Logfile of random's system information tool 1.10 (written by random/random) Run by jonas at 2015-02-20 14:48:54 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 37 GB (53%) free of 69 GB Total RAM: 2009 MB (54% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 14:48:57, on 20/02/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17631) Boot mode: Normal Running processes: C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe C:\windows\system32\taskhost.exe C:\windows\system32\taskeng.exe C:\windows\system32\Dwm.exe C:\windows\Explorer.EXE C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe C:\windows\system32\igfxext.exe C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe C:\windows\system32\igfxsrvc.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Norton Management\Engine\3.2.2.12\ccSvcHst.exe C:\PROGRA~1\MICROS~2\wkcalrem.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Users\jonas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VK1UAFWI\RSIT.exe C:\windows\system32\DllHost.exe C:\Program Files\trend micro\jonas.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O2 - BHO: Norton Identity Protection - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O3 - Toolbar: Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [EPSON SX100 Series] C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE /FU "C:\windows\TEMP\E_SF4D9.tmp" /EF "HKCU" O4 - HKCU\..\Run: [Google Update] "C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file) O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} (Symantec Configuration Class) - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlcm.cab O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Emsisoft Anti-Malware 7.0 - Service (a2AntiMalware) - Emsisoft GmbH - C:\Program Files\Emsisoft Anti-Malware\a2service.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: IHProtect Service - XTab system - C:\Program Files\XTab\ProtectService.exe O23 - Service: Norton Management (MCLIENT) - Symantec Corporation - C:\Program Files\Norton Management\Engine\3.2.2.12\ccSvcHst.exe O23 - Service: Norton Identity Safe (NCO) - Symantec Corporation - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe -- End of file - 6815 bytes ======Scheduled tasks folder====== C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3328793180-4141964508-2228772626-1001Core.job - C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3328793180-4141964508-2228772626-1001UA.job - C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\windows\tasks\Wise Registry Cleaner Schedule Task.job - C:\Program Files\Wise\Wise Registry Cleaner\WiseRegCleaner.exe -a ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}] Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB4C7833-A6EC-433f-B9FE-6B14B1A2F836}] Norton Identity Protection - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll [2014-09-20 655200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}] Advanced SystemCare Browser Protection - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2014-02-20 669504] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240] {A13C2648-91D4-4bf3-BC6D-0079707C4389} - Norton Identity Safe Toolbar - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll [2014-09-20 655200] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2014-06-16 12021464] "IgfxTray"=C:\windows\system32\igfxtray.exe [2014-03-11 138808] "HotKeysCmds"=C:\windows\system32\hkcmd.exe [2014-03-11 172088] "Persistence"=C:\windows\system32\igfxpers.exe [2014-03-11 173624] "MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 978520] "gmsd_be_65"= [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016] "EPSON SX100 Series"=C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE [2008-02-05 188928] "Google Update"=C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-19 116648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APLangApp] C:\Program Files\AnyPC Client\APLangApp.exe [2009-10-20 13312] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2009-06-03 103720] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\emsisoft anti-malware] C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [2015-02-12 4997872] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX100 Series] C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE [2008-02-05 188928] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] C:\Users\jonas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-19 116648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC] c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 978520] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive] C:\Users\jonas\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2014-04-24 257224] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe [2014-12-11 30877280] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-19 222504] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut] C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2008-01-04 222504] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-12-03 218408] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [2009-07-21 210216] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^jonas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Schermopname en Snel starten.lnk] [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\windows\system32\igfxdev.dll [2013-12-09 228864] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro36] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro36.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=221 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv "msacm.siren"=sirenacm.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\windows\System32\Notepad.exe %1 .js - open - C:\windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-02-19 17:20:50 ----D---- C:\Program Files\BeID Minidriver 2015-02-19 17:20:49 ----D---- C:\Program Files\Mozilla Firefox 2015-02-19 17:20:49 ----D---- C:\Program Files\Belgium Identity Card 2015-02-12 07:59:06 ----A---- C:\windows\system32\wdi.dll 2015-02-12 07:59:06 ----A---- C:\windows\system32\powertracker.dll 2015-02-12 07:59:06 ----A---- C:\windows\system32\perftrack.dll 2015-02-12 07:41:00 ----A---- C:\windows\system32\jscript9diag.dll 2015-02-12 07:41:00 ----A---- C:\windows\system32\jscript9.dll 2015-02-11 08:29:22 ----A---- C:\windows\system32\sspisrv.dll 2015-02-11 08:29:22 ----A---- C:\windows\system32\sspicli.dll 2015-02-11 08:29:22 ----A---- C:\windows\system32\secur32.dll 2015-02-11 08:29:22 ----A---- C:\windows\system32\msobjs.dll 2015-02-11 08:29:22 ----A---- C:\windows\system32\msaudite.dll 2015-02-11 08:29:22 ----A---- C:\windows\system32\lsass.exe 2015-02-11 08:29:22 ----A---- C:\windows\system32\lsasrv.dll 2015-02-11 08:29:22 ----A---- C:\windows\system32\drivers\ksecpkg.sys 2015-02-11 08:29:22 ----A---- C:\windows\system32\drivers\ksecdd.sys 2015-02-11 08:29:22 ----A---- C:\windows\system32\drivers\cng.sys 2015-02-11 08:29:22 ----A---- C:\windows\system32\auditpol.exe 2015-02-11 08:29:22 ----A---- C:\windows\system32\adtschema.dll 2015-02-11 08:28:39 ----A---- C:\windows\system32\win32k.sys 2015-02-11 08:28:03 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll 2015-02-11 08:28:03 ----A---- C:\windows\system32\ieetwproxystub.dll 2015-02-11 08:28:03 ----A---- C:\windows\system32\ieetwcollector.exe 2015-02-11 08:28:02 ----A---- C:\windows\system32\urlmon.dll 2015-02-11 08:28:02 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe 2015-02-11 08:28:02 ----A---- C:\windows\system32\jsproxy.dll 2015-02-11 08:28:02 ----A---- C:\windows\system32\iernonce.dll 2015-02-11 08:28:02 ----A---- C:\windows\system32\iedkcs32.dll 2015-02-11 08:28:02 ----A---- C:\windows\system32\ie4uinit.exe 2015-02-11 08:28:01 ----A---- C:\windows\system32\msfeeds.dll 2015-02-11 08:28:01 ----A---- C:\windows\system32\ieUnatt.exe 2015-02-11 08:28:01 ----A---- C:\windows\system32\ieapfltr.dll 2015-02-11 08:28:01 ----A---- C:\windows\system32\dxtmsft.dll 2015-02-11 08:27:59 ----A---- C:\windows\system32\wininet.dll 2015-02-11 08:27:59 ----A---- C:\windows\system32\msrating.dll 2015-02-11 08:27:59 ----A---- C:\windows\system32\iesetup.dll 2015-02-11 08:27:59 ----A---- C:\windows\system32\ieetwcollectorres.dll 2015-02-11 08:27:57 ----A---- C:\windows\system32\ieui.dll 2015-02-11 08:27:57 ----A---- C:\windows\system32\dxtrans.dll 2015-02-11 08:27:56 ----A---- C:\windows\system32\ieframe.dll 2015-02-11 08:27:50 ----A---- C:\windows\system32\mshtmled.dll 2015-02-11 08:27:49 ----A---- C:\windows\system32\mshtmlmedia.dll 2015-02-11 08:27:49 ----A---- C:\windows\system32\MshtmlDac.dll 2015-02-11 08:27:48 ----A---- C:\windows\system32\iertutil.dll 2015-02-11 08:27:47 ----A---- C:\windows\system32\mshtml.dll 2015-02-11 08:27:46 ----A---- C:\windows\system32\vbscript.dll 2015-02-11 08:27:33 ----A---- C:\windows\system32\appraiser.dll 2015-02-11 08:27:32 ----A---- C:\windows\system32\generaltel.dll 2015-02-11 08:27:31 ----A---- C:\windows\system32\invagent.dll 2015-02-11 08:27:31 ----A---- C:\windows\system32\aeinv.dll 2015-02-11 08:27:30 ----A---- C:\windows\system32\devinv.dll 2015-02-11 08:27:30 ----A---- C:\windows\system32\aitstatic.exe 2015-02-11 08:27:29 ----A---- C:\windows\system32\aepic.dll 2015-02-11 08:27:29 ----A---- C:\windows\system32\aepdu.dll 2015-02-11 08:27:16 ----A---- C:\windows\system32\crypt32.dll 2015-02-11 08:27:06 ----A---- C:\windows\system32\ntoskrnl.exe 2015-02-11 08:27:06 ----A---- C:\windows\system32\ntkrnlpa.exe 2015-02-11 08:26:54 ----A---- C:\windows\system32\scesrv.dll 2015-02-11 08:26:17 ----A---- C:\windows\system32\oleaut32.dll 2015-02-11 08:26:13 ----A---- C:\windows\system32\schannel.dll 2015-02-11 08:26:12 ----A---- C:\windows\system32\wdigest.dll 2015-02-11 08:26:12 ----A---- C:\windows\system32\TSpkg.dll 2015-02-11 08:26:12 ----A---- C:\windows\system32\ncrypt.dll 2015-02-11 08:26:12 ----A---- C:\windows\system32\msv1_0.dll 2015-02-11 08:26:12 ----A---- C:\windows\system32\kerberos.dll 2015-02-11 08:26:11 ----A---- C:\windows\system32\credssp.dll 2015-02-11 08:26:04 ----A---- C:\windows\system32\WindowsCodecs.dll 2015-02-10 16:46:27 ----A---- C:\windows\system32\drivers\{aa2c8716-4fb1-4542-ac48-779c1c32a2a8}Gw.sys 2015-02-10 16:04:34 ----D---- C:\Program Files\surf slide 2015-02-10 16:04:09 ----D---- C:\ProgramData\IHProtectUpDate 2015-02-10 16:03:29 ----D---- C:\Program Files\XTab 2015-02-10 15:48:27 ----D---- C:\ProgramData\Apple 2015-02-09 09:47:31 ----D---- C:\windows\system32\siscardplugins 2015-01-26 09:26:26 ----A---- C:\windows\system32\FlashPlayerApp.exe 2015-01-24 16:55:50 ----A---- C:\windows\system32\javaw.exe 2015-01-24 16:55:50 ----A---- C:\windows\system32\java.exe ======List of files/folders modified in the last 1 month====== 2015-02-20 14:48:55 ----D---- C:\Program Files\Trend Micro 2015-02-20 14:48:45 ----D---- C:\windows\Temp 2015-02-20 14:03:07 ----D---- C:\windows\system32\config 2015-02-20 11:00:11 ----D---- C:\windows\system32\FxsTmp 2015-02-20 10:11:02 ----D---- C:\Program Files\Emsisoft Anti-Malware 2015-02-20 09:42:21 ----SHD---- C:\System Volume Information 2015-02-20 09:39:13 ----SHD---- C:\windows\Installer 2015-02-20 09:39:12 ----SHD---- C:\Config.Msi 2015-02-20 09:39:12 ----D---- C:\Program Files\Common Files 2015-02-20 09:39:01 ----D---- C:\Program Files\Java 2015-02-20 09:38:40 ----D---- C:\windows\System32 2015-02-20 09:18:44 ----D---- C:\windows\Tasks 2015-02-20 09:18:44 ----D---- C:\windows\system32\wfp 2015-02-20 09:18:40 ----D---- C:\windows\system32\wbem 2015-02-20 09:18:40 ----D---- C:\Windows 2015-02-20 09:17:40 ----D---- C:\windows\system32\Tasks 2015-02-20 09:17:40 ----D---- C:\windows\system32\DriverStore 2015-02-20 09:17:40 ----D---- C:\windows\system32\catroot2 2015-02-20 09:17:37 ----D---- C:\ProgramData\Norton 2015-02-20 09:17:26 ----D---- C:\windows\registration 2015-02-20 09:17:15 ----HD---- C:\ProgramData 2015-02-20 09:17:14 ----RD---- C:\Program Files 2015-02-19 18:24:45 ----D---- C:\windows\system32\catroot 2015-02-19 17:21:16 ----D---- C:\windows\inf 2015-02-19 17:20:39 ----D---- C:\drivers 2015-02-19 16:08:13 ----D---- C:\windows\rescache 2015-02-19 08:43:47 ----D---- C:\AdwCleaner 2015-02-17 17:09:12 ----D---- C:\Users\jonas\AppData\Roaming\Skype 2015-02-14 17:54:33 ----D---- C:\windows\debug 2015-02-12 08:09:10 ----D---- C:\windows\winsxs 2015-02-12 08:05:37 ----D---- C:\windows\tracing 2015-02-12 07:43:30 ----D---- C:\windows\system32\en-US 2015-02-11 08:48:37 ----D---- C:\windows\system32\nl-NL 2015-02-11 08:48:37 ----D---- C:\windows\system32\drivers 2015-02-11 08:48:35 ----SD---- C:\windows\system32\CompatTel 2015-02-11 08:48:33 ----D---- C:\windows\system32\appraiser 2015-02-11 08:48:25 ----D---- C:\Program Files\Internet Explorer 2015-02-11 08:46:18 ----D---- C:\windows\system32\MRT 2015-02-11 08:40:19 ----A---- C:\windows\system32\MRT.exe 2015-02-11 08:37:48 ----D---- C:\Program Files\Microsoft Security Client 2015-02-10 17:31:06 ----D---- C:\Program Files\Samsung 2015-02-10 16:46:41 ----A---- C:\windows\win.ini 2015-02-10 15:27:49 ----D---- C:\Program Files\Google 2015-02-10 15:24:21 ----D---- C:\ProgramData\Oracle 2015-02-09 14:56:28 ----D---- C:\Program Files\Malwarebytes Anti-Malware 2015-02-01 08:28:39 ----D---- C:\windows\system32\NDF 2015-02-01 07:24:05 ----D---- C:\Users\jonas\AppData\Roaming\Mozilla 2015-01-28 15:50:17 ----D---- C:\Program Files\NortonInstaller 2015-01-26 09:16:50 ----D---- C:\ProgramData\Adobe 2015-01-24 16:54:25 ----A---- C:\windows\system32\javaws.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-10-13 331288] R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2014-11-15 239224] R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440] R1 {aa2c8716-4fb1-4542-ac48-779c1c32a2a8}Gw;{aa2c8716-4fb1-4542-ac48-779c1c32a2a8}Gw; C:\windows\system32\drivers\{aa2c8716-4fb1-4542-ac48-779c1c32a2a8}Gw.sys [2015-02-09 43152] R1 A2DDA;A2 Direct Disk Access Support Driver; \??\C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [2013-03-28 22056] R1 ccSet_MCLIENT;Norton Management Settings Manager; C:\windows\system32\drivers\MCLIENT\0302020.00C\ccSetx86.sys [2012-10-04 134304] R1 ccSet_NST;Norton Identity Safe Settings Manager; C:\windows\system32\drivers\NST\7DE07080.017\ccSetx86.sys [2013-09-27 127064] R1 MpKsl687413de;MpKsl687413de; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C73FD719-BF5D-41F0-B991-E9256FA8F4DA}\MpKsl687413de.sys [2015-02-20 39464] R1 qtsmon;qtsmon; C:\windows\System32\drivers\qtsmon.sys [2010-12-05 72488] R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2009-05-28 10752] R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128] R3 a2acc;a2acc; \??\C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [2014-05-22 58200] R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2014-03-11 3211264] R3 cleanhlp;cleanhlp; \??\C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [2013-12-07 50200] R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2013-12-09 9037312] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2014-06-16 3017112] R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\windows\system32\drivers\IntcHdmi.sys [2009-07-10 122880] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336] S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888] S3 EMVSCARD;EMVSCARD; C:\windows\System32\Drivers\EMVSCARD.sys [2006-12-19 20736] S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2012-09-12 49664] S3 hxctlflt;hxctlflt; C:\windows\System32\Drivers\hxctlflt.sys [2009-02-08 99968] S3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 95408] S3 nmwcd;Nokia USB Phone Parent Driver; C:\windows\system32\drivers\ccdcmb.sys [2011-08-17 18176] S3 nmwcdc;Nokia USB Communication Driver; C:\windows\system32\drivers\ccdcmbo.sys [2011-08-17 23168] S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848] S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776] S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304] S3 SNP2UVC;Hercules Webcam; C:\windows\system32\DRIVERS\snp2uvc.sys [2009-04-22 3482112] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2013-10-02 49152] S3 upperdev;upperdev; C:\windows\system32\DRIVERS\usbser_lowerflt.sys [2011-08-17 8192] S3 usbscan;Stuurprogramma voor USB-scanner; C:\windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352] S3 usbser;USB Modem Driver; C:\windows\system32\drivers\usbser.sys [2013-08-29 28160] S3 UsbserFilt;UsbserFilt; C:\windows\system32\DRIVERS\usbser_lowerfltj.sys [2011-08-17 8192] S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 WinUsb;WinUsb-stuurprogramma; C:\windows\system32\drivers\WinUSB.sys [2010-11-20 35968] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 a2AntiMalware;Emsisoft Anti-Malware 7.0 - Service; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [2015-02-12 4920104] R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520] R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2007-12-17 143872] R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664] R2 IHProtect Service;IHProtect Service; C:\Program Files\XTab\ProtectService.exe [2015-01-16 158896] R2 MCLIENT;Norton Management; C:\Program Files\Norton Management\Engine\3.2.2.12\ccSvcHst.exe [2012-12-05 143928] R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 22184] R2 NCO;Norton Identity Safe; C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe [2014-09-20 130104] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608] S2 gupdate;Google Updateservice (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-16 107912] S2 OberonGameConsoleService;Oberon Media Game Console service; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [2009-08-13 44312] S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-12-11 315496] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-16 107912] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-01-12 102912] S3 MatSvc;@%ProgramFiles%\Microsoft Fix it Center\MatsRes.dll,-9000; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [2011-06-13 267568] S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 284472] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-12-01 1343400] S4 aspnet_state;ASP.NET-statusservice; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-11 45744] S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] -----------------EOF-----------------