUSB.sys [2010-11-20 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008] R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [2014-04-03 1473280] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-04-18 3645456] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-03-27 291912] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-05-24 1840128] R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-09-07 100864] R2 HitmanProScheduler;HitmanPro Scheduler; C:\Program Files\HitmanPro\hmpsched.exe [2014-03-29 127752] R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2013-12-17 46904] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-11-22 73728] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-02-05 1593632] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-02-05 16941856] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-03-04 922968] R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2014-03-23 290520] R2 SplashtopRemoteService;Splashtop® Remote Service; C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe [2013-01-28 551264] R2 SSUService;Splashtop Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe [2013-08-07 609056] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-03-04 411936] R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-04 5316448] R2 WinArchiver Service;WinArchiver Service; C:\Program Files (x86)\WinArchiver\WAService.exe [2013-04-16 202264] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480] R3 Disc Soft Bus Service;Disc Soft Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [2013-05-23 632352] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-11 116648] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29 257712] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2011-04-26 2702848] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-11 116648] S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616] S3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-02-20 641352] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-23 1255736] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] -----------------EOF-----------------