Logfile of random's system information tool 1.10 (written by random/random) Run by Robert at 2015-03-25 18:55:49 Microsoft Windows 8.1 System drive C: has 84 GB (56%) free of 149 GB Total RAM: 4017 MB (48% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:55:49, on 25-3-2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17416) Boot mode: Normal Running processes: C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe C:\Program Files (x86)\STOPzilla\STOPzilla.exe C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe C:\Windows\SysWOW64\ctfmon.exe C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe C:\Program Files (x86)\Opera\28.0.1750.48\opera_crashreporter.exe C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files\trend micro\Robert.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = www.google.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll O4 - HKLM\..\Run: [CTRegRun] C:\Windows\CTRegRun.EXE O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKCU\..\Run: [Remote Control Editor] "C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTVRC.exe" O4 - HKCU\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto O4 - HKCU\..\Run: [AshSnap] C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\ashsnap.exe O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE" O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe O8 - Extra context menu item: &D&ownload &met BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload alles met BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O20 - AppInit_DLLs: c:/progra~3/{ba1d5~1/171~1.0/mere.dll O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing) O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files (x86)\BitComet\tools\BitCometService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: CyberLink PowerDVD 10 MS Monitor Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe O23 - Service: CyberLink PowerDVD 10 MS Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing) O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: STOPzilla! (SBAMSvc) - ThreatTrack Security, Inc. - C:\Program Files (x86)\STOPzilla\SBAMSvc.exe O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: StartMenu8 Service (StartMenuService) - IObit - C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: STOPzilla Service (sz7) - iS3, Inc. - C:\Program Files (x86)\STOPzilla\SZServer.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 13254 bytes ======Listing Processes====== c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-9136-c45875cbd927 /binaryPath="C:\Program Files (x86)\AVG\AVG2015\" wininit.exe winlogon.exe C:\Windows\system32\lsass.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS "dwm.exe" "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe" C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\igfxCUIService.exe C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe" "C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe" /Task taskhostex.exe C:\Windows\Explorer.EXE "C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe" taskeng.exe {33EDBC92-26E4-4D4E-BFAF-5A743FC9F7E2} "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe" "C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe" "C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe" "C:\Program Files (x86)\Bonjour\mDNSResponder.exe" "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service "C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe" "C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe" dashost.exe {a4c99c9b-dac9-40a9-aa9d9f8247167403} "C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE" "C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE" "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" "C:\Program Files\CyberLink\Shared files\RichVideo64.exe" "C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" "C:\Program Files (x86)\AVG\AVG2015\avgemca.exe" /QuitInfo:000000000000076C;0000000000000790; /loadhooks /Parent:0000000000001158 "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" "C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe" "C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe" Service C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\STOPzilla\SZServer.exe" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe" C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe "C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe" "C:\Program Files (x86)\STOPzilla\SBAMSvc.exe" igfxEM.exe igfxHK.exe igfxTray.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\SearchIndexer.exe /Embedding C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-982c54f3-9982-4aa5-8976-8f7f9b0d5bb4 -SystemEventPortName:HostProcess-1f9f5839-86f0-4179-af71-ca6968d5df77 -IoCancelEventPortName:HostProcess-a3aad143-4f76-481d-8191-08e65daac849 -NonStateChangingEventPortName:HostProcess-eca09066-1e27-40cd-8114-701cbf46e272 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d71df99b-d31c-40ac-87f9-b166da0f2e10 -DeviceGroupId:WpdFsGroup "C:\Windows\System32\SettingSyncHost.exe" -Embedding "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto "C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" "C:\Program Files (x86)\STOPzilla\STOPzilla.exe" /service "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY "C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe" /HotCorners "C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe" ctfmon.exe "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe" --ran-launcher "C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe" --ran-launcher /crash-reporter-parent-id=5856 "C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe" --type=gpu-process --channel="5856.0.1516135098\958089286" --enable-proprietary-media-types-playback --crash-reporter-pid=3584 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,41 --gpu-vendor-id=0x8086 --gpu-device-id=0x0412 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.14.4080 --enable-proprietary-media-types-playback --crash-reporter-pid=3584 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3584 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5856 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5856.3.507828358\1196255133" /prefetch:673131151 "C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3584 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5856 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5856.6.342758411\370629474" /prefetch:673131151 "C:\Program Files (x86)\Opera\28.0.1750.48\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=nl --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=3584 --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5856 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="5856.7.590688065\1088839031" /prefetch:673131151 "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray "C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe" -Embedding "C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe" "C:\Windows\system32\NOTEPAD.EXE" C:\rsit\info.txt "C:\Windows\system32\NOTEPAD.EXE" C:\rsit\log.txt "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Windows\system32\SearchFilterHost.exe" 0 584 588 596 65536 592 C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} "C:\Users\Robert\Downloads\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\Windows\tasks\0215piUpdateInfo.job - C:\ProgramData\Avg_Update_0215pi\0215pi_AVG-Secure-Search-Update.exe /SETINFO /CMPID=0215pi /INFORETRY=3 C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\ASC8_SkipUac_Robert.job - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe /SkipUac C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\NF.job - C:\Users\Robert\AppData\Roaming\NF.exe /infocmdline=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 C:\Windows\tasks\QZFGR.job - C:\Users\Robert\AppData\Roaming\QZFGR.exe /infocmdline=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 C:\Windows\tasks\Uninstaller_SkipUac_Robert.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer =========Mozilla firefox========= ProfilePath - C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\z783g1m6.default prefs.js - "browser.search.useDBForOrder" - false prefs.js - "browser.startup.homepage" - "http://doenormaal.eigenstart.nl/" prefs.js - "keyword.url" - "http://search.certified-toolbar.com?si=85023&tid=29472&ver=6.9&ts=1426621425766&tguid=85023-29472-1426621425766-FD97799D4E695ED1261AD6F8B2DBD8C4&st=chrome&q=" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 17.0.0.134 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin] "Description"=Google Earth in your browser "Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5] "Description"=Intel IPT WebApi plugin "Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater] "Description"=This plugin updates Intel WebAPI component "Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 17.0.0.134 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll C:\Program Files (x86)\Mozilla Firefox\components\ nsIBitCometAgent.xpt C:\Program Files (x86)\Mozilla Firefox\plugins\ npBitCometAgent.dll nppdf32.dll C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\z783g1m6.default\extensions\ iobitascsurfingprotection@iobit.com pA@L0W.net V@KSXxo.edu {B042753D-F57E-4e8e-A01B-7379A6D4CEFB} {cd60c08e-a217-4670-b192-ad6b19f49748} ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}] ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-01-28 2471744] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-18 460712] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-18 172968] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-11-21 36352] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-01-28 13774040] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "AdobeBridge"= [] "Remote Control Editor"=C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTVRC.exe [2012-07-05 1835008] "KiesHelper"=C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe [2012-03-31 954256] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088] "Advanced SystemCare 8"=C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2015-01-20 2428704] "AshSnap"=C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\ashsnap.exe [2014-11-27 5729112] "Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [2014-12-19 458456] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer_For_P2G8] C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05 111576] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLVirtualDrive] C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2013-11-26 490760] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe [2008-12-04 665424] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX210 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [2008-11-06 223232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Remote Control Editor] C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [2012-07-05 1835008] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-11 95192] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "CTRegRun"=C:\Windows\CTRegRun.EXE [2000-12-26 41984] "GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] "KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2012-03-31 3521424] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152] "IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2015-01-27 5768480] "SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2015-03-06 3723728] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] igfxdev.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SBAMSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StartMenuService] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\str] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "ConfirmFileDelete"=1 "NoDriveTypeAutoRun"=28 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "VIDC.YUY2"=msyuv.dll "vidc.i420"=iyuv_32.dll "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "VIDC.YVYU"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "VIDC.UYVY"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.msvc"=msvidc32.dll "midi"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi2"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi3"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv "wave3"=wdmaud.drv "midi4"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "midi5"=wdmaud.drv "mixer4"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-03-25 18:55:49 ----D---- C:\rsit 2015-03-25 18:49:46 ----D---- C:\Program Files\trend micro 2015-03-24 16:50:25 ----A---- C:\Windows\SYSWOW64\LMRTREND.dll 2015-03-24 16:50:25 ----A---- C:\Windows\SYSWOW64\LMRT.dll 2015-03-24 16:50:24 ----A---- C:\Windows\SYSWOW64\dxtmsft3.dll 2015-03-24 16:50:22 ----A---- C:\Windows\SYSWOW64\unam4ie.exe 2015-03-24 16:50:22 ----A---- C:\Windows\SYSWOW64\strmdll.dll 2015-03-24 16:50:21 ----A---- C:\Windows\SYSWOW64\w95inf32.dll 2015-03-24 16:50:21 ----A---- C:\Windows\SYSWOW64\w95inf16.dll 2015-03-24 16:50:21 ----A---- C:\Windows\SYSWOW64\vidx16.dll 2015-03-24 16:50:21 ----A---- C:\Windows\SYSWOW64\qcut.dll 2015-03-24 16:50:21 ----A---- C:\Windows\SYSWOW64\danim.dll 2015-03-24 16:41:00 ----D---- C:\Program Files (x86)\Muntje 2015-03-24 16:30:56 ----D---- C:\Program Files (x86)\Atari 2015-03-24 16:08:55 ----A---- C:\Windows\EGK.ini 2015-03-24 15:58:30 ----D---- C:\Program Files (x86)\CRYO 2015-03-24 15:51:18 ----D---- C:\Program Files (x86)\Garfield 2015-03-24 15:32:23 ----RA---- C:\Windows\SYSWOW64\wing32.dll 2015-03-24 14:42:52 ----A---- C:\Windows\hegames.ini 2015-03-24 12:57:23 ----D---- C:\Program Files (x86)\EA GAMES 2015-03-24 12:56:57 ----A---- C:\debugInstaller.txt 2015-03-24 12:37:47 ----D---- C:\Zwijsen 2015-03-24 12:23:08 ----D---- C:\mediawiz 2015-03-24 12:01:52 ----D---- C:\Program Files (x86)\DreamWorks Interactive 2015-03-24 11:43:14 ----D---- C:\Programmabestanden 2015-03-24 11:42:43 ----A---- C:\Windows\disney.ini 2015-03-24 11:27:35 ----D---- C:\hegames 2015-03-24 11:16:48 ----A---- C:\Windows\EDUJR1.INI 2015-03-24 11:10:40 ----A---- C:\Windows\EDUPAK3.INI 2015-03-24 10:48:57 ----A---- C:\Windows\rembbb.exe 2015-03-24 10:47:54 ----D---- C:\Program Files (x86)\Safari_nl 2015-03-24 10:12:50 ----A---- C:\Windows\SYSWOW64\msvbvm50.dll 2015-03-24 10:12:49 ----A---- C:\Windows\SYSWOW64\zleaut32.dll 2015-03-24 10:06:15 ----RA---- C:\Windows\SYSWOW64\VBRUN300.DLL 2015-03-24 09:54:52 ----D---- C:\Windows\REYPPW 2015-03-24 09:54:41 ----D---- C:\Program Files (x86)\Rey Play and Print 2015-03-22 18:26:22 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-03-19 19:17:55 ----D---- C:\ProgramData\Avg_Update_0215pi 2015-03-18 15:08:03 ----D---- C:\Users\Robert\AppData\Roaming\AVG2015 2015-03-18 15:07:24 ----D---- C:\Users\Robert\AppData\Roaming\TuneUp Software 2015-03-18 15:07:12 ----HD---- C:\$AVG 2015-03-18 15:07:11 ----D---- C:\ProgramData\AVG2015 2015-03-18 15:06:54 ----D---- C:\Program Files (x86)\AVG 2015-03-18 14:56:40 ----HD---- C:\ProgramData\Common Files 2015-03-18 14:56:40 ----D---- C:\ProgramData\MFAData 2015-03-18 12:17:25 ----D---- C:\Windows\%LOCALAPPDATA% 2015-03-17 20:50:20 ----D---- C:\ProgramData\de6a6fe000003423 2015-03-17 20:46:07 ----D---- C:\ProgramData\Sun 2015-03-17 20:46:02 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2015-03-17 20:45:46 ----D---- C:\ProgramData\Oracle 2015-03-17 20:45:41 ----D---- C:\Program Files (x86)\Java 2015-03-17 20:44:04 ----D---- C:\Program Files (x86)\Markdown Preview 2015-03-17 20:43:25 ----D---- C:\Users\Robert\AppData\Roaming\Opera Software 2015-03-17 20:43:24 ----D---- C:\ProgramData\834672556290129298 2015-03-17 20:43:20 ----D---- C:\Program Files (x86)\PrriceeLesss 2015-03-17 20:43:10 ----D---- C:\ProgramData\{fcfde13d-bc9e-b8db-fcfd-de13dbc984f6} 2015-03-17 20:42:48 ----D---- C:\ProgramData\jhpcaodknkgbhmldpfgnbkdcejblhhlc 2015-03-17 20:42:36 ----D---- C:\ProgramData\{81879d78-5715-3d04-8187-79d7857175e1} 2015-03-17 20:42:33 ----D---- C:\Program Files (x86)\Opera 2015-03-17 20:42:22 ----D---- C:\Program Files (x86)\0b78ad0b-0ce5-4d46-99c9-2b731e986f31 2015-03-17 20:42:21 ----D---- C:\Program Files (x86)\globalUpdate 2015-03-13 15:08:11 ----A---- C:\ProgramData\ntuser.dat 2015-03-12 13:50:47 ----D---- C:\Users\Robert\AppData\Roaming\Ashampoo Slideshow Studio HD 3 2015-03-11 11:45:47 ----A---- C:\Windows\SYSWOW64\calc.exe 2015-03-11 11:45:47 ----A---- C:\Windows\system32\calc.exe 2015-03-11 11:45:41 ----A---- C:\Windows\system32\drivers\WdNisDrv.sys 2015-03-11 11:45:41 ----A---- C:\Windows\system32\drivers\WdFilter.sys 2015-03-11 11:45:41 ----A---- C:\Windows\system32\drivers\WdBoot.sys 2015-03-11 11:45:39 ----A---- C:\Windows\system32\winshfhc.dll 2015-03-11 11:45:38 ----A---- C:\Windows\SYSWOW64\winshfhc.dll 2015-03-11 11:43:48 ----A---- C:\Windows\SYSWOW64\SHCore.dll 2015-03-11 11:43:48 ----A---- C:\Windows\system32\SHCore.dll 2015-03-11 11:43:37 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2015-03-11 11:43:37 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2015-03-11 11:43:37 ----A---- C:\Windows\system32\atmlib.dll 2015-03-11 11:43:37 ----A---- C:\Windows\system32\atmfd.dll 2015-03-11 11:43:33 ----A---- C:\Windows\SYSWOW64\photowiz.dll 2015-03-11 11:43:33 ----A---- C:\Windows\system32\win32k.sys 2015-03-11 11:43:33 ----A---- C:\Windows\system32\photowiz.dll 2015-03-11 11:43:32 ----A---- C:\Windows\SYSWOW64\schannel.dll 2015-03-11 11:43:32 ----A---- C:\Windows\SYSWOW64\msftedit.dll 2015-03-11 11:43:32 ----A---- C:\Windows\system32\schannel.dll 2015-03-11 11:43:32 ----A---- C:\Windows\system32\msftedit.dll 2015-03-11 11:43:32 ----A---- C:\Windows\system32\drivers\ndis.sys 2015-03-11 11:43:31 ----A---- C:\Windows\SYSWOW64\StorageContextHandler.dll 2015-03-11 11:43:31 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2015-03-11 11:43:31 ----A---- C:\Windows\system32\win32spl.dll 2015-03-11 11:43:31 ----A---- C:\Windows\system32\StorageContextHandler.dll 2015-03-11 11:43:31 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-03-11 11:43:31 ----A---- C:\Windows\system32\ntdll.dll 2015-03-11 11:43:31 ----A---- C:\Windows\system32\localspl.dll 2015-03-11 11:43:31 ----A---- C:\Windows\system32\authui.dll 2015-03-11 11:43:30 ----A---- C:\Windows\SYSWOW64\authui.dll 2015-03-11 11:43:29 ----A---- C:\Windows\SYSWOW64\WSShared.dll 2015-03-11 11:43:29 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-03-11 11:43:29 ----A---- C:\Windows\SYSWOW64\dwmcore.dll 2015-03-11 11:43:29 ----A---- C:\Windows\system32\WSShared.dll 2015-03-11 11:43:29 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-03-11 11:43:29 ----A---- C:\Windows\system32\dwmcore.dll 2015-03-11 11:43:28 ----A---- C:\Windows\SYSWOW64\mfc42u.dll 2015-03-11 11:43:28 ----A---- C:\Windows\SYSWOW64\mfc42.dll 2015-03-11 11:43:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll 2015-03-11 11:43:28 ----A---- C:\Windows\SYSWOW64\atlthunk.dll 2015-03-11 11:43:28 ----A---- C:\Windows\system32\mfc42u.dll 2015-03-11 11:43:28 ----A---- C:\Windows\system32\mfc42.dll 2015-03-11 11:43:28 ----A---- C:\Windows\system32\D3DCompiler_47.dll 2015-03-11 11:43:27 ----A---- C:\Windows\system32\rdpcorets.dll 2015-03-11 11:43:27 ----A---- C:\Windows\system32\drivers\rfcomm.sys 2015-03-11 11:43:27 ----A---- C:\Windows\system32\drivers\hidbth.sys 2015-03-11 11:43:26 ----A---- C:\Windows\system32\ubpm.dll 2015-03-11 11:43:26 ----A---- C:\Windows\system32\rdpudd.dll 2015-03-11 11:43:22 ----A---- C:\Windows\SYSWOW64\eapphost.dll 2015-03-11 11:43:22 ----A---- C:\Windows\SYSWOW64\eappgnui.dll 2015-03-11 11:43:22 ----A---- C:\Windows\SYSWOW64\eappcfg.dll 2015-03-11 11:43:22 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll 2015-03-11 11:43:22 ----A---- C:\Windows\system32\eapphost.dll 2015-03-11 11:43:22 ----A---- C:\Windows\system32\eappgnui.dll 2015-03-11 11:43:22 ----A---- C:\Windows\system32\eappcfg.dll 2015-03-11 11:43:22 ----A---- C:\Windows\system32\eapp3hst.dll 2015-03-11 11:43:20 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-03-11 11:43:20 ----A---- C:\Windows\system32\mshtml.dll 2015-03-11 11:43:18 ----A---- C:\Windows\system32\jscript9.dll 2015-03-11 11:43:18 ----A---- C:\Windows\system32\ieframe.dll 2015-03-11 11:43:17 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-03-11 11:43:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-03-11 11:43:17 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-03-11 11:43:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-03-11 11:43:17 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-03-11 11:43:17 ----A---- C:\Windows\system32\wininet.dll 2015-03-11 11:43:17 ----A---- C:\Windows\system32\urlmon.dll 2015-03-11 11:43:17 ----A---- C:\Windows\system32\inetcomm.dll 2015-03-11 11:43:17 ----A---- C:\Windows\system32\iertutil.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\inetcomm.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\iepeers.dll 2015-03-11 11:43:16 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\webcheck.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\vbscript.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\mshtmled.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\msfeeds.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\jscript9diag.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\jscript.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\iepeers.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\iedkcs32.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\ieapfltr.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\dxtrans.dll 2015-03-11 11:43:16 ----A---- C:\Windows\system32\actxprxy.dll 2015-03-11 11:43:15 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-03-11 11:43:08 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2015-03-11 11:43:08 ----A---- C:\Windows\system32\WindowsCodecs.dll 2015-03-11 11:43:07 ----A---- C:\Windows\SYSWOW64\shell32.dll 2015-03-11 11:43:07 ----A---- C:\Windows\system32\shell32.dll 2015-03-11 11:43:07 ----A---- C:\Windows\system32\LockScreenContentServer.exe 2015-03-11 11:43:04 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2015-03-11 11:43:04 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll 2015-03-11 11:43:04 ----A---- C:\Windows\SYSWOW64\explorer.exe 2015-03-11 11:43:04 ----A---- C:\Windows\system32\WMPhoto.dll 2015-03-11 11:43:04 ----A---- C:\Windows\system32\MrmCoreR.dll 2015-03-11 11:43:04 ----A---- C:\Windows\explorer.exe 2015-03-11 11:43:02 ----A---- C:\Windows\SYSWOW64\msctf.dll 2015-03-11 11:43:02 ----A---- C:\Windows\system32\msctf.dll 2015-03-11 11:39:15 ----D---- C:\Program Files (x86)\Mindscape 2015-03-11 11:28:54 ----A---- C:\Windows\setup32.INI 2015-03-11 11:23:41 ----D---- C:\Leer_t_lekker_zelf 2015-03-01 13:42:21 ----D---- C:\ProgramData\FLEXnet 2015-03-01 13:40:25 ----N---- C:\Windows\system32\drivers\PxHlpa64.sys ======List of files/folders modified in the last 1 month====== 2015-03-25 18:53:33 ----D---- C:\Windows\Temp 2015-03-25 18:49:51 ----D---- C:\Windows\Prefetch 2015-03-25 18:49:46 ----RD---- C:\Program Files 2015-03-25 18:00:00 ----D---- C:\Windows\system32\sru 2015-03-25 17:38:22 ----D---- C:\ProgramData\STOPzilla! 2015-03-25 17:37:35 ----D---- C:\Windows\rescache 2015-03-25 17:32:41 ----D---- C:\Windows\system32\config 2015-03-25 17:09:52 ----SHD---- C:\System Volume Information 2015-03-25 16:56:25 ----D---- C:\Windows\Microsoft.NET 2015-03-25 16:47:10 ----D---- C:\Windows\CbsTemp 2015-03-25 16:47:09 ----D---- C:\Windows\apppatch 2015-03-25 16:47:05 ----D---- C:\Windows\WinSxS 2015-03-25 15:44:09 ----RD---- C:\Windows\System32 2015-03-25 15:44:09 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-03-25 15:40:19 ----D---- C:\Windows\SoftwareDistribution 2015-03-25 15:40:19 ----D---- C:\Windows 2015-03-24 23:53:37 ----D---- C:\Windows\Inf 2015-03-24 23:42:42 ----D---- C:\Windows\system32\Tasks 2015-03-24 22:49:54 ----SHD---- C:\Windows\Installer 2015-03-24 18:04:27 ----D---- C:\Windows\debug 2015-03-24 17:56:39 ----D---- C:\Users\Robert\AppData\Roaming\TeraCopy 2015-03-24 17:50:09 ----D---- C:\Users\Robert\AppData\Roaming\Media Player Classic 2015-03-24 17:48:52 ----RD---- C:\Program Files (x86) 2015-03-24 17:48:52 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2015-03-24 17:48:52 ----D---- C:\Windows\SysWOW64 2015-03-24 16:50:25 ----D---- C:\Program Files (x86)\Windows Media Player 2015-03-24 16:50:22 ----D---- C:\Windows\Help 2015-03-24 15:36:03 ----D---- C:\Windows\System 2015-03-24 11:57:27 ----A---- C:\Windows\win.ini 2015-03-24 11:43:14 ----RSD---- C:\Windows\Fonts 2015-03-24 10:10:53 ----D---- C:\Windows\SYSWOW64\nl-NL 2015-03-24 10:10:53 ----D---- C:\Windows\system32\nl-NL 2015-03-24 10:10:52 ----A---- C:\Windows\SYSWOW64\dpnsvr.exe 2015-03-24 10:10:52 ----A---- C:\Windows\SYSWOW64\dpnhupnp.dll 2015-03-24 10:10:52 ----A---- C:\Windows\SYSWOW64\dpnhpast.dll 2015-03-24 10:10:52 ----A---- C:\Windows\SYSWOW64\dpnet.dll 2015-03-24 10:10:52 ----A---- C:\Windows\SYSWOW64\dpnathlp.dll 2015-03-24 10:10:51 ----A---- C:\Windows\system32\dpnsvr.exe 2015-03-24 10:10:51 ----A---- C:\Windows\system32\dpnhupnp.dll 2015-03-24 10:10:51 ----A---- C:\Windows\system32\dpnhpast.dll 2015-03-24 10:10:51 ----A---- C:\Windows\system32\dpnet.dll 2015-03-24 10:10:51 ----A---- C:\Windows\system32\dpnathlp.dll 2015-03-24 10:10:49 ----A---- C:\Windows\SYSWOW64\dpwsockx.dll 2015-03-24 10:10:49 ----A---- C:\Windows\SYSWOW64\dpmodemx.dll 2015-03-24 10:10:49 ----A---- C:\Windows\SYSWOW64\dplayx.dll 2015-03-24 10:10:49 ----A---- C:\Windows\SYSWOW64\dplaysvr.exe 2015-03-24 09:43:22 ----D---- C:\Windows\system32\catroot2 2015-03-24 09:39:30 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-03-23 21:16:45 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-03-23 21:16:42 ----D---- C:\Windows\system32\drivers 2015-03-23 21:06:17 ----D---- C:\ProgramData\ProductData 2015-03-19 19:17:55 ----HD---- C:\ProgramData 2015-03-19 19:17:55 ----D---- C:\Windows\Tasks 2015-03-19 19:11:26 ----HD---- C:\Windows\ELAMBKUP 2015-03-19 16:39:25 ----D---- C:\Windows\system32\DriverStore 2015-03-18 20:37:35 ----D---- C:\Windows\system32\wbem 2015-03-18 20:37:35 ----D---- C:\Windows\system32\drivers\UMDF 2015-03-18 20:37:35 ----D---- C:\Program Files\Windows Media Player 2015-03-18 20:35:32 ----SD---- C:\Windows\system32\CompatTel 2015-03-18 20:35:32 ----D---- C:\Windows\SYSWOW64\WinMetadata 2015-03-18 20:35:32 ----D---- C:\Windows\SYSWOW64\wbem 2015-03-18 20:35:32 ----D---- C:\Windows\system32\WinMetadata 2015-03-18 20:35:32 ----D---- C:\Program Files\Windows Portable Devices 2015-03-18 20:35:32 ----D---- C:\Program Files\Windows Defender 2015-03-18 20:35:32 ----D---- C:\Program Files\Internet Explorer 2015-03-18 20:33:41 ----D---- C:\Windows\system32\Sysprep 2015-03-18 20:33:24 ----D---- C:\Users\Robert\AppData\Roaming\ProductData 2015-03-18 20:33:15 ----D---- C:\ProgramData\McAfee Security Scan 2015-03-18 20:33:06 ----D---- C:\Program Files\Bonjour 2015-03-18 20:33:05 ----D---- C:\Program Files (x86)\STOPzilla 2015-03-18 20:33:05 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2 2015-03-18 20:33:00 ----D---- C:\Program Files (x86)\Google 2015-03-18 20:32:58 ----D---- C:\Program Files (x86)\Bonjour 2015-03-18 20:29:10 ----HD---- C:\Program Files\WindowsApps 2015-03-18 20:22:02 ----D---- C:\Windows\registration 2015-03-18 20:20:42 ----D---- C:\Windows\WinStore 2015-03-18 20:20:41 ----D---- C:\Windows\Web 2015-03-18 20:20:41 ----D---- C:\Windows\Vss 2015-03-18 20:20:41 ----D---- C:\Windows\vpnplugins 2015-03-18 20:20:41 ----D---- C:\Windows\twain_32 2015-03-18 20:20:40 ----D---- C:\Windows\SYSWOW64\XPSViewer 2015-03-18 20:20:39 ----D---- C:\Windows\SYSWOW64\winrm 2015-03-18 20:20:38 ----D---- C:\Windows\SYSWOW64\WindowsPowerShell 2015-03-18 20:20:38 ----D---- C:\Windows\SYSWOW64\wdi 2015-03-18 20:20:36 ----D---- C:\Windows\SYSWOW64\spp 2015-03-18 20:20:36 ----D---- C:\Windows\SYSWOW64\Speech 2015-03-18 20:20:36 ----D---- C:\Windows\SYSWOW64\slmgr 2015-03-18 20:20:34 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts 2015-03-18 20:20:34 ----D---- C:\Windows\SYSWOW64\oobe 2015-03-18 20:20:32 ----D---- C:\Windows\SYSWOW64\networklist 2015-03-18 20:20:32 ----D---- C:\Windows\SYSWOW64\MUI 2015-03-18 20:20:30 ----D---- C:\Windows\SYSWOW64\MsDtc 2015-03-18 20:20:29 ----D---- C:\Windows\SYSWOW64\migration 2015-03-18 20:20:28 ----D---- C:\Windows\SYSWOW64\Macromed 2015-03-18 20:20:28 ----D---- C:\Windows\SYSWOW64\Licenses 2015-03-18 20:20:27 ----D---- C:\Windows\SYSWOW64\InstallShield 2015-03-18 20:20:27 ----D---- C:\Windows\SYSWOW64\InputMethod 2015-03-18 20:20:27 ----D---- C:\Windows\SYSWOW64\IME 2015-03-18 20:20:25 ----D---- C:\Windows\SYSWOW64\drivers 2015-03-18 20:20:24 ----D---- C:\Windows\SYSWOW64\Dism 2015-03-18 20:20:22 ----D---- C:\Windows\SYSWOW64\config 2015-03-18 20:20:21 ----D---- C:\Windows\SYSWOW64\Com 2015-03-18 20:20:20 ----D---- C:\Windows\SystemResources 2015-03-18 20:20:16 ----D---- C:\Windows\system32\winrm 2015-03-18 20:20:13 ----D---- C:\Windows\system32\WindowsPowerShell 2015-03-18 20:20:13 ----D---- C:\Windows\system32\WindowsInternal.Inbox.Shared 2015-03-18 20:20:13 ----D---- C:\Windows\system32\WindowsInternal.Inbox.Media.Shared 2015-03-18 20:20:12 ----D---- C:\Windows\system32\WinBioPlugIns 2015-03-18 20:20:11 ----D---- C:\Windows\system32\wdi 2015-03-18 20:20:05 ----D---- C:\Windows\system32\SystemResetPlatform 2015-03-18 20:20:03 ----D---- C:\Windows\system32\spp 2015-03-18 20:20:03 ----D---- C:\Windows\system32\spool 2015-03-18 20:20:02 ----D---- C:\Windows\system32\Speech 2015-03-18 20:20:02 ----D---- C:\Windows\system32\SMI 2015-03-18 20:20:02 ----D---- C:\Windows\system32\slmgr 2015-03-18 20:19:57 ----D---- C:\Windows\system32\Printing_Admin_Scripts 2015-03-18 20:19:55 ----D---- C:\Windows\system32\oobe 2015-03-18 20:19:53 ----D---- C:\Windows\system32\networklist 2015-03-18 20:19:53 ----D---- C:\Windows\system32\MUI 2015-03-18 20:19:50 ----D---- C:\Windows\system32\MsDtc 2015-03-18 20:19:49 ----SD---- C:\Windows\system32\Microsoft 2015-03-18 20:19:49 ----D---- C:\Windows\system32\migwiz 2015-03-18 20:19:49 ----D---- C:\Windows\system32\migration 2015-03-18 20:19:48 ----D---- C:\Windows\system32\Macromed 2015-03-18 20:19:47 ----D---- C:\Windows\system32\Licenses 2015-03-18 20:19:47 ----D---- C:\Windows\system32\InputMethod 2015-03-18 20:19:46 ----D---- C:\Windows\system32\IME 2015-03-18 20:19:38 ----SD---- C:\Windows\system32\dsc 2015-03-18 20:19:38 ----DC---- C:\Windows\system32\DRVSTORE 2015-03-18 20:19:34 ----D---- C:\Windows\system32\Dism 2015-03-18 20:19:31 ----SD---- C:\Windows\system32\Configuration 2015-03-18 20:19:30 ----D---- C:\Windows\system32\Com 2015-03-18 20:19:30 ----D---- C:\Windows\system32\catroot 2015-03-18 20:19:29 ----D---- C:\Windows\system32\Boot 2015-03-18 20:19:25 ----D---- C:\Windows\Speech 2015-03-18 20:19:25 ----D---- C:\Windows\SKB 2015-03-18 20:19:25 ----D---- C:\Windows\Setup 2015-03-18 20:19:24 ----D---- C:\Windows\servicing 2015-03-18 20:19:23 ----D---- C:\Windows\ServiceProfiles 2015-03-18 20:19:23 ----D---- C:\Windows\security 2015-03-18 20:19:23 ----D---- C:\Windows\schemas 2015-03-18 20:19:23 ----D---- C:\Windows\Resources 2015-03-18 20:19:22 ----D---- C:\Windows\PolicyDefinitions 2015-03-18 20:19:22 ----D---- C:\Windows\PLA 2015-03-18 20:19:22 ----D---- C:\Windows\Performance 2015-03-18 20:19:09 ----D---- C:\Windows\InputMethod 2015-03-18 20:19:08 ----RD---- C:\Windows\ImmersiveControlPanel 2015-03-18 20:19:08 ----RD---- C:\Windows\DesktopTileResources 2015-03-18 20:19:08 ----D---- C:\Windows\IME 2015-03-18 20:19:08 ----D---- C:\Windows\Globalization 2015-03-18 20:19:08 ----D---- C:\Windows\FileManager 2015-03-18 20:19:08 ----D---- C:\Windows\diagnostics 2015-03-18 20:19:08 ----D---- C:\Windows\Camera 2015-03-18 20:19:07 ----D---- C:\Windows\Branding 2015-03-18 20:19:07 ----D---- C:\Windows\Boot 2015-03-18 20:19:01 ----RD---- C:\Windows\assembly 2015-03-18 20:18:35 ----D---- C:\Windows\AppCompat 2015-03-18 20:18:35 ----D---- C:\Windows\ADFS 2015-03-18 20:18:34 ----D---- C:\WebCam 2015-03-18 20:18:34 ----D---- C:\Users\Robert\AppData\Roaming\vlc 2015-03-18 20:18:34 ----D---- C:\Users\Robert\AppData\Roaming\Thunderbird 2015-03-18 20:18:34 ----D---- C:\Users\Robert\AppData\Roaming\TerraTec 2015-03-18 20:18:34 ----D---- C:\Users\Robert\AppData\Roaming\Talkback 2015-03-18 20:18:33 ----D---- C:\Users\Robert\AppData\Roaming\Skype 2015-03-18 20:18:33 ----D---- C:\Users\Robert\AppData\Roaming\Serif 2015-03-18 20:18:33 ----D---- C:\Users\Robert\AppData\Roaming\MyHeritage 2015-03-18 20:18:32 ----SD---- C:\Users\Robert\AppData\Roaming\Microsoft 2015-03-18 20:18:32 ----D---- C:\Users\Robert\AppData\Roaming\Mozilla 2015-03-18 20:18:32 ----D---- C:\Users\Robert\AppData\Roaming\Macromedia 2015-03-18 20:18:32 ----D---- C:\Users\Robert\AppData\Roaming\IObit 2015-03-18 20:18:31 ----D---- C:\Users\Robert\AppData\Roaming\Google 2015-03-18 20:18:31 ----D---- C:\Users\Robert\AppData\Roaming\Epson 2015-03-18 20:18:31 ----D---- C:\Users\Robert\AppData\Roaming\CyberLink 2015-03-18 20:18:30 ----D---- C:\Users\Robert\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 2015-03-18 20:18:30 ----D---- C:\Users\Robert\AppData\Roaming\Avant Downloader 2015-03-18 20:18:30 ----D---- C:\Users\Robert\AppData\Roaming\Ashampoo 2015-03-18 20:18:30 ----D---- C:\Users\Robert\AppData\Roaming\Artweaver Free 2015-03-18 20:18:30 ----D---- C:\Users\Robert\AppData\Roaming\Adobe 2015-03-18 20:18:29 ----D---- C:\Users\Robert\AppData\Roaming\0S1P1C1L1O 2015-03-18 20:18:05 ----RD---- C:\Users 2015-03-18 20:18:04 ----D---- C:\ProgramData\Temp 2015-03-18 20:18:04 ----D---- C:\ProgramData\{BA1D52DE-EA9F-8358-5B19-F3DA8B9B2054} 2015-03-18 20:18:03 ----D---- C:\ProgramData\Studio 15 2015-03-18 20:18:03 ----D---- C:\ProgramData\Spybot - Search & Destroy 2015-03-18 20:18:03 ----D---- C:\ProgramData\Skype 2015-03-18 20:18:03 ----D---- C:\ProgramData\Package Cache 2015-03-18 20:18:00 ----SD---- C:\ProgramData\Microsoft 2015-03-18 20:17:58 ----D---- C:\ProgramData\Malwarebytes 2015-03-18 20:17:57 ----D---- C:\ProgramData\IObit 2015-03-18 20:17:57 ----D---- C:\ProgramData\Intel 2015-03-18 20:17:57 ----D---- C:\ProgramData\InstallShield 2015-03-18 20:17:57 ----D---- C:\ProgramData\install_clap 2015-03-18 20:17:56 ----D---- C:\ProgramData\IncrediMail 2015-03-18 20:17:56 ----D---- C:\ProgramData\EPSON 2015-03-18 20:17:56 ----D---- C:\ProgramData\CyberLink 2015-03-18 20:17:55 ----D---- C:\ProgramData\Apple 2015-03-18 20:17:55 ----D---- C:\ProgramData\Adobe 2015-03-18 20:17:53 ----D---- C:\Program Files\Zoner 2015-03-18 20:17:53 ----D---- C:\Program Files\Windows Photo Viewer 2015-03-18 20:17:53 ----D---- C:\Program Files\Windows NT 2015-03-18 20:17:53 ----D---- C:\Program Files\Windows Mail 2015-03-18 20:17:53 ----D---- C:\Program Files\Windows Journal 2015-03-18 20:17:52 ----D---- C:\Program Files\Synaptics 2015-03-18 20:17:52 ----D---- C:\Program Files\Reference Assemblies 2015-03-18 20:17:52 ----D---- C:\Program Files\Realtek 2015-03-18 20:17:52 ----D---- C:\Program Files\Puran Utilities 2015-03-18 20:17:52 ----D---- C:\Program Files\MSBuild 2015-03-18 20:17:52 ----D---- C:\Program Files\Microsoft Silverlight 2015-03-18 20:17:52 ----D---- C:\Program Files\Microsoft Office 2015-03-18 20:17:52 ----D---- C:\Program Files\McAfee Security Scan 2015-03-18 20:17:51 ----D---- C:\Program Files\Intel 2015-03-18 20:17:51 ----D---- C:\Program Files\DIFX 2015-03-18 20:17:51 ----D---- C:\Program Files\CyberLink 2015-03-18 20:17:50 ----D---- C:\Program Files\Common Files\System 2015-03-18 20:17:50 ----D---- C:\Program Files\Common Files\microsoft shared 2015-03-18 20:17:50 ----D---- C:\Program Files\Common Files 2015-03-18 20:17:49 ----D---- C:\Program Files\Common Files\Adobe 2015-03-18 20:17:49 ----D---- C:\Program Files\CCleaner 2015-03-18 20:17:48 ----D---- C:\Program Files\Adobe 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\Windows Photo Viewer 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\Windows NT 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\Windows Mail 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\Windows Live 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\Windows Defender 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\VS Revo Group 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\VideoLAN 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\VIA 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\TERRATEC Electronic GmbH 2015-03-18 20:17:48 ----D---- C:\Program Files (x86)\TerraTec 2015-03-18 20:17:43 ----RD---- C:\Program Files (x86)\Skype 2015-03-18 20:17:43 ----D---- C:\Program Files (x86)\SoundSpectrum 2015-03-18 20:17:43 ----D---- C:\Program Files (x86)\Smart Projects 2015-03-18 20:17:43 ----D---- C:\Program Files (x86)\Serif 2015-03-18 20:17:42 ----D---- C:\Program Files (x86)\Samsung 2015-03-18 20:17:42 ----D---- C:\Program Files (x86)\Reference Assemblies 2015-03-18 20:17:42 ----D---- C:\Program Files (x86)\Realtek 2015-03-18 20:17:42 ----D---- C:\Program Files (x86)\QuickSnooker 7 2015-03-18 20:17:41 ----D---- C:\Program Files (x86)\Pinnacle 2015-03-18 20:17:41 ----D---- C:\Program Files (x86)\MyFree Codec 2015-03-18 20:17:41 ----D---- C:\Program Files (x86)\MultiCommander 2015-03-18 20:17:41 ----D---- C:\Program Files (x86)\MSBuild 2015-03-18 20:17:41 ----D---- C:\Program Files (x86)\Mozilla Thunderbird 2015-03-18 20:17:40 ----D---- C:\Program Files (x86)\Microsoft.NET 2015-03-18 20:17:39 ----D---- C:\Program Files (x86)\Microsoft Works 2015-03-18 20:17:39 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8 2015-03-18 20:17:39 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 2015-03-18 20:17:39 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2015-03-18 20:17:39 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2015-03-18 20:17:39 ----D---- C:\Program Files (x86)\Microsoft Office 2015-03-18 20:17:39 ----D---- C:\Program Files (x86)\MarkAny 2015-03-18 20:17:38 ----D---- C:\Program Files (x86)\LAV Filters 2015-03-18 20:17:38 ----D---- C:\Program Files (x86)\K-Lite Codec Pack 2015-03-18 20:17:31 ----D---- C:\Program Files (x86)\Jasc Software Inc 2015-03-18 20:17:31 ----D---- C:\Program Files (x86)\IObit 2015-03-18 20:17:29 ----D---- C:\Program Files (x86)\Internet Explorer 2015-03-18 20:17:29 ----D---- C:\Program Files (x86)\Intel 2015-03-18 20:17:28 ----D---- C:\Program Files (x86)\Intel Driver Update Utility 2015-03-18 20:17:27 ----D---- C:\Program Files (x86)\IncrediMail 2015-03-18 20:17:23 ----D---- C:\Program Files (x86)\Freemake 2015-03-18 20:17:22 ----D---- C:\Program Files (x86)\Epson Software 2015-03-18 20:17:22 ----D---- C:\Program Files (x86)\epson 2015-03-18 20:17:22 ----D---- C:\Program Files (x86)\EaseUS 2015-03-18 20:17:21 ----D---- C:\Program Files (x86)\e2eSoft 2015-03-18 20:17:21 ----D---- C:\Program Files (x86)\CyberLink 2015-03-18 20:17:19 ----D---- C:\Program Files (x86)\Creative 2015-03-18 20:17:19 ----D---- C:\Program Files (x86)\Common Files 2015-03-18 20:17:14 ----D---- C:\Program Files (x86)\BonkEnc 2015-03-18 20:17:14 ----D---- C:\Program Files (x86)\BitComet 2015-03-18 20:17:14 ----D---- C:\Program Files (x86)\Belastingdienst 2015-03-18 20:17:14 ----D---- C:\Program Files (x86)\Avant Browser 2015-03-18 20:17:13 ----D---- C:\Program Files (x86)\Audacity 2015-03-18 20:17:13 ----D---- C:\Program Files (x86)\Ashampoo 2015-03-18 20:17:12 ----D---- C:\Program Files (x86)\Apple Software Update 2015-03-18 20:17:12 ----D---- C:\Program Files (x86)\Adobe 2015-03-18 20:17:11 ----D---- C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint 2015-03-18 20:17:10 ----SHD---- C:\$RECYCLE.BIN 2015-03-18 20:17:10 ----D---- C:\Program Files (x86)\4KDownload 2015-03-18 20:17:10 ----D---- C:\PhotoDemon 2015-03-18 00:00:57 ----D---- C:\Windows\SchCache 2015-03-17 20:52:11 ----D---- C:\Users\Robert\AppData\Roaming\Audacity 2015-03-17 20:42:48 ----D---- C:\Temp 2015-03-16 11:07:00 ----D---- C:\Windows\AppReadiness 2015-03-14 23:45:14 ----D---- C:\ProgramData\Ashampoo 2015-03-11 23:53:15 ----RD---- C:\Windows\ToastData 2015-03-11 19:37:25 ----D---- C:\ProgramData\Microsoft Help 2015-03-11 19:34:36 ----D---- C:\Windows\system32\MRT 2015-03-11 19:30:19 ----A---- C:\Windows\system32\MRT.exe 2015-03-04 22:24:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-03-03 14:17:35 ----A---- C:\Windows\system32\MpSigStub.exe 2015-02-27 20:43:24 ----D---- C:\Users\Robert\AppData\Roaming\Belastingdienst ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2014-11-18 203544] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2015-02-03 341472] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2015-02-05 133088] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2014-06-18 31512] R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-11-21 632168] R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2008-06-16 55024] R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2014-06-04 21184] R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2014-06-18 153368] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2015-02-24 280544] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-08-28 243480] R1 Avgwfpa;AVG Firewall Driver; C:\Windows\system32\DRIVERS\avgwfpa.sys [2015-02-20 289248] R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712] R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-01-28 26528] R1 SbFw;SbFw; C:\Windows\system32\drivers\SbFw.sys [2013-10-01 260816] R2 sbapifs;sbapifs; C:\Windows\system32\DRIVERS\sbapifs.sys [2013-10-01 88928] R3 hidkmdf;@oem29.inf,%hidkmdf.SVCDESC%;KMDF Driver; C:\Windows\System32\drivers\hidkmdf.sys [2015-01-28 14136] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-01-10 4856760] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-01-28 4263128] R3 iwdbus;@oem11.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2014-12-22 30512] R3 MarvinBus;@oem25.inf,%MarvinBus.SVCDESC%;Pinnacle Marvin Bus 64; C:\Windows\System32\drivers\MarvinBus64.sys [2005-09-23 261120] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-03-17 25816] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-03-25 136408] R3 MEIx64;@oem33.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-01-28 125952] R3 RTL8168;@oem34.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2015-01-28 874712] R3 SBFWIMCLMP;@oem41.inf,%SBFWIMCLMP_Desc%;GFI Software Firewall NDIS IM Filter Miniport; C:\Windows\system32\DRIVERS\SBFWIM.sys [2013-03-26 120608] R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-01-28 31472] R3 USB28xxBGA;@oem16.inf,%ServiceCap.FriendlyName%;TERRATEC H5 Capture service; C:\Windows\system32\DRIVERS\emBDA64.sys [2012-08-21 656936] R3 USB28xxOEM;@oem16.inf,%ServiceOem.FriendlyName%;TERRATEC H5 OEM service; C:\Windows\system32\DRIVERS\emOEM64.sys [2012-08-21 624680] R3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Stuurprogramma voor USB-audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2013-12-13 121088] R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736] S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\Windows\system32\DRIVERS\avgboota.sys [2013-09-04 20496] S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2014-10-29 53248] S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\System32\drivers\BthLEEnum.sys [2013-12-04 226304] S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2014-07-24 118272] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2014-10-29 1198080] S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920] S3 dg_ssudbus;@oem38.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800] S3 EsgScanner;EsgScanner; C:\Windows\system32\DRIVERS\EsgScanner.sys [2015-02-05 22704] S3 gfiark;gfiark; C:\Windows\system32\drivers\gfiark.sys [2013-05-23 41032] S3 gfiutil;gfiutil; C:\Windows\system32\drivers\gfiutil.sys [2013-09-04 31264] S3 intaud_WaveExtensible;@oem10.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2014-12-22 42288] S3 IntcDAud;@oem42.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-01-10 455440] S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-03-17 64216] S3 NETwNe64;@netwew02.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\Windows\system32\DRIVERS\NETwew02.sys [2013-06-18 4649440] S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-01-30 167424] S3 RtlWlanu;@oem1.inf,%RtlWlanu.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\rtwlanu.sys [2014-01-15 2968280] S3 SBFWIMCL;@oem9.inf,%SBFWIMCLService_Desc%;GFI Software Firewall NDIS IM Filter Service; C:\Windows\system32\DRIVERS\sbfwim.sys [2013-03-26 120608] S3 SBHIPS;sbhips; C:\Windows\system32\drivers\sbhips.sys [2013-10-01 63184] S3 sbwtis;sbwtis; C:\Windows\system32\DRIVERS\sbwtis.sys [2013-03-26 88864] S3 ssudmdm;@oem39.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\Windows\System32\drivers\usbscan.sys [2014-10-29 44544] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8; C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-09 169312] R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088] R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [2014-11-04 815392] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2015-03-06 3416016] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2015-03-06 309232] R2 Bonjour Service;Bonjour-service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2010-10-07 345376] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520] R2 CyberLink PowerDVD 10 MS Monitor Service;CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [2013-03-11 74712] R2 CyberLink PowerDVD 10 MS Service;CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [2013-03-11 316376] R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [2007-12-17 163840] R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464] R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-11-21 15720] R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2015-01-10 344168] R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2015-01-27 344864] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-05-11 733696] R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-09-04 131544] R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-04 169432] R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-01-16 2724128] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-04 390616] R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-03-17 1871160] R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-08-08 390672] R2 SBAMSvc;STOPzilla!; C:\Program Files (x86)\STOPzilla\SBAMSvc.exe [2014-01-07 3937472] R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168] R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408] R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928] R2 StartMenuService;StartMenu8 Service; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [2015-03-05 1055008] R2 sz7;STOPzilla Service; C:\Program Files (x86)\STOPzilla\SZServer.exe [2015-03-11 1532208] R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-22 43696] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-04 107912] S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-03-17 1080120] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-17 268464] S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792] S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-01-10 279144] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2015-03-01 867080] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-04 107912] S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-05-11 822232] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 289256] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-03-22 148080] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] S4 PuranDefrag;PuranDefrag; C:\Windows\SYSTEM32\PuranDefragS.exe [2013-08-15 292736] -----------------EOF-----------------