Logfile of random's system information tool 1.10 (written by random/random) Run by hp at 2015-01-05 22:42:32 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 151 GB (33%) free of 459 GB Total RAM: 4023 MB (43% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:42:38, on 5/01/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17496) Boot mode: Normal Running processes: C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files\BitDefender\Bitdefender\antispam32\bdapppassmgr.exe C:\Program Files (x86)\Skype\Phone\Skype.exe c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files\trend micro\hp.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKCU\..\Run: [Bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe" O4 - HKCU\..\Run: [Bitdefender Wallet] "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard O4 - HKCU\..\Run: [Bitdefender Agent Wallet-toepassing] "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe" O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [Google Update] "C:\Users\hp\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Facebook Update] "C:\Users\hp\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [Bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe" (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe" (User 'Default user') O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing) O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: SafeBox - Bitdefender - C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Sony Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe O23 - Service: Sony Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe O23 - Service: VAIO Entertainment Common Service (SpfService) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender\vsserv.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 13334 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Program Files\Bitdefender\Bitdefender\vsserv.exe" /service C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\Hpservice.exe C:\Windows\system32\svchost.exe -k NetworkService "C:\Windows\system32\Dwm.exe" C:\Windows\system32\WLANExt.exe 34354496 \??\C:\Windows\system32\conhost.exe "326709645-421477553-369760048646058375-1957079270-1795531963-1706909036585304748 C:\Windows\Explorer.EXE C:\Windows\System32\spoolsv.exe "taskhost.exe" C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files\IDT\WDM\sttray64.exe" "C:\Program Files\BitDefender\Bitdefender\bdagent.exe" "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "C:\Program Files\BitDefender\Bitdefender\pmbxag.exe" "C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE" "C:\Program Files\BitDefender\Bitdefender\antispam32\bdapppassmgr.exe" "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service C:\Windows\SysWOW64\svchost.exe -k netsvcs "C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe" taskeng.exe {2DFB283F-23A3-4BFE-A315-ED161FA8C877} C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt "c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" "C:\Program Files (x86)\iTunes\iTunesHelper.exe" "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" "C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe" "C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe" "C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe" "C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe" /service C:\Windows\System32\svchost.exe -k WerSvcGroup "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss e991e8ad-d284-4db8-a525-a4691df14793 1 "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp "C:\Program Files\iPod\bin\iPodService.exe" \??\C:\Windows\system32\conhost.exe "-1713361106153095480-269981106-875817830-1521427413-91827342-1239494538907001255 \??\C:\Windows\system32\conhost.exe "-11312611811880138064604990097863078527312440745-2989709261380427149-212566136 C:\Windows\system32\SearchIndexer.exe /Embedding C:\Windows\system32\svchost.exe -k HPService WLIDSvcM.exe 4056 "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe" C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe" -Embedding "C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe" "13430HP Wireless AssistantWLAN: AanC:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\images\wireless_on.icoC:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exeSHOWSTATUS" C:\Windows\system32\svchost.exe -k SDRSVC "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe87_ Global\UsGthrCtrlFltPipeMssGthrPipe87 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "https://mail.google.com/mail/?hl=nl&shva=1#inbox" C:\Windows\system32\wbem\wmiprvse.exe "C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540 C:\Windows\system32\sppsvc.exe "C:\Users\hp\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\Adobe Reader and Acrobat Manager (optimized).job - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2777246505-950060968-3702123830-1000Core.job - C:\Users\hp\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2777246505-950060968-3702123830-1000UA.job - C:\Users\hp\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler C:\Windows\tasks\Google Update (optimized).job - C:\Users\hp\AppData\Local\Google\Update\GoogleUpdate.exe C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2777246505-950060968-3702123830-1000Core.job - C:\Users\hp\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2777246505-950060968-3702123830-1000UA.job - C:\Users\hp\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\hpwuSchd Application (optimized).job - C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe C:\Windows\tasks\Java(TM) Platform SE 6 U15 (optimized).job - C:\Program Files\Java\jre6\bin\jusched.exe C:\Windows\tasks\Java(TM) Platform SE Auto Updater (optimized).job - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =========Mozilla firefox========= ProfilePath - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\q2jgmlw6.default prefs.js - "browser.startup.homepage" - "http://hln.be" prefs.js - "keyword.enabled" - false [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 16.0.0.235 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Bitdefender.com/PasswordManager;version=17.8] "Description"=Bitdefender Wallet "Path"=C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.67.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 16.0.0.235 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\q2jgmlw6.default\extensions\ {25dd52dc-89a8-469d-9e8f-8d483095d1e8} ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1DAC0C53-7D23-4AB3-856A-B04D98CD982A}] Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll [2014-03-14 193992] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-11 43520] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}] HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1DAC0C53-7D23-4AB3-856A-B04D98CD982A}] Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxie.dll [2014-03-14 156400] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-08 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}] Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-08 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}] HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288] "SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-03-23 487424] "Bdagent"=C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [2014-04-11 1742064] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-30 2199840] "ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-04-30 1225920] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Bitdefender Wallet Agent"=C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [2014-04-11 567888] "Bitdefender Wallet"=C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [2014-04-11 1001536] "Bitdefender Agent Wallet-toepassing"=C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [2014-04-11 614232] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30877280] "Google Update"=C:\Users\hp\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-28 107912] "Facebook Update"=C:\Users\hp\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-11-24 138096] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel File Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [2009-08-25 15544] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2009-09-02 60464] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\facemoods] C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.4\facemoodssrv.exe /md I [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] C:\Users\hp\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-28 107912] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2009-09-29 1685048] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PMBVolumeWatcher] C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2013-12-18 2367512] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-08-20 322104] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2009-08-25 610872] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] C:\PROGRA~2\Hp\DIGITA~1\bin\hpqtra08.exe [2009-09-20 270336] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "WirelessAssistant"=C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-07-23 498744] "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-10-11 60712] "iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2009-12-11 52272] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableLockWorkstation"=0 "DisableTaskMgr"=0 "DisableChangePassword"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "HideFastUserSwitching"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "aux"=wdmaud.drv "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv ======File associations====== .inf - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1 .ini - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1 .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - "C:\Windows\System32\WScript.exe" "%1" %* .txt - open - "%SystemRoot%\system32\NOTEPAD.EXE" %1 ======List of files/folders created in the last 3 months====== 2015-01-05 22:42:33 ----D---- C:\Program Files\trend micro 2015-01-05 22:42:32 ----D---- C:\rsit 2014-12-18 07:51:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2014-12-18 07:51:04 ----A---- C:\Windows\system32\ieUnatt.exe 2014-12-16 10:08:04 ----A---- C:\ntuser.dat 2014-12-16 09:39:35 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys 2014-12-16 09:39:19 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-12-16 09:39:19 ----A---- C:\Windows\system32\drivers\mwac.sys 2014-12-16 09:39:19 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys 2014-12-16 09:38:38 ----D---- C:\Users\hp\AppData\Roaming\Malwarebytes 2014-12-16 09:38:20 ----D---- C:\ProgramData\Malwarebytes 2014-12-16 09:38:19 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-12-16 09:38:19 ----A---- C:\Windows\system32\drivers\mbam.sys 2014-12-12 10:16:38 ----D---- C:\Program Files (x86)\QuickTime 2014-12-12 10:14:04 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-12-12 10:14:04 ----D---- C:\Program Files\iTunes 2014-12-12 10:14:04 ----D---- C:\Program Files\iPod 2014-12-12 10:14:04 ----D---- C:\Program Files (x86)\iTunes 2014-12-11 09:18:36 ----A---- C:\Windows\SYSWOW64\mferror.dll 2014-12-11 09:18:36 ----A---- C:\Windows\system32\mfpmp.exe 2014-12-11 09:18:36 ----A---- C:\Windows\system32\mferror.dll 2014-12-11 09:18:35 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe 2014-12-11 09:18:35 ----A---- C:\Windows\SYSWOW64\mfps.dll 2014-12-11 09:18:35 ----A---- C:\Windows\SYSWOW64\mfpmp.exe 2014-12-11 09:18:35 ----A---- C:\Windows\SYSWOW64\mf.dll 2014-12-11 09:18:35 ----A---- C:\Windows\system32\rrinstaller.exe 2014-12-11 09:18:35 ----A---- C:\Windows\system32\mfps.dll 2014-12-11 09:18:35 ----A---- C:\Windows\system32\mf.dll 2014-12-11 09:17:02 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll 2014-12-11 09:17:02 ----A---- C:\Windows\system32\msmpeg2vdec.dll 2014-12-11 09:14:37 ----A---- C:\Windows\SYSWOW64\charmap.exe 2014-12-11 09:14:37 ----A---- C:\Windows\system32\charmap.exe 2014-12-11 09:14:28 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll 2014-12-11 09:14:28 ----A---- C:\Windows\system32\WsmWmiPl.dll 2014-12-11 09:14:28 ----A---- C:\Windows\system32\WsmSvc.dll 2014-12-11 09:14:28 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-11 09:14:28 ----A---- C:\Windows\system32\WSManHTTPConfig.exe 2014-12-11 09:14:27 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll 2014-12-11 09:14:27 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll 2014-12-11 09:14:27 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll 2014-12-11 09:14:27 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe 2014-12-11 09:14:27 ----A---- C:\Windows\system32\WsmAuto.dll 2014-12-11 09:14:14 ----A---- C:\Windows\SYSWOW64\tzres.dll 2014-12-11 09:14:14 ----A---- C:\Windows\system32\tzres.dll 2014-12-11 09:13:42 ----A---- C:\Windows\system32\drivers\tdx.sys 2014-12-11 09:13:34 ----A---- C:\Windows\SYSWOW64\msi.dll 2014-12-11 09:13:34 ----A---- C:\Windows\system32\msi.dll 2014-12-11 09:13:04 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2014-12-11 09:13:03 ----A---- C:\Windows\system32\mstscax.dll 2014-12-11 09:12:53 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\system32\KBDYAK.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\system32\KBDTAT.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\system32\KBDRU1.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\system32\KBDRU.DLL 2014-12-11 09:12:53 ----A---- C:\Windows\system32\KBDBASH.DLL 2014-12-11 09:12:40 ----A---- C:\Windows\SYSWOW64\qdvd.dll 2014-12-11 09:12:40 ----A---- C:\Windows\system32\qdvd.dll 2014-12-11 09:12:32 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2014-12-11 09:12:32 ----A---- C:\Windows\system32\d3d10warp.dll 2014-12-11 09:12:24 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll 2014-12-11 09:12:24 ----A---- C:\Windows\system32\TSWorkspace.dll 2014-12-11 09:12:08 ----A---- C:\Windows\SYSWOW64\shell32.dll 2014-12-11 09:12:08 ----A---- C:\Windows\system32\shell32.dll 2014-12-11 08:22:18 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2014-12-11 08:22:18 ----A---- C:\Windows\system32\WindowsCodecs.dll 2014-12-11 08:22:14 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2014-12-11 08:22:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2014-12-11 08:22:14 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2014-12-11 08:22:14 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-12-11 08:22:14 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-12-11 08:22:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2014-12-11 08:22:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2014-12-11 08:22:13 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2014-12-11 08:22:13 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2014-12-11 08:22:13 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2014-12-11 08:22:13 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2014-12-11 08:22:13 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-11 08:22:13 ----A---- C:\Windows\system32\iernonce.dll 2014-12-11 08:22:13 ----A---- C:\Windows\system32\ie4uinit.exe 2014-12-11 08:22:11 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2014-12-11 08:22:11 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2014-12-11 08:22:11 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2014-12-11 08:22:11 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2014-12-11 08:22:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2014-12-11 08:22:11 ----A---- C:\Windows\system32\urlmon.dll 2014-12-11 08:22:11 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-11 08:22:11 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-12-11 08:22:11 ----A---- C:\Windows\system32\iedkcs32.dll 2014-12-11 08:22:10 ----A---- C:\Windows\SYSWOW64\ieui.dll 2014-12-11 08:22:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2014-12-11 08:22:10 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2014-12-11 08:22:10 ----A---- C:\Windows\system32\msfeeds.dll 2014-12-11 08:22:10 ----A---- C:\Windows\system32\iesetup.dll 2014-12-11 08:22:10 ----A---- C:\Windows\system32\ieapfltr.dll 2014-12-11 08:22:10 ----A---- C:\Windows\system32\dxtrans.dll 2014-12-11 08:22:09 ----A---- C:\Windows\system32\iertutil.dll 2014-12-11 08:22:08 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2014-12-11 08:22:08 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2014-12-11 08:22:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2014-12-11 08:22:07 ----A---- C:\Windows\SYSWOW64\wininet.dll 2014-12-11 08:22:07 ----A---- C:\Windows\system32\jsproxy.dll 2014-12-11 08:22:06 ----A---- C:\Windows\SYSWOW64\msrating.dll 2014-12-11 08:22:06 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2014-12-11 08:22:06 ----A---- C:\Windows\system32\ieui.dll 2014-12-11 08:22:06 ----A---- C:\Windows\system32\dxtmsft.dll 2014-12-11 08:22:05 ----A---- C:\Windows\system32\ieframe.dll 2014-12-11 08:22:03 ----A---- C:\Windows\system32\mshtmled.dll 2014-12-11 08:22:02 ----A---- C:\Windows\system32\mshtmlmedia.dll 2014-12-11 08:22:02 ----A---- C:\Windows\system32\jscript9diag.dll 2014-12-11 08:22:02 ----A---- C:\Windows\system32\jscript9.dll 2014-12-11 08:22:01 ----A---- C:\Windows\system32\wininet.dll 2014-12-11 08:22:01 ----A---- C:\Windows\system32\vbscript.dll 2014-12-11 08:22:00 ----A---- C:\Windows\system32\msrating.dll 2014-12-11 08:22:00 ----A---- C:\Windows\system32\MshtmlDac.dll 2014-12-11 08:22:00 ----A---- C:\Windows\system32\mshtml.dll 2014-12-10 21:00:42 ----D---- C:\Program Files (x86)\Mozilla Firefox 2014-12-10 17:30:04 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe 2014-11-22 12:37:23 ----A---- C:\Windows\system32\schannel.dll 2014-11-22 12:37:22 ----A---- C:\Windows\SYSWOW64\schannel.dll 2014-11-22 12:37:22 ----A---- C:\Windows\system32\ncrypt.dll 2014-11-22 12:37:21 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2014-11-22 12:37:21 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2014-11-22 12:37:21 ----A---- C:\Windows\system32\wdigest.dll 2014-11-22 12:37:21 ----A---- C:\Windows\system32\msv1_0.dll 2014-11-22 12:37:20 ----A---- C:\Windows\SYSWOW64\wdigest.dll 2014-11-22 12:37:20 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2014-11-22 12:37:20 ----A---- C:\Windows\SYSWOW64\credssp.dll 2014-11-22 12:37:20 ----A---- C:\Windows\system32\TSpkg.dll 2014-11-22 12:37:20 ----A---- C:\Windows\system32\credssp.dll 2014-11-22 12:37:15 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2014-11-22 12:37:15 ----A---- C:\Windows\system32\termsrv.dll 2014-11-22 12:37:15 ----A---- C:\Windows\system32\adtschema.dll 2014-11-22 12:37:14 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2014-11-22 12:37:14 ----A---- C:\Windows\system32\msaudite.dll 2014-11-22 12:36:50 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2014-11-22 12:36:50 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2014-11-22 12:36:50 ----A---- C:\Windows\system32\msxml3r.dll 2014-11-22 12:36:50 ----A---- C:\Windows\system32\msxml3.dll 2014-11-22 12:36:49 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL 2014-11-22 12:36:49 ----A---- C:\Windows\system32\IMJP10K.DLL 2014-11-22 12:36:41 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2014-11-22 12:36:41 ----A---- C:\Windows\system32\lsasrv.dll 2014-11-22 12:36:41 ----A---- C:\Windows\system32\kerberos.dll 2014-11-22 12:36:41 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2014-11-22 12:36:40 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2014-11-22 12:36:40 ----A---- C:\Windows\SYSWOW64\secur32.dll 2014-11-22 12:36:40 ----A---- C:\Windows\SYSWOW64\pku2u.dll 2014-11-22 12:36:40 ----A---- C:\Windows\system32\pku2u.dll 2014-11-22 12:36:31 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll 2014-11-22 12:36:31 ----A---- C:\Windows\system32\EncDump.dll 2014-11-22 12:36:31 ----A---- C:\Windows\system32\audiosrv.dll 2014-11-22 12:36:31 ----A---- C:\Windows\system32\AUDIOKSE.dll 2014-11-22 12:36:31 ----A---- C:\Windows\system32\AudioEng.dll 2014-11-22 12:36:30 ----A---- C:\Windows\SYSWOW64\AudioSes.dll 2014-11-22 12:36:30 ----A---- C:\Windows\SYSWOW64\AudioEng.dll 2014-11-22 12:36:30 ----A---- C:\Windows\system32\AudioSes.dll 2014-11-22 12:36:24 ----A---- C:\Windows\SYSWOW64\packager.dll 2014-11-22 12:36:24 ----A---- C:\Windows\system32\packager.dll 2014-11-22 12:36:23 ----A---- C:\Windows\system32\win32k.sys 2014-11-22 12:35:52 ----A---- C:\Windows\SYSWOW64\oleaut32.dll 2014-11-22 12:35:52 ----A---- C:\Windows\system32\oleaut32.dll 2014-11-18 14:56:48 ----A---- C:\Windows\SYSWOW64\FM20.DLL 2014-10-16 11:55:29 ----A---- C:\Windows\SYSWOW64\mscorier.dll 2014-10-16 11:55:29 ----A---- C:\Windows\SYSWOW64\dfshim.dll 2014-10-16 11:55:29 ----A---- C:\Windows\system32\mscories.dll 2014-10-16 11:55:29 ----A---- C:\Windows\system32\mscorier.dll 2014-10-16 11:55:29 ----A---- C:\Windows\system32\dfshim.dll 2014-10-16 11:55:28 ----A---- C:\Windows\SYSWOW64\mscories.dll 2014-10-16 11:54:40 ----A---- C:\Windows\system32\rdpcorets.dll 2014-10-16 11:54:35 ----A---- C:\Windows\SYSWOW64\rastls.dll 2014-10-16 11:54:35 ----A---- C:\Windows\system32\rastls.dll 2014-10-16 11:54:23 ----A---- C:\Windows\SYSWOW64\winsta.dll 2014-10-16 11:54:23 ----A---- C:\Windows\system32\winsta.dll 2014-10-16 11:54:23 ----A---- C:\Windows\system32\rdpcorekmts.dll 2014-10-16 11:54:23 ----A---- C:\Windows\system32\drivers\rdpwd.sys 2014-10-16 11:54:22 ----A---- C:\Windows\system32\winlogon.exe 2014-10-16 11:54:19 ----A---- C:\Windows\system32\drivers\tssecsrv.sys 2014-10-14 18:27:28 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak 2014-10-06 15:31:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service ======List of files/folders modified in the last 3 months====== 2015-01-05 22:42:39 ----D---- C:\Windows\Prefetch 2015-01-05 22:42:33 ----RD---- C:\Program Files 2015-01-05 22:42:23 ----D---- C:\Windows\Temp 2015-01-05 22:28:31 ----D---- C:\Windows\system32\drivers\etc 2015-01-05 22:28:17 ----D---- C:\Users\hp\AppData\Roaming\Skype 2015-01-05 18:11:42 ----D---- C:\Windows\system32\config 2015-01-05 16:34:42 ----D---- C:\Windows\System32 2015-01-05 16:34:42 ----D---- C:\Windows\inf 2015-01-05 16:34:42 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-01-05 16:28:38 ----HD---- C:\ProgramData 2015-01-05 16:28:38 ----A---- C:\ProgramData\HPWALog.txt 2015-01-05 00:21:11 ----A---- C:\bdlog.txt 2015-01-04 12:41:04 ----SHD---- C:\System Volume Information 2014-12-27 16:51:34 ----D---- C:\Windows\system32\catroot2 2014-12-27 15:33:28 ----SHD---- C:\Windows\Installer 2014-12-27 15:33:28 ----SHD---- C:\Config.Msi 2014-12-27 15:33:27 ----D---- C:\Windows\system32\Tasks 2014-12-21 21:48:27 ----RD---- C:\Program Files (x86)\Skype 2014-12-21 21:48:18 ----D---- C:\ProgramData\Skype 2014-12-21 21:48:15 ----D---- C:\Windows\SysWOW64 2014-12-18 15:51:29 ----D---- C:\Windows\system32\drivers 2014-12-18 15:49:00 ----D---- C:\Windows\Resources 2014-12-18 15:12:32 ----D---- C:\Windows\winsxs 2014-12-18 07:44:03 ----D---- C:\Windows\system32\catroot 2014-12-17 18:48:00 ----D---- C:\Windows\rescache 2014-12-16 13:07:21 ----D---- C:\Windows 2014-12-16 09:53:44 ----SD---- C:\ProgramData\Microsoft 2014-12-16 09:39:19 ----RD---- C:\Program Files (x86) 2014-12-12 10:14:04 ----D---- C:\Program Files\Common Files\Apple 2014-12-12 10:13:51 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-12-12 10:11:23 ----D---- C:\Windows\system32\DriverStore 2014-12-11 09:25:38 ----D---- C:\Windows\SYSWOW64\nl-NL 2014-12-11 09:25:38 ----D---- C:\Windows\system32\nl-NL 2014-12-11 09:25:37 ----RSD---- C:\Windows\Fonts 2014-12-11 09:16:46 ----D---- C:\Windows\SYSWOW64\Dism 2014-12-11 09:16:46 ----D---- C:\Windows\system32\Dism 2014-12-11 09:16:28 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2014-12-11 09:01:53 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2014-12-11 08:42:36 ----D---- C:\Program Files\Internet Explorer 2014-12-11 08:42:30 ----D---- C:\Windows\SYSWOW64\en-US 2014-12-11 08:42:23 ----D---- C:\Windows\PolicyDefinitions 2014-12-11 08:42:21 ----D---- C:\Windows\system32\en-US 2014-12-11 08:42:13 ----D---- C:\Program Files (x86)\Internet Explorer 2014-12-11 08:35:07 ----D---- C:\ProgramData\Microsoft Help 2014-12-11 08:34:24 ----D---- C:\Windows\system32\MRT 2014-12-11 08:31:14 ----D---- C:\Windows\debug 2014-12-11 08:31:12 ----A---- C:\Windows\system32\MRT.exe 2014-12-11 08:12:47 ----D---- C:\Windows\SoftwareDistribution 2014-12-11 08:12:40 ----D---- C:\Windows\Minidump 2014-11-24 18:33:42 ----D---- C:\Windows\Tasks 2014-11-23 10:53:43 ----D---- C:\Windows\Microsoft.NET 2014-11-23 10:53:03 ----RSD---- C:\Windows\assembly 2014-11-22 12:20:07 ----D---- C:\Windows\system32\wdi 2014-10-28 21:03:29 ----D---- C:\Users\hp\AppData\Roaming\Hewlett-Packard 2014-10-12 11:44:45 ----D---- C:\Program Files (x86)\Common Files 2014-10-06 15:30:31 ----D---- C:\Windows\system32\NDF ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 avc3;avc3; C:\Windows\system32\DRIVERS\avc3.sys [2014-02-18 893440] R0 gzflt;gzflt; C:\Windows\system32\DRIVERS\gzflt.sys [2013-11-14 150256] R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008] R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-08-08 408600] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 trufos;trufos; C:\Windows\system32\DRIVERS\trufos.sys [2013-11-14 389240] R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver; \??\c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2013-02-22 93600] R1 bdfwfpf;bdfwfpf; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2011-11-14 103504] R1 BDVEDISK;BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [2012-04-17 76944] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320] R3 avchv;avchv Function Driver; C:\Windows\system32\DRIVERS\avchv.sys [2012-11-02 261056] R3 avckf;avckf; C:\Windows\system32\DRIVERS\avckf.sys [2014-02-18 635392] R3 BCM43XX;Stuurprogramma voor de Broadcom 802.11-netwerkadapter; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-01-15 2838008] R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2009-06-29 70656] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 18432] R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-13 151040] R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-07-21 140712] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-11-21 25816] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-05-20 197408] R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-04-30 18776] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392] R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-03-23 505344] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920] S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880] S3 bdfwfpf_pc;bdfwfpf_pc; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [2013-11-14 121928] S3 bdsandbox;bdsandbox; \??\C:\Windows\system32\drivers\bdsandbox.sys [2013-12-10 82824] S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920] S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008] S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416] S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-11-21 63704] S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2013-07-25 23040] S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368] S3 NuidFltr;NUID filter driver; C:\Windows\system32\DRIVERS\NuidFltr.sys [2007-08-31 20392] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-10-03 258560] S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056] S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] S3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088] R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744] R2 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520] R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-10-14 92216] R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-30 1617696] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-04-30 21007192] R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [2013-12-18 481304] R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-07-06 247152] R2 SafeBox;SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [2013-07-08 94624] R2 SOHDms;Sony Digital Media Server; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2013-11-07 495248] R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe [2010-03-23 247808] R2 UPDATESRV;Bitdefender Desktop Update Service; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [2013-12-10 67320] R2 VSSERV;Bitdefender Virus Shield; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [2014-04-11 1523728] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136] R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-10-14 751672] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880] R3 SpfService;VAIO Entertainment Common Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2011-12-01 289952] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24 107912] S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-11 267440] S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176] S3 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] S3 Com4QLBEx;Com4QLBEx; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408] S3 GameConsoleService;GameConsoleService; C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe [2009-06-06 250616] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24 107912] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-10 114800] S3 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-07-02 935368] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 SOHDs;Sony Device Searcher; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2013-09-12 79000] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-02 1255736] S4 BdDesktopParental;Bitdefender Desktop Parental Control; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [2013-12-10 77632] S4 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] -----------------EOF-----------------