Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2015 Ran by dannywintjens (administrator) on WINTJENS on 20-01-2015 02:57:26 Running from C:\Users\dannywintjens\Downloads Loaded Profiles: dannywintjens (Available profiles: dannywintjens & UpdatusUser) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Nederlands (Nederland) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe () C:\Windows\System32\AppleOSSMgr.exe (Apple Inc.) C:\Windows\System32\AppleTimeSrv.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe () C:\Program Files (x86)\Razer\Comms\RazerComms.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Razer, Inc.) C:\Users\dannywintjens\AppData\Local\Razer\InGameEngine\cache\RazerComms\RzCefRenderProcess.exe (Siber Systems Inc.) C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome-nm-host.exe (Razer, Inc.) C:\Users\dannywintjens\AppData\Local\Razer\InGameEngine\cache\RazerComms\RzCefRenderProcess.exe (Replex Viewer Project) C:\Program Files\Replex\ReplexViewer.exe (Dropbox, Inc.) C:\Users\dannywintjens\AppData\Roaming\Dropbox\bin\Dropbox.exe (Vivox Inc.) C:\Program Files\Replex\SLVoice.exe () C:\Program Files\Replex\prebuilt_plugin\SLPlugin.exe () C:\Program Files\Replex\prebuilt_plugin\SLPlugin.exe () C:\Program Files\Replex\prebuilt_plugin\SLPlugin.exe () C:\Program Files\Replex\prebuilt_plugin\SLPlugin.exe () C:\Program Files\Replex\prebuilt_plugin\SLPlugin.exe () C:\Program Files\Replex\prebuilt_plugin\SLPlugin.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Apple Inc.) C:\Program Files\Boot Camp\Bootcamp.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Nicolas Coolman) C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe () C:\Program Files\Replex\prebuilt_plugin\SLPlugin.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Apple_KbdMgr] => C:\Program Files\Boot Camp\Bootcamp.exe [746816 2014-01-31] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-03-20] (AVAST Software) HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1802048 2014-10-13] (IObit) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2014-11-19] (Siber Systems) HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\...\Run: [Razer Comms] => C:\Program Files (x86)\Razer\Comms\RazerComms.exe [2834240 2014-12-16] () <===== ATTENTION HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872168 2014-12-11] (Skype Technologies S.A.) HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2425632 2014-11-17] (IObit) HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\...\MountPoints2: {2cd445fe-7dd2-11e3-b7e6-806e6f6e6963} - D:\autorun.exe HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2425632 2014-11-17] (IObit) Startup: C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Bootcamp.exe.lnk ShortcutTarget: Bootcamp.exe.lnk -> C:\Program Files\Boot Camp\Bootcamp.exe (Apple Inc.) Startup: C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\dannywintjens\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) BootExecute: autocheck autochk * SmartDefragBootTime.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [S-1-5-21-2480803176-3389462879-1122066420-1000] => server2.privateconnection.net:3128 HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?ocid=iehp HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://nl.msn.com/?ocid=iehp SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2480803176-3389462879-1122066420-1000 -> URL http://search.conduit.com/Results.aspx?ctid=CT3321459&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP91EC7BEA-4F26-495A-BC84-02E03AEC8599&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-2480803176-3389462879-1122066420-1000 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms} SearchScopes: HKU\S-1-5-21-2480803176-3389462879-1122066420-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-2480803176-3389462879-1122066420-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Aanmeldhulp voor Microsoft-account -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.) Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.) Toolbar: HKU\S-1-5-21-2480803176-3389462879-1122066420-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 10.0.1.1 FireFox: ======== FF ProfilePath: C:\Users\dannywintjens\AppData\Roaming\Mozilla\Firefox\Profiles\c3sqde0w.default FF SelectedSearchEngine: Google FF Homepage: hxxp://www.trovi.com/?gd=&ctid=CT3330789&octid=EB_ORIGINAL_CTID&ISID=M6F95EFD3-71A8-48E6-8E8C-6DB51F7CCC6B&SearchSource=55&CUI=&UM=6&UP=SP723F71E7-04DF-4020-852F-40388AB9A103&SSPV= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll () FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1216156.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKU\S-1-5-21-2480803176-3389462879-1122066420-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\dannywintjens\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Extension: Advanced SystemCare Surfing Protection - C:\Users\dannywintjens\AppData\Roaming\Mozilla\Firefox\Profiles\c3sqde0w.default\Extensions\iobitascsurfingprotection@iobit.com [2014-11-21] FF Extension: Firebug - C:\Users\dannywintjens\AppData\Roaming\Mozilla\Firefox\Profiles\c3sqde0w.default\Extensions\firebug@software.joehewitt.com.xpi [2014-07-04] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-20] FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2014-04-01] FF HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-04-06] FF HKU\S-1-5-21-2480803176-3389462879-1122066420-1000\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox Chrome: ======= CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Presentaties) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-18] CHR Extension: (HD for YouTube™) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2015-01-18] CHR Extension: (Google Documenten) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-05] CHR Extension: (Google Drive) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-05] CHR Extension: (YouTube) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-05] CHR Extension: (Adblock Plus) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-18] CHR Extension: (Adblock voor Youtube™) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2015-01-18] CHR Extension: (Google Zoeken) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-05] CHR Extension: (Facebook Customizer (by Adblock Plus)) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\deoeenbkoccjaefmmhpmlegngdjohdcm [2015-01-18] CHR Extension: (Google Spreadsheets) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-18] CHR Extension: (Avast Online Security) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-18] CHR Extension: (Adblock For Youtube) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfdofdiiecohafjapmddfpbgjcpelonk [2015-01-18] CHR Extension: (Skype Click to Call) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-01-18] CHR Extension: (Google Wallet) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-18] CHR Extension: (Gmail) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-05] CHR Extension: (RoboForm) - C:\Users\dannywintjens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2015-01-18] CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-04-01] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-21] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14] CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-04-01] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit) R2 AppleOSSMgr; C:\Windows\system32\AppleOSSMgr.exe [226144 2013-01-16] () R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-20] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-04-01] (AVAST Software) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) S3 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2013-03-19] (Firebird Project) [File not signed] S3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3784704 2013-03-19] (Firebird Project) [File not signed] S3 HideMyIpSRV; C:\Program Files (x86)\Hide My IP 6\HideMyIpSRV.exe [3885056 2014-09-01] (Hide My IP) [File not signed] R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [344896 2014-09-30] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [38200 2014-12-01] (The OpenVPN Project) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-09] (Electronic Arts) R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [186048 2014-12-09] () R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) S3 Virtual Router; C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann (http://pietschsoft.com)) [File not signed] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S3 Steam Client Service; "C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 A2DDA; C:\EEK\BIN\a2ddax64.sys [26176 2015-01-19] (Emsisoft GmbH) R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare) R3 applebmt; C:\Windows\System32\DRIVERS\applebmt.sys [52736 2011-06-17] (Apple Inc.) S3 AppleODD; C:\Windows\System32\DRIVERS\AppleODD.sys [8704 2011-06-17] (Apple Inc.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-21] () R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-11-21] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-21] (AVAST Software) R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-11-21] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-21] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-21] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-22] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-21] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-21] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-21] () S3 cleanhlp; C:\EEK\bin\cleanhlp64.sys [57024 2015-01-19] (Emsisoft GmbH) R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit) R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-30] (REALiX(tm)) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-20] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [125952 2015-01-13] (Intel Corporation) R2 PfFilter; C:\Program Files (x86)\IObit\Protected Folder\pffilter.sys [38392 2012-11-23] (IObit Information Technology) R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com) R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2014-12-09] (Razer, Inc.) R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2014-11-17] (Razer, Inc.) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-07-14] (IObit) R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com) S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-20 02:57 - 2015-01-20 02:57 - 00025717 _____ () C:\Users\dannywintjens\Downloads\FRST.txt 2015-01-20 02:57 - 2015-01-20 02:57 - 00000000 ____D () C:\FRST 2015-01-20 02:44 - 2015-01-20 02:44 - 02126848 _____ (Farbar) C:\Users\dannywintjens\Downloads\FRST64.exe 2015-01-20 02:41 - 2015-01-20 02:43 - 00041665 _____ () C:\Users\dannywintjens\Desktop\ZHPDiag.txt 2015-01-20 02:12 - 2015-01-20 02:41 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\ZHP 2015-01-20 02:12 - 2015-01-20 02:12 - 00001999 _____ () C:\Users\dannywintjens\Desktop\ZHPFix.lnk 2015-01-20 02:12 - 2015-01-20 02:12 - 00001872 _____ () C:\Users\dannywintjens\Desktop\ZHPDiag.lnk 2015-01-20 02:12 - 2015-01-20 02:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP 2015-01-20 02:12 - 2015-01-20 02:12 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag 2015-01-20 02:00 - 2015-01-20 02:00 - 06865579 _____ (Nicolas Coolman ) C:\Users\dannywintjens\Downloads\ZHPDiag2.exe 2015-01-19 22:27 - 2015-01-20 01:33 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-19 22:27 - 2015-01-19 22:27 - 00001114 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-01-19 22:27 - 2015-01-19 22:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-01-19 22:27 - 2015-01-19 22:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-01-19 22:27 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-01-19 22:27 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-01-19 22:27 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-01-19 22:21 - 2015-01-19 22:22 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\dannywintjens\Downloads\mbam-setup-2.0.4.1028.exe 2015-01-19 21:41 - 2015-01-19 21:41 - 00003287 _____ () C:\Users\dannywintjens\Desktop\AdwCleaner[S0].txt 2015-01-19 21:10 - 2015-01-19 21:36 - 00000000 ____D () C:\AdwCleaner 2015-01-19 20:05 - 2015-01-19 20:05 - 02186752 _____ () C:\Users\dannywintjens\Downloads\adwcleaner_4.108 (3).exe 2015-01-19 20:01 - 2015-01-19 21:45 - 00000000 ___RD () C:\Users\dannywintjens\Dropbox 2015-01-19 20:01 - 2015-01-19 21:44 - 00001049 _____ () C:\Users\dannywintjens\Desktop\Dropbox.lnk 2015-01-19 20:00 - 2015-01-19 20:02 - 00000000 ____D () C:\ProgramData\ProductData 2015-01-19 19:47 - 2015-01-19 14:09 - 00024064 _____ () C:\Windows\zoek-delete.exe 2015-01-19 14:10 - 2015-01-19 13:02 - 00001067 _____ () C:\zoek-results2015-01-19-120232.log 2015-01-19 12:57 - 2015-01-19 12:57 - 02186752 _____ () C:\Users\dannywintjens\Downloads\adwcleaner_4.108.exe 2015-01-19 12:57 - 2015-01-19 12:57 - 02186752 _____ () C:\Users\dannywintjens\Downloads\adwcleaner_4.108 (2).exe 2015-01-19 12:57 - 2015-01-19 12:57 - 02186752 _____ () C:\Users\dannywintjens\Downloads\adwcleaner_4.108 (1).exe 2015-01-19 12:57 - 2015-01-19 12:57 - 02186752 _____ () C:\Users\dannywintjens\Downloads\AdwCleaner.exe 2015-01-19 12:57 - 2015-01-19 12:57 - 02186752 _____ () C:\Users\dannywintjens\Downloads\AdwCleaner (1).exe 2015-01-19 12:57 - 2015-01-19 05:15 - 00015915 _____ () C:\zoek-results2015-01-19-041553.log 2015-01-19 10:08 - 2015-01-19 10:08 - 00024876 _____ () C:\Users\dannywintjens\Desktop\a2scan_150119-052251.txt 2015-01-19 05:20 - 2015-01-19 05:21 - 00000000 ____D () C:\EEK 2015-01-19 05:20 - 2015-01-19 05:20 - 00000751 _____ () C:\Users\dannywintjens\Desktop\Start Emsisoft Emergency Kit.lnk 2015-01-19 05:19 - 2015-01-19 05:20 - 166831272 _____ () C:\Users\dannywintjens\Downloads\EmsisoftEmergencyKit.exe 2015-01-19 00:23 - 2015-01-18 22:03 - 00020903 _____ () C:\Users\dannywintjens\Desktop\mesh_object.dae 2015-01-18 23:03 - 2015-01-18 23:03 - 00019584 _____ () C:\Users\dannywintjens\Downloads\DAE-mesh_object-zY4fceSS.zip 2015-01-18 22:27 - 2015-01-18 20:31 - 00071463 _____ () C:\zoek-results2015-01-18-193157.log 2015-01-18 20:32 - 2015-01-19 20:00 - 00009825 _____ () C:\Users\dannywintjens\Desktop\zoek-results.txt 2015-01-18 20:29 - 2015-01-19 21:37 - 00010570 _____ () C:\Windows\PFRO.log 2015-01-18 20:28 - 2015-01-18 20:28 - 00000000 ____H () C:\asc_rdflag 2015-01-18 20:05 - 2015-01-19 19:59 - 00009822 _____ () C:\zoek-results.log 2015-01-18 20:04 - 2015-01-18 20:04 - 01295360 _____ () C:\Users\dannywintjens\Desktop\zoek.exe 2015-01-18 16:36 - 2015-01-18 16:37 - 00000000 ____D () C:\Program Files\trend micro 2015-01-18 16:36 - 2015-01-18 16:36 - 01222144 _____ () C:\Users\dannywintjens\Desktop\RSITx64.exe 2015-01-18 05:18 - 2015-01-18 05:18 - 04359432 _____ (IObit ) C:\Users\dannywintjens\Downloads\gb3.4-setup.exe 2015-01-18 05:12 - 2015-01-18 05:13 - 15971616 _____ (IObit) C:\Users\dannywintjens\Downloads\iobituninstaller (2).exe 2015-01-18 05:12 - 2015-01-18 05:12 - 10604648 _____ (IObit ) C:\Users\dannywintjens\Downloads\driver_booster_setup (1).exe 2015-01-18 05:11 - 2015-01-18 05:12 - 44931728 _____ (IObit ) C:\Users\dannywintjens\Downloads\advanced-systemcare-setup.exe 2015-01-18 05:11 - 2015-01-18 05:11 - 04978536 _____ (AVAST Software) C:\Users\dannywintjens\Downloads\avast_premier_antivirus_setup_online.exe 2015-01-18 01:00 - 2015-01-19 21:37 - 00000336 _____ () C:\Windows\setupact.log 2015-01-18 01:00 - 2015-01-18 01:00 - 00000000 _____ () C:\Windows\setuperr.log 2015-01-17 22:53 - 2015-01-18 05:52 - 00000364 _____ () C:\Windows\SysWOW64\Driver Booster License.txt 2015-01-17 22:31 - 2015-01-17 22:31 - 00003182 _____ () C:\Windows\System32\Tasks\ASC8_PerformanceMonitor 2015-01-17 19:14 - 2015-01-17 19:24 - 58454854 _____ () C:\Users\dannywintjens\Desktop\My Movie.mp4 2015-01-17 03:09 - 2015-01-17 03:09 - 00001607 _____ () C:\Users\dannywintjens\Desktop\media_cache - Snelkoppeling.lnk 2015-01-15 21:21 - 2015-01-20 00:15 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\Replex64 2015-01-15 21:20 - 2015-01-15 21:20 - 00000936 _____ () C:\Users\Public\Desktop\Replex (64 bit) Viewer.lnk 2015-01-15 21:20 - 2015-01-15 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Replex (64 bit) Viewer 2015-01-15 21:20 - 2015-01-15 21:20 - 00000000 ____D () C:\Program Files\Replex 2015-01-15 21:18 - 2015-01-15 21:19 - 31429734 _____ () C:\Users\dannywintjens\Downloads\Replex_1-0-0-6229_x86-64_Setup (1).exe 2015-01-15 21:18 - 2015-01-15 21:18 - 31429734 _____ () C:\Users\dannywintjens\Downloads\Replex_1-0-0-6229_x86-64_Setup.exe 2015-01-14 20:03 - 2015-01-14 20:03 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-01-14 20:03 - 2015-01-14 20:03 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-01-14 20:03 - 2015-01-14 20:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2015-01-14 20:03 - 2015-01-14 20:03 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-01-14 20:03 - 2015-01-14 20:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-01-14 20:03 - 2015-01-14 20:03 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-01-14 20:02 - 2015-01-14 20:02 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-01-14 20:02 - 2015-01-14 20:02 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-01-14 20:02 - 2015-01-14 20:02 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-01-14 20:02 - 2015-01-14 20:02 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-01-14 20:02 - 2015-01-14 20:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-01-14 20:02 - 2015-01-14 20:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-01-14 20:02 - 2015-01-14 20:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 25460552 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 24764232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 20465808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 18594432 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 17264312 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 13288360 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 13202520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 10770120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 10710160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 10345280 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-01-13 22:28 - 2015-01-13 22:28 - 03610440 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 03248968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 02897824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 01895056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434709.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 01556624 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434709.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00968336 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00942400 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00928072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00906560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00399688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00391488 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00346944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-01-13 22:28 - 2015-01-13 22:28 - 00195728 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2015-01-13 22:28 - 2015-01-13 22:28 - 00125952 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2015-01-13 22:28 - 2015-01-13 22:28 - 00030536 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2015-01-13 21:05 - 2015-01-13 21:05 - 00001264 _____ () C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2015-01-13 21:04 - 2015-01-13 21:05 - 15971616 _____ (IObit) C:\Users\dannywintjens\Downloads\iobituninstaller (1).exe 2015-01-13 02:35 - 2015-01-13 02:35 - 00000000 ____D () C:\Users\dannywintjens\Desktop\dnvpn 2015-01-13 02:26 - 2015-01-13 02:26 - 00000876 _____ () C:\Users\Public\Desktop\OpenVPN GUI.lnk 2015-01-13 02:25 - 2015-01-13 02:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN 2015-01-13 02:25 - 2015-01-13 02:26 - 00000000 ____D () C:\Program Files\TAP-Windows 2015-01-13 02:25 - 2015-01-13 02:26 - 00000000 ____D () C:\Program Files\OpenVPN 2015-01-13 02:25 - 2015-01-13 02:25 - 00006755 _____ () C:\Users\dannywintjens\Downloads\dnvpn.zip 2015-01-13 02:25 - 2015-01-13 02:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows 2015-01-13 02:24 - 2015-01-13 02:24 - 01811608 _____ () C:\Users\dannywintjens\Downloads\openvpn-install-2.3.6-I001-x86_64.exe 2015-01-13 02:24 - 2015-01-13 02:24 - 01798416 _____ () C:\Users\dannywintjens\Downloads\openvpn-install-2.3.6-I601-x86_64.exe 2015-01-11 22:56 - 2015-01-11 22:56 - 00000064 _____ () C:\Users\dannywintjens\Downloads\listen (5).pls 2015-01-11 22:39 - 2015-01-11 22:39 - 00301296 _____ () C:\Users\dannywintjens\Desktop\for fucks sake then..wav 2015-01-07 00:16 - 2015-01-07 00:16 - 00000060 _____ () C:\Users\dannywintjens\Downloads\listen (4).pls 2015-01-05 23:01 - 2015-01-18 01:50 - 00000094 _____ () C:\Users\dannywintjens\Desktop\apeal.txt 2015-01-05 02:05 - 2015-01-05 02:05 - 00847872 _____ () C:\Users\dannywintjens\Desktop\LSLEditor.exe 2015-01-05 02:01 - 2015-01-05 02:02 - 00000000 ____D () C:\Users\dannywintjens\Desktop\gate and genius bar 2015-01-04 18:51 - 2015-01-04 18:51 - 00971029 _____ () C:\Users\dannywintjens\Downloads\Police-Line-Tape-Do-Not-Cross-psd6657.zip 2015-01-04 04:27 - 2015-01-04 04:27 - 01713196 _____ () C:\Users\dannywintjens\Desktop\air conditioner noises.wav 2015-01-04 04:26 - 2015-01-04 04:26 - 01713196 _____ () C:\Users\dannywintjens\Desktop\air unitrunning (compressor).wav 2015-01-04 04:22 - 2015-01-04 04:25 - 01692716 _____ () C:\Users\dannywintjens\Desktop\air unit start (compressor).wav 2015-01-04 03:05 - 2015-01-04 03:05 - 01754018 _____ () C:\Users\dannywintjens\Desktop\pump compressor.wav 2015-01-04 03:05 - 2015-01-04 03:05 - 01749658 _____ () C:\Users\dannywintjens\Desktop\air conditioning noise.wav 2015-01-03 16:33 - 2015-01-04 17:09 - 00061409 _____ () C:\Users\dannywintjens\Desktop\alarm system.gliffy 2015-01-03 14:22 - 2015-01-18 20:32 - 00002335 _____ () C:\Users\dannywintjens\Desktop\App-opstartprogramma van Chrome.lnk 2015-01-03 14:22 - 2015-01-03 14:22 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-01-02 14:06 - 2015-01-02 14:06 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\IsolatedStorage 2014-12-31 17:41 - 2014-12-31 18:18 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\Ubisoft Game Launcher 2014-12-31 17:41 - 2014-12-31 17:41 - 00001213 _____ () C:\Users\dannywintjens\Desktop\Uplay.lnk 2014-12-31 17:41 - 2014-12-31 17:41 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2014-12-31 17:40 - 2014-12-31 17:40 - 60293720 _____ (Ubisoft) C:\Users\dannywintjens\Downloads\UplayInstaller.exe 2014-12-31 17:40 - 2014-12-31 17:40 - 00000000 ____D () C:\Program Files (x86)\Ubisoft 2014-12-31 02:37 - 2014-12-31 02:37 - 00000062 _____ () C:\Users\dannywintjens\Downloads\listen (3).pls 2014-12-30 10:17 - 2014-12-30 10:17 - 00026528 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS 2014-12-30 10:08 - 2015-01-18 20:28 - 96907264 _____ () C:\Windows\system32\config\software.iodefrag 2014-12-30 10:08 - 2015-01-18 20:28 - 01089536 _____ () C:\Windows\system32\config\default.iodefrag 2014-12-30 10:08 - 2015-01-18 20:28 - 00032768 _____ () C:\Windows\system32\config\security.iodefrag 2014-12-30 10:08 - 2015-01-18 20:28 - 00032768 _____ () C:\Windows\system32\config\sam.iodefrag 2014-12-30 10:05 - 2014-12-30 10:05 - 00016594 _____ () C:\Users\dannywintjens\Downloads\[kat.sitescrack.com]boyhood.da.infância.à.juventude.bdrip.xvid.dual.aa.torrent 2014-12-30 02:46 - 2014-12-30 02:46 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-12-30 02:46 - 2014-12-30 02:46 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-29 02:46 - 2014-12-29 02:46 - 00000000 ____D () C:\Users\dannywintjens\Desktop\sounds 2014-12-29 02:43 - 2015-01-14 22:45 - 00000000 ____D () C:\Users\dannywintjens\Desktop\buro blad 29-12-2014 2014-12-28 23:40 - 2014-12-28 23:41 - 00230668 _____ () C:\Users\dannywintjens\Downloads\bootstrap-3.3.1-dist.zip 2014-12-26 22:42 - 2014-12-26 22:45 - 00000000 ____D () C:\Users\dannywintjens\Downloads\Dumb and Dumber To(2014)HDRip NL subs[DIVX] NLtoppers 2014-12-26 22:42 - 2014-12-26 22:42 - 00028527 _____ () C:\Users\dannywintjens\Downloads\[limetorrents.cc]Dumb.and.Dumber.To.2014.HDRip.NL.subs[DIVX].NLtoppers.torrent 2014-12-26 21:21 - 2015-01-14 23:58 - 00000000 ____D () C:\Users\dannywintjens\Downloads\DUMB.AND.DUMBER.TO.2014.1080P.BLURAY.MOVIE.NL-SUBS-NL 2014-12-26 21:19 - 2014-12-26 21:19 - 00021444 _____ () C:\Users\dannywintjens\Downloads\[starvestnik.ru]DUMB.AND.DUMBER.TO.2014.1080P.BLURAY.MOVIE.NL-SUBS-NL.torrent 2014-12-26 18:43 - 2014-12-26 19:03 - 00000000 ____D () C:\Users\dannywintjens\Downloads\Dumb and Dumber To (2014)HDDvD (NL Subs)NLtoppers 2014-12-26 18:43 - 2014-12-26 18:43 - 00046429 _____ () C:\Users\dannywintjens\Downloads\[kickass.so]dumb.and.dumber.to.2014.hddvd.nl.subs.nltoppers.torrent 2014-12-25 20:17 - 2015-01-13 21:00 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-12-25 20:17 - 2015-01-13 21:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-12-25 20:16 - 2014-12-25 20:16 - 17528608 _____ (IObit) C:\Users\dannywintjens\Downloads\iobituninstaller.exe 2014-12-25 20:16 - 2014-12-25 20:16 - 00000000 ____D () C:\Users\dannywintjens\Downloads\WinRAR 2013 v5.00.7 (32&64-bit) Fully Activated 2014-12-25 20:14 - 2014-12-25 20:14 - 00005900 _____ () C:\Users\dannywintjens\Downloads\[kickass.so]winrar.2013.v5.00.7.32.64.bit.fully.activated.torrent 2014-12-25 20:13 - 2014-12-25 20:13 - 00769043 _____ () C:\Users\dannywintjens\Downloads\1347415615843_zcool.com.cn.zip 2014-12-25 20:12 - 2014-12-25 20:12 - 05986889 _____ () C:\Users\dannywintjens\Downloads\2147497816.zip 2014-12-25 20:11 - 2014-12-25 20:14 - 01664042 _____ () C:\Users\dannywintjens\Downloads\1313507110824_zcool.com.cn.rar 2014-12-25 20:10 - 2014-12-25 20:11 - 00485603 _____ () C:\Users\dannywintjens\Downloads\KiwiLogo-by-logodesignnewzealand.zip 2014-12-25 20:05 - 2014-12-25 20:06 - 00492271 _____ () C:\Users\dannywintjens\Downloads\Orange_Logo_Design_Template.zip 2014-12-25 20:04 - 2014-12-25 20:04 - 00388246 _____ () C:\Users\dannywintjens\Downloads\Communication_Logo_Template.zip 2014-12-25 19:57 - 2014-12-25 19:57 - 07082471 _____ () C:\Users\dannywintjens\Downloads\photoshop-chrome-letters.zip 2014-12-25 19:07 - 2014-12-25 19:18 - 00000000 ____D () C:\Users\dannywintjens\Downloads\The Interview (2014) 720p BrRip x264 YIFY 2014-12-25 19:06 - 2014-12-25 19:06 - 00033562 _____ () C:\Users\dannywintjens\Downloads\The Interview (2014) 720p BrRip x264 YIFY.torrent 2014-12-24 00:21 - 2014-12-24 00:21 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-24 00:21 - 2014-12-24 00:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-24 00:21 - 2014-12-24 00:21 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-24 00:21 - 2014-12-24 00:21 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-24 00:21 - 2014-12-24 00:21 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-24 00:21 - 2014-12-24 00:21 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-24 00:21 - 2014-12-24 00:21 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-24 00:21 - 2014-12-24 00:21 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-24 00:21 - 2014-12-24 00:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-24 00:20 - 2014-12-24 00:20 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-24 00:20 - 2014-12-24 00:20 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-24 00:19 - 2014-12-24 00:19 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-24 00:19 - 2014-12-24 00:19 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2014-12-24 00:19 - 2014-12-24 00:19 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2014-12-24 00:19 - 2014-12-24 00:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2014-12-24 00:19 - 2014-12-24 00:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2014-12-24 00:19 - 2014-12-24 00:19 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2014-12-24 00:19 - 2014-12-24 00:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2014-12-24 00:19 - 2014-12-24 00:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2014-12-24 00:18 - 2014-12-24 00:18 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-24 00:18 - 2014-12-24 00:18 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-24 00:18 - 2014-12-24 00:18 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-24 00:18 - 2014-12-24 00:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-24 00:18 - 2014-12-24 00:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-23 23:56 - 2014-12-23 23:56 - 00001159 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-12-23 23:55 - 2014-12-23 23:55 - 40100608 _____ () C:\Users\dannywintjens\Downloads\Firefox Setup 34.0.5.exe 2014-12-23 02:16 - 2014-12-23 02:42 - 00000000 ____D () C:\Users\dannywintjens\Downloads\AV Voice Changer Software 2014-12-23 02:14 - 2014-12-23 02:14 - 00015889 _____ () C:\Users\dannywintjens\Downloads\AV Voice Changer Software.torrent 2014-12-22 23:04 - 2014-12-22 23:04 - 01080608 _____ (Unity Technologies ApS) C:\Users\dannywintjens\Downloads\UnityWebPlayer.exe 2014-12-22 23:04 - 2014-12-22 23:04 - 01080608 _____ (Unity Technologies ApS) C:\Users\dannywintjens\Downloads\UnityWebPlayer (1).exe 2014-12-22 23:04 - 2014-12-22 23:04 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\Unity 2014-12-22 02:55 - 2014-12-22 02:55 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\noptixclient 2014-12-22 02:54 - 2014-12-23 02:11 - 00000000 ____D () C:\Program Files (x86)\N-Optix SnapShot 2014-12-22 02:54 - 2014-12-22 02:54 - 18220448 _____ (N-Optix ) C:\Users\dannywintjens\Downloads\V2Installer.exe 2014-12-22 02:54 - 2014-12-22 02:54 - 00001095 _____ () C:\Users\Public\Desktop\N-Optix SnapShot.lnk 2014-12-22 02:54 - 2014-12-22 02:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\N-Optix SnapShot 2014-12-22 01:25 - 2014-12-22 01:27 - 22396472 _____ () C:\Users\dannywintjens\Downloads\FaceBookVideo (1).mp4 ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-20 02:53 - 2014-01-21 16:28 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Skype 2015-01-20 02:43 - 2009-07-14 05:45 - 00026560 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-20 02:43 - 2009-07-14 05:45 - 00026560 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-20 02:39 - 2014-01-17 14:49 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-01-19 23:51 - 2014-01-15 11:53 - 01807815 _____ () C:\Windows\WindowsUpdate.log 2015-01-19 23:39 - 2014-01-17 14:49 - 00001052 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-19 22:27 - 2014-03-20 18:35 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-01-19 21:45 - 2014-05-03 11:13 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Dropbox 2015-01-19 21:44 - 2014-12-05 14:28 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-01-19 21:42 - 2014-05-12 17:07 - 00001869 _____ () C:\Users\dannywintjens\Desktop\SafeZone Browser.lnk 2015-01-19 21:37 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-19 20:02 - 2014-11-21 15:09 - 00002860 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (SYSTEM) 2015-01-19 20:01 - 2014-01-15 11:53 - 00000000 ____D () C:\Users\dannywintjens 2015-01-19 20:00 - 2014-03-20 18:32 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2015-01-19 16:33 - 2014-02-14 16:15 - 00000000 ____D () C:\zoek_backup 2015-01-19 10:08 - 2014-10-20 02:01 - 00000000 ____D () C:\Users\dannywintjens\Downloads\uTorrent® Plus 3.4.2 Build 32343 2015-01-19 03:44 - 2014-03-20 19:11 - 00000000 ____D () C:\Users\dannywintjens\Documents\Euro Truck Simulator 2 2015-01-19 03:40 - 2014-07-07 14:50 - 00000000 ____D () C:\Program Files (x86)\Steam 2015-01-19 03:38 - 2014-04-08 20:15 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-01-19 03:38 - 2014-04-08 18:17 - 00000000 ____D () C:\ProgramData\Origin 2015-01-18 23:44 - 2014-01-17 14:49 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\Google 2015-01-18 20:36 - 2011-04-12 14:00 - 00745424 _____ () C:\Windows\system32\perfh013.dat 2015-01-18 20:36 - 2011-04-12 14:00 - 00153376 _____ () C:\Windows\system32\perfc013.dat 2015-01-18 20:36 - 2009-07-14 06:13 - 01669560 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-18 20:30 - 2014-01-17 14:31 - 00000940 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-18 20:30 - 2014-01-15 11:58 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-18 20:28 - 2014-04-04 19:27 - 96907264 _____ () C:\Windows\system32\config\software.iodefrag.bak 2015-01-18 20:28 - 2014-04-04 19:27 - 01089536 _____ () C:\Windows\system32\config\default.iodefrag.bak 2015-01-18 20:28 - 2014-04-04 19:27 - 00032768 _____ () C:\Windows\system32\config\security.iodefrag.bak 2015-01-18 20:28 - 2014-04-04 19:27 - 00032768 _____ () C:\Windows\system32\config\sam.iodefrag.bak 2015-01-18 16:22 - 2014-12-18 02:54 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\CrashDumps 2015-01-18 16:19 - 2014-03-13 16:01 - 00002503 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk 2015-01-18 00:13 - 2014-02-03 23:07 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2015-01-17 22:57 - 2014-11-21 15:08 - 00002082 _____ () C:\Users\Public\Desktop\Driver Booster 2.lnk 2015-01-17 22:52 - 2014-05-14 20:59 - 00002870 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (dannywintjens) 2015-01-17 22:26 - 2014-11-21 15:11 - 00002117 _____ () C:\Users\Public\Desktop\Advanced SystemCare 8.lnk 2015-01-17 22:19 - 2014-12-18 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimCity 2000 Special Edition 2015-01-17 22:19 - 2014-11-19 04:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crusader No Remorse 2015-01-17 22:19 - 2014-07-16 01:03 - 00000000 ____D () C:\Users\dannywintjens\new textures 2015-01-17 22:19 - 2014-06-12 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 3 2015-01-17 22:19 - 2014-05-14 18:40 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ 2015-01-17 22:19 - 2014-04-28 21:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimCity™ 2015-01-17 22:19 - 2014-04-23 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dead Space 3 2015-01-17 22:19 - 2014-04-06 00:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dead Space 2015-01-17 22:19 - 2014-03-20 18:17 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Road Construction Simulator 2015-01-17 22:19 - 2014-03-13 22:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-01-17 22:19 - 2014-02-02 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-01-17 02:08 - 2014-11-14 17:23 - 00000000 ____D () C:\Users\dannywintjens\Desktop\spencer 2015-01-16 12:40 - 2014-01-17 14:31 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-16 12:40 - 2014-01-17 14:31 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-16 12:40 - 2014-01-17 14:31 - 00003880 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-16 12:32 - 2014-04-04 19:27 - 43937792 _____ () C:\Windows\system32\config\components.iodefrag.bak 2015-01-16 04:41 - 2014-04-04 22:16 - 00002211 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-01-15 21:19 - 2014-01-17 23:00 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\SingularityViewer64 2015-01-14 23:58 - 2014-10-13 20:45 - 00000000 ____D () C:\TempDump 2015-01-14 23:58 - 2014-07-29 19:50 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\AirParrot 2015-01-14 23:58 - 2014-07-09 13:03 - 00000000 ____D () C:\ProgramData\FLEXnet 2015-01-14 23:58 - 2014-02-03 23:07 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\TeamViewer 2015-01-14 23:58 - 2014-01-20 23:30 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\uTorrent 2015-01-14 23:23 - 2014-11-11 02:44 - 00000000 ____D () C:\Users\dannywintjens\Desktop\top 40 hitlijst per 8 november 2014 2015-01-14 23:22 - 2014-04-10 18:39 - 00000000 ____D () C:\Users\dannywintjens\Downloads\music backup centova 2015-01-14 23:20 - 2014-02-24 13:42 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\Adobe 2015-01-14 23:19 - 2014-10-13 20:07 - 00000000 ____D () C:\Program Files (x86)\Train Simulator 2015 2015-01-14 23:19 - 2014-09-25 20:24 - 00000000 __HDC () C:\ProgramData\{D2030082-F62A-402A-9456-8009276FD896} 2015-01-14 23:19 - 2014-09-25 20:24 - 00000000 __HDC () C:\ProgramData\{4682E4CB-7209-4099-8AA1-580ABCCCE731} 2015-01-14 23:19 - 2014-09-25 20:24 - 00000000 __HDC () C:\ProgramData\{033B4844-E9C3-45D2-88D9-34DDF3F91100} 2015-01-14 23:19 - 2014-05-28 19:16 - 00000000 ____D () C:\Program Files (x86)\RailWorks 2015-01-14 23:18 - 2014-08-08 11:07 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\Firestorm 2015-01-14 23:18 - 2014-02-05 00:26 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\SecondLife 2015-01-14 23:16 - 2014-11-20 13:18 - 00000000 ____D () C:\Users\dannywintjens\Downloads\Bin32 2015-01-14 23:16 - 2014-11-05 03:02 - 00000000 ____D () C:\Users\dannywintjens\Desktop\back up stream 12000 2015-01-14 23:13 - 2014-01-15 12:01 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\VirtualStore 2015-01-14 23:11 - 2014-09-28 12:04 - 00000000 __HDC () C:\ProgramData\{95684022-A736-4575-ABB0-5B7388BB873D} 2015-01-14 23:10 - 2014-10-28 14:29 - 00000000 ____D () C:\Users\dannywintjens\AppData\Local\PAYDAY 2 2015-01-14 23:01 - 2014-10-22 10:09 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-01-14 22:57 - 2014-11-03 18:55 - 00000000 ____D () C:\Users\dannywintjens\iphone fotos backup 2 2015-01-14 22:57 - 2014-09-17 20:39 - 00000000 ____D () C:\Users\dannywintjens\iphone fotos backup 2015-01-14 22:57 - 2014-08-26 13:00 - 00000000 ____D () C:\Users\dannywintjens\parrijs 2015-01-14 22:57 - 2014-05-21 18:35 - 00000000 ____D () C:\Users\dannywintjens\voor papa en mama 2015-01-14 22:57 - 2014-05-21 18:27 - 00000000 ____D () C:\Users\dannywintjens\foto 2015-01-14 22:48 - 2014-07-04 23:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-01-14 22:48 - 2014-07-04 23:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-14 22:46 - 2014-11-05 03:53 - 00000000 ____D () C:\Users\dannywintjens\Desktop\sportled usb 2015-01-14 22:46 - 2014-08-26 12:59 - 00000000 ____D () C:\Program Files (x86)\Metro 2033 Redux 2015-01-14 22:46 - 2014-08-26 12:47 - 00000000 ____D () C:\Program Files (x86)\Metro Last Light Redux 2015-01-14 22:44 - 2014-11-20 13:18 - 00000000 ____D () C:\Users\dannywintjens\Downloads\BIO4 2015-01-14 22:44 - 2014-11-01 22:44 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive 2015-01-14 22:40 - 2014-11-04 23:29 - 00000000 ____D () C:\Users\dannywintjens\Downloads\Microsoft.Flight.Simulator.X.Gold.Edition - SKIDROW 2015-01-14 22:39 - 2014-01-17 14:49 - 00000000 ____D () C:\Program Files (x86)\Google 2015-01-14 22:37 - 2014-09-25 20:21 - 00000000 __HDC () C:\ProgramData\{C6A355F5-168B-4EEC-AB7C-75594F783EDB} 2015-01-14 22:35 - 2014-02-05 00:25 - 00000000 ____D () C:\Program Files (x86)\SecondLifeViewer 2015-01-14 22:30 - 2014-09-28 12:44 - 00000000 __HDC () C:\ProgramData\{BED8681D-E6A2-4463-8EEA-09588F09C890} 2015-01-14 22:30 - 2014-09-25 20:28 - 00000000 __HDC () C:\ProgramData\{05C334F7-C2A4-418A-9BC8-1542AE38D62B} 2015-01-14 22:30 - 2014-09-25 20:23 - 00000000 __HDC () C:\ProgramData\{662EAAEC-9E9A-4C69-A658-884E51E909BB} 2015-01-14 22:30 - 2014-09-25 20:23 - 00000000 __HDC () C:\ProgramData\{5EE4F9B1-7274-48A2-9C25-C287604C3058} 2015-01-14 22:30 - 2014-09-25 20:23 - 00000000 __HDC () C:\ProgramData\{219191E6-6846-4329-889D-7956C487D9A6} 2015-01-14 22:30 - 2014-09-25 20:23 - 00000000 __HDC () C:\ProgramData\{0CC85DFF-E70A-4AB0-968A-F1F98F4D0C67} 2015-01-14 22:30 - 2014-09-25 20:22 - 00000000 __HDC () C:\ProgramData\{EB21323D-3F46-4EF0-B849-B096B7705C69} 2015-01-14 22:30 - 2014-09-25 20:22 - 00000000 __HDC () C:\ProgramData\{AF79C86B-2321-4D47-A168-2A24BA2B6A73} 2015-01-14 22:30 - 2014-09-25 20:22 - 00000000 __HDC () C:\ProgramData\{9F570B21-E27A-40BE-A508-292899A7D042} 2015-01-14 22:30 - 2014-09-25 20:21 - 00000000 __HDC () C:\ProgramData\{57B31BE2-3175-4425-9722-D2AC5F68C7BD} 2015-01-14 22:23 - 2014-11-19 17:43 - 00000000 ____D () C:\Games 2015-01-14 22:23 - 2014-05-14 18:40 - 00000000 ____D () C:\Users\dannywintjens\Documents\VirtualDJ 2015-01-14 22:11 - 2014-11-04 01:28 - 00000000 ____D () C:\Program Files (x86)\Farming Simulator 15 2015-01-14 22:11 - 2014-09-03 16:46 - 00000000 ____D () C:\Program Files (x86)\AC3D 7.2.17 2015-01-14 20:01 - 2014-01-22 14:42 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\FileZilla 2015-01-13 22:28 - 2014-10-04 18:08 - 32099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-01-13 22:28 - 2014-08-20 20:20 - 14128496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-01-13 22:28 - 2014-06-17 13:16 - 16040184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-01-13 22:28 - 2014-01-15 11:57 - 03293136 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-01-13 22:28 - 2014-01-15 11:57 - 00027983 _____ () C:\Windows\system32\nvinfo.pb 2015-01-13 22:25 - 2014-11-21 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2 2015-01-13 21:05 - 2014-10-24 18:28 - 00002902 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_dannywintjens 2015-01-13 21:05 - 2014-04-01 16:43 - 00001240 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2015-01-13 21:00 - 2014-06-05 13:15 - 00000000 ____D () C:\Program Files\WinRAR 2015-01-12 18:42 - 2014-12-12 05:19 - 00000364 _____ () C:\Users\dannywintjens\Desktop\stream rentals old account.txt 2015-01-11 22:42 - 2014-05-17 01:16 - 00000000 ____D () C:\Users\dannywintjens\AppData\Roaming\Audacity 2015-01-06 04:36 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-01-03 06:26 - 2014-07-07 22:39 - 00000000 ____D () C:\Users\dannywintjens\sl en website pics 2014-12-30 11:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-12-30 10:11 - 2014-11-26 17:30 - 04960984 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-12-30 10:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-12-29 02:43 - 2014-12-16 06:41 - 00000000 ____D () C:\Users\dannywintjens\delux-streams 2014-12-23 23:57 - 2014-03-20 11:48 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-12-23 23:57 - 2014-01-21 16:28 - 00000000 ____D () C:\ProgramData\Skype 2014-12-23 23:56 - 2014-07-04 23:50 - 00001171 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-12-23 14:58 - 2014-12-13 00:46 - 00001332 _____ () C:\Users\Public\Desktop\Razer Comms.lnk ==================== Files in the root of some directories ======= 2014-11-04 01:18 - 2012-08-30 17:57 - 0000081 _____ () C:\Program Files (x86)\update-walking-dead.bat 2014-11-04 01:22 - 2013-12-17 14:31 - 0000224 _____ () C:\Program Files (x86)\update-walkingdead2.bat 2014-10-11 02:37 - 2014-05-23 10:21 - 0000224 _____ () C:\Program Files (x86)\update-watchdogs.bat 2014-11-04 01:18 - 2012-06-30 21:13 - 0003153 _____ () C:\Program Files (x86)\visit-nosteam.ro.html 2014-10-11 02:37 - 2013-11-06 14:28 - 0000732 _____ () C:\Program Files (x86)\visit-www.nosteam.ro.html 2014-05-15 16:40 - 2014-12-16 06:41 - 0000132 _____ () C:\Users\dannywintjens\AppData\Roaming\Adobe CC-voorkeuren voor PNG-indeling 2014-12-12 14:21 - 2014-12-12 14:21 - 0000132 _____ () C:\Users\dannywintjens\AppData\Roaming\Adobe CC-voorkeuren voor Targa-indeling 2014-02-24 18:18 - 2014-02-24 18:18 - 0232838 _____ () C:\Users\dannywintjens\AppData\Roaming\poclbm120327GeForce GTX 680MXgv1w256l4.bin 2014-09-24 22:15 - 2014-09-24 22:15 - 0000104 _____ () C:\Users\dannywintjens\AppData\Roaming\settings.xml 2014-02-14 23:40 - 2014-12-05 18:20 - 0005120 _____ () C:\Users\dannywintjens\AppData\Local\Databases.db 2014-11-12 16:52 - 2014-11-12 16:52 - 0000057 _____ () C:\ProgramData\Ament.ini 2014-07-26 01:50 - 2014-07-26 01:50 - 0004983 _____ () C:\ProgramData\auqrgqib.ttw Files to move or delete: ==================== C:\Program Files (x86)\Razer\Comms\RazerComms.exe Some content of TEMP: ==================== C:\Users\dannywintjens\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpcxzgof.dll C:\Users\dannywintjens\AppData\Local\Temp\Quarantine.exe C:\Users\dannywintjens\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-14 08:40 ==================== End Of Log ============================