Zoek.exe v5.0.0.0 Updated 08-April-2015 Tool run by test on ma 13/04/2015 at 15:31:46,34. Microsoft Windows 8.1 Pro met Media Center 6.3.9600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\test\Downloads\zoek(1).exe [Scan all users] [Script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2013-07-21-142710.log 36930 bytes ==== Running Processes ====================== c:\PROGRA~2\AVG\AVG2015\avgrsa.exe C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe C:\WINDOWS\system32\wininit.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe C:\WINDOWS\system32\atiesrxx.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Program Files\IDT\WDM\STacSV64.exe C:\Program Files\Classic Shell\ClassicShellService.exe C:\WINDOWS\system32\Hpservice.exe C:\Windows\System32\WUDFHost.exe C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\system32\WLANExt.exe C:\WINDOWS\system32\conhost.exe C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\IDT\WDM\AESTSr64.exe C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe C:\WINDOWS\system32\svchost.exe -k apphost C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe C:\WINDOWS\system32\dashost.exe C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe C:\Program Files (x86)\AVG\AVG2015\avgemca.exe C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe C:\WINDOWS\system32\mqsvc.exe C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe C:\WINDOWS\system32\svchost.exe -k iissvcs C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\System32\svchost.exe -k AppReadiness C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\SearchIndexer.exe C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe C:\Program Files (x86)\Nero\Update\NASvc.exe C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\WINDOWS\System32\WinLogon.exe C:\WINDOWS\System32\dwm.exe C:\WINDOWS\system32\atieclxx.exe C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe C:\WINDOWS\Explorer.EXE C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\WINDOWS\system32\DllHost.exe C:\Program Files\Classic Shell\ClassicStartMenu.exe C:\WINDOWS\system32\taskhostex.exe C:\Program Files\IDT\WDM\sttray64.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files (x86)\CyberLink\Shared files\brs.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\WINDOWS\SysWOW64\ctfmon.exe C:\Program Files\CCleaner\CCleaner64.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\WINDOWS\splwow64.exe C:\Users\test\Downloads\zoek(1).exe C:\WINDOWS\system32\conhost.exe C:\Program Files (x86)\AVG\AVG2015\avgcfgex.exe ==== Windows Installer Info ====================== Adobe Reader XI (11.0.10) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\68AB67CA7DA73301B744BA0000000010]C:\WINDOWS\Installer\33a0b60e.msi Adobe Refresh Manager [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\68AB67CA408033019195008120111403]C:\WINDOWS\Installer\71e2048.msi Adobe Shockwave Player 12.1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CD7C0EC3B5DEE054C9F59407C2625344]C:\WINDOWS\Installer\d3afa.msi AMD APP SDK Runtime [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D276F30548C6A844F8F8B43CA58C4314]C:\WINDOWS\Installer\2830e.msi AMD Catalyst Control Center [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\91E5B2D5333C9154D323AA8BEE9ECA4A]C:\WINDOWS\Installer\10899.msi AMD Catalyst Install Manager [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\17B907A6EC05E7EFBE5FB40156CB2E5A]C:\WINDOWS\Installer\2800a.msi AMD Fuel [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\42DB72D857BC965C0C5165D1D3389635]C:\WINDOWS\Installer\28245.msi AMD Fuel [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\534BCA7E4B0E077477EDDE8388C71D33]C:\WINDOWS\Installer\10894.msi AMD System Monitor [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\24C0DFE61CC461740AAC121C0A26FC43]C:\Windows\Installer\19a6f.msi AMD VISION Engine Control Center [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DB3BA65FD83D69DB3267A200C39C7FD6]C:\WINDOWS\Installer\282f5.msi AuthenTec TrueAPI [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F20FE4508D594F84E9BEF2C93E70E28D]C:\Windows\Installer\19a9f.msi AVG 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B700F669A8D06A446A3C355989C353D6]C:\WINDOWS\Installer\2d3ea3ec.msi AVG 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DAB92A2858668644884F587F7CBFD4EC]C:\WINDOWS\Installer\5bf5a855.msi Broadcom InConcert Maestro [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9E53DD75BB9D9804BB50FE39C385C63B]C:\Windows\Installer\ad37d.msi Catalyst Control Center - Branding [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\359B3A52324151F346E06B02DDF014A9]C:\WINDOWS\Installer\10817.msi Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\587086081EE2F350C93DB4C2095469EE]C:\WINDOWS\Installer\10812.msi Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EBEF8A92C77566043AAFA84026CC138C]C:\WINDOWS\Installer\28002.msi Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\316C5CF209BE7DCD5FA350864D423ABD]C:\WINDOWS\Installer\282e6.msi Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\771EB21B00CD6475A39B19DC90A05F55]C:\WINDOWS\Installer\1081c.msi ccc-utility64 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E5FE3B4C2A9B1A06CC11BDF44B448CB]C:\WINDOWS\Installer\1088f.msi ccc-utility64 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\742D3F5A81953B437236E23011532D30]C:\WINDOWS\Installer\282ed.msi CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A9055FBA052AE52C0911605E5E9AB31]C:\WINDOWS\Installer\10885.msi CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2ECA229FCD02708F7AA5B78DF56E7D7A]C:\WINDOWS\Installer\282d8.msi CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\190ED401F4C69A5C6F91D5C669A52069]C:\WINDOWS\Installer\1088a.msi CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B79C6C4F8358462CC2B61016217CD1DE]C:\WINDOWS\Installer\282df.msi CCC Help Czech [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\22EE3601DE40AC4B77C38136D8D71DF7]C:\WINDOWS\Installer\2824c.msi CCC Help Czech [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\65BB5ADE4FAA9886DAE82EA571DB41B0]C:\WINDOWS\Installer\10821.msi CCC Help Danish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\17341FEE42D2D2A5E02F2210D04BFC6A]C:\WINDOWS\Installer\10826.msi CCC Help Danish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6CBA52E5D639496B4F8D74A3DEB71A04]C:\WINDOWS\Installer\28253.msi CCC Help Dutch [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B31CB1590E0000BA54497D28EE1A6D7]C:\WINDOWS\Installer\282a0.msi CCC Help Dutch [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\915F8B5953C801096AC3153B0EEED8E4]C:\WINDOWS\Installer\1085d.msi CCC Help English [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\33EF2FDFD6242C54E407671C261F7B09]C:\WINDOWS\Installer\10835.msi CCC Help English [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D5A476FACF0B3650389CA339774A86FB]C:\WINDOWS\Installer\28268.msi CCC Help Finnish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7BA6083A64BA27678A529FEAD06E19A0]C:\WINDOWS\Installer\1083f.msi CCC Help Finnish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F9FD5B99588FF77031C6234DF8CC6EA]C:\WINDOWS\Installer\28276.msi CCC Help French [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AD31B5C786A67C68DE9216C00A4F5955]C:\WINDOWS\Installer\10844.msi CCC Help French [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E9662D7963285C847A85EB21DC0912D5]C:\WINDOWS\Installer\2827d.msi CCC Help German [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\357AE96CF3D0B84EC889F73601CD928B]C:\WINDOWS\Installer\1082b.msi CCC Help German [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3E9954A010FEF4D7858443B8C8D54FBF]C:\WINDOWS\Installer\2825a.msi CCC Help Greek [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\397F9F545382718C2BA3A5D8B80CF376]C:\WINDOWS\Installer\28261.msi CCC Help Greek [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C759970B6723F9B4BD801DACC890D0E9]C:\WINDOWS\Installer\10830.msi CCC Help Hungarian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\03F9C5828FB3B796DBD15343539EB487]C:\WINDOWS\Installer\10849.msi CCC Help Hungarian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\247A7B1E1DF0D3034C84E2058185203B]C:\WINDOWS\Installer\28284.msi CCC Help Italian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1EFCC5252C4E3F899EBF61564D71FDBD]C:\WINDOWS\Installer\2828b.msi CCC Help Italian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C7A7699281E6DC19BB4EC9904F109E05]C:\WINDOWS\Installer\1084e.msi CCC Help Japanese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\008757C58E723EA288A9B859A96E988F]C:\WINDOWS\Installer\10853.msi CCC Help Japanese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\155EFFFDAA2B05028904FE0280F63E7A]C:\WINDOWS\Installer\28292.msi CCC Help Korean [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\03F835E7CF656BF13D9FD6E623A12FC6]C:\WINDOWS\Installer\28299.msi CCC Help Korean [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A4D667BEC65CD6497FD4347CF84E25E1]C:\WINDOWS\Installer\10858.msi CCC Help Norwegian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\87202741ECA14ED742997C339B89EBB0]C:\WINDOWS\Installer\282a7.msi CCC Help Norwegian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D4A09B169CC8DEF24259CAC849769C48]C:\WINDOWS\Installer\10862.msi CCC Help Polish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9967D0DE349192C0475656038FEDD22A]C:\WINDOWS\Installer\10867.msi CCC Help Polish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B7E00975B64AAA4D1DF1E51FF91AF41B]C:\WINDOWS\Installer\282ae.msi CCC Help Portuguese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\99796DDF2B73ECA97FC0BA1D9FF60DC4]C:\WINDOWS\Installer\1086c.msi CCC Help Portuguese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CA7980C1F89D1029D5D418D6BA172F8C]C:\WINDOWS\Installer\282b5.msi CCC Help Russian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\47350D4582420EB785DCEC081361D36E]C:\WINDOWS\Installer\10871.msi CCC Help Russian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD506C6BB1088F6D5F609F1135C7DA01]C:\WINDOWS\Installer\282bc.msi CCC Help Spanish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\546CE3D5759B1A6360A8EF4805696396]C:\WINDOWS\Installer\1083a.msi CCC Help Spanish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DF446BC4FF9695330E5F0F2BF2C94959]C:\WINDOWS\Installer\2826f.msi CCC Help Swedish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\89EFA6C5FB80A68003D0817FD7829466]C:\WINDOWS\Installer\10876.msi CCC Help Swedish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\95CAA9B5E367EE727FA660E5C0A11B42]C:\WINDOWS\Installer\282c3.msi CCC Help Thai [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3AB2EE4C5AEE0569680E4050CE5A2CC2]C:\WINDOWS\Installer\1087b.msi CCC Help Thai [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D6F972EBB4A86453044DB890912C6D8B]C:\WINDOWS\Installer\282ca.msi CCC Help Turkish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1678B58799DE3EB3FD2A2FED8BFD0D15]C:\WINDOWS\Installer\282d1.msi CCC Help Turkish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F232070B8606FF15B4C8F3FE8907C1E]C:\WINDOWS\Installer\10880.msi Classic Shell [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B0951AEFA045CF149AC56644398CA212]C:\WINDOWS\Installer\a329d9.msi Contr“le ActiveX Windows Live Mesh pour connexions … distance [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4F300D559959FB44ABE9590D0637D03D]C:\Windows\Installer\e7eb.msi D3DX10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7BD4C90EC03660F46A13E87A329932FA]C:\Windows\Installer\e5ac.msi Evernote v. 4.2.3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C953167FDEC9EA54A915D96650DC554C]C:\Windows\Installer\e4ea.msi Galerie de photos Windows Live [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7430F8847A4C4734197A0318B8DE7A01]C:\Windows\Installer\e731.msi Google Earth Plug-in [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\11F45BA4C8F23E110BF98BCAF6798BE8]C:\WINDOWS\Installer\28c49.msi Google Update Helper [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E]C:\WINDOWS\Installer\ee641b5.msi Google Update Helper [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A089CE062ADB6BC44A720BA745894BAC]C:\WINDOWS\Installer\711b4d63.msi Hewlett-Packard ACLM.NET v1.2.1.1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\701043F6AA9F6C745BC43C1AF91155F3]C:\WINDOWS\Installer\48401577.msi High-Definition Video Playback 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\26BCC73245483E341B85A3DC104358E2]C:\Windows\Installer\d2469.msi HP 3D DriveGuard [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DBC314B02D419C845A1C1FA972FE89D4]C:\Windows\Installer\cc48f.msi HP Auto [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7B65D4CC81F6B0747843BADC57CB4F1F]C:\Windows\Installer\ec60.msi HP Client Services [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2C1A65825C073CE4FA7F5E5BE155032A]C:\Windows\Installer\ec73.msi HP CoolSense [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1ADB7B61769BD2D4B8721E72722C3805]C:\Windows\Installer\ec7d.msi HP Customer Experience Enhancements [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0694AF70830BBE9498B1F95939A05A44]C:\Windows\Installer\ec56.msi HP Documentation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B3DE0F4550DB14B4CBCF0EF32EDDFFD1]C:\Windows\Installer\19ab9.msi HP Launch Box [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0D57E1FBFA7EAEB4F9CB65F7C045DB9F]C:\Windows\Installer\e4ef.msi HP On Screen Display [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A96DB1DE3E70C814191F8D65855218FB]C:\Windows\Installer\ec78.msi HP Power Manager [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7C87544E76644214B82C1116CB5A9487]C:\Windows\Installer\19ab3.msi HP Quick Launch [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C227F58254E0ED743BE8B5B301AFA4C7]C:\Windows\Installer\e4e5.msi HP QuickWeb [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DA2CF4BB21FD1EE4A87AC2A0625B2EBF]C:\Windows\Installer\19aad.msi HP Recovery Manager [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\46E5DCBD973784644944A85685CD6B41]C:\Windows\Installer\e4f9.msi HP Security Assistant [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F88767503992F55408DC891041901530]C:\Windows\Installer\ec84.msi HP Setup [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FA9D7E5F6F0603A4783EE49AD423C21E]C:\Windows\Installer\ec6a.msi HP Setup Manager [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\883658EADAFA357418FD9DB6910D1AC7]C:\Windows\Installer\19a75.msi HP SimplePass 2012 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8BEBF3246C1202748AAD1BB960DF6B70]C:\Windows\Installer\19aa6.msi HP Software Framework [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0B724360B0AFDEA428B0E734D460113C]C:\Windows\Installer\d5ec7.msi HP Support Assistant [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\114202EE62C28E947948B11CBD7FED69]C:\WINDOWS\Installer\48401570.msi HP Support Solutions Framework [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\487ECC32218A7464EAFFD1CC4D5E4787]C:\WINDOWS\Installer\9371d1c.msi IncrediMail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\36E5EFDFA6115564B9D4924FFA4E143B]C:\WINDOWS\Installer\1a0031.msi Java 7 Update 76 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EA42A62D9304AC4784BF230120767FF]C:\WINDOWS\Installer\6ff7f1c3.msi Java 8 Update 31 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EA42A62D9304AC4784BF2381208130F]C:\WINDOWS\Installer\33e4825d.msi Java 8 Update 40 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EA42A62D9304AC4784BF2381208040F]C:\WINDOWS\Installer\d3aff.msi Junk Mail filter update [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7E0BA6F1DDC839B4A832AAE92BEFCF4E]C:\Windows\Installer\e659.msi Mesh Runtime [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6116D6C8427B0184F8D20D746E7B6DE8]C:\Windows\Installer\e78d.msi Microsoft-invoegtoepassing Opslaan als PDF voor 2007 Microsoft Office-programma's [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000021090B0031400000000000F01FEC]C:\Windows\Installer\63ed9.msi Microsoft .NET Framework 4 Client Profile [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DFC90B5F2B0FFA63D84FD16F6BF37C4B]C:\Windows\Installer\24a91.msi Microsoft .NET Framework 4 Extended [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C28643E881181F13CBC489DC69571E2C]C:\Windows\Installer\24a97.msi Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8DCB0F9E5DB67DE1DE3AF9FCA274A81A]C:\WINDOWS\Installer\34019438.msi Microsoft Application Error Reporting [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000021599B0090400100000000F01FEC]C:\Windows\Installer\e51f.msi Microsoft Office Access MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109510031400000000000F01FEC]C:\WINDOWS\Installer\142381e6.msi Microsoft Office Access Runtime (English) 2007 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00002109C10090400000000000F01FEC]C:\Windows\Installer\1e38a6.msi Microsoft Office Excel MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109610031400000000000F01FEC]C:\WINDOWS\Installer\142381b6.msi Microsoft Office Groove MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109AB0031400000000000F01FEC]C:\WINDOWS\Installer\142381bb.msi Microsoft Office InfoPath MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109440031400000000000F01FEC]C:\WINDOWS\Installer\142381f0.msi Microsoft Office Office 64-bit Components 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109A20000000100000000F01FEC]C:\WINDOWS\Installer\14238202.msi Microsoft Office OneNote MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000041091A0031400000000000F01FEC]C:\WINDOWS\Installer\142381eb.msi Microsoft Office Outlook MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109A10031400000000000F01FEC]C:\WINDOWS\Installer\142381c6.msi Microsoft Office PowerPoint MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109810031400000000000F01FEC]C:\WINDOWS\Installer\142381b0.msi Microsoft Office Professional Plus 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109110000000000000000F01FEC]C:\WINDOWS\Installer\14238210.msi Microsoft Office Proof (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10031400000000000F01FEC]C:\WINDOWS\Installer\142381cb.msi Microsoft Office Proof (English) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400000000000F01FEC]C:\WINDOWS\Installer\142381da.msi Microsoft Office Proof (French) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400000000000F01FEC]C:\WINDOWS\Installer\142381d5.msi Microsoft Office Proof (German) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10070400000000000F01FEC]C:\WINDOWS\Installer\142381d0.msi Microsoft Office Proofing (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109C20031400000000000F01FEC]C:\WINDOWS\Installer\142381df.msi Microsoft Office Publisher MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109910031400000000000F01FEC]C:\WINDOWS\Installer\142381f6.msi Microsoft Office Shared 64-bit MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109A20031400100000000F01FEC]C:\WINDOWS\Installer\142381c0.msi Microsoft Office Shared MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60031400000000000F01FEC]C:\WINDOWS\Installer\142381ab.msi Microsoft Office Word MUI (Dutch) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109B10031400000000000F01FEC]C:\WINDOWS\Installer\142381fc.msi Microsoft Office Word Viewer 2003 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3140580900063D11C8EF10054038389C]C:\WINDOWS\Installer\ee49980.msi Microsoft PowerPoint Viewer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004159FA0031400000000000F01FEC]C:\Windows\Installer\3a55df.msi Microsoft Primary Interoperability Assemblies 2005 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9B8BD42DC6BB43346991ABC156E0313D]C:\Windows\Installer\242881.msi Microsoft Silverlight [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7314F9862C648A4DB8BE2A5B47BE100]c:\WINDOWS\Installer\d1658af.msi Microsoft SQL Server 2005 Compact Edition [ENU] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D034B0FAA6BD374B960AAD30DF10D8B]C:\Windows\Installer\e6d4.msi Microsoft Visual C++ 2005 Redistributable (x64) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1af2a8da7e60d0b429d7e6453b3d0182]C:\WINDOWS\Installer\5958ce4.msi Microsoft Visual C++ 2005 Redistributable (x64) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\84b9c17023c712640acaf308593282f8]C:\WINDOWS\Installer\47325969.msi Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3e43b73803c7c394f8a6b2f0402e19c2]C:\Windows\Installer\a63d8.msi Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\c1c4f01781cc94c4c8fb1542c0981a2a]C:\Windows\Installer\5bbfa4.msi Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EFEE0228DC83E77358593193D847A0EC]c:\Windows\Installer\ec5b.msi Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1007C6B46D7C017319E3B52CF3EC196E]c:\Windows\Installer\19a8d.msi Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\67D6ECF5CD5FBA732B8B22BAC8DE1B4D]c:\Windows\Installer\940a8.msi Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6F9E66FF7E38E3A3FA41D89E8A906A4A]c:\WINDOWS\Installer\8ae6e9b.msi Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D20352A90C039D93DBF6126ECE614057]c:\Windows\Installer\24287a.msi Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CFD2C1F142D260E3CB8B271543DA9F98]c:\Windows\Installer\19a86.msi Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E815EB96CCE9A53884E7857C57002F0]c:\Windows\Installer\940b0.msi Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1926E8D15D0BCE53481466615F760A7F]c:\WINDOWS\Installer\2225a8b3.msi Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D5E3C0FEDA1E123187686FED06E995A]c:\Windows\Installer\2a3ebc.msi Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7C9F8B73BF303523781852719CD9C700]C:\WINDOWS\Installer\222f0f62.msi Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C3AEB2FCAE628F23AAB933F1E743AB79]C:\WINDOWS\Installer\222f0f45.msi Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\39103BDF0ADFAAD3CAAC7AE5FE5E6370]C:\WINDOWS\Installer\10803.msi Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B7A37F2E05E6A93A9CBFE984E6CE263]C:\WINDOWS\Installer\107fe.msi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4BEA594979BAED93C82408E6FE57CE7A]c:\WINDOWS\Installer\2225a918.msi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\64A95FF38022A7A3CBE8D50CBBABA178]c:\WINDOWS\Installer\2225a930.msi MSVC90_x64 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B8C170BAC378F954CA9AE9EB303C8EB9]C:\WINDOWS\Installer\585f4591.msi MSVC90_x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\846111FA1A99E35418DD08BDFBD6DAD0]C:\WINDOWS\Installer\585f458c.msi MSVCRT [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A6C64DD86500CEF47BA082BB611A1FF1]C:\Windows\Installer\e554.msi MSVCRT_amd64 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\52744B0D6663D294EB6F85A741DBB99D]C:\Windows\Installer\e65d.msi MSXML 4.0 SP2 (KB954430) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDA39468D428E8B4DB27C8D5DC5CA217]c:\Windows\Installer\7a0e7.msi MSXML 4.0 SP2 (KB973688) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E8A266FCD4F2A1409E1C8110F44DBCE]c:\Windows\Installer\7a0ef.msi Nero 10 Menu TemplatePack Basic [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BAE3AA36BB322B84A90D448F87706540]C:\Windows\Installer\d2472.msi Nero 10 Movie ThemePack Basic [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F228BC5F563B1D34CB0CF4ADA102717A]C:\Windows\Installer\d247b.msi Nero BackItUp 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0396BA86FFB56FF429B315A61989F46E]C:\Windows\Installer\d2496.msi Nero BackItUp 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B6668C80205C3BA44BBC7DA44CD241EF]C:\Windows\Installer\d2503.msi Nero Burning ROM 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D137D5A73B4BE0943B9357867521ABBA]C:\Windows\Installer\d2484.msi Nero BurningROM 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB42B6B97E084C64F95A1B765D0E3F54]C:\Windows\Installer\d250c.msi Nero BurnRights 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7DFC3496335FA7449810E42375A5A71]C:\Windows\Installer\d248d.msi Nero BurnRights 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6C868555BF94F484BB34980856A1B100]C:\Windows\Installer\d251e.msi Nero Control Center 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F998BFD62A710F845A33DED88666FC83]C:\Windows\Installer\d244e.msi Nero ControlCenter 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B1B2B325BD8D14B409FF4C7D992E57A8]C:\Windows\Installer\d2515.msi Nero Core Components 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A2F6342E7B4C6B4EAE406C448AAA6F4]C:\Windows\Installer\d2457.msi Nero CoverDesigner 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E6A00FCF85BFA774BA9E329270015512]C:\Windows\Installer\d249f.msi Nero CoverDesigner 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\55C3723C4E1EFF14D896108590D08B8D]C:\Windows\Installer\d2527.msi Nero DiscSpeed 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E4F094430D84E29428944BB8CE0F35C7]C:\Windows\Installer\d24a8.msi Nero DiscSpeed 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8140A81CA2446814FA890DF805452ACF]C:\Windows\Installer\d2530.msi Nero Dolby Files 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4CA0853C728C23349B53A982E25DBB79]C:\Windows\Installer\d2460.msi Nero Express 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3910550722C1C544F84A65E451D51B7A]C:\Windows\Installer\d24b1.msi Nero Express 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8193463375979384297CAE69BC26A189]C:\Windows\Installer\d2539.msi Nero InfoTool 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FA4B214FC8835FF4B9F233BDC1359635]C:\Windows\Installer\d24ba.msi Nero InfoTool 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\531940669569DAA41996C9AC62E9BBE3]C:\Windows\Installer\d2542.msi Nero MediaHub 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F86BF7F16F253A644BF283EC6492A55E]C:\Windows\Installer\d24c3.msi Nero MediaHub 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A268764FAC9DDE74D8184B3B9C932927]C:\Windows\Installer\d254b.msi Nero Multimedia Suite 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9551C7727FC4FF44D87089AAC931AADB]C:\Windows\Installer\d2446.msi Nero Recode 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\358CECE8D3C501B45B7CFF11FF278470]C:\Windows\Installer\d24d5.msi Nero Recode 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A4D1C7BDAB80E7C48AAA7B9FBB73D2FC]C:\Windows\Installer\d2554.msi Nero RescueAgent 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\787E733E16FCB7B48BF40529205A0432]C:\Windows\Installer\d24cc.msi Nero RescueAgent 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\83252E293A16DCA44A70C384E0FE747A]C:\Windows\Installer\d255d.msi Nero SoundTrax 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9335EE1E23D5F854ABBA1BF93610CB2E]C:\Windows\Installer\d24e7.msi Nero SoundTrax 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\99E78961C59C31542993B7440A7AD15B]C:\Windows\Installer\d2566.msi Nero StartSmart 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E984D16F44C6CA94DA20D78ACA7AA356]C:\Windows\Installer\d24fa.msi Nero StartSmart 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C9F7116F5BDA0954B94E217CEB2C7820]C:\Windows\Installer\d256f.msi Nero Update [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7040BB568CC47CD459E2E3FEFD5006A2]C:\Windows\Installer\d2589.msi Nero Vision 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3F7924A915A29DE429ACB4BC380849E7]C:\Windows\Installer\d24de.msi Nero Vision 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A1149233F91047478F47104B021F672]C:\Windows\Installer\d2578.msi Nero WaveEditor 10 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5DAFDCDE08FD00644A399EAD6D182003]C:\Windows\Installer\d24f0.msi Nero WaveEditor 10 Help (CHM) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F8D592A7B484BFF498BA1CDF945719EF]C:\Windows\Installer\d2581.msi Nokia Connectivity Cable Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CC52075AE2F510D43B7860BD0105D034]C:\WINDOWS\Installer\585f4596.msi Nokia PC Suite [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3654C66835DE3F342AD9B8EEB21DABC3]C:\WINDOWS\Installer\585f45a1.msi opensource [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8D4D77630E5ECF948BE66045C10FB0EB]C:\Windows\Installer\ec65.msi PaperPort Image Printer 64-bit [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1FAF4ABA98369F5429EC93414A5E4C17]C:\WINDOWS\Installer\47325963.msi PC Connectivity Solution [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0194F446218EDA9439CE6828C88BA1D0]C:\WINDOWS\Installer\585f459b.msi Photo Notifier and Animation Creator [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2220A88709652124AAC94CF80D1E9CEA]C:\WINDOWS\Installer\7db09c.msi PowerDVD [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DE532CED4A8571542A874CE1D8EABAB3]C:\Windows\Installer\a63e8.msi SDFormatter [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\51F5535AB89F4074B9EA5EB3F94EF884]C:\WINDOWS\Installer\25d50d.msi SkypeT 7.3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0AB19942EE0FDA44C98CE55CA0CE6F7B]C:\WINDOWS\Installer\d3b1d.msi swMSM [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7C43C21609E58D74B9C5F017D78D7262]C:\Windows\Installer\e503.msi TomTom HOME [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8C1BB2A7D3095854F9B3ACDD760DD773]C:\WINDOWS\Installer\35ebf6a2.msi TomTom HOME Visual Studio Merge Modules [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5C13C3F8A3C98AA4E8AF1792A0A75D33]C:\Windows\Installer\7b12b.msi Visual Studio 2008 x64 Redistributables [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\06AEBDCF0F97EAF4BB8A552AC606A994]C:\Windows\Installer\15ec5b.msi Visual Studio 2010 x64 Redistributables [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6D331B1297950F74EBC16F6A3B4096F3]C:\Windows\Installer\b5d38.msi Visual Studio 2012 x64 Redistributables [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\07E577C8197A8AD4CB3CA67B31F64448]C:\WINDOWS\Installer\23715e67.msi Visual Studio 2012 x86 Redistributables [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A91FFE89BA03B4E49B340FB6C136BE8F]C:\WINDOWS\Installer\23715e62.msi Visual Studio C++ 10.0 Runtime [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\422F2144948316443A9EEDFED8527209]C:\WINDOWS\Installer\6ac00a2.msi Windows Live [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F1F913432FC79CC43B75A17E2DFFA35C]C:\Windows\Installer\e609.msi Windows Live Communications Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3D04254D3B6B9FF42B3445CE3E1E0066]C:\Windows\Installer\e565.msi Windows Live Essentials [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\032440EF5AC97F34B985A55C2AA8F133]C:\Windows\Installer\e5df.msi Windows Live Essentials [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0EE4E59FE6C037246B9B19DFF670D167]C:\Windows\Installer\e810.msi Windows Live Essentials [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B53C70A248384AD4A95944B2C6980A37]C:\Windows\Installer\e636.msi Windows Live Fotogalerie [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C81D311B0B767BF43B928EB96691A46E]C:\Windows\Installer\e846.msi Windows Live ID Sign-in Assistant [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BFF8CCA148D950C44AED2DA8B99C6189]C:\Windows\Installer\e517.msi Windows Live Installer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F132F0B0A6ECD384AA32773B467F9571]C:\Windows\Installer\e594.msi Windows Live Language Selector [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8888C0811F05B6249ACDBA381A89C956]C:\Windows\Installer\e523.msi Windows Live Mail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4999321B058A2E44EB8D7EA01221E461]C:\Windows\Installer\e83c.msi Windows Live Mail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4E42866C3BBC1584BBF38EFC6D539032]C:\Windows\Installer\e6a4.msi Windows Live Mail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A563885D93EA72F4DBEA4B7EC2E809C0]C:\Windows\Installer\e6ca.msi Windows Live Mail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A57765D93F393A44082948E08362ED03]C:\Windows\Installer\e661.msi Windows Live Mail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D8E6EAF9686E5F945A47A085FD9D85C0]C:\Windows\Installer\e6b7.msi Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C55EC23CAB21159478799076DFFE55F6]C:\Windows\Installer\e7f9.msi Windows Live Mesh [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1A3414F312C911046897B31C10C48668]C:\Windows\Installer\e7fd.msi Windows Live Mesh [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4BF1F1488FDFC1644A69E3C1DF480C5B]C:\Windows\Installer\e7ef.msi Windows Live Mesh [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\88119C0AF88C68E4396EDCC7A9626694]C:\Windows\Installer\e7e1.msi Windows Live Mesh [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B99EBFCA189631541BE72A86C3BEE95E]C:\Windows\Installer\e86e.msi Windows Live Mesh [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C7BCDCEDCC85568419FA26F77989EF84]C:\Windows\Installer\e7ce.msi Windows Live Mesh ActiveX Control for Remote Connections [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\389F20921C4BAB448BD5C5D6252E4C14]C:\Windows\Installer\e7dd.msi Windows Live Mesh ActiveX control for remote connections [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\98A8935CC615FAD4AB70EE979490E065]C:\Windows\Installer\e86a.msi Windows Live Messenger [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\11F12B5E3396B0E42AC597363E0CD711]C:\Windows\Installer\e5d1.msi Windows Live Messenger [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\59D49284A9EE7734283144CF2456BF72]C:\Windows\Installer\e655.msi Windows Live Messenger [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9E2A16BA3D73D584095891BFFDC8FEA4]C:\Windows\Installer\e628.msi Windows Live Messenger [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C42CF3A20CE691545AB2DF4AAEB9D242]C:\Windows\Installer\e5fb.msi Windows Live Messenger [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CDBD1AB11345DF646AF61AE71B4C93EE]C:\Windows\Installer\e82f.msi Windows Live MIME IFilter [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E08F45ADC1622A148A5545A941F4F295]C:\Windows\Installer\e527.msi Windows Live Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4314AE291D01A814191EA5403531A183]C:\Windows\Installer\e709.msi Windows Live Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\45B88E4E7774956469A7E2DEE1A6DF38]C:\Windows\Installer\e856.msi Windows Live Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5DB8CED64757AF740B0894B2BB2EEF3A]C:\Windows\Installer\e741.msi Windows Live Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7F80AB91827CC964A853FBDB6333EB80]C:\Windows\Installer\e727.msi Windows Live Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9D4227BCACD61F34F838B6E1930AF029]C:\Windows\Installer\e75b.msi Windows Live Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0C8D398C0AB171541BC18EB9567EF207]C:\Windows\Installer\e615.msi Windows Live Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0D262DB9887B64540A5A4F5FE63C38B4]C:\Windows\Installer\e642.msi Windows Live Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4CD7BA2CE9849EB488A72562F2ABBD0E]C:\Windows\Installer\e81c.msi Windows Live Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\775F634D5961F2D4B844CA679CE90020]C:\Windows\Installer\e5ec.msi Windows Live Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B6ACDB9A3563B764CA384963D73AFB3E]C:\Windows\Installer\e5b0.msi Windows Live Photo Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0FB3B06AB459FA248B8DC2D1436B31AA]C:\Windows\Installer\e74b.msi Windows Live Photo Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4A9D4F432C248434EB4F5E358C54947E]C:\Windows\Installer\e717.msi Windows Live Photo Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\766F6333940964D4896BC447E3BE5C1B]C:\Windows\Installer\e6d8.msi Windows Live PIMT Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7B292C385A83B0447A137070E0186AF4]C:\Windows\Installer\e575.msi Windows Live Remote Client [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A889D6FD0AEE7724AA8B51E880E634B9]C:\Windows\Installer\e530.msi Windows Live Remote Client Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\15150F9C9A59B9B45B4371062E0D415A]C:\Windows\Installer\e544.msi Windows Live Remote Client Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2350B7483E55FAA4D8B73E1A7ADC715E]C:\Windows\Installer\e534.msi Windows Live Remote Client Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\83AF057B0BA7BC24CABB7EBD9EFF06F3]C:\Windows\Installer\e53c.msi Windows Live Remote Client Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A0F6785D9E2B67349B5FDC747B8B8D02]C:\Windows\Installer\e54c.msi Windows Live Remote Service [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8456A20EEDF62E04E89D11D9D7E746F1]C:\Windows\Installer\e51b.msi Windows Live Remote Service Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BF4DC2E5835413841867506D353C6E4D]C:\Windows\Installer\e540.msi Windows Live Remote Service Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C3CDFBC612FC20C46ACD5A2A07F7FA55]C:\Windows\Installer\e548.msi Windows Live Remote Service Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C5FA039D3915616488D79B47ECCF9407]C:\Windows\Installer\e550.msi Windows Live Remote Service Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EDEED656CA6FAC745A861A4B3EB47506]C:\Windows\Installer\e538.msi Windows Live SOXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F4E3B286A696ED244AC1C470AE61874B]C:\Windows\Installer\e55c.msi Windows Live SOXE Definitions [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\26CEF00243C306D4C98ECE73E2100CF8]C:\Windows\Installer\e558.msi Windows Live UX Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E97A59ECCF4EFFF4A857920FB449F22F]C:\Windows\Installer\e581.msi Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4A4869755DDD3AC4E98AB77E9D95D34B]C:\Windows\Installer\e5d5.msi Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\61B33B7353527E949809236678800A3A]C:\Windows\Installer\e806.msi Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9FC52F6D78E4BE343B421CB29EDC6D86]C:\Windows\Installer\e62c.msi Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CC973E50626FD7E438456483563B30FB]C:\Windows\Installer\e5ff.msi Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\076CFAAAB965F2A4284B2449E5D03EFE]C:\Windows\Installer\e67c.msi Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2204D958D67BED0469FE9CC0AD62F344]C:\Windows\Installer\e860.msi Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\329710E78F6123E449FEA051B01D69EF]C:\Windows\Installer\e784.msi Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\60EA627A3AAA1D34783E075F0113F440]C:\Windows\Installer\e765.msi Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AD29A9B3473627846B6452F38126D4F5]C:\Windows\Installer\e77b.msi Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CF454FAAAC2892F4BA13A60149587EE6]C:\Windows\Installer\e772.msi Windows Live Writer Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\11B786265B8581A4B93CD94FEC301F49]C:\Windows\Installer\e6ae.msi Windows Live Writer Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4A59BDD1B7DF71543B1FB2AC9A86976E]C:\Windows\Installer\e833.msi Windows Live Writer Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7B144B41D477071489AE1A6376EA2681]C:\Windows\Installer\e6c1.msi Windows Live Writer Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EEDB8CDDCACDD4042875E3D8B4874276]C:\Windows\Installer\e69a.msi YouCam [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8994BF104C33134458DE70E9E3FE7ED5]C:\Windows\Installer\19a80.msi ==== Empty Folders Check ====================== C:\PROGRA~2\Malwarebytes' Anti-Malware deleted successfully C:\PROGRA~2\MSXML 4.0 deleted successfully C:\PROGRA~2\SpeedFan deleted successfully C:\Program Files\Google deleted successfully C:\Program Files\Common Files\ATI Technologies deleted successfully C:\PROGRA~3\PC1Data deleted successfully ==== Checking Systemdrive for Symlinks ====================== Volume in drive C has no label. Volume Serial Number is 36DF-B75D Directory of C:\ 22/08/2013 16:45 Documents and Settings [C:\Users] 0 File(s) 0 bytes Directory of C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RRLEDY5 11/04/2015 19:19 Application Data [C:\Users\Gast\AppData\Roaming] 11/04/2015 19:19 Cookies [C:\Users\Gast\AppData\Local\Microsoft\Windows\INetCookies] 11/04/2015 19:19 Local Settings [C:\Users\Gast\AppData\Local] 11/04/2015 19:19 Menu Start [C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu] 11/04/2015 19:19 Mijn documenten [C:\Users\Gast\Documents] 11/04/2015 19:19 NetHood [C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 11/04/2015 19:19 Netwerkprinteromgeving [C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 11/04/2015 19:19 Recent [C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Recent] 11/04/2015 19:19 SendTo [C:\Users\Gast\AppData\Roaming\Microsoft\Windows\SendTo] 11/04/2015 19:19 Sjablonen [C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RRLEDY5\AppData\Local 11/04/2015 19:19 Application Data [C:\Users\Gast\AppData\Local] 11/04/2015 19:19 Geschiedenis [C:\Users\Gast\AppData\Local\Microsoft\Windows\History] 11/04/2015 19:19 Temporary Internet Files [C:\Users\Gast\AppData\Local\Microsoft\Windows\INetCache] 0 File(s) 0 bytes Directory of C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RRLEDY5\AppData\Local\Microsoft\Windows 11/04/2015 19:19 Temporary Internet Files [C:\Users\Gast\AppData\Local\Microsoft\Windows\INetCache] 0 File(s) 0 bytes Directory of C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RRLEDY5\AppData\Roaming\Microsoft\Windows\Start Menu 11/04/2015 19:19 Programma's [C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RRLEDY5\Documents 11/04/2015 19:19 Mijn afbeeldingen [C:\Users\Gast\Pictures] 11/04/2015 19:19 Mijn muziek [C:\Users\Gast\Music] 11/04/2015 19:19 Mijn video's [C:\Users\Gast\Videos] 0 File(s) 0 bytes Directory of C:\Program Files\Windows NT 25/12/2014 21:50 Bureau-accessoires [C:\Program Files\Windows NT\Accessories] 0 File(s) 0 bytes Directory of C:\Program Files (x86)\Evernote 14/11/2011 19:15 Evernote3.5 [D:\Program Files (x86)\Evernote\Evernote] 0 File(s) 0 bytes Directory of C:\ProgramData 22/08/2013 16:45 Application Data [C:\ProgramData] 29/12/2012 01:26 Bureaublad [C:\Users\Public\Desktop] 22/08/2013 16:45 Desktop [C:\Users\Public\Desktop] 29/12/2012 01:26 Documenten [C:\Users\Public\Documents] 22/08/2013 16:45 Documents [C:\Users\Public\Documents] 29/12/2012 01:26 Favorieten [C:\Users\Public\Favorites] 29/12/2012 01:26 Menu Start [C:\ProgramData\Microsoft\Windows\Start Menu] 29/12/2012 01:26 Sjablonen [C:\ProgramData\Microsoft\Windows\Templates] 22/08/2013 16:45 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 22/08/2013 16:45 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\ProgramData\Microsoft\Windows\Start Menu 29/12/2012 01:26 Programma's [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\ProgramData\Oracle\Java\javapath 12/04/2015 20:58 java.exe [C:\Program Files (x86)\Java\jre1.8.0_40\bin\java.exe] 12/04/2015 20:58 javaw.exe [C:\Program Files (x86)\Java\jre1.8.0_40\bin\javaw.exe] 12/04/2015 20:58 javaws.exe [C:\Program Files (x86)\Java\jre1.8.0_40\bin\javaws.exe] 3 File(s) 0 bytes Directory of C:\Users 22/08/2013 16:45 All Users [C:\ProgramData] 22/08/2013 16:45 Default User [C:\Users\Default] 0 File(s) 0 bytes Directory of C:\Users\All Users 22/08/2013 16:45 Application Data [C:\ProgramData] 29/12/2012 01:26 Bureaublad [C:\Users\Public\Desktop] 22/08/2013 16:45 Desktop [C:\Users\Public\Desktop] 29/12/2012 01:26 Documenten [C:\Users\Public\Documents] 22/08/2013 16:45 Documents [C:\Users\Public\Documents] 29/12/2012 01:26 Favorieten [C:\Users\Public\Favorites] 29/12/2012 01:26 Menu Start [C:\ProgramData\Microsoft\Windows\Start Menu] 29/12/2012 01:26 Sjablonen [C:\ProgramData\Microsoft\Windows\Templates] 22/08/2013 16:45 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 22/08/2013 16:45 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\Users\All Users\Microsoft\Windows\Start Menu 29/12/2012 01:26 Programma's [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\Users\All Users\Oracle\Java\javapath 12/04/2015 20:58 java.exe [C:\Program Files (x86)\Java\jre1.8.0_40\bin\java.exe] 12/04/2015 20:58 javaw.exe [C:\Program Files (x86)\Java\jre1.8.0_40\bin\javaw.exe] 12/04/2015 20:58 javaws.exe [C:\Program Files (x86)\Java\jre1.8.0_40\bin\javaws.exe] 3 File(s) 0 bytes Directory of C:\Users\Default 22/08/2013 16:45 Application Data [C:\Users\Default\AppData\Roaming] 22/08/2013 16:45 Cookies [C:\Users\Default\AppData\Local\Microsoft\Windows\INetCookies] 22/08/2013 16:45 Local Settings [C:\Users\Default\AppData\Local] 25/12/2014 21:50 Menu Start [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu] 25/12/2014 21:50 Mijn documenten [C:\Users\Default\Documents] 22/08/2013 16:45 My Documents [C:\Users\Default\Documents] 22/08/2013 16:45 NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 25/12/2014 21:50 Netwerkprinteromgeving [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 22/08/2013 16:45 PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 22/08/2013 16:45 Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent] 22/08/2013 16:45 SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo] 25/12/2014 21:50 Sjablonen [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates] 22/08/2013 16:45 Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu] 22/08/2013 16:45 Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\Users\Default\AppData\Local 22/08/2013 16:45 Application Data [C:\Users\Default\AppData\Local] 25/12/2014 21:50 Geschiedenis [C:\Users\Default\AppData\Local\Microsoft\Windows\History] 22/08/2013 16:45 History [C:\Users\Default\AppData\Local\Microsoft\Windows\History] 22/08/2013 16:45 Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache] 0 File(s) 0 bytes Directory of C:\Users\Default\AppData\Local\Microsoft\Windows 22/08/2013 16:45 Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache] 0 File(s) 0 bytes Directory of C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu 25/12/2014 21:50 Programma's [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\Users\Default\Documents 25/12/2014 21:50 Mijn afbeeldingen [C:\Users\Default\Pictures] 25/12/2014 21:50 Mijn muziek [C:\Users\Default\Music] 25/12/2014 21:50 Mijn video's [C:\Users\Default\Videos] 22/08/2013 16:45 My Music [C:\Users\Default\Music] 22/08/2013 16:45 My Pictures [C:\Users\Default\Pictures] 22/08/2013 16:45 My Videos [C:\Users\Default\Videos] 0 File(s) 0 bytes Directory of C:\Users\Default.migrated 29/12/2012 01:26 Menu Start [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu] 29/12/2012 01:26 Mijn documenten [C:\Users\Default\Documents] 29/12/2012 01:26 Netwerkprinteromgeving [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 29/12/2012 01:26 Sjablonen [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\Users\Default.migrated\AppData\Local 29/12/2012 01:26 Geschiedenis [C:\Users\Default\AppData\Local\Microsoft\Windows\History] 0 File(s) 0 bytes Directory of C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu 29/12/2012 01:26 Programma's [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\Users\Default.migrated\Documents 29/12/2012 01:26 Mijn afbeeldingen [C:\Users\Default\Pictures] 29/12/2012 01:26 Mijn muziek [C:\Users\Default\Music] 29/12/2012 01:26 Mijn video's [C:\Users\Default\Videos] 26/07/2012 09:22 My Music [C:\Users\Default\Music] 26/07/2012 09:22 My Pictures [C:\Users\Default\Pictures] 26/07/2012 09:22 My Videos [C:\Users\Default\Videos] 0 File(s) 0 bytes Directory of C:\Users\DefaultAppPool 25/12/2014 21:38 Application Data [C:\Users\DefaultAppPool\AppData\Roaming] 25/12/2014 21:38 Cookies [C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows\INetCookies] 25/12/2014 21:38 Local Settings [C:\Users\DefaultAppPool\AppData\Local] 25/12/2014 21:38 Menu Start [C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu] 25/12/2014 21:38 Mijn documenten [C:\Users\DefaultAppPool\Documents] 25/12/2014 21:38 NetHood [C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 25/12/2014 21:38 Netwerkprinteromgeving [C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 25/12/2014 21:38 Recent [C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Recent] 25/12/2014 21:38 SendTo [C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\SendTo] 25/12/2014 21:38 Sjablonen [C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\Users\DefaultAppPool\AppData\Local 25/12/2014 21:38 Application Data [C:\Users\DefaultAppPool\AppData\Local] 25/12/2014 21:38 Geschiedenis [C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows\History] 25/12/2014 21:38 Temporary Internet Files [C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows\INetCache] 0 File(s) 0 bytes Directory of C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows 25/12/2014 21:38 Temporary Internet Files [C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows\INetCache] 0 File(s) 0 bytes Directory of C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu 25/12/2014 21:38 Programma's [C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\Users\DefaultAppPool\Documents 25/12/2014 21:38 Mijn afbeeldingen [C:\Users\DefaultAppPool\Pictures] 25/12/2014 21:38 Mijn muziek [C:\Users\DefaultAppPool\Music] 25/12/2014 21:38 Mijn video's [C:\Users\DefaultAppPool\Videos] 0 File(s) 0 bytes Directory of C:\Users\Public\Documents 29/12/2012 01:26 Mijn afbeeldingen [C:\Users\Public\Pictures] 29/12/2012 01:26 Mijn muziek [C:\Users\Public\Music] 29/12/2012 01:26 Mijn video's [C:\Users\Public\Videos] 22/08/2013 16:45 My Music [C:\Users\Public\Music] 22/08/2013 16:45 My Pictures [C:\Users\Public\Pictures] 22/08/2013 16:45 My Videos [C:\Users\Public\Videos] 0 File(s) 0 bytes Directory of C:\Users\TEMP 30/10/2013 22:03 Application Data [C:\Users\TEMP\AppData\Roaming] 30/10/2013 22:03 Cookies [C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Cookies] 30/10/2013 22:03 Local Settings [C:\Users\TEMP\AppData\Local] 30/10/2013 22:03 Menu Start [C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu] 30/10/2013 22:03 Mijn documenten [C:\Users\TEMP\Documents] 30/10/2013 22:03 NetHood [C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 30/10/2013 22:03 Netwerkprinteromgeving [C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 30/10/2013 22:03 Recent [C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Recent] 30/10/2013 22:03 SendTo [C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\SendTo] 30/10/2013 22:03 Sjablonen [C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\Users\TEMP\AppData\Local 30/10/2013 22:03 Application Data [C:\Users\TEMP\AppData\Local] 30/10/2013 22:03 Geschiedenis [C:\Users\TEMP\AppData\Local\Microsoft\Windows\History] 30/10/2013 22:03 Temporary Internet Files [C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files] 0 File(s) 0 bytes Directory of C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu 30/10/2013 22:03 Programma's [C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\Users\TEMP\Documents 30/10/2013 22:03 Mijn afbeeldingen [C:\Users\TEMP\Pictures] 30/10/2013 22:03 Mijn muziek [C:\Users\TEMP\Music] 30/10/2013 22:03 Mijn video's [C:\Users\TEMP\Videos] 0 File(s) 0 bytes Directory of C:\Users\TEMP.Fernand-HP.001 03/04/2014 20:42 Application Data [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming] 03/04/2014 20:42 Cookies [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\Cookies] 03/04/2014 20:42 Local Settings [C:\Users\TEMP.Fernand-HP.001\AppData\Local] 03/04/2014 20:42 Menu Start [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\Start Menu] 03/04/2014 20:42 Mijn documenten [C:\Users\TEMP.Fernand-HP.001\Documents] 03/04/2014 20:42 NetHood [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 03/04/2014 20:42 Netwerkprinteromgeving [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 03/04/2014 20:42 Recent [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\Recent] 03/04/2014 20:42 SendTo [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\SendTo] 03/04/2014 20:42 Sjablonen [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\Users\TEMP.Fernand-HP.001\AppData\Local 03/04/2014 20:42 Application Data [C:\Users\TEMP.Fernand-HP.001\AppData\Local] 03/04/2014 20:42 Geschiedenis [C:\Users\TEMP.Fernand-HP.001\AppData\Local\Microsoft\Windows\History] 03/04/2014 20:42 Temporary Internet Files [C:\Users\TEMP.Fernand-HP.001\AppData\Local\Microsoft\Windows\Temporary Internet Files] 0 File(s) 0 bytes Directory of C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\Start Menu 03/04/2014 20:42 Programma's [C:\Users\TEMP.Fernand-HP.001\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\Users\TEMP.Fernand-HP.001\Documents 03/04/2014 20:42 Mijn afbeeldingen [C:\Users\TEMP.Fernand-HP.001\Pictures] 03/04/2014 20:42 Mijn muziek [C:\Users\TEMP.Fernand-HP.001\Music] 03/04/2014 20:42 Mijn video's [C:\Users\TEMP.Fernand-HP.001\Videos] 0 File(s) 0 bytes Directory of C:\Users\test 11/04/2015 19:33 Application Data [C:\Users\test\AppData\Roaming] 11/04/2015 19:33 Cookies [C:\Users\test\AppData\Local\Microsoft\Windows\INetCookies] 11/04/2015 19:33 Local Settings [C:\Users\test\AppData\Local] 11/04/2015 19:33 Menu Start [C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu] 11/04/2015 19:33 Mijn documenten [C:\Users\test\Documents] 11/04/2015 19:33 NetHood [C:\Users\test\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 11/04/2015 19:33 Netwerkprinteromgeving [C:\Users\test\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 11/04/2015 19:33 Recent [C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent] 11/04/2015 19:33 SendTo [C:\Users\test\AppData\Roaming\Microsoft\Windows\SendTo] 11/04/2015 19:33 Sjablonen [C:\Users\test\AppData\Roaming\Microsoft\Windows\Templates] 0 File(s) 0 bytes Directory of C:\Users\test\AppData\Local 11/04/2015 19:33 Application Data [C:\Users\test\AppData\Local] 11/04/2015 19:33 Geschiedenis [C:\Users\test\AppData\Local\Microsoft\Windows\History] 11/04/2015 19:33 Temporary Internet Files [C:\Users\test\AppData\Local\Microsoft\Windows\INetCache] 0 File(s) 0 bytes Directory of C:\Users\test\AppData\Local\Microsoft\Windows 11/04/2015 19:33 Temporary Internet Files [C:\Users\test\AppData\Local\Microsoft\Windows\INetCache] 0 File(s) 0 bytes Directory of C:\Users\test\AppData\Local\Microsoft\Windows\INetCache 11/04/2015 20:27 Content.IE5 [C:\Users\test\AppData\Local\Microsoft\Windows\INetCache\IE\] 0 File(s) 0 bytes Directory of C:\Users\test\AppData\Local\Microsoft\Windows\INetCache\Low 11/04/2015 20:28 Content.IE5 [C:\Users\test\AppData\Local\Microsoft\Windows\INetCache\Low\IE\] 0 File(s) 0 bytes Directory of C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu 11/04/2015 19:33 Programma's [C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 File(s) 0 bytes Directory of C:\Users\test\Documents 11/04/2015 19:33 Mijn afbeeldingen [C:\Users\test\Pictures] 11/04/2015 19:33 Mijn muziek [C:\Users\test\Music] 11/04/2015 19:33 Mijn video's [C:\Users\test\Videos] 0 File(s) 0 bytes Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache 14/01/2015 13:41 Content.IE5 [C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\] 0 File(s) 0 bytes Directory of C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache 14/01/2015 13:41 Content.IE5 [C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\] 0 File(s) 0 bytes Total Files Listed: 6 File(s) 0 bytes 163 Dir(s) 74ÿ140ÿ368ÿ896 bytes free ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Installed Programs ====================== AbiWord 2.8.6 Adobe Flash Player 17 NPAPI Adobe Reader XI (11.0.10) Adobe Refresh Manager Adobe Shockwave Player 11.6 Adobe Shockwave Player 12.1 AMD APP SDK Runtime AMD Catalyst Control Center AMD Catalyst Install Manager AMD Fuel AMD Steady Video Plug-In AMD System Monitor AMD VISION Engine Control Center Any Audio Converter 3.2.3 AuthenTec TrueAPI AVG 2015 Bejeweled 3 Broadcom 802.11 Wireless LAN Adapter Broadcom InConcert Maestro Brother MFL-Pro Suite DCP-195C Cake Mania Catalyst Control Center - Branding Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-utility64 CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish CCleaner Chuzzle Deluxe Classic Shell CloneDVD 4.1.0.23 Contr“le ActiveX Windows Live Mesh pour connexions … distance CPUID CPU-Z G1 1.61.3 Cradle of Rome 2 CyberLink PowerDVD 10 CyberLink YouCam D3DX10 DVD Shrink 3.2 DVDFab 8.1.7.8 (17/04/2012) Qt ESU for Microsoft Windows 7 SP1 Evernote v. 4.2.3 Farm Frenzy Farmscapes FastStone Image Viewer 4.6 FATE Final Drive Fury Fishdom (TM) 2 Free YouTube Download version 3.2.49.1111 Free YouTube to MP3 Converter version 3.12.50.1111 Freemake Video Converter versie 4.1.2 Galerie de photos Windows Live Google Earth Plug-in Google Update Helper Hewlett-Packard ACLM.NET v1.2.1.1 High-Definition Video Playback 10 HP 3D DriveGuard HP Auto HP Client Services HP CoolSense HP Customer Experience Enhancements HP Documentation HP DVB-T TV Tuner 8.0.64.43 HP Games HP Launch Box HP On Screen Display HP Power Manager HP Quick Launch HP QuickWeb HP Recovery Manager HP Security Assistant HP Setup HP Setup Manager HP SimplePass 2012 HP Software Framework HP Support Assistant HP Support Solutions Framework IDT Audio IncrediMail IncrediMail 2.0 Insaniquarium Deluxe IZArc 4.1.6 Java 7 Update 76 Java 8 Update 31 Java 8 Update 40 Java Auto Updater Jewel Match 3 Jewel Quest II Jewel Quest Solitaire 2 Junk Mail filter update Magic Desktop Mahjongg Artifacts Malwarebytes Anti-Malware versie 2.1.4.1018 Mesh Runtime Microsoft-invoegtoepassing Opslaan als PDF voor 2007 Microsoft Office-programma's Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) Microsoft Application Error Reporting Microsoft Office Access MUI (Dutch) 2010 Microsoft Office Access Runtime (English) 2007 Microsoft Office Excel MUI (Dutch) 2010 Microsoft Office Groove MUI (Dutch) 2010 Microsoft Office InfoPath MUI (Dutch) 2010 Microsoft Office Office 64-bit Components 2010 Microsoft Office OneNote MUI (Dutch) 2010 Microsoft Office Outlook MUI (Dutch) 2010 Microsoft Office PowerPoint MUI (Dutch) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (Dutch) 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (German) 2010 Microsoft Office Proofing (Dutch) 2010 Microsoft Office Publisher MUI (Dutch) 2010 Microsoft Office Shared 64-bit MUI (Dutch) 2010 Microsoft Office Shared MUI (Dutch) 2010 Microsoft Office Word MUI (Dutch) 2010 Microsoft Office Word Viewer 2003 Microsoft PowerPoint Viewer Microsoft Primary Interoperability Assemblies 2005 Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD More Games from HP Games Mozilla Firefox 37.0.1 (x86 nl) Mozilla Maintenance Service MPC-HC 1.7.1 (64-bit) MSVC90_x64 MSVC90_x86 MSVCRT MSVCRT_amd64 MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) Mystery of Mortlake Mansion Nero 10 Menu TemplatePack Basic Nero 10 Movie ThemePack Basic Nero BackItUp 10 Nero BackItUp 10 Help (CHM) Nero Burning ROM 10 Nero BurningROM 10 Help (CHM) Nero BurnRights 10 Nero BurnRights 10 Help (CHM) Nero Control Center 10 Nero ControlCenter 10 Help (CHM) Nero Core Components 10 Nero CoverDesigner 10 Nero CoverDesigner 10 Help (CHM) Nero DiscSpeed 10 Nero DiscSpeed 10 Help (CHM) Nero Dolby Files 10 Nero Express 10 Nero Express 10 Help (CHM) Nero InfoTool 10 Nero InfoTool 10 Help (CHM) Nero MediaHub 10 Nero MediaHub 10 Help (CHM) Nero Multimedia Suite 10 Nero Recode 10 Nero Recode 10 Help (CHM) Nero RescueAgent 10 Nero RescueAgent 10 Help (CHM) Nero SoundTrax 10 Nero SoundTrax 10 Help (CHM) Nero StartSmart 10 Nero StartSmart 10 Help (CHM) Nero Update Nero Vision 10 Nero Vision 10 Help (CHM) Nero WaveEditor 10 Nero WaveEditor 10 Help (CHM) Nokia Connectivity Cable Driver Nokia PC Suite opensource PaperPort Image Printer 64-bit PC Connectivity Solution Photo Notifier and Animation Creator PhotoScape Plants vs. Zombies - Game of the Year Polar Bowler Ranch Rush 2 - Premium Edition RAR Password Recovery v1.1 RC16 (remove only) Realtek Ethernet Controller Driver Realtek PCIE Card Reader SDFormatter SkypeT 7.3 Speccy swMSM Synaptics TouchPad Driver Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD TomTom HOME TomTom HOME Visual Studio Merge Modules Torchlight Update Installer for WildTangent Games App VASCO Card Reader Plug-In (64-Bit) Virtual Families Virtual Villagers 4 - The Tree of Life Visual Studio 2008 x64 Redistributables Visual Studio 2010 x64 Redistributables Visual Studio 2012 x64 Redistributables Visual Studio 2012 x86 Redistributables Visual Studio C++ 10.0 Runtime Wedding Dash WildTangent Games App for HP Windows-stuurprogrammapakket - Nokia Modem (02/25/2011 4.7) Windows-stuurprogrammapakket - Nokia Modem (02/25/2011 7.01.0.9) Windows-stuurprogrammapakket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) Windows Live Communications Platform Windows Live Essentials Windows Live Fotogalerie Windows Live ID Sign-in Assistant Windows Live Installer Windows Live Language Selector Windows Live Mail Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen Windows Live Mesh Windows Live Mesh ActiveX Control for Remote Connections Windows Live Mesh ActiveX control for remote connections Windows Live Messenger Windows Live MIME IFilter Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live Remote Client Windows Live Remote Client Resources Windows Live Remote Service Windows Live Remote Service Resources Windows Live SOXE Windows Live SOXE Definitions Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources WinRAR 5.01 (64-bit) Zuma's Revenge ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\PROGRA~2\SpeedFan not found C:\windows\SysNative\Tasks\ROC_REG_JAN_DELETE deleted C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted C:\PROGRA~2\TorrentSearch deleted C:\install.exe deleted C:\found.000 deleted C:\PROGRA~3\Avg_Update_0414b deleted C:\PROGRA~3\ProductData deleted C:\PROGRA~3\AVG January 2013 Campaign deleted C:\PROGRA~3\Package Cache deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted C:\Users\test\Downloads\FreeYouTubeToMP3Converter.exe deleted C:\WINDOWS\tasks\ROC_REG_JAN_DELETE.job deleted C:\Users\wangjihua deleted C:\windows\SysNative\GroupPolicy\Machine deleted C:\windows\SysNative\GroupPolicy\User deleted C:\windows\SysNative\GroupPolicy\gpt.ini deleted "C:\Windows\Installer\ec7d.msi" deleted ==== System Specs ====================== Windows: Windows Version 6.2 (Build 9200) Memory (RAM): 7658 MB CPU Info: AMD A8-3550MX APU with Radeon(tm) HD Graphics CPU Speed: 2002,3 MHz Sound Card: Luidsprekers en hoofdtelefoons | Communicatie-hoofdtelefoons (ID | Display Adapters: AMD Radeon HD 6620G | AMD Radeon HD 6620G Monitors: 1x; Generic PnP Monitor | Screen Resolution: 1600 X 900 - 32 bit Network: Network Present Network Adapters: Bluetooth-apparaat (Personal Area Network) | Broadcom 4313GN 802.11b/g/n 1x1 Wi-Fi-adapter | Realtek PCIe GBE Family-controller CD / DVD Drives: 1x (F: | ) F: hp CDDVDW SN-208BB Ports: COM Ports NOT Present. LPT Port NOT Present. Mouse: 16 Button Wheel Mouse Present Hard Disks: C: 232,8GB | G: 94,1MB Hard Disks - Free: C: 69,0GB | G: 56,7MB Manufacturer *: Hewlett-Packard BIOS Info: AT/AT COMPATIBLE | 12/06/05 | HPQOEM - 1 Time Zone: Romance (standaardtijd) Motherboard *: Hewlett-Packard 180D Country: Belgi‰ Language: NLB ==== System Specs (Software) ====================== Anti-Virus: Windows Defender On-access scanning disabled (Outdated) Anti-Virus: AVG AntiVirus Free Edition 2015 On-access scanning disabled (Outdated) Anti-Spyware: Windows Defender disabled (Outdated) Anti-Spyware: AVG AntiVirus Free Edition 2015 disabled (Outdated) Default Browser: Firefox 37.0.1 Internet Explorer Version: 11.0.9600.17690 Mozilla Firefox version: 37.0.1 (x86 nl) Adobe Reader version: 11.0.10.32 Sun Java version: 1.8.0_40 (32-bit) Sun Java version: 1.8.0_40 (64-bit) Flash Player version: 17.0.0.134 Shockwave Player version: 12.1.7r157 ==== Files Recently Created / Modified ====================== ====== C:\WINDOWS ==== 2015-04-12 18:14:42 7826082B93262AB6460E77B91C61EA30 128512 ----a-w- C:\WINDOWS\splwow64.exe 2015-04-12 18:14:26 C10A66189DC8C090E7C84873EDCEBC88 2501368 ----a-w- C:\WINDOWS\explorer.exe 2015-03-21 18:08:16 80E856B1AFAEB6195EADAAD65945147C 1001472 ----a-w- C:\WINDOWS\HelpPane.exe 2015-03-21 18:07:27 959A31D0CD013CEA0C66DB7C03BCBDDF 221184 ----a-w- C:\WINDOWS\notepad.exe 2015-03-21 18:07:14 B67DB709F5FDAA89CA6C2CB6C1E39B3B 154624 ----a-w- C:\WINDOWS\regedit.exe 2015-03-21 18:07:11 727B4519FE9919447108CBEC4768F34A 54272 ----a-w- C:\WINDOWS\twain_32.dll 2015-03-21 18:06:52 B934411DFE7DEACFA95A1255A48133C9 17408 ----a-w- C:\WINDOWS\hh.exe 2015-03-21 18:06:52 73E19BE0E0ECD88616B5762F621B0226 11264 ----a-w- C:\WINDOWS\write.exe 2015-03-21 18:06:52 335C38783B3F1B383ECAC17DB3705895 9728 ----a-w- C:\WINDOWS\winhlp32.exe ====== C:\WINDOWS\TEMP ==== ====== Java Cache ===== ====== C:\WINDOWS\SysWOW64 ===== 2015-04-12 18:17:46 3B26DCAB842C280FA7271FF2B58D3293 28352 ----a-w- C:\WINDOWS\SysWOW64\aspnet_counters.dll 2015-04-12 18:16:50 E26D49197CA9E38BCC6033DE53F720BD 816128 ----a-w- C:\WINDOWS\SysWOW64\calc.exe 2015-04-12 18:16:48 19920B416F3274640B3DE9A5248F0E74 560392 ----a-w- C:\WINDOWS\SysWOW64\SHCore.dll 2015-04-12 18:16:42 74887EBB4777EC450EF167645C99163E 602776 ----a-w- C:\WINDOWS\SysWOW64\oleaut32.dll 2015-04-12 18:16:42 46DE9C72EE0F23B9AB6A625214C16FE3 1124352 ----a-w- C:\WINDOWS\SysWOW64\msctf.dll 2015-04-12 18:16:17 D4A564BABFF82F56E68835FBFDA7AB00 513488 ----a-w- C:\WINDOWS\SysWOW64\locale.nls 2015-04-12 18:16:17 45804906FFF3DD025BC725BE0DC98797 290816 ----a-w- C:\WINDOWS\SysWOW64\photowiz.dll 2015-04-12 18:16:16 8F3E99586FDAD25BD0DA0C37C6DBE1EC 2484224 ----a-w- C:\WINDOWS\SysWOW64\msftedit.dll 2015-04-12 18:15:51 B004C599E9DFE8A4C4A7421E80B94FBD 1943040 ----a-w- C:\WINDOWS\SysWOW64\dwmcore.dll 2015-04-12 18:15:34 154BC2F7D00DA9790A99787B6019535E 2459136 ----a-w- C:\WINDOWS\SysWOW64\authui.dll 2015-04-12 18:15:33 6A978C77BADD838D8A5347DBC06142A7 811008 ----a-w- C:\WINDOWS\SysWOW64\WSShared.dll 2015-04-12 18:15:32 FCF02D20B26118DD7E4E871323AAAB58 35840 ----a-w- C:\WINDOWS\SysWOW64\atlthunk.dll 2015-04-12 18:15:32 E094D21FE482A0DC59056B6B9D421B07 1230336 ----a-w- C:\WINDOWS\SysWOW64\mfc42u.dll 2015-04-12 18:15:32 5EB5142C178BED2C4372406203B9BC1D 1204224 ----a-w- C:\WINDOWS\SysWOW64\mfc42.dll 2015-04-12 18:15:31 C443536D9279B74A162E3C39A83CB226 60928 ----a-w- C:\WINDOWS\SysWOW64\StorageContextHandler.dll 2015-04-12 18:15:31 08B8F2E5FAAC73EF1AFD99B2AEC104FD 3551744 ----a-w- C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2015-04-12 18:14:53 C561022F4E2882B44BDB65AE2B0756C0 266752 ----a-w- C:\WINDOWS\SysWOW64\eapphost.dll 2015-04-12 18:14:53 4720D1AF566E7C2127B4EEDDD070CA87 278016 ----a-w- C:\WINDOWS\SysWOW64\eappcfg.dll 2015-04-12 18:14:52 958A5388C05106844C80AEB95948A32B 91648 ----a-w- C:\WINDOWS\SysWOW64\eappgnui.dll 2015-04-12 18:14:52 20A130BE26CBB3B50C5B19B91BED669B 250880 ----a-w- C:\WINDOWS\SysWOW64\eapp3hst.dll 2015-04-12 18:14:46 1302567D8675E358C60C59601D0334BF 15158784 ----a-w- C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2015-04-12 18:14:44 F96956BBED66937350B360497AAA4EE2 507392 ----a-w- C:\WINDOWS\SysWOW64\untfs.dll 2015-04-12 18:14:44 A9957240537BEE1988B03A6B1E135773 885760 ----a-w- C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2015-04-12 18:14:44 94743D320BA649382829A5FE8C12DDF1 801584 ----a-w- C:\WINDOWS\SysWOW64\mfplat.dll 2015-04-12 18:14:44 6E9C931731AB16217D3A5472B9B442EB 94208 ----a-w- C:\WINDOWS\SysWOW64\QSVRMGMT.DLL 2015-04-12 18:14:44 54091BD386579A661A012D5E77120B2C 786120 ----a-w- C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2015-04-12 18:14:44 001E1E3546EA80D1A97E7E2BF6F72969 555520 ----a-w- C:\WINDOWS\SysWOW64\WSDApi.dll 2015-04-12 18:14:43 B98F9F25D0CCA83E1CA79D1F8BAA1075 465408 ----a-w- C:\WINDOWS\SysWOW64\DevicePairing.dll 2015-04-12 18:14:43 A81265C9CF12A9CA3F436024C1793936 624640 ----a-w- C:\WINDOWS\SysWOW64\rasapi32.dll 2015-04-12 18:14:43 A2CCF16BF1C4F60914EA2DF0BF484A6E 561664 ----a-w- C:\WINDOWS\SysWOW64\nshwfp.dll 2015-04-12 18:14:43 92937F1A41E6EC1D89BC4D89AC99035B 1142272 ----a-w- C:\WINDOWS\SysWOW64\vssapi.dll 2015-04-12 18:14:43 887DBBE8CF300A6AE9D0B5D8FF7C0915 143360 ----a-w- C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2015-04-12 18:14:43 85D880636B8246BD4EF4061F25D84C18 155648 ----a-w- C:\WINDOWS\SysWOW64\QSHVHOST.DLL 2015-04-12 18:14:43 6F57859B54404D350E525413322F7AA2 169984 ----a-w- C:\WINDOWS\SysWOW64\WinSCard.dll 2015-04-12 18:14:43 29A35A031EC84D7D9E393A59BEE37888 39424 ----a-w- C:\WINDOWS\SysWOW64\kmddsp.tsp 2015-04-12 18:14:43 205BDB00F4C032AF45A6BFD18EA7886C 498688 ----a-w- C:\WINDOWS\SysWOW64\dnsapi.dll 2015-04-12 18:14:42 A2530DC44EB8083A63EB83798E7BBB72 162304 ----a-w- C:\WINDOWS\SysWOW64\rascfg.dll 2015-04-12 18:14:42 7CC0DD976389300196B2DB4E3F77662C 33280 ----a-w- C:\WINDOWS\SysWOW64\rasmxs.dll 2015-04-12 18:14:42 7AB08744F06F0BDC87DC124F4276A08E 15360 ----a-w- C:\WINDOWS\SysWOW64\eventcls.dll 2015-04-12 18:14:42 75692538076B0402E7236A314A027299 55296 ----a-w- C:\WINDOWS\SysWOW64\vsstrace.dll 2015-04-12 18:14:42 210642D9D287AEDED8BB3123580177D4 22528 ----a-w- C:\WINDOWS\SysWOW64\rasser.dll 2015-04-12 18:14:42 05761DCCF02CEE514DC3B8E3A7F38DF5 272384 ----a-w- C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2015-04-12 18:14:42 017E4B714298435849AC02F32A1C6BDA 61440 ----a-w- C:\WINDOWS\SysWOW64\rasdiag.dll 2015-04-12 18:14:27 A7964350B8F9E26679225CB897A522A4 124928 ----a-w- C:\WINDOWS\SysWOW64\wuwebv.dll 2015-04-12 18:14:27 9C8D7CE66075A93954F3082CD6896F0D 81920 ----a-w- C:\WINDOWS\SysWOW64\wudriver.dll 2015-04-12 18:14:27 307FED3A389198547D6446693E8FEFAA 27136 ----a-w- C:\WINDOWS\SysWOW64\wups.dll 2015-04-12 18:14:27 1F457FACEBEE5F9C3882163FF9A51AFC 721920 ----a-w- C:\WINDOWS\SysWOW64\wuapi.dll 2015-04-12 18:14:27 1DAD87D13FE06EF4ECD873A1DDF445E3 29696 ----a-w- C:\WINDOWS\SysWOW64\wuapp.exe 2015-04-12 18:14:26 D5496CF5DF8921CFC1EF1770F98C2192 791040 ----a-w- C:\WINDOWS\SysWOW64\MrmCoreR.dll 2015-04-12 18:14:26 91E24273FCA076EA9E65DAFA98901225 2207488 ----a-w- C:\WINDOWS\SysWOW64\explorer.exe ====== C:\WINDOWS\SysWOW64\drivers ===== ====== C:\WINDOWS\Sysnative ===== 2015-04-12 18:17:48 9BC00C5608BF75BEAE893814A3AEC2AD 29888 ----a-w- C:\WINDOWS\Sysnative\aspnet_counters.dll 2015-04-12 18:16:50 D82C445E3D484F31CD2638A4338E5FD9 933888 ----a-w- C:\WINDOWS\Sysnative\calc.exe 2015-04-12 18:16:48 EEB76824DC14283A010CAE4E2B5AB852 723072 ----a-w- C:\WINDOWS\Sysnative\SHCore.dll 2015-04-12 18:16:43 BDE6152B584ABDA7DA102B363E58354F 396419 ----a-w- C:\WINDOWS\Sysnative\ApnDatabase.xml 2015-04-12 18:16:42 6835D94FDAAB39E008E8490BD3E88CA3 788680 ----a-w- C:\WINDOWS\Sysnative\oleaut32.dll 2015-04-12 18:16:42 3E9BB985DF2FF26CCE840DE1D24E9381 1385256 ----a-w- C:\WINDOWS\Sysnative\msctf.dll 2015-04-12 18:16:17 DF55E2D7D045BA1A2C43029DEDF0B59D 347136 ----a-w- C:\WINDOWS\Sysnative\photowiz.dll 2015-04-12 18:16:17 D4A564BABFF82F56E68835FBFDA7AB00 513488 ----a-w- C:\WINDOWS\Sysnative\locale.nls 2015-04-12 18:16:17 C08E7F8AC41901403799B237DA7BA10E 3097600 ----a-w- C:\WINDOWS\Sysnative\msftedit.dll 2015-04-12 18:15:51 7F586D08E965FA00EE085319EF5BBAF1 864256 ----a-w- C:\WINDOWS\Sysnative\win32spl.dll 2015-04-12 18:15:51 77F28E71B2C0297AB67EA81878B1FA83 2257408 ----a-w- C:\WINDOWS\Sysnative\dwmcore.dll 2015-04-12 18:15:51 2AE4D70A3657FA4FA734B370E79F83FF 1091072 ----a-w- C:\WINDOWS\Sysnative\localspl.dll 2015-04-12 18:15:45 9A7A7E45DAED2E8C2816716D8D28236A 780800 ----a-w- C:\WINDOWS\Sysnative\lsm.dll 2015-04-12 18:15:34 BA0ED854110D45E5D4A46BD250BAF4E0 1487976 ----a-w- C:\WINDOWS\Sysnative\sppobjs.dll 2015-04-12 18:15:34 AF33B3D7B32FE39656147E0849D987A4 321536 ----a-w- C:\WINDOWS\Sysnative\lockscreencn.dll 2015-04-12 18:15:34 68DF7D160987CF3E0A03A64E5A8F087D 2773504 ----a-w- C:\WINDOWS\Sysnative\authui.dll 2015-04-12 18:15:33 40CBEB7C0051036CBC1C243A025F206D 971776 ----a-w- C:\WINDOWS\Sysnative\WSShared.dll 2015-04-12 18:15:32 81CB7FF2FF19D639FD75B6B992BABC43 4298240 ----a-w- C:\WINDOWS\Sysnative\D3DCompiler_47.dll 2015-04-12 18:15:32 60629FA01E0CAE23DA527DFA5ECAD5C7 1464832 ----a-w- C:\WINDOWS\Sysnative\mfc42.dll 2015-04-12 18:15:32 20433FD8C8F460567DE93F472A4D749F 1488896 ----a-w- C:\WINDOWS\Sysnative\mfc42u.dll 2015-04-12 18:15:31 613438C2C3D899F50719B6878579C66D 75264 ----a-w- C:\WINDOWS\Sysnative\StorageContextHandler.dll 2015-04-12 18:14:53 992A0252586D9D946535DDBBEF9AB7D5 346112 ----a-w- C:\WINDOWS\Sysnative\eappcfg.dll 2015-04-12 18:14:53 62F00DA98A4ABDA58254DB936C1D2D73 339456 ----a-w- C:\WINDOWS\Sysnative\eapphost.dll 2015-04-12 18:14:53 4644F62E41B054A1787225D1210108B2 331776 ----a-w- C:\WINDOWS\Sysnative\eapp3hst.dll 2015-04-12 18:14:52 55E39907F34D14E0794DD17C915795E5 46456 ----a-w- C:\WINDOWS\Sysnative\LockScreenContentServer.exe 2015-04-12 18:14:52 4E32C419A8B3CC19FCD2CACDEF1BD492 102912 ----a-w- C:\WINDOWS\Sysnative\eappgnui.dll 2015-04-12 18:14:47 4AABC3D611EEB92FDEDD1C741D63C437 4837376 ----a-w- C:\WINDOWS\Sysnative\SyncEngine.dll 2015-04-12 18:14:47 2F92532B7C872394AA9DEB5CE43B3FDB 18823168 ----a-w- C:\WINDOWS\Sysnative\Windows.UI.Xaml.dll 2015-04-12 18:14:44 E9AE4FAE83FB38A2962F9032B24CEB3C 252416 ----a-w- C:\WINDOWS\Sysnative\dnsrslvr.dll 2015-04-12 18:14:44 E8F017472DAB8350583526184F8FE478 166912 ----a-w- C:\WINDOWS\Sysnative\AppxAllUserStore.dll 2015-04-12 18:14:44 E66D01726D7B12302CBF3BBF847C9B05 1027584 ----a-w- C:\WINDOWS\Sysnative\MFMediaEngine.dll 2015-04-12 18:14:44 A7F1BC7115123D2F17A4251149984080 962216 ----a-w- C:\WINDOWS\Sysnative\mfplat.dll 2015-04-12 18:14:44 9925BE7849D66AF04F778B41C9D5C7C1 952896 ----a-w- C:\WINDOWS\Sysnative\mfmp4srcsnk.dll 2015-04-12 18:14:44 75B6AD9F2BFDFE7E7C7E38F4FDD2FF1E 658432 ----a-w- C:\WINDOWS\Sysnative\WSDApi.dll 2015-04-12 18:14:44 69C0304BE8E4C58026A0D162AD04BF10 1154048 ----a-w- C:\WINDOWS\Sysnative\SkyDrive.exe 2015-04-12 18:14:44 605CC8C83761219B45B1EF271B2A9E0C 420864 ----a-w- C:\WINDOWS\Sysnative\vpnike.dll 2015-04-12 18:14:44 57C10952ED978E2BF24D904B291C8C0C 558080 ----a-w- C:\WINDOWS\Sysnative\untfs.dll 2015-04-12 18:14:44 57322EBB67A59FB64E228F31A84CA43D 1084416 ----a-w- C:\WINDOWS\Sysnative\IKEEXT.DLL 2015-04-12 18:14:44 3F0D403D47A27134F490B0951826FC37 242176 ----a-w- C:\WINDOWS\Sysnative\WinSCard.dll 2015-04-12 18:14:44 2E3976C857D7230EC8D2B2276E688255 827392 ----a-w- C:\WINDOWS\Sysnative\spoolsv.exe 2015-04-12 18:14:44 2DA3DF504868C941D7EFAE6099B73A65 309760 ----a-w- C:\WINDOWS\Sysnative\WSDMon.dll 2015-04-12 18:14:44 0B07D6E59605DB58B780655192D7387C 128000 ----a-w- C:\WINDOWS\Sysnative\QSVRMGMT.DLL 2015-04-12 18:14:43 F0FD2757C9975EC62C3AFF9DE3415830 514048 ----a-w- C:\WINDOWS\Sysnative\DevicePairing.dll 2015-04-12 18:14:43 D06E9DE27BBB41F8AE2A0A2D6FC0F598 422400 ----a-w- C:\WINDOWS\Sysnative\FWPUCLNT.DLL 2015-04-12 18:14:43 CCB7FDAA07F104128D5332CD6EF04D97 48128 ----a-w- C:\WINDOWS\Sysnative\kmddsp.tsp 2015-04-12 18:14:43 9B1133CA54B4A3E852756EA174682EC8 211968 ----a-w- C:\WINDOWS\Sysnative\QSHVHOST.DLL 2015-04-12 18:14:43 9766BC2BC08F4ABEA83908B11C154529 182784 ----a-w- C:\WINDOWS\Sysnative\rascfg.dll 2015-04-12 18:14:43 591FB3A6559C393235F6D8A573E4E1B3 1574400 ----a-w- C:\WINDOWS\Sysnative\vssapi.dll 2015-04-12 18:14:43 3B7F9612439EA47151EC5EAB232C1C3F 1454080 ----a-w- C:\WINDOWS\Sysnative\VSSVC.exe 2015-04-12 18:14:43 2C67494BD2CB71CEE84E3DA4B9DEE979 733696 ----a-w- C:\WINDOWS\Sysnative\SkyDriveTelemetry.dll 2015-04-12 18:14:43 25AE2DD8E6F6BBD922C5F6971F124BBD 74752 ----a-w- C:\WINDOWS\Sysnative\vsstrace.dll 2015-04-12 18:14:43 22A5582ACF0CEE97268D7868C69F35CE 845312 ----a-w- C:\WINDOWS\Sysnative\BFE.DLL 2015-04-12 18:14:43 0B082D6D7A53D91678E7409DD145E89C 657920 ----a-w- C:\WINDOWS\Sysnative\dnsapi.dll 2015-04-12 18:14:43 0416FE95E0DC01042B46D9F6B1A1EE61 702464 ----a-w- C:\WINDOWS\Sysnative\rasapi32.dll 2015-04-12 18:14:43 03880AB54F6C9A449B9F8AC8B21472AA 713216 ----a-w- C:\WINDOWS\Sysnative\nshwfp.dll 2015-04-12 18:14:42 D64719E25966885AA991513A66A1A20F 16896 ----a-w- C:\WINDOWS\Sysnative\eventcls.dll 2015-04-12 18:14:42 A5F199F33C2A919AE9A15997FA7A07FD 77824 ----a-w- C:\WINDOWS\Sysnative\rasdiag.dll 2015-04-12 18:14:42 9FAF67CE7452215ACEDDB517A663454F 43008 ----a-w- C:\WINDOWS\Sysnative\rasmxs.dll 2015-04-12 18:14:42 3C4FF4AD2F023865F63017F0E6A9C649 30208 ----a-w- C:\WINDOWS\Sysnative\rasser.dll 2015-04-12 18:14:28 5F3D70B19BCAC985DA90F22CA2FF45E4 3678720 ----a-w- C:\WINDOWS\Sysnative\wuaueng.dll 2015-04-12 18:14:27 DDFFE37C690F8D0AB05309C11AE8A740 52224 ----a-w- C:\WINDOWS\Sysnative\wups2.dll 2015-04-12 18:14:27 BF5F10811E8249075D48153E8766184D 35840 ----a-w- C:\WINDOWS\Sysnative\wuapp.exe 2015-04-12 18:14:27 A6D023786B16C2C6FEC235A69F60A5B2 15360 ----a-w- C:\WINDOWS\Sysnative\wu.upgrade.ps.dll 2015-04-12 18:14:27 A6B426B5502174F2FDC5D2CA174E6B6C 95744 ----a-w- C:\WINDOWS\Sysnative\wudriver.dll 2015-04-12 18:14:27 A40A005B63E305A0509A69A604659944 133256 ----a-w- C:\WINDOWS\Sysnative\wuauclt.exe 2015-04-12 18:14:27 8DE0A3EC9024DC2AF1DE8BDCE4AEA2C6 2373632 ----a-w- C:\WINDOWS\Sysnative\wucltux.dll 2015-04-12 18:14:27 4C6D7A1AA4EB4DA0382484ECF38040A7 140288 ----a-w- C:\WINDOWS\Sysnative\wuwebv.dll 2015-04-12 18:14:27 49B0AE13918B1456C1EFB284E4DC52D1 408064 ----a-w- C:\WINDOWS\Sysnative\WUSettingsProvider.dll 2015-04-12 18:14:27 47C04EEA5C1C3D27744E123F3AF25E57 891392 ----a-w- C:\WINDOWS\Sysnative\wuapi.dll 2015-04-12 18:14:27 3BAAE060A97C0F9AD48AFE3330B577E5 267264 ----a-w- C:\WINDOWS\Sysnative\WinSetupUI.dll 2015-04-12 18:14:27 35FAB05339F7083611B12ED7143AFA81 200192 ----a-w- C:\WINDOWS\Sysnative\storewuauth.dll 2015-04-12 18:14:27 1EB1732C67D40598222103776F7AF829 66048 ----a-w- C:\WINDOWS\Sysnative\wups.dll 2015-04-12 18:14:26 F91E83532107E8B0A1819DB2D96366CB 1090048 ----a-w- C:\WINDOWS\Sysnative\MrmCoreR.dll 2015-04-12 18:13:53 EE5ED8E6998D7E686F614BA8D876829B 192000 ----a-w- C:\WINDOWS\Sysnative\aepic.dll 2015-04-12 18:13:53 BA93F0E6B27510746864DA8D26DD3852 30720 ----a-w- C:\WINDOWS\Sysnative\acmigration.dll 2015-04-12 18:13:53 9B8BE8DDC0D9CD6A4D2182196ABE99E2 419328 ----a-w- C:\WINDOWS\Sysnative\devinv.dll 2015-04-12 18:13:53 813906D7D0A35CB7158C45E6568FA3DD 227328 ----a-w- C:\WINDOWS\Sysnative\aepdu.dll 2015-04-12 18:13:53 7F6FF3CFCE8A174BA6635FC1617E0F02 957440 ----a-w- C:\WINDOWS\Sysnative\appraiser.dll 2015-04-12 18:13:53 1C6716A453FEB8DB6EE7A05E02CF5C6A 769024 ----a-w- C:\WINDOWS\Sysnative\invagent.dll 2015-04-12 18:13:53 1588D38241818380E156613D29C1C303 726528 ----a-w- C:\WINDOWS\Sysnative\generaltel.dll 2015-04-12 18:13:53 150416EB645442AB9AF3ECC0AA183A92 1111552 ----a-w- C:\WINDOWS\Sysnative\aeinv.dll ====== C:\WINDOWS\Sysnative\drivers ===== 2015-04-12 18:16:16 6D3A2565E01B3E4B0F1BEDB0D4B00B3F 1113920 ----a-w- C:\WINDOWS\Sysnative\drivers\ndis.sys 2015-04-12 18:14:45 7EC9376D245D734791AD46738712E7D8 473408 ----a-w- C:\WINDOWS\Sysnative\drivers\netio.sys 2015-04-12 18:14:44 F6ECFD6128A16A4851CFE98D4E01B011 551232 ----a-w- C:\WINDOWS\Sysnative\drivers\vhdmp.sys 2015-04-12 18:14:44 DC64B02CD5E21D16215AC20D393D5CE4 153920 ----a-w- C:\WINDOWS\Sysnative\drivers\dumpsd.sys 2015-04-12 18:14:44 B41F3E5780D97CFD44A717153AD9CF2C 80896 ----a-w- C:\WINDOWS\Sysnative\drivers\wanarp.sys 2015-04-12 18:14:44 715ABA3DD164D06457A2A3C92F6EA9D5 136512 ----a-w- C:\WINDOWS\Sysnative\drivers\wfplwfs.sys 2015-04-12 18:14:44 49EE0AE9E5B64FFBBD06D55C4984B598 108544 ----a-w- C:\WINDOWS\Sysnative\drivers\i8042prt.sys 2015-04-12 18:14:44 389C998C64319CD97625B0550E52ECFA 58176 ----a-w- C:\WINDOWS\Sysnative\drivers\dam.sys 2015-04-12 18:14:44 27FF998504DEF8D29A771FBB41707C5E 238912 ----a-w- C:\WINDOWS\Sysnative\drivers\sdbus.sys 2015-04-12 18:14:44 1BD3022FD6E450B00DE560265638FD2A 112640 ----a-w- C:\WINDOWS\Sysnative\drivers\rasl2tp.sys 2015-04-12 18:14:43 ED54A75050211DC77F9B98C41E026858 86336 ----a-w- C:\WINDOWS\Sysnative\drivers\pdc.sys 2015-04-12 18:14:43 DC1D9F692C2AD84C214584C28501C1F7 24576 ----a-w- C:\WINDOWS\Sysnative\drivers\ndistapi.sys 2015-04-12 18:14:43 AD7F69237480F6CB6294EFD9EE4CD04C 428864 ----a-w- C:\WINDOWS\Sysnative\drivers\FWPKCLNT.SYS 2015-04-12 18:14:43 8CD840A062F6BDF41DDE3ACB96164B72 32256 ----a-w- C:\WINDOWS\Sysnative\drivers\kbdhid.sys 2015-04-12 18:14:43 7AA01AB1C110916825E6E1389F1B9AF2 39744 ----a-w- C:\WINDOWS\Sysnative\drivers\intelpep.sys 2015-04-12 18:14:43 5FCBAB60598AE119E02B4C27DE6B99EA 30208 ----a-w- C:\WINDOWS\Sysnative\drivers\mouhid.sys 2015-04-12 18:14:43 5917AFE4A3F695A54B99C1849C8207FE 59712 ----a-w- C:\WINDOWS\Sysnative\drivers\kbdclass.sys 2015-04-12 18:14:43 3EE5097945A7F680E320953271EB2D4F 96768 ----a-w- C:\WINDOWS\Sysnative\drivers\agilevpn.sys 2015-04-12 18:14:43 3C2DF97A21A9BBE6355B0A51F288EFFF 2485056 ----a-w- C:\WINDOWS\Sysnative\drivers\tcpip.sys 2015-04-12 18:14:43 148195AE95D9BC7375A08846439FDAC1 26112 ----a-w- C:\WINDOWS\Sysnative\drivers\sermouse.sys 2015-04-12 18:14:43 0BBE2FA30BAD58C9ADC01E4F84A3D2A1 72192 ----a-w- C:\WINDOWS\Sysnative\drivers\ndproxy.sys 2015-04-12 18:14:43 08374E4E5B8914DE6067CBA99F61E930 51008 ----a-w- C:\WINDOWS\Sysnative\drivers\mouclass.sys 2015-03-21 18:10:32 65454187E0F8B6C0DCECB0287D06EC43 14144 ----a-w- C:\WINDOWS\Sysnative\drivers\swenum.sys 2015-03-21 18:09:06 00C594D5A1DBD22AD8B2902B9F6EFF94 14528 ----a-w- C:\WINDOWS\Sysnative\drivers\drmkaud.sys 2015-03-21 18:09:04 7F68063A5A0461E02BC860CE0E6BFDDC 2025792 ----a-w- C:\WINDOWS\Sysnative\drivers\ntfs.sys 2015-03-21 18:08:25 E1BB0B6F00F470B451AB45EA13EBA0B3 1552704 ----a-w- C:\WINDOWS\Sysnative\drivers\dxgkrnl.sys 2015-03-21 18:08:15 E796AE43DDD1844281DB4D57294D17C0 533824 ----a-w- C:\WINDOWS\Sysnative\drivers\acpi.sys 2015-03-21 18:08:15 982B9495F70FEEA269C48F18E960EFDE 389952 ----a-w- C:\WINDOWS\Sysnative\drivers\dxgmms1.sys 2015-03-21 18:08:14 00D8AC8E3053290BDE6EA2FB6810D2FC 678400 ----a-w- C:\WINDOWS\Sysnative\drivers\srv2.sys 2015-03-21 18:08:06 31233271EDE50D1BBB220F78AFA60486 405504 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb.sys 2015-03-21 18:07:53 D24B1945ED1F9C96DA786DBBF1E983CE 415040 ----a-w- C:\WINDOWS\Sysnative\drivers\spaceport.sys 2015-03-21 18:07:53 9DBC32A45CFA67074432D2AF6C2832B6 559104 ----a-w- C:\WINDOWS\Sysnative\drivers\csc.sys 2015-03-21 18:07:51 2787A73C848128C950385CB3A63A6B91 337728 ----a-w- C:\WINDOWS\Sysnative\drivers\Classpnp.sys 2015-03-21 18:07:48 6276AC2AA203CF47811F6EFBBD214FBF 202752 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb20.sys 2015-03-21 18:07:47 C1FB505A73FA2E9019D32444AB33B75A 354112 ----a-w- C:\WINDOWS\Sysnative\drivers\fltMgr.sys 2015-03-21 18:07:42 D7B4859227B02BCC1055B279A63C937F 226304 ----a-w- C:\WINDOWS\Sysnative\drivers\WUDFRd.sys 2015-03-21 18:07:41 FAA564A13576F9284546BF016D27B551 467776 ----a-w- C:\WINDOWS\Sysnative\drivers\USBHUB3.SYS 2015-03-21 18:07:36 13EFD41E351F31E087283CF66C29A25E 373568 ----a-w- C:\WINDOWS\Sysnative\drivers\storport.sys 2015-03-21 18:07:27 481286719402E4BAEFEA0604AB1B5113 113664 ----a-w- C:\WINDOWS\Sysnative\drivers\WUDFPf.sys 2015-03-21 18:07:25 C76097CA941FA7CAFEDB1E557969025C 272384 ----a-w- C:\WINDOWS\Sysnative\drivers\portcls.sys 2015-03-21 18:07:22 4E829B18D5BAEC29893792A3C671A847 100672 ----a-w- C:\WINDOWS\Sysnative\drivers\ksecdd.sys 2015-03-21 18:07:20 BAFF6122CFC9F95CA175AD8C348179A4 88896 ----a-w- C:\WINDOWS\Sysnative\drivers\partmgr.sys 2015-03-21 18:07:17 41F631007A158FEBB67F0E2AD1601BBA 93696 ----a-w- C:\WINDOWS\Sysnative\drivers\rassstp.sys 2015-03-21 18:07:16 FC0141B4A5AD6D637D883C1A89FC45C5 151040 ----a-w- C:\WINDOWS\Sysnative\drivers\pacer.sys 2015-03-21 18:07:15 D1D82F007A079A4D623DBD1F36EF30A1 102208 ----a-w- C:\WINDOWS\Sysnative\drivers\mountmgr.sys 2015-03-21 18:07:15 008F7CED69FD5B30CBDE1E03C6F36A27 445440 ----a-w- C:\WINDOWS\Sysnative\drivers\nwifi.sys 2015-03-21 18:07:14 F00B189ECA74DDF408AD934ADDC72477 89088 ----a-w- C:\WINDOWS\Sysnative\drivers\drmk.sys 2015-03-21 18:07:14 A7C31B168F371E8E6796219F23E354DB 61248 ----a-w- C:\WINDOWS\Sysnative\drivers\fsdepends.sys 2015-03-21 18:07:12 A53E798C06D729CCF8459968B4372F6E 89368 ----a-w- C:\WINDOWS\Sysnative\drivers\vmbkmcl.sys 2015-03-21 18:07:10 615DFD97DEA56CE1C3A52185A3038FF8 921920 ----a-w- C:\WINDOWS\Sysnative\drivers\refs.sys 2015-03-21 18:07:07 511AD3FF957A0127E6BD336FF6F89C38 97048 ----a-w- C:\WINDOWS\Sysnative\drivers\vmbus.sys 2015-03-21 18:07:06 EF31713EE4C7CCFE4049F7E7F15645A2 69952 ----a-w- C:\WINDOWS\Sysnative\drivers\vpci.sys 2015-03-21 18:07:06 8B9486B64E5FC17FB9CC04CA10B77A34 49944 ----a-w- C:\WINDOWS\Sysnative\drivers\vmstorfl.sys 2015-03-21 18:07:06 269882812E9A68FFF1AFE1283D428322 126464 ----a-w- C:\WINDOWS\Sysnative\drivers\NdisImPlatform.sys 2015-03-21 18:07:06 10A78656BF6126245631705E45F9B9CF 61208 ----a-w- C:\WINDOWS\Sysnative\drivers\winhv.sys 2015-03-21 18:07:04 6FC047578785B0435F4E2660946D1ADC 74240 ----a-w- C:\WINDOWS\Sysnative\drivers\mpsdrv.sys 2015-03-21 18:07:03 F3C060444777A59FC63D920719E43CCD 115712 ----a-w- C:\WINDOWS\Sysnative\drivers\bridge.sys 2015-03-21 18:07:03 A2468CC3509394A33C4C32F99563D845 54784 ----a-w- C:\WINDOWS\Sysnative\drivers\wpcfltr.sys 2015-03-21 18:07:03 1A20F03700D2B2ED775E38D751EF2F63 324928 ----a-w- C:\WINDOWS\Sysnative\drivers\USBXHCI.SYS 2015-03-21 18:07:03 0E046FF5823B95326D10CF1B4AF23541 39424 ----a-w- C:\WINDOWS\Sysnative\drivers\nsiproxy.sys 2015-03-21 18:07:02 807F8CF3E973305FC435C61CBBEE2A49 189248 ----a-w- C:\WINDOWS\Sysnative\drivers\UCX01000.SYS 2015-03-21 18:07:02 5F66B7BB330AA80067FC66149A692620 33600 ----a-w- C:\WINDOWS\Sysnative\drivers\wimmount.sys 2015-03-21 18:07:01 A57A897E3F87B8E9F30A627C42779A76 21824 ----a-w- C:\WINDOWS\Sysnative\drivers\tbs.sys 2015-03-21 18:07:00 5C8F604F6DC74177CDD8372D7B1ADFF0 212736 ----a-w- C:\WINDOWS\Sysnative\drivers\usbvideo.sys 2015-03-21 18:06:54 D4DCE03870314D3354F3501F9DDD4123 87040 ----a-w- C:\WINDOWS\Sysnative\drivers\netvsc63.sys 2015-03-21 18:06:54 415DD71628795197F7AFC176CBADC74E 82944 ----a-w- C:\WINDOWS\Sysnative\drivers\appid.sys 2015-03-21 18:06:53 42FF4975D032CAE558AE4BB8448F6E5A 48128 ----a-w- C:\WINDOWS\Sysnative\drivers\netbios.sys 2015-03-21 18:06:51 13BEA6C882D4D877A5A85CA149C86BC1 40960 ----a-w- C:\WINDOWS\Sysnative\drivers\scfilter.sys 2015-03-21 18:06:50 D7A41959BB3A8510F1BAC36F5CEC1874 144384 ----a-w- C:\WINDOWS\Sysnative\drivers\rmcast.sys 2015-03-21 18:06:50 B337B1F1E82A83E20A1743E008E25C0F 17408 ----a-w- C:\WINDOWS\Sysnative\drivers\rasacd.sys 2015-03-21 18:06:50 9746BA79DE0CA5EB5104406A9ED62D01 11776 ----a-w- C:\WINDOWS\Sysnative\drivers\rootmdm.sys 2015-03-21 18:06:50 8CECC8DA55F3274181FD1EA28AD76664 43008 ----a-w- C:\WINDOWS\Sysnative\drivers\ndiscap.sys 2015-03-21 18:06:50 83868EB2924E6BC21A54337C65D614D1 47104 ----a-w- C:\WINDOWS\Sysnative\drivers\qwavedrv.sys 2015-03-21 18:06:50 67343511D80BF3D6D9EEDB5BA8D0B06B 57856 ----a-w- C:\WINDOWS\Sysnative\drivers\bthhfenum.sys 2015-03-21 18:06:50 51B3AC0560848CD6D65AC2033E293113 66560 ----a-w- C:\WINDOWS\Sysnative\drivers\mslldp.sys 2015-03-21 18:06:50 3083926D1CC5B56EA0786527B557DD1B 103424 ----a-w- C:\WINDOWS\Sysnative\drivers\Ndu.sys 2015-03-21 18:06:50 20185BEB7512EDE4EFECDFA148AC9F99 29696 ----a-w- C:\WINDOWS\Sysnative\drivers\TsUsbGD.sys 2015-03-21 18:06:50 1104A31260CCF4318C884E0AE6C513BF 53248 ----a-w- C:\WINDOWS\Sysnative\drivers\bthenum.sys 2015-03-21 18:06:50 0139248F6B95CF0D837B5B46A2722D40 98304 ----a-w- C:\WINDOWS\Sysnative\drivers\usbcir.sys 2015-03-21 18:02:57 D296D0F0DB2CD1504F90405603664493 264000 ----a-w- C:\WINDOWS\Sysnative\drivers\WdFilter.sys 2015-03-21 18:02:57 9F4DF0043965808973023A9B51A11136 114496 ----a-w- C:\WINDOWS\Sysnative\drivers\WdNisDrv.sys 2015-03-21 18:02:57 1751F6B031ADAC34724511057D2E455D 44024 ----a-w- C:\WINDOWS\Sysnative\drivers\WdBoot.sys 2015-03-21 18:02:46 DC66AE45816614D2999DCD3834DCCC4E 167424 ----a-w- C:\WINDOWS\Sysnative\drivers\rfcomm.sys 2015-03-21 18:02:46 C37F4930795B771400C63C3C87E7A6C2 1198080 ----a-w- C:\WINDOWS\Sysnative\drivers\bthport.sys 2015-03-21 18:02:46 42F88B57CAE42FC10059C887B3FCFCEA 97792 ----a-w- C:\WINDOWS\Sysnative\drivers\hidbth.sys 2015-03-21 18:02:46 08EA90955AED2D959EE67DF6EDF0E2B6 81920 ----a-w- C:\WINDOWS\Sysnative\drivers\BTHUSB.SYS 2015-03-21 17:49:55 BC8A79C625568DDB7DCA49D0C2741A64 27456 ----a-w- C:\WINDOWS\Sysnative\drivers\rdpvideominiport.sys ====== C:\WINDOWS\Tasks ====== ====== C:\WINDOWS\Temp ====== ======= C:\Program Files ===== 2015-04-13 10:03:21 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2015-04-13 06:24:10 -------- d-----w- C:\PROGRA~2\Mozilla Maintenance Service 2015-04-12 18:58:15 -------- d-----w- C:\PROGRA~2\COMMON~1\Java 2015-04-11 19:49:24 -------- d-----w- C:\PROGRA~2\Photo Notifier and Animation Creator ======= C: ===== ====== ====== ====== C:\Users\test ====== 2015-04-13 13:26:49 BE784FA5DC203CCFE7877250827EE0BF 544 ----a-w- C:\\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$IRWBE6C.exe 2015-04-13 13:26:49 578F13C62ECB0C216DB2B139E6DAA245 544 ----a-w- C:\\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$IVA26PL.exe 2015-04-13 13:25:46 8EF6C98EEABACF8660D03B7C5F3C1EE1 1305600 ----a-w- C:\\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RVA26PL.exe 2015-04-13 13:24:35 8EF6C98EEABACF8660D03B7C5F3C1EE1 1305600 ----a-w- C:\\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RRWBE6C.exe 2015-04-13 10:30:24 9AFB943CB8915B2294D043CF6BEF56D4 463512 ----a-w- C:\\Windows\Temp\MPGEAR.DLL 2015-04-13 10:30:24 3ACAAB4FD96E226548D54916FF1C84C0 11910896 ----a-w- C:\\Windows\Temp\MPENGINE.DLL 2015-04-13 10:03:45 E2958661C59C64EF085C3F76F0CCC9C0 43932 ----a-w- C:\\rsit\info.txt 2015-04-13 10:03:21 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\\Program Files\trend micro\test.exe 2015-04-13 10:03:21 -------- d-----w- C:\\Program Files\trend micro 2015-04-13 06:24:10 63B308A3E1F062DFD3BF762FDDC2F39A 103588 ----a-w- C:\\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe 2015-04-13 06:24:10 269BDB3CB77EB77BABE2862BEAB1F208 148080 ----a-w- C:\\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 2015-04-13 06:24:10 -------- d-----w- C:\\Program Files (x86)\Mozilla Maintenance Service 2015-04-12 19:13:24 4F704F32804C0A14C8214B9724C75B2A 3716 ----a-w- C:\\AdwCleaner\AdwCleaner[S21].txt 2015-04-12 19:11:07 57B52112DC2042730CF43F355669F2F4 3732 ----a-w- C:\\AdwCleaner\AdwCleaner[R21].txt 2015-04-12 18:17:48 9BC00C5608BF75BEAE893814A3AEC2AD 29888 ----a-w- C:\\Windows\System32\aspnet_counters.dll 2015-04-12 18:17:46 3B26DCAB842C280FA7271FF2B58D3293 28352 ----a-w- C:\\Windows\SysWOW64\aspnet_counters.dll 2015-04-12 18:16:50 E26D49197CA9E38BCC6033DE53F720BD 816128 ----a-w- C:\\Windows\SysWOW64\calc.exe 2015-04-12 18:16:50 D82C445E3D484F31CD2638A4338E5FD9 933888 ----a-w- C:\\Windows\System32\calc.exe 2015-04-12 18:16:48 EEB76824DC14283A010CAE4E2B5AB852 723072 ----a-w- C:\\Windows\System32\SHCore.dll 2015-04-12 18:16:48 19920B416F3274640B3DE9A5248F0E74 560392 ----a-w- C:\\Windows\SysWOW64\SHCore.dll 2015-04-12 18:16:42 74887EBB4777EC450EF167645C99163E 602776 ----a-w- C:\\Windows\SysWOW64\oleaut32.dll 2015-04-12 18:16:42 6835D94FDAAB39E008E8490BD3E88CA3 788680 ----a-w- C:\\Windows\System32\oleaut32.dll 2015-04-12 18:16:42 46DE9C72EE0F23B9AB6A625214C16FE3 1124352 ----a-w- C:\\Windows\SysWOW64\msctf.dll 2015-04-12 18:16:42 3E9BB985DF2FF26CCE840DE1D24E9381 1385256 ----a-w- C:\\Windows\System32\msctf.dll 2015-04-12 18:16:17 DF55E2D7D045BA1A2C43029DEDF0B59D 347136 ----a-w- C:\\Windows\System32\photowiz.dll 2015-04-12 18:16:17 C08E7F8AC41901403799B237DA7BA10E 3097600 ----a-w- C:\\Windows\System32\msftedit.dll 2015-04-12 18:16:17 45804906FFF3DD025BC725BE0DC98797 290816 ----a-w- C:\\Windows\SysWOW64\photowiz.dll 2015-04-12 18:16:16 8F3E99586FDAD25BD0DA0C37C6DBE1EC 2484224 ----a-w- C:\\Windows\SysWOW64\msftedit.dll 2015-04-12 18:15:51 B004C599E9DFE8A4C4A7421E80B94FBD 1943040 ----a-w- C:\\Windows\SysWOW64\dwmcore.dll 2015-04-12 18:15:51 7F586D08E965FA00EE085319EF5BBAF1 864256 ----a-w- C:\\Windows\System32\win32spl.dll 2015-04-12 18:15:51 77F28E71B2C0297AB67EA81878B1FA83 2257408 ----a-w- C:\\Windows\System32\dwmcore.dll 2015-04-12 18:15:51 2AE4D70A3657FA4FA734B370E79F83FF 1091072 ----a-w- C:\\Windows\System32\localspl.dll 2015-04-12 18:15:45 9A7A7E45DAED2E8C2816716D8D28236A 780800 ----a-w- C:\\Windows\System32\lsm.dll 2015-04-12 18:15:34 BA0ED854110D45E5D4A46BD250BAF4E0 1487976 ----a-w- C:\\Windows\System32\sppobjs.dll 2015-04-12 18:15:34 AF33B3D7B32FE39656147E0849D987A4 321536 ----a-w- C:\\Windows\System32\lockscreencn.dll 2015-04-12 18:15:34 68DF7D160987CF3E0A03A64E5A8F087D 2773504 ----a-w- C:\\Windows\System32\authui.dll 2015-04-12 18:15:34 154BC2F7D00DA9790A99787B6019535E 2459136 ----a-w- C:\\Windows\SysWOW64\authui.dll 2015-04-12 18:15:33 8CC8FECBDD80B04522DFCB1ECD182DB7 1229312 ----a-w- C:\\Windows\WinStore\WinStoreUI.dll 2015-04-12 18:15:33 6A978C77BADD838D8A5347DBC06142A7 811008 ----a-w- C:\\Windows\SysWOW64\WSShared.dll 2015-04-12 18:15:33 40CBEB7C0051036CBC1C243A025F206D 971776 ----a-w- C:\\Windows\System32\WSShared.dll 2015-04-12 18:15:32 FCF02D20B26118DD7E4E871323AAAB58 35840 ----a-w- C:\\Windows\SysWOW64\atlthunk.dll 2015-04-12 18:15:32 E094D21FE482A0DC59056B6B9D421B07 1230336 ----a-w- C:\\Windows\SysWOW64\mfc42u.dll 2015-04-12 18:15:32 81CB7FF2FF19D639FD75B6B992BABC43 4298240 ----a-w- C:\\Windows\System32\D3DCompiler_47.dll 2015-04-12 18:15:32 60629FA01E0CAE23DA527DFA5ECAD5C7 1464832 ----a-w- C:\\Windows\System32\mfc42.dll 2015-04-12 18:15:32 5EB5142C178BED2C4372406203B9BC1D 1204224 ----a-w- C:\\Windows\SysWOW64\mfc42.dll 2015-04-12 18:15:32 20433FD8C8F460567DE93F472A4D749F 1488896 ----a-w- C:\\Windows\System32\mfc42u.dll 2015-04-12 18:15:31 C443536D9279B74A162E3C39A83CB226 60928 ----a-w- C:\\Windows\SysWOW64\StorageContextHandler.dll 2015-04-12 18:15:31 613438C2C3D899F50719B6878579C66D 75264 ----a-w- C:\\Windows\System32\StorageContextHandler.dll 2015-04-12 18:15:31 08B8F2E5FAAC73EF1AFD99B2AEC104FD 3551744 ----a-w- C:\\Windows\SysWOW64\D3DCompiler_47.dll 2015-04-12 18:14:53 C561022F4E2882B44BDB65AE2B0756C0 266752 ----a-w- C:\\Windows\SysWOW64\eapphost.dll 2015-04-12 18:14:53 992A0252586D9D946535DDBBEF9AB7D5 346112 ----a-w- C:\\Windows\System32\eappcfg.dll 2015-04-12 18:14:53 62F00DA98A4ABDA58254DB936C1D2D73 339456 ----a-w- C:\\Windows\System32\eapphost.dll 2015-04-12 18:14:53 4720D1AF566E7C2127B4EEDDD070CA87 278016 ----a-w- C:\\Windows\SysWOW64\eappcfg.dll 2015-04-12 18:14:53 4644F62E41B054A1787225D1210108B2 331776 ----a-w- C:\\Windows\System32\eapp3hst.dll 2015-04-12 18:14:52 958A5388C05106844C80AEB95948A32B 91648 ----a-w- C:\\Windows\SysWOW64\eappgnui.dll 2015-04-12 18:14:52 55E39907F34D14E0794DD17C915795E5 46456 ----a-w- C:\\Windows\System32\LockScreenContentServer.exe 2015-04-12 18:14:52 4E32C419A8B3CC19FCD2CACDEF1BD492 102912 ----a-w- C:\\Windows\System32\eappgnui.dll 2015-04-12 18:14:52 20A130BE26CBB3B50C5B19B91BED669B 250880 ----a-w- C:\\Windows\SysWOW64\eapp3hst.dll 2015-04-12 18:14:47 4AABC3D611EEB92FDEDD1C741D63C437 4837376 ----a-w- C:\\Windows\System32\SyncEngine.dll 2015-04-12 18:14:47 2F92532B7C872394AA9DEB5CE43B3FDB 18823168 ----a-w- C:\\Windows\System32\Windows.UI.Xaml.dll 2015-04-12 18:14:46 1302567D8675E358C60C59601D0334BF 15158784 ----a-w- C:\\Windows\SysWOW64\Windows.UI.Xaml.dll 2015-04-12 18:14:44 F96956BBED66937350B360497AAA4EE2 507392 ----a-w- C:\\Windows\SysWOW64\untfs.dll 2015-04-12 18:14:44 E9AE4FAE83FB38A2962F9032B24CEB3C 252416 ----a-w- C:\\Windows\System32\dnsrslvr.dll 2015-04-12 18:14:44 E8F017472DAB8350583526184F8FE478 166912 ----a-w- C:\\Windows\System32\AppxAllUserStore.dll 2015-04-12 18:14:44 E66D01726D7B12302CBF3BBF847C9B05 1027584 ----a-w- C:\\Windows\System32\MFMediaEngine.dll 2015-04-12 18:14:44 A9957240537BEE1988B03A6B1E135773 885760 ----a-w- C:\\Windows\SysWOW64\MFMediaEngine.dll 2015-04-12 18:14:44 A7F1BC7115123D2F17A4251149984080 962216 ----a-w- C:\\Windows\System32\mfplat.dll 2015-04-12 18:14:44 9925BE7849D66AF04F778B41C9D5C7C1 952896 ----a-w- C:\\Windows\System32\mfmp4srcsnk.dll 2015-04-12 18:14:44 94743D320BA649382829A5FE8C12DDF1 801584 ----a-w- C:\\Windows\SysWOW64\mfplat.dll 2015-04-12 18:14:44 75B6AD9F2BFDFE7E7C7E38F4FDD2FF1E 658432 ----a-w- C:\\Windows\System32\WSDApi.dll 2015-04-12 18:14:44 6E9C931731AB16217D3A5472B9B442EB 94208 ----a-w- C:\\Windows\SysWOW64\QSVRMGMT.DLL 2015-04-12 18:14:44 69C0304BE8E4C58026A0D162AD04BF10 1154048 ----a-w- C:\\Windows\System32\SkyDrive.exe 2015-04-12 18:14:44 605CC8C83761219B45B1EF271B2A9E0C 420864 ----a-w- C:\\Windows\System32\vpnike.dll 2015-04-12 18:14:44 57C10952ED978E2BF24D904B291C8C0C 558080 ----a-w- C:\\Windows\System32\untfs.dll 2015-04-12 18:14:44 57322EBB67A59FB64E228F31A84CA43D 1084416 ----a-w- C:\\Windows\System32\IKEEXT.DLL 2015-04-12 18:14:44 54091BD386579A661A012D5E77120B2C 786120 ----a-w- C:\\Windows\SysWOW64\mfmp4srcsnk.dll 2015-04-12 18:14:44 3F0D403D47A27134F490B0951826FC37 242176 ----a-w- C:\\Windows\System32\WinSCard.dll 2015-04-12 18:14:44 2E3976C857D7230EC8D2B2276E688255 827392 ----a-w- C:\\Windows\System32\spoolsv.exe 2015-04-12 18:14:44 2DA3DF504868C941D7EFAE6099B73A65 309760 ----a-w- C:\\Windows\System32\WSDMon.dll 2015-04-12 18:14:44 0B07D6E59605DB58B780655192D7387C 128000 ----a-w- C:\\Windows\System32\QSVRMGMT.DLL 2015-04-12 18:14:44 001E1E3546EA80D1A97E7E2BF6F72969 555520 ----a-w- C:\\Windows\SysWOW64\WSDApi.dll 2015-04-12 18:14:43 F0FD2757C9975EC62C3AFF9DE3415830 514048 ----a-w- C:\\Windows\System32\DevicePairing.dll 2015-04-12 18:14:43 D06E9DE27BBB41F8AE2A0A2D6FC0F598 422400 ----a-w- C:\\Windows\System32\FWPUCLNT.DLL 2015-04-12 18:14:43 B98F9F25D0CCA83E1CA79D1F8BAA1075 465408 ----a-w- C:\\Windows\SysWOW64\DevicePairing.dll 2015-04-12 18:14:43 A81265C9CF12A9CA3F436024C1793936 624640 ----a-w- C:\\Windows\SysWOW64\rasapi32.dll 2015-04-12 18:14:43 A2CCF16BF1C4F60914EA2DF0BF484A6E 561664 ----a-w- C:\\Windows\SysWOW64\nshwfp.dll 2015-04-12 18:14:43 9B1133CA54B4A3E852756EA174682EC8 211968 ----a-w- C:\\Windows\System32\QSHVHOST.DLL 2015-04-12 18:14:43 9766BC2BC08F4ABEA83908B11C154529 182784 ----a-w- C:\\Windows\System32\rascfg.dll 2015-04-12 18:14:43 92937F1A41E6EC1D89BC4D89AC99035B 1142272 ----a-w- C:\\Windows\SysWOW64\vssapi.dll 2015-04-12 18:14:43 887DBBE8CF300A6AE9D0B5D8FF7C0915 143360 ----a-w- C:\\Windows\SysWOW64\AppxAllUserStore.dll 2015-04-12 18:14:43 85D880636B8246BD4EF4061F25D84C18 155648 ----a-w- C:\\Windows\SysWOW64\QSHVHOST.DLL 2015-04-12 18:14:43 6F57859B54404D350E525413322F7AA2 169984 ----a-w- C:\\Windows\SysWOW64\WinSCard.dll 2015-04-12 18:14:43 591FB3A6559C393235F6D8A573E4E1B3 1574400 ----a-w- C:\\Windows\System32\vssapi.dll 2015-04-12 18:14:43 3B7F9612439EA47151EC5EAB232C1C3F 1454080 ----a-w- C:\\Windows\System32\VSSVC.exe 2015-04-12 18:14:43 2C67494BD2CB71CEE84E3DA4B9DEE979 733696 ----a-w- C:\\Windows\System32\SkyDriveTelemetry.dll 2015-04-12 18:14:43 25AE2DD8E6F6BBD922C5F6971F124BBD 74752 ----a-w- C:\\Windows\System32\vsstrace.dll 2015-04-12 18:14:43 22A5582ACF0CEE97268D7868C69F35CE 845312 ----a-w- C:\\Windows\System32\BFE.DLL 2015-04-12 18:14:43 205BDB00F4C032AF45A6BFD18EA7886C 498688 ----a-w- C:\\Windows\SysWOW64\dnsapi.dll 2015-04-12 18:14:43 0B082D6D7A53D91678E7409DD145E89C 657920 ----a-w- C:\\Windows\System32\dnsapi.dll 2015-04-12 18:14:43 0416FE95E0DC01042B46D9F6B1A1EE61 702464 ----a-w- C:\\Windows\System32\rasapi32.dll 2015-04-12 18:14:43 03880AB54F6C9A449B9F8AC8B21472AA 713216 ----a-w- C:\\Windows\System32\nshwfp.dll 2015-04-12 18:14:42 D64719E25966885AA991513A66A1A20F 16896 ----a-w- C:\\Windows\System32\eventcls.dll 2015-04-12 18:14:42 A5F199F33C2A919AE9A15997FA7A07FD 77824 ----a-w- C:\\Windows\System32\rasdiag.dll 2015-04-12 18:14:42 A2530DC44EB8083A63EB83798E7BBB72 162304 ----a-w- C:\\Windows\SysWOW64\rascfg.dll 2015-04-12 18:14:42 9FAF67CE7452215ACEDDB517A663454F 43008 ----a-w- C:\\Windows\System32\rasmxs.dll 2015-04-12 18:14:42 7CC0DD976389300196B2DB4E3F77662C 33280 ----a-w- C:\\Windows\SysWOW64\rasmxs.dll 2015-04-12 18:14:42 7AB08744F06F0BDC87DC124F4276A08E 15360 ----a-w- C:\\Windows\SysWOW64\eventcls.dll 2015-04-12 18:14:42 7826082B93262AB6460E77B91C61EA30 128512 ----a-w- C:\\Windows\splwow64.exe 2015-04-12 18:14:42 75692538076B0402E7236A314A027299 55296 ----a-w- C:\\Windows\SysWOW64\vsstrace.dll 2015-04-12 18:14:42 3C4FF4AD2F023865F63017F0E6A9C649 30208 ----a-w- C:\\Windows\System32\rasser.dll 2015-04-12 18:14:42 210642D9D287AEDED8BB3123580177D4 22528 ----a-w- C:\\Windows\SysWOW64\rasser.dll 2015-04-12 18:14:42 05761DCCF02CEE514DC3B8E3A7F38DF5 272384 ----a-w- C:\\Windows\SysWOW64\FWPUCLNT.DLL 2015-04-12 18:14:42 017E4B714298435849AC02F32A1C6BDA 61440 ----a-w- C:\\Windows\SysWOW64\rasdiag.dll 2015-04-12 18:14:28 5F3D70B19BCAC985DA90F22CA2FF45E4 3678720 ----a-w- C:\\Windows\System32\wuaueng.dll 2015-04-12 18:14:27 DDFFE37C690F8D0AB05309C11AE8A740 52224 ----a-w- C:\\Windows\System32\wups2.dll 2015-04-12 18:14:27 BF5F10811E8249075D48153E8766184D 35840 ----a-w- C:\\Windows\System32\wuapp.exe 2015-04-12 18:14:27 A7964350B8F9E26679225CB897A522A4 124928 ----a-w- C:\\Windows\SysWOW64\wuwebv.dll 2015-04-12 18:14:27 A6D023786B16C2C6FEC235A69F60A5B2 15360 ----a-w- C:\\Windows\System32\wu.upgrade.ps.dll 2015-04-12 18:14:27 A6B426B5502174F2FDC5D2CA174E6B6C 95744 ----a-w- C:\\Windows\System32\wudriver.dll 2015-04-12 18:14:27 A40A005B63E305A0509A69A604659944 133256 ----a-w- C:\\Windows\System32\wuauclt.exe 2015-04-12 18:14:27 9C8D7CE66075A93954F3082CD6896F0D 81920 ----a-w- C:\\Windows\SysWOW64\wudriver.dll 2015-04-12 18:14:27 8DE0A3EC9024DC2AF1DE8BDCE4AEA2C6 2373632 ----a-w- C:\\Windows\System32\wucltux.dll 2015-04-12 18:14:27 4C6D7A1AA4EB4DA0382484ECF38040A7 140288 ----a-w- C:\\Windows\System32\wuwebv.dll 2015-04-12 18:14:27 49B0AE13918B1456C1EFB284E4DC52D1 408064 ----a-w- C:\\Windows\System32\WUSettingsProvider.dll 2015-04-12 18:14:27 47C04EEA5C1C3D27744E123F3AF25E57 891392 ----a-w- C:\\Windows\System32\wuapi.dll 2015-04-12 18:14:27 3BAAE060A97C0F9AD48AFE3330B577E5 267264 ----a-w- C:\\Windows\System32\WinSetupUI.dll 2015-04-12 18:14:27 35FAB05339F7083611B12ED7143AFA81 200192 ----a-w- C:\\Windows\System32\storewuauth.dll 2015-04-12 18:14:27 307FED3A389198547D6446693E8FEFAA 27136 ----a-w- C:\\Windows\SysWOW64\wups.dll 2015-04-12 18:14:27 1F457FACEBEE5F9C3882163FF9A51AFC 721920 ----a-w- C:\\Windows\SysWOW64\wuapi.dll 2015-04-12 18:14:27 1EB1732C67D40598222103776F7AF829 66048 ----a-w- C:\\Windows\System32\wups.dll 2015-04-12 18:14:27 1DAD87D13FE06EF4ECD873A1DDF445E3 29696 ----a-w- C:\\Windows\SysWOW64\wuapp.exe 2015-04-12 18:14:26 F91E83532107E8B0A1819DB2D96366CB 1090048 ----a-w- C:\\Windows\System32\MrmCoreR.dll 2015-04-12 18:14:26 D5496CF5DF8921CFC1EF1770F98C2192 791040 ----a-w- C:\\Windows\SysWOW64\MrmCoreR.dll 2015-04-12 18:14:26 C10A66189DC8C090E7C84873EDCEBC88 2501368 ----a-w- C:\\Windows\explorer.exe 2015-04-12 18:14:26 91E24273FCA076EA9E65DAFA98901225 2207488 ----a-w- C:\\Windows\SysWOW64\explorer.exe 2015-04-12 18:13:53 EE5ED8E6998D7E686F614BA8D876829B 192000 ----a-w- C:\\Windows\System32\aepic.dll 2015-04-12 18:13:53 BA93F0E6B27510746864DA8D26DD3852 30720 ----a-w- C:\\Windows\System32\acmigration.dll 2015-04-12 18:13:53 9B8BE8DDC0D9CD6A4D2182196ABE99E2 419328 ----a-w- C:\\Windows\System32\devinv.dll 2015-04-12 18:13:53 813906D7D0A35CB7158C45E6568FA3DD 227328 ----a-w- C:\\Windows\System32\aepdu.dll 2015-04-12 18:13:53 7F6FF3CFCE8A174BA6635FC1617E0F02 957440 ----a-w- C:\\Windows\System32\appraiser.dll 2015-04-12 18:13:53 1C6716A453FEB8DB6EE7A05E02CF5C6A 769024 ----a-w- C:\\Windows\System32\invagent.dll 2015-04-12 18:13:53 1588D38241818380E156613D29C1C303 726528 ----a-w- C:\\Windows\System32\generaltel.dll 2015-04-12 18:13:53 150416EB645442AB9AF3ECC0AA183A92 1111552 ----a-w- C:\\Windows\System32\aeinv.dll 2015-04-11 19:49:24 -------- d-----w- C:\ProgramData\Photo Notifier and Animation Creator 2015-04-11 19:49:24 -------- d-----w- C:\\ProgramData\Photo Notifier and Animation Creator 2015-04-11 19:49:24 -------- d-----w- C:\\Program Files (x86)\Photo Notifier and Animation Creator 2015-04-11 19:48:54 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail 2015-04-11 18:28:10 -------- d-sh--w- C:\\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019 2015-04-11 17:33:03 -------- d-----w- C:\\Users\test 2015-04-11 17:07:52 D2C68E37F8BE286DAE9063A2B3873627 108 ----a-w- C:\\Temp\bcdinfo.txt 2015-04-11 17:07:52 7F1A0AFDE33B088D6AF972401CC1AD26 3142 ----a-w- C:\\Temp\disklayout.txt 2015-04-11 17:07:52 4352D88A78AA39750BF70CD6F27BCAA5 4 ----a-w- C:\\Temp\bootfailure.txt 2015-04-11 17:07:52 1306D5CF388D241FED3025081E3DDAF1 2202 ----a-w- C:\\Temp\SrtTrail.txt 2015-04-11 11:16:40 -------- d-sh--w- C:\\$Recycle.Bin\S-1-5-21-4108662250-8989725-2560891106-1002 2015-03-21 18:08:16 80E856B1AFAEB6195EADAAD65945147C 1001472 ----a-w- C:\\Windows\HelpPane.exe 2015-03-21 18:07:27 959A31D0CD013CEA0C66DB7C03BCBDDF 221184 ----a-w- C:\\Windows\notepad.exe 2015-03-21 18:07:14 B67DB709F5FDAA89CA6C2CB6C1E39B3B 154624 ----a-w- C:\\Windows\regedit.exe 2015-03-21 18:07:11 727B4519FE9919447108CBEC4768F34A 54272 ----a-w- C:\\Windows\twain_32.dll 2015-03-21 18:06:52 B934411DFE7DEACFA95A1255A48133C9 17408 ----a-w- C:\\Windows\hh.exe 2015-03-21 18:06:52 73E19BE0E0ECD88616B5762F621B0226 11264 ----a-w- C:\\Windows\write.exe 2015-03-21 18:06:52 335C38783B3F1B383ECAC17DB3705895 9728 ----a-w- C:\\Windows\winhlp32.exe 2015-03-21 08:09:03 8AD048D5876D01E0708866C45750E952 4965 ----a-w- C:\\AdwCleaner\AdwCleaner[S20].txt 2015-03-21 08:03:54 A3EE3C947E9860AE1A1DB9B9AC31915E 5065 ----a-w- C:\\AdwCleaner\AdwCleaner[R20].txt ====== C: exe-files == 2015-04-13 13:26:49 BE784FA5DC203CCFE7877250827EE0BF 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$IRWBE6C.exe 2015-04-13 13:26:49 578F13C62ECB0C216DB2B139E6DAA245 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$IVA26PL.exe 2015-04-13 13:25:46 8EF6C98EEABACF8660D03B7C5F3C1EE1 1305600 ----a-w- C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RVA26PL.exe 2015-04-13 13:24:35 8EF6C98EEABACF8660D03B7C5F3C1EE1 1305600 ----a-w- C:\$Recycle.Bin\S-1-5-21-116800127-559303469-1812208031-1019\$RRWBE6C.exe 2015-04-13 10:03:21 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\test.exe 2015-04-13 10:02:44 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\test\Downloads\RSITx64.exe 2015-04-13 06:24:10 63B308A3E1F062DFD3BF762FDDC2F39A 103588 ----a-w- C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe 2015-04-13 06:24:10 269BDB3CB77EB77BABE2862BEAB1F208 148080 ----a-w- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 2015-04-13 06:23:19 B7087D251D441311045381BEBBDD8F9E 243480 ----a-w- C:\Users\test\AppData\Local\Microsoft\Windows\INetCache\IE\GR2F1YIJ\Firefox Setup Stub 37.0.1.exe 2015-04-12 20:25:55 36BE12E041D6B1BA20C1889CD4278CB1 41342368 ----a-w- C:\Users\test\Downloads\Firefox Setup 37.0.1.exe 2015-04-12 19:42:14 E8CD84F956E18D93FA9E2CFEC93099BF 68008 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImLpp.exe 2015-04-12 19:42:14 E5B5577C88B1A97A2E20449C0B150A97 129368 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImBpp.exe 2015-04-12 19:42:14 D9D7FA5367EAAEF892EE70FFB4B3E719 43832 ----a-r- C:\Program Files (x86)\IncrediMail\Bin\ImSc.exe 2015-04-12 19:42:14 D5CDEA452982FC61E21EE978AAB134DD 367016 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe 2015-04-12 19:42:14 74B81A458DF4098CE6FA8FF15EBD42B3 121256 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe 2015-04-12 19:42:14 62F06CE16A02EBAB81871ADD6066666B 309672 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImLc.exe 2015-04-12 19:42:14 4EB8B58CAFEE61DCF0619B359D8B9C5A 113064 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe 2015-04-12 19:42:14 3EEA73EA32478100A260CF5ACF952878 260520 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImNotfy.exe 2015-04-12 19:42:14 312707A513F86ED20642F43F8EF4DD14 264616 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe 2015-04-12 19:42:14 2F779AC4318FD4990C828F60D16F2B17 104872 ----a-w- C:\Program Files (x86)\IncrediMail\Bin\ImPackr.exe 2015-04-12 19:40:20 2EA777F1974DBFB8EC2036503B464CC8 655872 ----a-w- C:\Users\test\Downloads\Nero 10.0 + Serials en Keygen - DivXNL-Team\Nero Multimedia Suite 10 - Keygen.exe 2015-04-12 19:35:51 2BAAA42218DEB7B3E29F088222942631 12908968 ----a-w- C:\Users\test\Downloads\IncrediMailSetup_nl.exe 2015-04-12 19:35:46 DA0177B7A18ECCF97E1C179BE4ECBA3C 8437760 ----a-w- C:\Users\test\Downloads\ClassicShellSetup_3_6_8.exe 2015-04-12 19:35:46 D957DA91190DDC95555BE7F8F53435A6 3650832 ----a-w- C:\Users\test\Downloads\cpu-z_1.55-setup-en.exe 2015-04-12 19:35:46 46E66EE77E034955735F8B5EF8C83E31 6771544 ----a-w- C:\Users\test\Downloads\EssentialPIM5.exe 2015-04-12 19:35:46 1FD94FA647FAC55F255684D5D1ABDBEE 32971072 ----a-w- C:\Users\test\Downloads\FreeYouTubeDownload.exe 2015-04-12 19:35:42 FF4623E81F7D722259E19F09CDFFA4D7 9856350 ----a-w- C:\Users\test\Downloads\abiword-setup-2-9-4.exe 2015-04-12 19:35:42 7A3596BA138E6E337DA0FA814E3B7AA5 22928168 ----a-w- C:\Users\test\Downloads\4.2.0.158_skypesetup_4.2.0.158.exe 2015-04-12 19:35:42 35B351FD5A532F8A3964D496CB63FF1B 169899696 ----a-w- C:\Users\test\Downloads\amd_catalyst_win8_release_preview (1).exe 2015-04-12 19:35:42 0FC478B3D6C5FED047D499CF25FDF817 131072 ----a-w- C:\Users\test\Downloads\wlan_wiz\BrWPrWiz.exe 2015-04-12 19:35:41 E90CA0D75701072691B46C4C4347553A 20332736 ----a-w- C:\Users\test\Downloads\TTHome_v2_7_6_2056_win\TTHome_v2_7_6_2056_win\v2_7_6_2056_win.exe 2015-04-12 19:35:37 C9700B371516A41872AD5E946E9A63FB 6767728 ----a-w- C:\Users\test\Downloads\Panasonic_SD-Format_Utility_v310\SD-Formatter_v3.1.exe 2015-04-12 19:35:37 225A3CC5555832BBB60FF34C21875216 3415592 ----a-w- C:\Users\test\Downloads\Panasonic_SD-Format_Utility_v310\WindowsXP-KB955704-x86-NLD.exe 2015-04-12 19:35:31 1CA0ED493CD5E2C104C81809E1DBB913 306708552 ----a-w- C:\Users\test\Downloads\Nero 10.0 + Serials en Keygen - DivXNL-Team\Nero-10.0.13100.exe 2015-04-12 19:35:01 FBAB280D0CAC5E21C72F0A1A7B5B9608 455600 ----a-w- C:\Users\test\Downloads\mflpro_c1\Data\Disk1\setup.exe 2015-04-12 19:35:01 5B501AF446CF579FE3E135001E2EAF0D 65536 ----a-w- C:\Users\test\Downloads\mflpro_c1\DCP-195C\Setup.exe 2015-04-12 19:35:01 27C9A12D64E5E7F6A395A2D0B8610522 45056 ----a-w- C:\Users\test\Downloads\mflpro_c1\Data\Disk1\Brolink\Brolink0.exe 2015-04-12 19:34:54 E96D736D18B913AA7C4CB1C037FEEDF0 32077276 ----a-w- C:\Users\test\Downloads\DVDFab Platinum v8.1.7.8 + Crack [ChattChitto RG]\DVDFab Platinum v8.1.7.8 + Crack [ChattChitto RG].exe 2015-04-12 19:34:45 F01904FBA9290526EB487210EE4D6988 25730832 ----a-w- C:\Users\test\Downloads\wordview_nl-nl.exe 2015-04-12 19:34:40 E70E3EFE4710A5522AEAC64AE0C63B3D 30260928 ----a-w- C:\Users\test\Downloads\sp52658.exe 2015-04-12 19:34:40 D19C8CF627826F3D48064248E3FDA301 936880 ----a-w- C:\Users\test\Downloads\SaveAsPDF.exe 2015-04-12 19:34:40 A194868F31A3CA239B06AE289252F34D 63265480 ----a-w- C:\Users\test\Downloads\PowerPointViewer.exe 2015-04-12 19:34:40 6F23205AB078A892D117295C73B0F34E 34666508 ----a-w- C:\Users\test\Downloads\torbrowser-install-4.0.4_nl.exe 2015-04-12 19:34:40 5DE7F38DDF7BA23895D8849C244F8D2D 2293608 ----a-w- C:\Users\test\Downloads\VASCOSmartCardReaderPlugin.exe 2015-04-12 19:34:40 563B164F49F6A3FD88178B0266648A3D 1548384 ----a-w- C:\Users\test\Downloads\SkypeSetup (1).exe 2015-04-12 19:34:40 111AF32B58EDEF7FEF13DA364CA31BED 4835024 ----a-w- C:\Users\test\Downloads\spsetup118.exe 2015-04-12 19:34:39 F7AD51251232E04B2D7DB5D43C8EB437 67963216 ----a-w- C:\Users\test\Downloads\Nokia_PC_Suite_ALL.exe 2015-04-12 19:34:39 AA791E70BDA575E7E1FEA3BFE3698F0B 50277616 ----a-w- C:\Users\test\Downloads\NokiaSoftwareUpdaterSetup_NP.exe 2015-04-12 19:34:29 BA07172487AAED1C8A8C9A807F96F112 51553280 ----a-w- C:\Users\test\Downloads\Microsoft Toolkit.exe 2015-04-12 19:34:19 0FB6D382FA5FBF72D05FC2A4503B7DF2 10156344 ----a-w- C:\Users\test\Downloads\mbam-setup-1.70.0.1100.exe 2015-04-12 19:34:15 A8D27A70698974DAC8795E9E69A595D5 20816132 ----a-w- C:\Users\test\Downloads\K-Lite_Codec_Pack_920_Full.exe 2015-04-12 19:34:11 E7CDEFDAD8825F3D1392C6F434B809AF 296144 ----a-w- C:\Users\test\Downloads\install_jd_one.exe 2015-04-12 19:34:11 70095B78847AAB806023002D70E71058 896928 ----a-w- C:\Users\test\Downloads\JavaSetup7u17.exe 2015-04-12 19:10:22 0EFDC1550592DC0C4E73AFFB54B35C3E 2217984 ----a-w- C:\Users\test\Downloads\adwcleaner_4.201.exe 2015-04-12 18:57:55 F340F09E5124455FA81AB8EFE04DCCC3 16296 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\policytool.exe 2015-04-12 18:57:55 EF59DABB7C9789B9335841A595748C0B 16296 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\rmiregistry.exe 2015-04-12 18:57:55 E57ED773B6CB41DE8225A10AFE149510 15784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\jjs.exe 2015-04-12 18:57:55 E2E61790688574F5F058AD01145E0473 15784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\rmid.exe 2015-04-12 18:57:55 CE2F700CA51229054C9A03D96646DE51 51112 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssvagent.exe 2015-04-12 18:57:55 CBE5D74B4ECC80BF2C792C18CCEA92BF 15784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\java-rmi.exe 2015-04-12 18:57:55 C96C6041829212284EFB5A85B08B1536 16296 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\servertool.exe 2015-04-12 18:57:55 C731C96456335BDAA2F58220AE25A202 191400 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\javaw.exe 2015-04-12 18:57:55 C126BE266A4D76737EEDD0CFB436D7E3 15784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\keytool.exe 2015-04-12 18:57:55 B189CEE3C0CB5C9EABBF70329E0F4195 68520 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\javacpl.exe 2015-04-12 18:57:55 9DAEE38424615751379400964713D6D7 272296 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\javaws.exe 2015-04-12 18:57:55 9A97AB583FB5BD6FFFCE8C47E6DCCA62 30632 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\jabswitch.exe 2015-04-12 18:57:55 8C71D92983B9BBB5B8D823D8C0FDD129 15784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\klist.exe 2015-04-12 18:57:55 879578D2FAE8E10DBE30FD0B829313DE 15784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\ktab.exe 2015-04-12 18:57:55 6F4EB294ACF731771AFE3EF6F7EE812D 190888 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\java.exe 2015-04-12 18:57:55 5D5801D096F9F362F442673632013727 16296 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\tnameserv.exe 2015-04-12 18:57:55 5BF6CD8A5984AA5F2607364B5BEBBA11 16296 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\orbd.exe 2015-04-12 18:57:55 32F50E7E4D45A38E60EA7D6D701A08C9 159656 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\unpack200.exe 2015-04-12 18:57:55 30791C426723A4D76ADE3EF276F3F9FC 15784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\kinit.exe 2015-04-12 18:57:55 228AAF84B541C80BCFE7C1EE57502B61 15784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\pack200.exe 2015-04-12 18:57:55 113298AC181C026AB425E38CB7F963A3 76712 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2launcher.exe 2015-04-12 18:49:49 30F3E9624D57D7F4EADDE91E090D2D6D 550432 ----a-w- C:\Users\test\Downloads\PatchMyPC.exe 2015-04-12 18:16:50 E26D49197CA9E38BCC6033DE53F720BD 816128 ----a-w- C:\Windows\SysWOW64\calc.exe 2015-04-12 18:16:50 D82C445E3D484F31CD2638A4338E5FD9 933888 ----a-w- C:\Windows\System32\calc.exe 2015-04-12 18:16:16 F72D431081390B2329F6A7A924D9889A 392704 ----a-w- C:\Windows\SysWOW64\GWX\GWX.exe 2015-04-12 18:16:16 CAA865FD51B2FD48413D3BA2544AFF5C 658432 ----a-w- C:\Windows\System32\GWX\GWXConfigManager.exe 2015-04-12 18:16:16 BBB8B43090244B0F9F612F70AEFB3732 458752 ----a-w- C:\Windows\System32\GWX\GWX.exe 2015-04-12 18:16:16 A63DD015342F6F9D480AAEF61C9CB88D 393216 ----a-w- C:\Windows\System32\GWX\GWXUX.exe 2015-04-12 18:16:16 29038FF696BB007224872DA9645EA324 353048 ----a-w- C:\Windows\System32\GWX\GWXUXWorker.exe 2015-04-12 18:14:52 55E39907F34D14E0794DD17C915795E5 46456 ----a-w- C:\Windows\System32\LockScreenContentServer.exe 2015-04-12 18:14:44 C8B6FD0CE93013F606F2AA4BABF763B8 372408 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe 2015-04-12 18:14:44 69C0304BE8E4C58026A0D162AD04BF10 1154048 ----a-w- C:\Windows\System32\SkyDrive.exe 2015-04-12 18:14:44 2E3976C857D7230EC8D2B2276E688255 827392 ----a-w- C:\Windows\System32\spoolsv.exe 2015-04-12 18:14:43 EFC236C98B6FC47C05FC3F817CED574D 21696 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe 2015-04-12 18:14:43 3B7F9612439EA47151EC5EAB232C1C3F 1454080 ----a-w- C:\Windows\System32\VSSVC.exe 2015-04-12 18:14:42 7826082B93262AB6460E77B91C61EA30 128512 ----a-w- C:\Windows\splwow64.exe 2015-04-12 18:14:27 BF5F10811E8249075D48153E8766184D 35840 ----a-w- C:\Windows\System32\wuapp.exe 2015-04-12 18:14:27 A40A005B63E305A0509A69A604659944 133256 ----a-w- C:\Windows\System32\wuauclt.exe 2015-04-12 18:14:27 1DAD87D13FE06EF4ECD873A1DDF445E3 29696 ----a-w- C:\Windows\SysWOW64\wuapp.exe 2015-04-12 18:14:26 C10A66189DC8C090E7C84873EDCEBC88 2501368 ----a-w- C:\Windows\explorer.exe 2015-04-12 18:14:26 91E24273FCA076EA9E65DAFA98901225 2207488 ----a-w- C:\Windows\SysWOW64\explorer.exe 2015-04-12 18:13:53 17D815AD21D4325CD589E57A9582E311 70840 ----a-w- C:\Windows\System32\CompatTel\diagtrackrunner.exe 2015-04-12 09:18:40 E7C4C0A16C7004DB8285EAF8B16CDA67 11086368 ----a-r- C:\Users\test\AppData\Local\IM\Identities\{668ACAD5-1554-4AD3-B23C-B4755B08F50D}\Message Store\Attachments\MPC-HC.1.7.1.x64.exe 2015-04-12 09:18:40 DA595EDAA37D4F4CFF3E8C4C37710BE7 10273496 ----a-r- C:\Users\test\AppData\Local\IM\Identities\{668ACAD5-1554-4AD3-B23C-B4755B08F50D}\Message Store\Attachments\MPC-HC.1.7.1.x86.exe 2015-04-11 19:30:44 E8A1C695DDE33CD65B47D78602DA0220 399864 ----a-w- C:\Users\test\JDownloader\tools\Windows\kikin\kikin_installer.exe 2015-04-11 19:30:44 CB5D1AD8C3F3770F75AE59915025F212 12800 ----a-w- C:\Users\test\JDownloader\plugins\jdshutdown\windows\shutdown.exe 2015-04-11 19:30:44 52BCBC66FBBD96A34E44F02152369A36 204288 ----a-w- C:\Users\test\JDownloader\tools\Windows\unrarw32\unrar.exe 2015-04-11 19:30:19 E6D11BA458CD9146F6763259F9D59F97 218816 ----a-w- C:\Users\test\JDownloader\JDownloaderBETA.exe 2015-04-11 19:30:19 DC75715A9C20EC7336DA7BFA8D18251A 219264 ----a-w- C:\Users\test\JDownloader\JDownloaderPortable.exe 2015-04-11 19:30:19 776F36BFDEBC0F6D2DBE88AA5196B9DA 218816 ----a-w- C:\Users\test\JDownloader\JDownloaderD3D.exe 2015-04-11 19:30:19 5EF0842E24B018CE45EE73DCB505CFDE 343168 ----a-w- C:\Users\test\JDownloader\JDUninstall.exe 2015-04-11 19:30:19 5061F57926D36662E4B139D2282D79D0 214528 ----a-w- C:\Users\test\JDownloader\JDownloader.exe 2015-04-11 19:30:19 1A4AF1055C256611CEFD2FE3730EBCB6 646272 ----a-w- C:\Users\test\JDownloader\JDUpdate.exe 2015-04-11 19:30:19 06ED7467CC20894D6CC41B3E1D2DC11A 28077 ----a-w- C:\Users\test\JDownloader\.install4j\i4jdel.exe 2015-04-11 18:55:40 E4A9DBB0050C114DD3C96EADAEF545C7 40776192 ----a-w- C:\Users\test\Documents\Microsoft Toolkit.exe 2015-04-11 18:55:36 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:55:36 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:55:06 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:55:06 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:55:05 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\PACOMP.EXE 2015-04-11 18:55:05 E38DAE001F821BCE96E7D0B583ECCC87 485375 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14b\yDGpatch.exe 2015-04-11 18:55:05 BC248644F42417FE975DD861AEF0A0E1 149822 ----a-w- C:\Users\test\Documents\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\BackUp-TT_XP.exe 2015-04-11 18:55:05 B0ABB5A3E0EB6F24FD809E16B98DF62D 56832 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14a\gzip.exe 2015-04-11 18:55:05 65A82BE5B3DEA0AEA775E408184FD882 169472 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14a\patchydg.exe 2015-04-11 18:55:05 48AED6DED0ECCC7CBC65A7A7E2FF6746 149766 ----a-w- C:\Users\test\Documents\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\BackUp-TT_Vista.exe 2015-04-11 18:55:05 1BFCAC6904754E7C3D8C761C4D9C33A7 47616 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14c\Compact.exe 2015-04-11 18:55:05 1BFCAC6904754E7C3D8C761C4D9C33A7 47616 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14a\Compact.exe 2015-04-11 18:55:05 1194A04AEBBB92EACAB4F4581D141086 47616 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14c\Extract.exe 2015-04-11 18:55:05 1194A04AEBBB92EACAB4F4581D141086 47616 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14a\Extract.exe 2015-04-11 18:55:05 0ADB895C8DA9252E5901D6C8C6C797FD 1084928 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14c\yDGpatch.exe 2015-04-11 18:55:04 EFC7E49BC4DC260FA427902EEC505BC4 735481 ----a-w- C:\Users\test\Documents\WinRAR Password Remover\Setup.exe 2015-04-11 18:55:04 B4489CE40DA3DB1E20BF5CB4873481E3 1409024 ----a-w- C:\Users\test\Documents\WinRAR Password Remover\Crack\urpwdr11rc16.exe 2015-04-11 18:55:03 5457FFED446971C544758A9B5ED3158A 1793975 ----a-w- C:\Users\test\Documents\WinRAR 5.01 Final Pre-Activate by sHaRewbb.com\sHaRewbb_wrar501.exe 2015-04-11 18:55:03 338AE4398BBF980120B6137A48D92D74 1996056 ----a-w- C:\Users\test\Documents\WinRAR 5.01 Final Pre-Activate by sHaRewbb.com\sHaRewbb_winrar-x64-501.exe 2015-04-11 18:54:59 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\TomTom NAVC 9430 Gepatcht\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:59 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\TomTom NAVC 9430 Gepatcht\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:54 0C847783AB5710BDD87048288A1173CB 846336 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.702__DSA_(Go)\ephem\!SiRFStarIII.exe 2015-04-11 18:54:53 30C68B276847DBBDD5EF2FA3026B981E 846336 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.702__DSA_(Go)\ephem\!GlobalLocate.exe 2015-04-11 18:54:51 E0249ABC44D6D53A31CD22C51DC9BD24 56832 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.702__DSA_(Go)\DSA-EMulation.exe 2015-04-11 18:54:48 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700_DSA_(GO)\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:48 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700_DSA_(GO)\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:46 E0249ABC44D6D53A31CD22C51DC9BD24 56832 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700_DSA_(GO)\DSA-EMulation.exe 2015-04-11 18:54:43 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:43 46CAD61796F35692A3AE71B7D00660E9 846848 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\ephem\!SiRFStarIII_TT.exe 2015-04-11 18:54:43 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:42 C19FCE26A56A92711E5F8559C16390CF 846336 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\ephem\!SiRFStarIII_HTC.exe 2015-04-11 18:54:42 BF4A9F3D0DC5BCB54FFE36980FE412F9 846848 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\ephem\!GlobalLocate-TT.exe 2015-04-11 18:54:42 30C68B276847DBBDD5EF2FA3026B981E 846336 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\ephem\!GlobalLocate-GLLTO.exe 2015-04-11 18:54:42 0C847783AB5710BDD87048288A1173CB 846336 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\ephem\!SiRFStarIII_MIO.exe 2015-04-11 18:54:40 DEFA5216825B8D1C1C6F3661FB11821C 56320 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\BackUp-TT.exe 2015-04-11 18:54:40 D77325C2D61018136BA2E2216437811C 855040 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\PACOMP.EXE 2015-04-11 18:54:40 B71F8ADC9001E026D93FA8494BAD98C5 331776 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\GetMy-CFG.exe 2015-04-11 18:54:40 5E978EC5F615396EAA1B14334197B68E 39424 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_Truck_9.700\PADATE.EXE 2015-04-11 18:54:37 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:37 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:35 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\PACOMP.EXE 2015-04-11 18:54:35 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\BackUp-TT_Vista.exe 2015-04-11 18:54:35 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\BackUp-TT_W7.exe 2015-04-11 18:54:35 7B3AEA2F83836893FED55BFA6DEE610F 151190 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\_Setup.exe 2015-04-11 18:54:35 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\BackUp-TT_XP.exe 2015-04-11 18:54:35 0E5D1BBCF2BAD14B28429855986343BF 404334 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\GetMy-CFG.exe 2015-04-11 18:54:32 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\ephem 1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:31 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\ephem 1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:30 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\PACOMP.EXE 2015-04-11 18:54:30 94BBAEFA00CF353991B844BD3F356FD0 151094 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\_Setup.exe 2015-04-11 18:54:30 73D6939876BC6CEBAA75F79B08FE0F82 404326 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\GetMy-CFG.exe 2015-04-11 18:54:30 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\BackUp-TT_XP.exe 2015-04-11 18:54:29 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\BackUp-TT_Vista.exe 2015-04-11 18:54:29 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\BackUp-TT_W7.exe 2015-04-11 18:54:26 BF4A9F3D0DC5BCB54FFE36980FE412F9 846848 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465_DSA_for_32Mbram\NC_9.465_DSA_for_32Mb ram\ephem\GlobalLocate-TT.exe 2015-04-11 18:54:26 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465_DSA_for_32Mbram\NC_9.465_DSA_for_32Mb ram\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:26 46CAD61796F35692A3AE71B7D00660E9 846848 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465_DSA_for_32Mbram\NC_9.465_DSA_for_32Mb ram\ephem\SiRFStarIII_TT.exe 2015-04-11 18:54:26 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465_DSA_for_32Mbram\NC_9.465_DSA_for_32Mb ram\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:24 E0249ABC44D6D53A31CD22C51DC9BD24 56832 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465_DSA_for_32Mbram\NC_9.465_DSA_for_32Mb ram\DSA-EMulation.exe 2015-04-11 18:54:24 B71F8ADC9001E026D93FA8494BAD98C5 331776 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465_DSA_for_32Mbram\NC_9.465_DSA_for_32Mb ram\GetMy-CFG.exe 2015-04-11 18:54:21 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465.1-DSA 64Mbram\NC_9.465.1-DSA 64Mb\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:21 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465.1-DSA 64Mbram\NC_9.465.1-DSA 64Mb\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:20 BF4A9F3D0DC5BCB54FFE36980FE412F9 846848 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465.1-DSA 64Mbram\NC_9.465.1-DSA 64Mb\ephem\GlobalLocate-TT.exe 2015-04-11 18:54:20 46CAD61796F35692A3AE71B7D00660E9 846848 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465.1-DSA 64Mbram\NC_9.465.1-DSA 64Mb\ephem\SiRFStarIII_TT.exe 2015-04-11 18:54:18 E0249ABC44D6D53A31CD22C51DC9BD24 56832 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465.1-DSA 64Mbram\NC_9.465.1-DSA 64Mb\DSA-EMulation.exe 2015-04-11 18:54:18 B71F8ADC9001E026D93FA8494BAD98C5 331776 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9.465.1-DSA 64Mbram\NC_9.465.1-DSA 64Mb\GetMy-CFG.exe 2015-04-11 18:54:14 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_8842_Full_Complete_Install_yDGpatch\ephem\GlobalLocate.exe 2015-04-11 18:54:14 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_8842_Full_Complete_Install_yDGpatch\ephem\SiRFStarIII.exe 2015-04-11 18:54:13 D77325C2D61018136BA2E2216437811C 855040 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_8842_Full_Complete_Install_yDGpatch\PACOMP.EXE 2015-04-11 18:54:13 C3604AF225F52819D31BD6EDADD86AF6 1135198 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_8842_Full_Complete_Install_yDGpatch\EasyDCT-II.exe 2015-04-11 18:54:13 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_8842_Full_Complete_Install_yDGpatch\BackUp-TT_W7.exe 2015-04-11 18:54:13 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_8842_Full_Complete_Install_yDGpatch\BackUp-TT_XP.exe 2015-04-11 18:54:13 238ADCD8028D239E3C14F3B25E327F9D 404350 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_8842_Full_Complete_Install_yDGpatch\GetMy-CFG.exe 2015-04-11 18:54:12 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_8842_Full_Complete_Install_yDGpatch\BackUp-TT_Vista.exe 2015-04-11 18:54:09 BF4A9F3D0DC5BCB54FFE36980FE412F9 846848 ----a-w- C:\Users\test\Documents\TTom Navcores\NC9.510_DSA_For 32Mb_ram\ephem\GlobalLocate-TT.exe 2015-04-11 18:54:09 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\NC9.510_DSA_For 32Mb_ram\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:09 46CAD61796F35692A3AE71B7D00660E9 846848 ----a-w- C:\Users\test\Documents\TTom Navcores\NC9.510_DSA_For 32Mb_ram\ephem\SiRFStarIII_TT.exe 2015-04-11 18:54:09 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\NC9.510_DSA_For 32Mb_ram\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:07 E0249ABC44D6D53A31CD22C51DC9BD24 56832 ----a-w- C:\Users\test\Documents\TTom Navcores\NC9.510_DSA_For 32Mb_ram\DSA-EMulation.exe 2015-04-11 18:54:07 B71F8ADC9001E026D93FA8494BAD98C5 331776 ----a-w- C:\Users\test\Documents\TTom Navcores\NC9.510_DSA_For 32Mb_ram\GetMy-CFG.exe 2015-04-11 18:54:05 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore_SE_v8.395 Truck\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:05 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore_SE_v8.395 Truck\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:54:04 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore_SE_v8.395 Truck\PACOMP.EXE 2015-04-11 18:54:04 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore_SE_v8.395 Truck\BackUp-TT_W7.exe 2015-04-11 18:54:04 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore_SE_v8.395 Truck\BackUp-TT_XP.exe 2015-04-11 18:54:03 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore_SE_v8.395 Truck\BackUp-TT_Vista.exe 2015-04-11 18:54:01 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\navcore_8.010.9369\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:54:01 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\navcore_8.010.9369\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:58 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore 8.398 Truck\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:58 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore 8.398 Truck\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:57 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore 8.398 Truck\PACOMP.EXE 2015-04-11 18:53:57 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore 8.398 Truck\BackUp-TT_Vista.exe 2015-04-11 18:53:57 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore 8.398 Truck\BackUp-TT_W7.exe 2015-04-11 18:53:57 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore 8.398 Truck\BackUp-TT_XP.exe 2015-04-11 18:53:57 4CF0A7F21C87DF3D951B84CB87EBAAA1 1012926 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore 8.398 Truck\EasyDCT-II.exe 2015-04-11 18:53:54 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 ORIG\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:54 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 ORIG\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:53 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 ORIG\PACOMP.EXE 2015-04-11 18:53:52 BC248644F42417FE975DD861AEF0A0E1 149822 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 ORIG\BackUp-TT_XP.exe 2015-04-11 18:53:52 48AED6DED0ECCC7CBC65A7A7E2FF6746 149766 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 ORIG\BackUp-TT_Vista.exe 2015-04-11 18:53:49 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:49 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:49 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:49 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:48 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\PACOMP.EXE 2015-04-11 18:53:48 BC248644F42417FE975DD861AEF0A0E1 149822 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\BackUp-TT_XP.exe 2015-04-11 18:53:48 7B3AEA2F83836893FED55BFA6DEE610F 151190 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\_Setup.exe 2015-04-11 18:53:48 48AED6DED0ECCC7CBC65A7A7E2FF6746 149766 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\BackUp-TT_Vista.exe 2015-04-11 18:53:44 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v9.051.5038_Full_Complete_Install (luxe)\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:44 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v9.051.5038_Full_Complete_Install (luxe)\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:42 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v9.051.5038_Full_Complete_Install (luxe)\PACOMP.EXE 2015-04-11 18:53:42 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v9.051.5038_Full_Complete_Install (luxe)\BackUp-TT_Vista.exe 2015-04-11 18:53:42 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v9.051.5038_Full_Complete_Install (luxe)\BackUp-TT_W7.exe 2015-04-11 18:53:42 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v9.051.5038_Full_Complete_Install (luxe)\BackUp-TT_XP.exe 2015-04-11 18:53:40 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:40 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:38 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\PACOMP.EXE 2015-04-11 18:53:38 BC248644F42417FE975DD861AEF0A0E1 149822 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\BackUp-TT_XP.exe 2015-04-11 18:53:38 48AED6DED0ECCC7CBC65A7A7E2FF6746 149766 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\BackUp-TT_Vista.exe 2015-04-11 18:53:36 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.544_Full_Complete_Install\PACOMP.EXE 2015-04-11 18:53:36 E30F0F69A3462D0AAA2254F96C7ACC26 150126 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.544_Full_Complete_Install\_Setup.exe 2015-04-11 18:53:36 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.544_Full_Complete_Install\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:36 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.544_Full_Complete_Install\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:35 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.544_Full_Complete_Install\BackUp-TT_Vista.exe 2015-04-11 18:53:35 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.544_Full_Complete_Install\BackUp-TT_W7.exe 2015-04-11 18:53:35 820E8724DDE8EE501BA105765A12ED63 149558 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.544_Full_Complete_Install\GetMy-CFG.exe 2015-04-11 18:53:35 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.544_Full_Complete_Install\BackUp-TT_XP.exe 2015-04-11 18:53:33 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.395.1913_Full_Complete_Install\PACOMP.EXE 2015-04-11 18:53:33 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.395.1913_Full_Complete_Install\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:33 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.395.1913_Full_Complete_Install\BackUp-TT_Vista.exe 2015-04-11 18:53:33 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.395.1913_Full_Complete_Install\BackUp-TT_W7.exe 2015-04-11 18:53:33 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.395.1913_Full_Complete_Install\BackUp-TT_XP.exe 2015-04-11 18:53:33 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.395.1913_Full_Complete_Install\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:31 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.351.9982_Full_Complete_Install\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:31 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.351.9982_Full_Complete_Install\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:29 998C2626A275C4EE1D59C2B3D0EDE028 339456 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.351.9982_Full_Complete_Install\PkZip.exe 2015-04-11 18:53:29 4DD2285F613DDAF5672B2878C531169F 149774 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.351.9982_Full_Complete_Install\BackUp-TT_Vista.exe 2015-04-11 18:53:29 4157C603422D084FF1040CED29C6B64A 149822 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.351.9982_Full_Complete_Install\BackUp-TT_WinXP.exe 2015-04-11 18:53:27 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:27 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:26 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\PACOMP.EXE 2015-04-11 18:53:26 C2F0D5F0E38A520355BCD86854C0F205 150654 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\_Setup.exe 2015-04-11 18:53:26 73D6939876BC6CEBAA75F79B08FE0F82 404326 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\GetMy-CFG.exe 2015-04-11 18:53:25 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\BackUp-TT_Vista.exe 2015-04-11 18:53:25 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\BackUp-TT_W7.exe 2015-04-11 18:53:25 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\BackUp-TT_XP.exe 2015-04-11 18:53:23 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.560.348422 Full Complete Install\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:23 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.560.348422 Full Complete Install\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:22 998C2626A275C4EE1D59C2B3D0EDE028 339456 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.560.348422 Full Complete Install\PkZip.exe 2015-04-11 18:53:22 4DD2285F613DDAF5672B2878C531169F 149774 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.560.348422 Full Complete Install\BackUp-TT_Vista.exe 2015-04-11 18:53:22 4157C603422D084FF1040CED29C6B64A 149822 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.560.348422 Full Complete Install\BackUp-TT_WinXP.exe 2015-04-11 18:53:20 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.417 Full 64RAM Special\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:20 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.417 Full 64RAM Special\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:15 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.417 Full 32RAM Special\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:15 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.417 Full 32RAM Special\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:14 4DD2285F613DDAF5672B2878C531169F 149774 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.417 Full 32RAM Special\BackUp-TT_Vista.exe 2015-04-11 18:53:14 4157C603422D084FF1040CED29C6B64A 149822 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.417 Full 32RAM Special\BackUp-TT_WinXP.exe 2015-04-11 18:53:12 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.041 Full Complete Install\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:53:12 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.041 Full Complete Install\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:53:09 998C2626A275C4EE1D59C2B3D0EDE028 339456 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.041 Full Complete Install\PkZip.exe 2015-04-11 18:53:08 4DD2285F613DDAF5672B2878C531169F 149774 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.041 Full Complete Install\BackUp-TT_Vista.exe 2015-04-11 18:53:08 4157C603422D084FF1040CED29C6B64A 149822 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.041 Full Complete Install\BackUp-TT_WinXP.exe 2015-04-11 18:49:31 F7F6EEBEA682E6153C4EE7E3E3617295 147104 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyDCT_Maker-II_v8.31_(2010-11-11)\unrar-x32.exe 2015-04-11 18:49:31 ED0B7D1343B7BE0C258FCEAD5DCC0414 220160 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyDCT_Maker-II_v8.31_(2010-11-11)\unrar-x64.exe 2015-04-11 18:49:31 B0ABB5A3E0EB6F24FD809E16B98DF62D 56832 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\ttsystem_Patcher\gzip.exe 2015-04-11 18:49:31 79CD246692A32C23FEE8F30B63B1D76E 110080 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\FastActivate_20.11.2012\RunMeForCode\RunMeforCode.exe 2015-04-11 18:49:31 6E72E9F35D160553CE59AAAC841BF802 426496 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\TT_Asperin_v0.7_no_meta_file_need_26032010\TT Asperin v0.7.exe 2015-04-11 18:49:31 65A82BE5B3DEA0AEA775E408184FD882 169472 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\ttsystem_Patcher\patchydg.exe 2015-04-11 18:49:31 565872A244FC5A1AB899DC0C60A70A8B 62464 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\Progs\tt8_keygen2.exe 2015-04-11 18:49:31 565872A244FC5A1AB899DC0C60A70A8B 62464 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyDCT_Maker-II_v8.31_(2010-11-11)\tt8_keygen2.exe 2015-04-11 18:49:31 4CF0A7F21C87DF3D951B84CB87EBAAA1 1012926 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyDCT_Maker-II_v8.31_(2010-11-11)\EasyDCT-II.exe 2015-04-11 18:49:31 479543DBF7897183BFF6C45F6C80324D 127488 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\TT_Asperin_v0.7_no_meta_file_need_26032010\TT.exe 2015-04-11 18:49:31 36619C263831CDEEC9E005879C432A1B 64000 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\Progs\keygen6.exe 2015-04-11 18:49:31 1C4BA59B1D5478AB9DB92716339B646E 82944 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\Progs\tt8_mapcheck2.exe 2015-04-11 18:49:31 1BFCAC6904754E7C3D8C761C4D9C33A7 47616 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\ttsystem_Patcher\Compact.exe 2015-04-11 18:49:31 17D218E0DA12476C8519887F75DC664C 1158144 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\FastActivate_20.11.2012\FastActivate.exe 2015-04-11 18:49:31 1194A04AEBBB92EACAB4F4581D141086 47616 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\ttsystem_Patcher\Extract.exe 2015-04-11 18:49:31 0D477F4EF9FE6CD85752DEBBF5A84A78 67072 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\Progs\tt7_metacheck.exe 2015-04-11 18:49:31 09CBB8E7085004D7D5B76B8C59A497A6 1909248 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\TomTom Keygen 2009 v4.1A\Tomtom3.exe 2015-04-11 18:49:30 E59139BF9CCB87EA1D7BEE8A63364A27 2981888 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyActivator6.10.exe 2015-04-11 18:49:30 417D8BE9D0371B183116BC666BAB0639 3276800 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyActivator6.12\EasyActivator6.12.exe 2015-04-11 18:49:30 0D1AEC9343F5416E9E53C8E574BED9F1 362496 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\AutoActivate_v1.4_02.10.2010\AutoActivate.exe 2015-04-11 18:49:26 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\ephem1\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:49:26 B506E0EF62F4B5D4ABCA44D4A00CF1F6 149494 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\ephem\_GlobalLocate-QuickGPSFix.exe 2015-04-11 18:49:26 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\ephem1\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:49:26 389889580D0800C8AAF9A4F10B14635B 149502 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\ephem\_SiRFStarIII-QuickGPSFix.exe 2015-04-11 18:49:25 EF63AEFAD2C9FA407F7342FA1A4585E3 879104 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\PACOMP.EXE 2015-04-11 18:49:25 A87043650538F355397EF9A65FDD01D6 149750 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\BackUp-TT_Vista.exe 2015-04-11 18:49:25 94BBAEFA00CF353991B844BD3F356FD0 151094 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\_Setup.exe 2015-04-11 18:49:25 8224748D4180FDBB808CD93FD4DBD063 149750 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\BackUp-TT_W7.exe 2015-04-11 18:49:25 73D6939876BC6CEBAA75F79B08FE0F82 404326 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\GetMy-CFG.exe 2015-04-11 18:49:25 5A6C628FFD88D5F804AB93D1E9AB9B33 149806 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\BackUp-TT_XP.exe === C: other files == 2015-04-12 18:57:56 0A513FB75ADF2580D0F0D55D0A245C4F 14130 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_40\lib\deploy\ffjcext.zip 2015-04-12 18:16:16 6D3A2565E01B3E4B0F1BEDB0D4B00B3F 1113920 ----a-w- C:\Windows\System32\drivers\ndis.sys 2015-04-12 18:14:45 7EC9376D245D734791AD46738712E7D8 473408 ----a-w- C:\Windows\System32\drivers\netio.sys 2015-04-12 18:14:44 F6ECFD6128A16A4851CFE98D4E01B011 551232 ----a-w- C:\Windows\System32\drivers\vhdmp.sys 2015-04-12 18:14:44 DC64B02CD5E21D16215AC20D393D5CE4 153920 ----a-w- C:\Windows\System32\drivers\dumpsd.sys 2015-04-12 18:14:44 B41F3E5780D97CFD44A717153AD9CF2C 80896 ----a-w- C:\Windows\System32\drivers\wanarp.sys 2015-04-12 18:14:44 715ABA3DD164D06457A2A3C92F6EA9D5 136512 ----a-w- C:\Windows\System32\drivers\wfplwfs.sys 2015-04-12 18:14:44 49EE0AE9E5B64FFBBD06D55C4984B598 108544 ----a-w- C:\Windows\System32\drivers\i8042prt.sys 2015-04-12 18:14:44 389C998C64319CD97625B0550E52ECFA 58176 ----a-w- C:\Windows\System32\drivers\dam.sys 2015-04-12 18:14:44 27FF998504DEF8D29A771FBB41707C5E 238912 ----a-w- C:\Windows\System32\drivers\sdbus.sys 2015-04-12 18:14:44 1BD3022FD6E450B00DE560265638FD2A 112640 ----a-w- C:\Windows\System32\drivers\rasl2tp.sys 2015-04-12 18:14:43 ED54A75050211DC77F9B98C41E026858 86336 ----a-w- C:\Windows\System32\drivers\pdc.sys 2015-04-12 18:14:43 DC1D9F692C2AD84C214584C28501C1F7 24576 ----a-w- C:\Windows\System32\drivers\ndistapi.sys 2015-04-12 18:14:43 AD7F69237480F6CB6294EFD9EE4CD04C 428864 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS 2015-04-12 18:14:43 8CD840A062F6BDF41DDE3ACB96164B72 32256 ----a-w- C:\Windows\System32\drivers\kbdhid.sys 2015-04-12 18:14:43 7AA01AB1C110916825E6E1389F1B9AF2 39744 ----a-w- C:\Windows\System32\drivers\intelpep.sys 2015-04-12 18:14:43 5FCBAB60598AE119E02B4C27DE6B99EA 30208 ----a-w- C:\Windows\System32\drivers\mouhid.sys 2015-04-12 18:14:43 5917AFE4A3F695A54B99C1849C8207FE 59712 ----a-w- C:\Windows\System32\drivers\kbdclass.sys 2015-04-12 18:14:43 3EE5097945A7F680E320953271EB2D4F 96768 ----a-w- C:\Windows\System32\drivers\agilevpn.sys 2015-04-12 18:14:43 3C2DF97A21A9BBE6355B0A51F288EFFF 2485056 ----a-w- C:\Windows\System32\drivers\tcpip.sys 2015-04-12 18:14:43 148195AE95D9BC7375A08846439FDAC1 26112 ----a-w- C:\Windows\System32\drivers\sermouse.sys 2015-04-12 18:14:43 0BBE2FA30BAD58C9ADC01E4F84A3D2A1 72192 ----a-w- C:\Windows\System32\drivers\ndproxy.sys 2015-04-12 18:14:43 08374E4E5B8914DE6067CBA99F61E930 51008 ----a-w- C:\Windows\System32\drivers\mouclass.sys 2015-04-12 09:18:58 21FECF81CD6224567ECEBF0097477599 39980346 ----a-r- C:\Users\test\AppData\Local\IM\Identities\{668ACAD5-1554-4AD3-B23C-B4755B08F50D}\Message Store\Attachments\{4AB3280F-77DC-4195-A584-624904E3E4D6}\Microsoft Toolkit.zip 2015-04-12 09:18:57 21FECF81CD6224567ECEBF0097477599 39980346 ----a-r- C:\Users\test\AppData\Local\IM\Identities\{668ACAD5-1554-4AD3-B23C-B4755B08F50D}\Message Store\Attachments\{24519D15-41F9-4BD1-A3AC-593469447C24}\Microsoft Toolkit.zip 2015-04-12 09:18:40 21FECF81CD6224567ECEBF0097477599 39980346 ----a-r- C:\Users\test\AppData\Local\IM\Identities\{668ACAD5-1554-4AD3-B23C-B4755B08F50D}\Message Store\Attachments\Microsoft Toolkit.zip 2015-04-11 19:30:44 BB17C4C0063E85A4756EB0D9E2DC357F 70193 ----a-w- C:\Users\test\JDownloader\tmp\update.zip 2015-04-11 19:30:44 8A60A14AA845102D0D3C681077FC48AD 322940 ----a-w- C:\Users\test\JDownloader\tools\flashgot.xpi 2015-04-11 19:30:19 C6BF0C3E8805C22578BF2273FC971F1D 31040 ----a-w- C:\Users\test\JDownloader\backup\database.zip 2015-04-11 19:30:19 7F32396A4CD6919244D314BE574E0809 65 ----a-w- C:\Users\test\JDownloader\windows_createlog.bat 2015-04-11 19:30:19 4E992439DAB17AFB7B684F1AD7958FC9 15904 ----a-w- C:\Users\test\JDownloader\backup\database_1369125044245.zip 2015-04-11 19:30:19 40BE927F5CE407EFF91EF302911AA4EE 66 ----a-w- C:\Users\test\JDownloader\windows_restore.bat 2015-04-11 18:55:05 7BEFB0A0534413D1712D3BBC3F75818A 3197 ----a-w- C:\Users\test\Documents\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\!ReadMe\TMC-Support.zip 2015-04-11 18:55:05 0A189411B273AD83AE491118CDD45216 1175 ----a-w- C:\Users\test\Documents\yDGpatch\v1.2.16.14a\RunMe.bat 2015-04-11 18:54:35 1F868078542EC9375CFA965C79645977 361093 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9101_Full_Complete_Install_SE\!ReadMe\RDS-TMCpro.zip 2015-04-11 18:54:30 08D08C45CD941F2C967982FD3E694A5B 344023 ----a-w- C:\Users\test\Documents\TTom Navcores\NC_9026_Full_Complete_Install_SE\!ReadMe\TMC-TMCPro.zip 2015-04-11 18:54:04 08D08C45CD941F2C967982FD3E694A5B 344023 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore_SE_v8.395 Truck\!ReadMe\TMC-TMCPro.zip 2015-04-11 18:53:57 08D08C45CD941F2C967982FD3E694A5B 344023 ----a-w- C:\Users\test\Documents\TTom Navcores\Navcore 8.398 Truck\!ReadMe\TMC-TMCPro.zip 2015-04-11 18:53:53 7BEFB0A0534413D1712D3BBC3F75818A 3197 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 ORIG\!ReadMe\TMC-Support.zip 2015-04-11 18:53:48 7BEFB0A0534413D1712D3BBC3F75818A 3197 ----a-w- C:\Users\test\Documents\TTom Navcores\Navc 9401 GEPATCHT\!ReadMe\TMC-Support.zip 2015-04-11 18:53:42 08D08C45CD941F2C967982FD3E694A5B 344023 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v9.051.5038_Full_Complete_Install (luxe)\!ReadMe\TMC-TMCPro.zip 2015-04-11 18:53:39 7BEFB0A0534413D1712D3BBC3F75818A 3197 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.562.4382_Full_Complete_Install.zip\!ReadMe\TMC-Support.zip 2015-04-11 18:53:33 08D08C45CD941F2C967982FD3E694A5B 344023 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.395.1913_Full_Complete_Install\!ReadMe\TMC-TMCPro.zip 2015-04-11 18:53:30 93B38A814F57974C5AE185120C3B1B0B 621 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_v8.351.9982_Full_Complete_Install\!ReadMe\_switchfiles.zip 2015-04-11 18:53:26 08D08C45CD941F2C967982FD3E694A5B 344023 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore_SE_9.051.5038\!ReadMe\TMC-TMCPro.zip 2015-04-11 18:53:20 93B38A814F57974C5AE185120C3B1B0B 621 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.417 Full 64RAM Special\!ReadMe\_switchfiles.zip 2015-04-11 18:53:14 93B38A814F57974C5AE185120C3B1B0B 621 ----a-w- C:\Users\test\Documents\TTom Navcores\!NavCore SE v8.417 Full 32RAM Special\!ReadMe\_switchfiles.zip 2015-04-11 18:49:31 E8A0CE9D184A1BC32AA651FD5736B514 184163 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\In_Case_of_Emergency.zip 2015-04-11 18:49:31 B213EDE31D0653150D9C19EC459695B1 42 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\TT_Asperin_v0.7_no_meta_file_need_26032010\run.bat 2015-04-11 18:49:31 4997E71A70DCFB08DD337AFB1DBE73DD 36 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\TomTom Keygen 2009 v4.1A\Register MSINET.OCX.bat 2015-04-11 18:49:31 0A189411B273AD83AE491118CDD45216 1175 ----a-w- C:\Users\test\Documents\TTom Activatie Tools\EasyUseTools_v2.1_+_meta_25-2-10\Easyusetools\ttsystem_Patcher\RunMe.bat 2015-04-11 18:49:25 08D08C45CD941F2C967982FD3E694A5B 344023 ----a-w- C:\Users\test\Documents\NC_8562_Full_Complete_Install_SE\!ReadMe\TMC-TMCPro.zip ======== System Restore Points ======== RP16: 11/04/2015 22:14:15 - Gepland controlepunt RP17: 12/04/2015 22:13:09 - Herstelpunt 1 ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-116800127-559303469-1812208031-1019\Software\Microsoft\Windows\CurrentVersion\Run] "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe MSRun" "BDRegion"="C:\Program Files (x86)\Cyberlink\Shared files\brs.exe" "Easybits Recovery"="C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe" "HP CoolSense"="C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey" "HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" "HPOSD"="C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" "HPQuickWebProxy"="C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" "NBAgent"="C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe /WinStart" "RemoteControl10"="C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" "BrMfcWnd"="C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN" "ControlCenter3"="C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun" "BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices" "AVG_UI"="C:\Program Files (x86)\AVG\AVG2015\avgui.exe /TRAYONLY" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Logitech Download Assistant"="C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch" "SetDefault"="C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe" "SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe" "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " ==== Task Scheduler Jobs ====================== C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a-------- C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [12/04/2015 20:56] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [14/05/2013 16:26] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [14/05/2013 16:26] C:\WINDOWS\tasks\HPCeeScheduleForFERNAND-HP$.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [15/07/2011 05:43] C:\WINDOWS\tasks\HPCeeScheduleForFernand.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [15/07/2011 05:43] C:\WINDOWS\tasks\HRWOUO.job --a-------- C:\Users\Fernand\AppData\Roaming\HRWOUO.exe [] ==== Other Scheduled Tasks ====================== "C:\WINDOWS\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe] "C:\WINDOWS\SysNative\tasks\Adobe Flash Player Updater" [C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\WINDOWS\SysNative\tasks\AutoKMS" [C:\WINDOWS\AutoKMS\AutoKMS.exe] "C:\WINDOWS\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\WINDOWS\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\BrowserChoice\browserchoice.exe] "C:\WINDOWS\SysNative\tasks\Driver Booster SkipUAC (Fernand)" [C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\HPCeeScheduleForFernand" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe] "C:\WINDOWS\SysNative\tasks\HPCeeScheduleForFERNAND-HP$" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe] "C:\WINDOWS\SysNative\tasks\HRWOUO" [C:\Users\Fernand\AppData\Roaming\HRWOUO.exe] "C:\WINDOWS\SysNative\tasks\MirageAgent" [C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe] "C:\WINDOWS\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\WINDOWS\SysNative\tasks\{D812853D-82F4-43A1-8882-B190F7A93411}" [C:\Program Files (x86)\Skype\Phone\Skype.exe] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe] "C:\WINDOWS\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Chromium Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions debkinhcgejcbfgjiaalomcmkedjmiaa - C:\Program Files (x86)\HP SimplePass 2012\tschrome.crx[25/08/2011 13:41] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Unknown Url="Not_Found" {D944BB61-2E34-4DBF-A683-47E505C587DC} Unknown Url="Not_Found" ==== Reset Google Chrome ====================== Nothing found to reset ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-116800127-559303469-1812208031-1019\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully HKEY_USERS\S-1-5-21-116800127-559303469-1812208031-1019\Software\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\AVG 2015.lnk - C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\Users\Public\Desktop\Brother Utilities.lnk - C:\Program Files (x86)\Brother\BrLauncher\BrLauncher.exe C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe C:\Users\Public\Desktop\CPUID CPU-Z G1.lnk - C:\Program Files\CPUID\CPU-Z G1\cpuz.exe C:\Users\Public\Desktop\CyberLink PowerDVD 10.lnk - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe C:\Users\Public\Desktop\FastStone Image Viewer.lnk - C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe C:\Users\Public\Desktop\Free YouTube Download.lnk - C:\Program Files (x86)\DVDVideoSoft\Free YouTube Download\FreeYTVDownloader.exe C:\Users\Public\Desktop\Freemake Video Converter.lnk - C:\Program Files (x86)\Freemake\Freemake Video Converter\FreemakeVideoConverter.exe C:\Users\Public\Desktop\HP Support Assistant.lnk - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe C:\Users\Public\Desktop\IncrediMail.lnk - C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\Public\Desktop\Nero Burning ROM 10.lnk - C:\Windows\Installer\{7A5D731D-B4B3-490E-B339-75685712BAAB}\ScBurningROMStartM_7533AE23D677474387D2A66427FA7052.exe C:\Users\Public\Desktop\Nero Vision 10.lnk - C:\Windows\Installer\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}\NewShortcut1_28CF345AD4354131AA47B77D4165D813.exe C:\Users\Public\Desktop\Skype.lnk - C:\WINDOWS\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe C:\Users\Public\Desktop\Speccy.lnk - C:\Program Files\Speccy\Speccy64.exe ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail.lnk - C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG\AVG 2015.lnk - C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\More Games.lnk - C:\Program Files (x86)\IncrediMail\Bin\IncrediGamesStart.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail\IncrediMail Gallery.lnk - C:\Program Files (x86)\IncrediMail\Bin\IncrediGalleryStart.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail\IncrediMail.lnk - C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail\Letter Creator.lnk - C:\Program Files (x86)\IncrediMail\Bin\ImLc.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail\Photo Animation Creator.lnk - C:\Program Files (x86)\Photo Notifier and Animation Creator\Application\Bin\pnac.exe /animationcreator C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail\Photo Notifier Creator.lnk - C:\Program Files (x86)\Photo Notifier and Animation Creator\Application\Bin\pnac.exe /notifiercreator C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail\Uninstall IncrediMail.lnk - C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe /uninstallProduct /addon:incredimail C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_40\bin\javacpl.exe -tab about C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk - C:\Program Files (x86)\Java\jre1.8.0_40\bin\javacpl.exe -tab update C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_40\bin\javacpl.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware Notifications.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Verwijder Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype voor bureaublad.lnk - C:\Program Files (x86)\Skype\Phone\Skype.exe ==== Uninstall List x64 ====================== AbiWord 2.8.6 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AbiWord2] Adobe Flash Player 17 NPAPI [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player NPAPI] Adobe Reader XI (11.0.10) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-1033-7B44-AB0000000001}] Adobe Refresh Manager [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-0804-1033-1959-001802114130}] Adobe Shockwave Player 11.6 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Shockwave Player] Adobe Shockwave Player 12.1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3CE0C7DC-ED5B-450E-9C5F-49702C263544}] AMD APP SDK Runtime [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{503F672D-6C84-448A-8F8F-4BC35AC83441}] AMD Catalyst Control Center [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5D2B5E19-C333-4519-3D32-AAB8EEE9ACA4}] AMD Catalyst Install Manager [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6A709B71-50CE-FE7E-EBF5-4B1065BCE2A5}] AMD Fuel [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8D27BD24-CB75-C569-C015-561D3D836953}] AMD Fuel [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E7ACB435-E0B4-4770-77DE-ED38887CD133}] AMD Steady Video Plug-In [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6ECDAC2F-12C1-E49B-448E-6002368967E0}] AMD System Monitor [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6EFD0C42-4CC1-4716-A0CA-21C1A062CF34}] AMD VISION Engine Control Center [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F56AB3BD-D38D-BD96-2376-2A003CC9F76D}] Any Audio Converter 3.2.3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Any Audio Converter_is1] AuthenTec TrueAPI [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}] AVG 2015 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{82A29BAD-6685-4468-88F4-85F7C7FB4DCE}] AVG 2015 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{966F007B-0D8A-44A6-A6C3-5395983C356D}] AVG 2015 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\AVG] Bejeweled 3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-1d0fbedd-28da-458a-80e3-5a71df96031c] Broadcom 802.11 Wireless LAN Adapter [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Broadcom 802.11 Wireless LAN Adapter] Broadcom InConcert Maestro [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{57DD35E9-D9BB-4089-BB05-EF933C586CB3}] Brother MFL-Pro Suite DCP-195C [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6BF66AED-3EA4-4106-B240-5CE96C9B76B0}] Cake Mania [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-90dd0029-cfab-44ff-b4cc-d9832b5d212e] Catalyst Control Center - Branding [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{25A3B953-1423-3F15-640E-B620DD0F419A}] Catalyst Control Center [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WUCCCApp] Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{29A8FEBE-577C-4066-A3FA-8A0462CC31C8}] Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{80680785-2EE1-053F-9CD3-4B2C904596EE}] Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2FC5C613-EB90-DCD7-F53A-0568D424A3DB}] Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B12BE177-DC00-5746-3AB9-91CD090AF555}] ccc-utility64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4B3EF5E6-9A2C-0A1B-C61C-B1FD444B84BC}] ccc-utility64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A5F3D247-5918-34B3-2763-2E031135D203}] CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BF5509A0-250A-25EA-0C19-61505E9EBA13}] CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F922ACE2-20DC-F807-A75A-7BD85FE6D7A7}] CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{104DE091-6C4F-C5A9-F619-5D6C965A0296}] CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F4C6C97B-8538-C264-2C6B-016112C71DED}] CCC Help Czech [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1063EE22-04ED-B4CA-773C-18638D7DD17F}] CCC Help Czech [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EDA5BB56-AAF4-6889-AD8E-E25A17BD140B}] CCC Help Danish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5E25ABC6-936D-B694-F4D8-473AED7BA140}] CCC Help Danish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EEF14371-2D24-5A2D-0EF2-22010DB4CFA6}] CCC Help Dutch [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{51BC13B8-0E09-B000-5A44-792DE81E6A7D}] CCC Help Dutch [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{95B8F519-8C35-9010-A63C-51B3E0EE8D4E}] CCC Help English [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AF674A5D-B0FC-0563-83C9-3A9377A468BF}] CCC Help English [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FDF2FE33-426D-45C2-4E70-76C162F1B790}] CCC Help Finnish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9B5DF9F8-8859-77FF-30C1-2643FDC86CAE}] CCC Help Finnish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A3806AB7-AB46-7672-A825-F9AE0DE6910A}] CCC Help French [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7C5B13DA-6A68-86C7-ED29-610CA0F49555}] CCC Help French [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{97D2669E-8236-48C5-A758-BE12CD90215D}] CCC Help German [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0A4599E3-EF01-7D4F-5848-348B8C5DF4FB}] CCC Help German [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C69EA753-0D3F-E48B-8C98-7F6310DC29B8}] CCC Help Greek [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{45F9F793-2835-C817-B23A-5A8D8BC03F67}] CCC Help Greek [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B079957C-3276-4B9F-DB08-D1CA8C090D9E}] CCC Help Hungarian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{285C9F30-3BF8-697B-BD1D-353435E94B78}] CCC Help Hungarian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E1B7A742-0FD1-303D-C448-2E50185802B3}] CCC Help Italian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{29967A7C-6E18-91CD-BBE4-9C09F401E950}] CCC Help Italian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{525CCFE1-E4C2-98F3-E9FB-1665D417DFDB}] CCC Help Japanese [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5C757800-27E8-2AE3-889A-8B959AE689F8}] CCC Help Japanese [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DFFFE551-B2AA-2050-9840-EF20086FE3A7}] CCC Help Korean [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7E538F30-56FC-1FB6-D3F9-6D6E321AF26C}] CCC Help Korean [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EB766D4A-C56C-946D-F74D-43C78FE4521E}] CCC Help Norwegian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{14720278-1ACE-7DE4-2499-C733B998BE0B}] CCC Help Norwegian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{61B90A4D-8CC9-2FED-2495-AC8C9467C984}] CCC Help Polish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{57900E7B-A46B-D4AA-D11F-5EF19FA14FB1}] CCC Help Polish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ED0D7699-1943-0C29-7465-6530F8DE2DA2}] CCC Help Portuguese [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1C0897AC-D98F-9201-5D4D-816DAB71F2C8}] CCC Help Portuguese [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FDD69799-37B2-9ACE-F70C-ABD1F96FD04C}] CCC Help Russian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{54D05374-2428-7BE0-58CD-CE8031163DE6}] CCC Help Russian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B6C605DB-801B-D6F8-F506-F911537CAD10}] CCC Help Spanish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4CB644FD-69FF-3359-E0F5-F0B22F9C9495}] CCC Help Spanish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5D3EC645-B957-36A1-068A-FE8450963669}] CCC Help Swedish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5B9AAC59-763E-27EE-F76A-065E0C1AB124}] CCC Help Swedish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5C6AFE98-08BF-086A-300D-18F77D284966}] CCC Help Thai [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BE279F6D-8A4B-3546-40D4-8B0919C2D6B8}] CCC Help Thai [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C4EE2BA3-EEA5-9650-86E0-0405ECA5C22C}] CCC Help Turkish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{070232F8-068B-1FF6-B5C4-F8F38E09C7E1}] CCC Help Turkish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{785B8761-ED99-3BE3-DFA2-F2DEB8DFD051}] CCleaner [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner] Chuzzle Deluxe [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-79a44b4b-0a01-4a3f-92c3-ddce96fd8666] Classic Shell [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FEA1590B-540A-41FC-A95C-664493C82A21}] CloneDVD 4.1.0.23 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MainApp.exe_is1] Contr“le ActiveX Windows Live Mesh pour connexions … distance [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{55D003F4-9599-44BF-BA9E-95D060730DD3}] CPUID CPU-Z G1 1.61.3 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CPUID CPU-Z G1_is1] Cradle of Rome 2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-b75277a6-0cf2-42cc-a8ed-003da45588d7] CyberLink PowerDVD 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}] CyberLink PowerDVD 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}] CyberLink YouCam [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{01FB4998-33C4-4431-85ED-079E3EEFE75D}] CyberLink YouCam [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}] D3DX10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E09C4DB7-630C-4F06-A631-8EA7239923AF}] DVD Shrink 3.2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DVD Shrink_is1] DVDFab 8.1.7.8 (17/04/2012) Qt [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DVDFab 8 Qt_is1] ESU for Microsoft Windows 7 SP1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E96CAA2A-0244-4A2A-8403-0C3C9534778B}] Evernote v. 4.2.3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F761359C-9CED-45AE-9A51-9D6605CD55C4}] Farm Frenzy [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-492f6a88-34e7-41f5-a37b-703af4e70669] Farmscapes [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-56d025af-3205-4849-8da7-09c0a6f108f8] FastStone Image Viewer 4.6 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FastStone Image Viewer] FATE [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-da11fe5d-e21e-454b-be22-6195e692c62b] Final Drive Fury [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-f27cafff-9954-4dd4-a55f-5165ef888690] Fishdom (TM) 2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-420cf520-374b-48ea-b050-634fe40d5353] Free YouTube Download version 3.2.49.1111 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Free YouTube Download_is1] Free YouTube to MP3 Converter version 3.12.50.1111 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Free YouTube to MP3 Converter_is1] Freemake Video Converter versie 4.1.2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Freemake Video Converter_is1] Galerie de photos Windows Live [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{488F0347-C4A7-4374-91A7-30818BEDA710}] Google Earth Plug-in [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}] Google Update Helper [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}] Hewlett-Packard ACLM.NET v1.2.1.1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6F340107-F9AA-47C6-B54C-C3A19F11553F}] High-Definition Video Playback 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{237CCB62-8454-43E3-B158-3ACD0134852E}] HP 3D DriveGuard [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0B413CBD-14D2-48C9-A5C1-F19A27EF984D}] HP Auto [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}] HP Client Services [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}] HP CoolSense [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{16B7BDA1-B967-4D2D-8B27-E12727C28350}] HP Customer Experience Enhancements [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{07FA4960-B038-49EB-891B-9F95930AA544}] HP Documentation [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{54F0ED3B-BD05-4B41-BCFC-E03FE2DDFF1D}] HP DVB-T TV Tuner 8.0.64.43 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\HP DVB-T TV Tuner] HP Games [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WildTangent hp Master Uninstall] HP Launch Box [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BF1E75D0-E7AF-4BEA-9FBC-567F0C54BDF9}] HP On Screen Display [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ED1BD69A-07E3-418C-91F1-D856582581BF}] HP Power Manager [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E44578C7-4667-4124-8BC2-1161BCA54978}] HP Quick Launch [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{285F722C-0E45-47DE-B38E-5B3B10FA4A7C}] HP QuickWeb [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BB4FC2AD-DF12-4EE1-8AA7-2C0A26B5E2FB}] HP Recovery Manager [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DBCD5E64-7379-4648-9444-8A6558DCB614}] HP Security Assistant [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0576788F-2993-455F-80CD-980114095103}] HP Setup [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}] HP Setup Manager [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AE856388-AFAD-4753-81DF-D96B19D0A17C}] HP SimplePass 2012 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{423FBEB8-21C6-4720-A8DA-B19B06FDB607}] HP Software Framework [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{063427B0-FA0B-4AED-820B-7E434D0611C3}] HP Support Assistant [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}] HP Support Solutions Framework [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{23CCE784-A812-4647-AEFF-1DCCD4E57478}] IDT Audio [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}] IncrediMail [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FDFE5E63-116A-4655-9B4D-29F4AFE441B3}] IncrediMail 2.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IncrediMail] Insaniquarium Deluxe [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-79e6865b-8b8a-4fa9-be1e-5dfb09288c04] IZArc 4.1.6 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1] Java 7 Update 76 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F03217076FF}] Java 8 Update 31 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83218031F0}] Java 8 Update 40 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83218040F0}] Jewel Match 3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-d19b835e-1748-47d0-b4b1-71cf47d5272d] Jewel Quest II [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-0f622843-3c36-4596-b53c-d33c989b61fd] Jewel Quest Solitaire 2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-f7477963-b5aa-4154-9cde-da4bbd59e821] Junk Mail filter update [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}] Magic Desktop [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\EasyBits Magic Desktop] Mahjongg Artifacts [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-c4910373-19fe-4421-8284-5655cbd68013] Malwarebytes Anti-Malware versie 2.1.4.1018 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Malwarebytes Anti-Malware_is1] Mesh Runtime [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}] Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E9F0BCD8-6BD5-1ED7-EDA3-9FCF2A478AA1}] Microsoft Office Professional Plus 2010 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUS] Microsoft Office Word Viewer 2003 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90850413-6000-11D3-8CFE-0150048383C9}] Microsoft Primary Interoperability Assemblies 2005 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}] Microsoft Silverlight [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}] Microsoft SQL Server 2005 Compact Edition [ENU] [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}] Microsoft Visual C++ 2005 Redistributable (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{071c9b48-7c32-4621-a0ac-3f809523288f}] Microsoft Visual C++ 2005 Redistributable (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}] Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}] Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}] Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8220EEFE-38CD-377E-8595-13398D740ACE}] Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}] Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}] Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}] Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9A25302D-30C0-39D9-BD6F-21E6EC160475}] Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}] Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9BE518E6-ECC6-35A9-88E4-87755C07200F}] Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}] Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}] Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}] Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{22154f09-719a-4619-bb71-5b3356999fbf}] Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{37B8F9C7-03FB-3253-8781-2517C99D7C00}] Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}] Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}] Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}] Microsoft Visual Studio 2010 Tools for Office Runtime (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}] Microsoft Visual Studio 2010 Tools for Office Runtime (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)] Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3FF59A46-2208-3A7A-BC8E-5DC0BBBA1A87}] Mozilla Firefox 37.0.1 (x86 nl) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 37.0.1 (x86 nl)] Mozilla Maintenance Service [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService] MPC-HC 1.7.1 (64-bit) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1] MSVC90_x64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}] MSVC90_x86 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}] MSVCRT [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}] MSVCRT_amd64 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D0B44725-3666-492D-BEF6-587A14BD9BD9}] MSXML 4.0 SP2 (KB954430) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}] MSXML 4.0 SP2 (KB973688) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}] Mystery of Mortlake Mansion [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-788440f1-9d64-425e-ba8e-f300a8a6a8ee] Nero 10 Menu TemplatePack Basic [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{63AA3EAB-23BB-48B2-9AD0-44F878075604}] Nero 10 Movie ThemePack Basic [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}] Nero BackItUp 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{68AB6930-5BFF-4FF6-923B-516A91984FE6}] Nero BackItUp 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}] Nero Burning ROM 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7A5D731D-B4B3-490E-B339-75685712BAAB}] Nero BurningROM 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}] Nero BurnRights 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{943CFD7D-5336-47AF-9418-E02473A5A517}] Nero BurnRights 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{555868C6-49FB-484F-BB43-8980651A1B00}] Nero Control Center 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6DFB899F-17A2-48F0-A533-ED8D6866CF38}] Nero ControlCenter 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}] Nero Core Components 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}] Nero CoverDesigner 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FCF00A6E-FB58-477A-ABE9-232907105521}] Nero CoverDesigner 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C3273C55-E1E4-41FF-8D69-0158090DB8D8}] Nero DiscSpeed 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{34490F4E-48D0-492E-8249-B48BECF0537C}] Nero DiscSpeed 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C18A0418-442A-4186-AF98-D08F5054A2FC}] Nero Dolby Files 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C3580AC4-C827-4332-B935-9A282ED5BB97}] Nero Express 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{70550193-1C22-445C-8FA4-564E155DB1A7}] Nero Express 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{33643918-7957-4839-92C7-EA96CB621A98}] Nero InfoTool 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}] Nero InfoTool 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{66049135-9659-4AAD-9169-9CCA269EBB3E}] Nero MediaHub 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}] Nero MediaHub 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F467862A-D9CA-47ED-8D81-B4B3C9399272}] Nero Multimedia Suite 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}] Nero Recode 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}] Nero Recode 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}] Nero RescueAgent 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E337E787-CF61-4B7B-B84F-509202A54023}] Nero RescueAgent 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{92E25238-61A3-4ACD-A407-3C480EEF47A7}] Nero SoundTrax 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}] Nero SoundTrax 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{16987E99-C95C-4513-9239-7B44A0A71DB5}] Nero StartSmart 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}] Nero StartSmart 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}] Nero Update [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}] Nero Vision 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}] Nero Vision 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{329411A0-19F3-4740-874F-17400B126F27}] Nero WaveEditor 10 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}] Nero WaveEditor 10 Help (CHM) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7A295D8F-484B-4FFB-89AB-C1FD497591FE}] Nokia Connectivity Cable Driver [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A57025CC-5F2E-4D01-B387-06DB10500D43}] Nokia PC Suite [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}] Nokia PC Suite [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Nokia PC Suite] opensource [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3677D4D8-E5E0-49FC-B86E-06541CF00BBE}] PaperPort Image Printer 64-bit [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ABA4FAF1-6389-45F9-92CE-3914A4E5C471}] PC Connectivity Solution [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{644F4910-E812-49AD-93EC-86828CB81A0D}] Photo Notifier and Animation Creator [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{788A0222-5690-4212-AA9C-C48FD0E1C9AE}] Photo Notifier and Animation Creator [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Photo Notifier and Animation Creator] PhotoScape [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PhotoScape] Plants vs. Zombies - Game of the Year [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-603c0179-306e-4b84-a362-57c4fc5938d5] Polar Bowler [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-ecd0b86f-03ab-4ee4-8598-698ae604b832] Ranch Rush 2 - Premium Edition [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-6b8de8e0-1bb7-49d5-a96f-d3e5dfaa0baf] RAR Password Recovery v1.1 RC16 (remove only) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Intelore - RAR Password Recovery] Realtek Ethernet Controller Driver [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}] Realtek PCIE Card Reader [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C1594429-8296-4652-BF54-9DBE4932A44C}] SDFormatter [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A5355F15-F98B-4704-9BAE-E53B9FE48F48}] SkypeT 7.3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}] Speccy [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Speccy] swMSM [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{612C34C7-5E90-47D8-9B5C-0F717DD82726}] Synaptics TouchPad Driver [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SynTPDeinstKey] Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD] TomTom HOME [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}] TomTom HOME Visual Studio Merge Modules [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}] Torchlight [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-9b3420d0-ea2e-4061-ade6-ec95beed25e4] Update Installer for WildTangent Games App [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App] VASCO Card Reader Plug-In (64-Bit) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{47659F12-27AE-6400-9B8A-2BD803020302}] Virtual Families [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-9bb85632-d4b0-4127-b8d1-2bcecce40cbc] Virtual Villagers 4 - The Tree of Life [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-521ff30d-5663-4db1-88f1-e428efda93c6] Visual Studio 2008 x64 Redistributables [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}] Visual Studio 2010 x64 Redistributables [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{21B133D6-5979-47F0-BE1C-F6A6B304693F}] Visual Studio 2012 x64 Redistributables [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}] Visual Studio 2012 x86 Redistributables [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}] Visual Studio C++ 10.0 Runtime [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4412F224-3849-4461-A3E9-DEEF8D252790}] Wedding Dash [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-f3c8af3c-573d-485f-9d49-1c8b02595448] WildTangent Games App for HP [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp] Windows-stuurprogrammapakket - Nokia Modem (02/25/2011 4.7) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\E0AC723A3DE3A04256288CADBBB011B112AED454] Windows-stuurprogrammapakket - Nokia Modem (02/25/2011 7.01.0.9) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\72A50F48CC5601190B9C4E74D81161693133E7F7] Windows-stuurprogrammapakket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F] Windows Live [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}] Windows Live Communications Platform [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D45240D3-B6B3-4FF9-B243-54ECE3E10066}] Windows Live Essentials [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2A07C35B-8384-4DA4-9A95-442B6C89A073}] Windows Live Essentials [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}] Windows Live Essentials [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}] Windows Live Essentials [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinLiveSuite] Windows Live Fotogalerie [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B113D18C-67B0-4FB7-B329-E89B66194AE6}] Windows Live ID Sign-in Assistant [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}] Windows Live Installer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0B0F231F-CE6A-483D-AA23-77B364F75917}] Windows Live Language Selector [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{180C8888-50F1-426B-A9DC-AB83A1989C65}] Windows Live Mail [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9D56775A-93F3-44A3-8092-840E3826DE30}] Windows Live Mail [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}] Windows Live Mail [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B1239994-A850-44E2-BED8-E70A21124E16}] Windows Live Mail [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C66824E4-CBB3-4851-BB3F-E8CFD6350923}] Windows Live Mail [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D588365A-AE39-4F27-BDAE-B4E72C8E900C}] Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C32CE55C-12BA-4951-8797-0967FDEF556F}] Windows Live Mesh [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3F4143A1-9C21-4011-8679-3BC1014C6886}] Windows Live Mesh [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}] Windows Live Mesh [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A0C91188-C88F-4E86-93E6-CD7C9A266649}] Windows Live Mesh [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}] Windows Live Mesh [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DECDCB7C-58CC-4865-91AF-627F9798FE48}] Windows Live Mesh ActiveX Control for Remote Connections [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}] Windows Live Mesh ActiveX control for remote connections [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C5398A89-516C-4DAF-BA07-EE7949090E56}] Windows Live Messenger [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}] Windows Live Messenger [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}] Windows Live Messenger [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{48294D95-EE9A-4377-8213-44FC4265FB27}] Windows Live Messenger [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}] Windows Live Messenger [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}] Windows Live MIME IFilter [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{DA54F80E-261C-41A2-A855-549A144F2F59}] Windows Live Movie Maker [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{19BA08F7-C728-469C-8A35-BFBD3633BE08}] Windows Live Movie Maker [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}] Windows Live Movie Maker [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{92EA4134-10D1-418A-91E1-5A0453131A38}] Windows Live Movie Maker [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}] Windows Live Movie Maker [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E4E88B54-4777-4659-967A-2EED1E6AFD83}] Windows Live Photo Common [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9BD262D0-B788-4546-A0A5-F4F56EC3834B}] Windows Live Photo Common [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}] Windows Live Photo Common [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}] Windows Live Photo Common [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C893D8C0-1BA0-4517-B11C-E89B65E72F70}] Windows Live Photo Common [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D436F577-1695-4D2F-8B44-AC76C99E0002}] Windows Live Photo Gallery [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3336F667-9049-4D46-98B6-4C743EEBC5B1}] Windows Live Photo Gallery [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{34F4D9A4-42C2-4348-BEF4-E553C84549E7}] Windows Live Photo Gallery [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}] Windows Live PIMT Platform [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83C292B7-38A5-440B-A731-07070E81A64F}] Windows Live Remote Client [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{DF6D988A-EEA0-4277-AAB8-158E086E439B}] Windows Live Remote Client Resources [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}] Windows Live Remote Client Resources [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}] Windows Live Remote Client Resources [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C9F05151-95A9-4B9B-B534-1760E2D014A5}] Windows Live Remote Client Resources [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}] Windows Live Remote Service [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}] Windows Live Remote Service Resources [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5E2CD4FB-4538-4831-8176-05D653C3E6D4}] Windows Live Remote Service Resources [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}] Windows Live Remote Service Resources [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}] Windows Live Remote Service Resources [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D930AF5C-5193-4616-887D-B974CEFC4970}] Windows Live SOXE [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{682B3E4F-696A-42DE-A41C-4C07EA1678B4}] Windows Live SOXE Definitions [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{200FEC62-3C34-4D60-9CE8-EC372E01C08F}] Windows Live UX Platform [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}] Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{05E379CC-F626-4E7D-8354-463865B303BF}] Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{37B33B16-2535-49E7-8990-32668708A0A3}] Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}] Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}] Windows Live Writer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3B9A92DA-6374-4872-B646-253F18624D5F}] Windows Live Writer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7E017923-16F8-4E32-94EF-0A150BD196FE}] Windows Live Writer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{859D4022-B76D-40DE-96EF-C90CDA263F44}] Windows Live Writer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A726AE06-AAA3-43D1-87E3-70F510314F04}] Windows Live Writer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}] Windows Live Writer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AAF454FC-82CA-4F29-AB31-6A109485E76E}] Windows Live Writer Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{14B441B7-774D-4170-98EA-A13667AE6218}] Windows Live Writer Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}] Windows Live Writer Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{62687B11-58B5-4A18-9BC3-9DF4CE03F194}] Windows Live Writer Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}] WinRAR 5.01 (64-bit) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver] Zuma's Revenge [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WTA-7a1e27c6-5ec0-4229-8987-789f1fc130e9] ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1ADB7B61769BD2D4B8721E72722C3805 deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4856AC56-F9CE-18B4-E266-A6DF617D5ED5} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{81FDDBA7-154A-AAB8-6142-E651193DDDE0} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{16B7BDA1-B967-4D2D-8B27-E12727C28350} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\1ADB7B61769BD2D4B8721E72722C3805 deleted successfully ==== HijackThis Entries ====================== F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll O2 - BHO: TSBHO Class - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2012\IEBHO.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O2 - BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe O4 - HKLM\..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe O4 - HKLM\..\Run: [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE9_32.exe O9 - Extra 'Tools' menuitem: Classic IE9 Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE9_32.exe O9 - Extra button: (no name) - {64964764-1101-4bbd-8891-B56B1A53B9B3} - C:\Program Files\Classic Shell\ClassicExplorer32.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing) O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing) O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect119.cab O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing) O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe O23 - Service: @oem43.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing) O23 - Service: Classic Shell Service (ClassicShellService) - IvoSoft - C:\Program Files\Classic Shell\ClassicShellService.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: TrueSuiteService (FPLService) - HP - C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe O23 - Service: @oem4.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing) O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing) O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) ==== Silent Runners ====================== "Silent Runners.vbs", revision 69.2, http://www.silentrunners.org/ Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} CCleaner Monitoring = "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR [Piriform Ltd] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} SysTrayApp = C:\Program Files\IDT\WDM\sttray64.exe SynTPEnh = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe Logitech Download Assistant = C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [MS] SetDefault = C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [Hewlett-Packard Development Company, L.P.] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ {++} StartCCC = "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun [Advanced Micro Devices, Inc.] BDRegion = C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [cyberlink] Easybits Recovery = C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [EasyBits Software AS] HP CoolSense = C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey [Hewlett-Packard Development Company, L.P.] HP Quick Launch = C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [Hewlett-Packard Development Company, L.P.] HPOSD = C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [Hewlett-Packard Development Company, L.P.] HPQuickWebProxy = "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" [Hewlett-Packard Company] NBAgent = "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart [Nero AG] RemoteControl10 = "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [CyberLink Corp.] BrMfcWnd = C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [null data] ControlCenter3 = C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [Brother Industries, Ltd.] BCSSync = "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices [MS] AVG_UI = "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY [AVG Technologies CZ, s.r.o.] SunJavaUpdateSched = "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [Oracle Corporation] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {449D0D6E-2412-4E61-B68F-1CB625CD9E52}\(Default) = (no title provided) -> {HKLM...CLSID} = ExplorerBHO Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer64.dll [IvoSoft] -> {HKLM...Wow...CLSID} = ExplorerBHO Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer32.dll [IvoSoft] {6C680BAE-655C-4E3D-8FC4-E6A520C3D928}\(Default) = AMD SteadyVideo BHO -> {HKLM...CLSID} = SteadyVideoBHO Class \InProcServer32\(Default) = C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [Advanced Micro Devices] -> {HKLM...Wow...CLSID} = SteadyVideoBHO Class \InProcServer32\(Default) = C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [Advanced Micro Devices] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...Wow...CLSID} = Java(tm) Plug-In SSV Helper \InProcServer32\(Default) = C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [Oracle Corporation] {8590886E-EC8C-43C1-A32C-E4C2B0B6395B}\(Default) = TSBHO Class -> {HKLM...CLSID} = TrueSuite Website Log On \InProcServer32\(Default) = C:\Program Files (x86)\HP SimplePass 2012\x64\IEBHO.dll [HP] -> {HKLM...Wow...CLSID} = TrueSuite Website Log On \InProcServer32\(Default) = C:\Program Files (x86)\HP SimplePass 2012\IEBHO.dll [HP] {DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided) -> {HKLM...Wow...CLSID} = Java(tm) Plug-In 2 SSV Helper \InProcServer32\(Default) = C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [Oracle Corporation] {EA801577-E6AD-4BD5-8F71-4BE0154331A4}\(Default) = (no title provided) -> {HKLM...CLSID} = ClassicIE9BHO Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [IvoSoft] -> {HKLM...Wow...CLSID} = ClassicIE9BHO Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [IvoSoft] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {449D0D6E-2412-4E61-B68F-1CB625CD9E52}\(Default) = (no title provided) -> {HKLM...CLSID} = ExplorerBHO Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer64.dll [IvoSoft] -> {HKLM...Wow...CLSID} = ExplorerBHO Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer32.dll [IvoSoft] {6C680BAE-655C-4E3D-8FC4-E6A520C3D928}\(Default) = AMD SteadyVideo BHO -> {HKLM...CLSID} = SteadyVideoBHO Class \InProcServer32\(Default) = C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [Advanced Micro Devices] -> {HKLM...Wow...CLSID} = SteadyVideoBHO Class \InProcServer32\(Default) = C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [Advanced Micro Devices] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...Wow...CLSID} = Java(tm) Plug-In SSV Helper \InProcServer32\(Default) = C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [Oracle Corporation] {8590886E-EC8C-43C1-A32C-E4C2B0B6395B}\(Default) = TSBHO Class -> {HKLM...CLSID} = TrueSuite Website Log On \InProcServer32\(Default) = C:\Program Files (x86)\HP SimplePass 2012\x64\IEBHO.dll [HP] -> {HKLM...Wow...CLSID} = TrueSuite Website Log On \InProcServer32\(Default) = C:\Program Files (x86)\HP SimplePass 2012\IEBHO.dll [HP] {DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided) -> {HKLM...Wow...CLSID} = Java(tm) Plug-In 2 SSV Helper \InProcServer32\(Default) = C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [Oracle Corporation] {E76FD755-C1BA-4DCB-9F13-99BD91223ADE}\(Default) = HP Network Check Helper -> {HKLM...Wow...CLSID} = HP Network Check Helper \InProcServer32\(Default) = C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [Hewlett-Packard] {EA801577-E6AD-4BD5-8F71-4BE0154331A4}\(Default) = (no title provided) -> {HKLM...CLSID} = ClassicIE9BHO Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [IvoSoft] -> {HKLM...Wow...CLSID} = ClassicIE9BHO Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [IvoSoft] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ Groove Explorer Icon Overlay 1 (GFS Unread Stub)\(Default) = {99FD978C-D287-4F50-827F-B2C658EDA8E7} -> {HKLM...CLSID} = Groove Explorer Icon Overlay 1 (GFS Unread Stub) \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] Groove Explorer Icon Overlay 2 (GFS Stub)\(Default) = {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} -> {HKLM...CLSID} = Groove Explorer Icon Overlay 2 (GFS Stub) \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)\(Default) = {920E6DB1-9907-4370-B3A0-BAFC03D81399} -> {HKLM...CLSID} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] Groove Explorer Icon Overlay 3 (GFS Folder)\(Default) = {16F3DD56-1AF5-4347-846D-7C10C4192619} -> {HKLM...CLSID} = Groove Explorer Icon Overlay 3 (GFS Folder) \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] Groove Explorer Icon Overlay 4 (GFS Unread Mark)\(Default) = {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} -> {HKLM...CLSID} = Groove Explorer Icon Overlay 4 (GFS Unread Mark) \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] ShareOverlay\(Default) = {594D4122-1F87-41E2-96C7-825FB4796516} -> {HKLM...CLSID} = ShareOverlay Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer64.dll [IvoSoft] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ Groove Explorer Icon Overlay 1 (GFS Unread Stub)\(Default) = {99FD978C-D287-4F50-827F-B2C658EDA8E7} -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 1 (GFS Unread Stub) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] Groove Explorer Icon Overlay 2 (GFS Stub)\(Default) = {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 2 (GFS Stub) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)\(Default) = {920E6DB1-9907-4370-B3A0-BAFC03D81399} -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] Groove Explorer Icon Overlay 3 (GFS Folder)\(Default) = {16F3DD56-1AF5-4347-846D-7C10C4192619} -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 3 (GFS Folder) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] Groove Explorer Icon Overlay 4 (GFS Unread Mark)\(Default) = {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 4 (GFS Unread Mark) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] ShareOverlay\(Default) = {594D4122-1F87-41E2-96C7-825FB4796516} -> {HKLM...Wow...CLSID} = ShareOverlay Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer32.dll [IvoSoft] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ {2F603045-309F-11CF-9774-0020AFD0CFF6} = Synaptics Control Panel -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = C:\Program Files\Synaptics\SynTP\SynTPCpl.dll [Synaptics Incorporated] {872A9397-E0D6-4e28-B64D-52B8D0A7EA35} = Display CPL Extension -> {HKLM...CLSID} = DisplayCplExt Class \InProcServer32\(Default) = C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiama64.dll [Advanced Micro Devices, Inc.] {5E2121EE-0300-11D4-8D3B-444553540000} = Catalyst Context Menu extension -> {HKLM...CLSID} = SimpleShlExt Class \InProcServer32\(Default) = C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [Advanced Micro Devices, Inc.] {9F97547E-4609-42C5-AE0C-81C61FFAEBC3} = AVG Shell Extension -> {HKLM...CLSID} = AVG Shell Extension Class \InProcServer32\(Default) = C:\Program Files (x86)\AVG\AVG2015\avgsea.dll [AVG Technologies CZ, s.r.o.] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ {00F30F90-3E96-453B-AFCD-D71989ECC2C7} = Windows Live Photo Gallery Autoplay Drop Target Shim -> {HKLM...Wow...CLSID} = Windows Live Photo Gallery Viewer Autoplay Shim \InProcServer32\(Default) = C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS] {00F33137-EE26-412F-8D71-F84E4C2C6625} = (no title provided) -> {HKLM...Wow...CLSID} = Windows Live Photo Gallery Viewer Autoplay Shim \InProcServer32\(Default) = C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS] {00F346CB-35A4-465B-8B8F-65A29DBAB1F6} = Windows Live Photo Gallery Viewer Drop Target Shim -> {HKLM...Wow...CLSID} = Windows Live Photo Gallery Viewer Shim \InProcServer32\(Default) = C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS] {00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} = Windows Live Photo Gallery Editor Drop Target Shim -> {HKLM...Wow...CLSID} = Windows Live Photo Gallery Editor Shim \InProcServer32\(Default) = C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS] {3BBAC0AD-8227-3462-C8EF-A36794DD8CD2} = IZArc Shell Extension -> {HKLM...Wow...CLSID} = IZArc Shell Extension \InProcServer32\(Default) = C:\Program Files (x86)\IZArc\IZArcCM64.dll [null data] {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} = Microsoft Office Metadata Handler -> {HKLM...Wow...CLSID} = Microsoft Office Metadata Handler \InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\msoshext.dll [MS] {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} = Microsoft Office Thumbnail Handler -> {HKLM...Wow...CLSID} = Microsoft Office Thumbnail Handler \InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\msoshext.dll [MS] {F764812A-132C-4013-9960-5CBBEB408A0E} = Nero Shell Extension -> {HKLM...Wow...CLSID} = NeroShellExt Class \InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Nero\NeroShellExt\\NeroShellExt.dll [Nero AG] {42042206-2D85-11D3-8CFF-005004838597} = Microsoft Office HTML Icon Handler -> {HKLM...Wow...CLSID} = (no title provided) \InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\OFFICE11\msohev.dll [MS] {416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} = Nokia Phone Browser -> {HKLM...Wow...CLSID} = Nokia Phone Browser \InProcServer32\(Default) = C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PhoneBrowser.dll [Nokia] {3D60EDA7-9AB4-4DA8-864C-D9B5F2E7281D} = Groove Namespace Extension -> {HKLM...Wow...CLSID} = Werkruimten \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {0875DCB6-C686-4243-9432-ADCCF0B9F2D7} = Microsoft OneNote Namespace Extension for Windows Desktop Search -> {HKLM...Wow...CLSID} = Microsoft OneNote Namespace Extension for Windows Desktop Search \InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\ONFILTER.DLL [MS] {506F4668-F13E-4AA1-BB04-B43203AB3CC0} = {506F4668-F13E-4AA1-BB04-B43203AB3CC0} -> {HKLM...Wow...CLSID} = ImageExtractorShellExt Class \InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\VISSHE.DLL [MS] {D66DC78C-4F61-447F-942B-3FB6980118CF} = {D66DC78C-4F61-447F-942B-3FB6980118CF} -> {HKLM...Wow...CLSID} = CInfoTipShellExt Class \InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\VISSHE.DLL [MS] {72853161-30C5-4D22-B7F9-0BBC1D38A37E} = Groove GFS Browser Helper -> {HKLM...Wow...CLSID} = Groove GFS Browser Helper \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {6C467336-8281-4E60-8204-430CED96822D} = Groove GFS Context Menu Handler -> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {2A541AE1-5BF6-4665-A8A3-CFA9672E4291} = Groove GFS Explorer Bar -> {HKLM...Wow...CLSID} = Groove Folder Synchronization \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {16F3DD56-1AF5-4347-846D-7C10C4192619} = Groove Explorer Icon Overlay 3 (GFS Folder) -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 3 (GFS Folder) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {B5A7F190-DDA6-4420-B3BA-52453494E6CD} = Groove GFS Stub Execution Hook -> {HKLM...Wow...CLSID} = Groove GFS Stub Execution Hook \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {A449600E-1DC6-4232-B948-9BD794D62056} = Groove GFS Stub Icon Handler -> {HKLM...Wow...CLSID} = Groove GFS Stub Icon Handler \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} = Groove Explorer Icon Overlay 2 (GFS Stub) -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 2 (GFS Stub) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {920E6DB1-9907-4370-B3A0-BAFC03D81399} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} = Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 4 (GFS Unread Mark) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {99FD978C-D287-4F50-827F-B2C658EDA8E7} = Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 1 (GFS Unread Stub) \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {387E725D-DC16-4D76-B310-2C93ED4752A0} = Groove XML Icon Handler -> {HKLM...Wow...CLSID} = Groove XML Icon Handler \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {00020D75-0000-0000-C000-000000000046} = Microsoft Outlook Desktop Icon Handler -> {HKLM...Wow...CLSID} = Microsoft Outlook \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\MLSHEXT.DLL [MS] {0006F045-0000-0000-C000-000000000046} = Microsoft Outlook Custom Icon Handler -> {HKLM...Wow...CLSID} = Outlook File Icon Extension \InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\OLKFSTUB.DLL [MS] {9F97547E-4609-42C5-AE0C-81C61FFAEBC3} = AVG Shell Extension -> {HKLM...Wow...CLSID} = AVG Shell Extension Class \InProcServer32\(Default) = C:\Program Files (x86)\AVG\AVG2015\avgse.dll [AVG Technologies CZ, s.r.o.] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\ <> {B5A7F190-DDA6-4420-B3BA-52453494E6CD} = Groove GFS Stub Execution Hook -> {HKLM...CLSID} = Groove GFS Stub Execution Hook \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\ <> {B5A7F190-DDA6-4420-B3BA-52453494E6CD} = Groove GFS Stub Execution Hook -> {HKLM...CLSID} = Groove GFS Stub Execution Hook \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\ {1ee7337f-85ac-45e2-a23c-37c753209769}\(Default) = Smartcard WinRT Provider -> {HKLM...CLSID} = Smartcard WinRT Provider \InProcServer32\(Default) = C:\WINDOWS\system32\SmartcardCredentialProvider.dll [MS] HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\ <> text/xml\CLSID = {807573E5-5146-11D5-A672-00B0D022E945} -> {HKLM...CLSID} = Microsoft Office InfoPath XML Mime Filter \InProcServer32\(Default) = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL [MS] <> video/mp4\CLSID = {20C75730-7C25-476B-95DC-C65810F9E489} -> {HKLM...CLSID} = XMLMimeFilterPP Class \InProcServer32\(Default) = C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [Advanced Micro Devices] <> video/x-flv\CLSID = {20C75730-7C25-476B-95DC-C65810F9E489} -> {HKLM...CLSID} = XMLMimeFilterPP Class \InProcServer32\(Default) = C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [Advanced Micro Devices] HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ AVG Shell Extension\(Default) = {9F97547E-4609-42C5-AE0C-81C61FFAEBC3} -> {HKLM...CLSID} = AVG Shell Extension Class \InProcServer32\(Default) = C:\Program Files (x86)\AVG\AVG2015\avgsea.dll [AVG Technologies CZ, s.r.o.] -> {HKLM...Wow...CLSID} = AVG Shell Extension Class \InProcServer32\(Default) = C:\Program Files (x86)\AVG\AVG2015\avgse.dll [AVG Technologies CZ, s.r.o.] IZArcCM\(Default) = {3BBAC0AD-8227-3462-C8EF-A36794DD8CD2} -> {HKLM...CLSID} = IZArc Shell Extension \InProcServer32\(Default) = C:\Program Files (x86)\IZArc\IZArcCM64.dll [null data] -> {HKLM...Wow...CLSID} = IZArc Shell Extension \InProcServer32\(Default) = C:\Program Files (x86)\IZArc\IZArcCM64.dll [null data] WinRAR\(Default) = {B41DB860-64E4-11D2-9906-E49FADC173CA} -> {HKLM...CLSID} = WinRAR \InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal] WinRAR32\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA} -> {HKLM...Wow...CLSID} = WinRAR \InProcServer32\(Default) = C:\Program Files\WinRAR\rarext32.dll [Alexander Roshal] WorkFolders\(Default) = {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} -> {HKLM...CLSID} = Work Folders Context Menu Handler \InProcServer32\(Default) = C:\Windows\System32\WorkfoldersShell.dll [MS] XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D} -> {HKLM...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] -> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {A4FD8DDB-5800-4414-97F9-7457AC8EE4F0}\(Default) = (no title provided) -> {HKLM...Wow...CLSID} = NBShellHook Class \InProcServer32\(Default) = C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBShell.dll [Nero AG] {F764812A-132C-4013-9960-5CBBEB408A0E}\(Default) = (no title provided) -> {HKLM...Wow...CLSID} = NeroShellExt Class \InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Nero\NeroShellExt\\NeroShellExt.dll [Nero AG] HKLM\SOFTWARE\Classes\*\shellex\DragDropHandlers\ NBShellHook\(Default) = {A4FD8DDB-5800-4414-97F9-7457AC8EE4F0} -> {HKLM...Wow...CLSID} = NBShellHook Class \InProcServer32\(Default) = C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBShell.dll [Nero AG] HKLM\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ MBAMShlExt\(Default) = {57CE581A-0CB6-4266-9CA0-19364C90A0B3} -> {HKLM...CLSID} = MBAMShlExt Class \InProcServer32\(Default) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [Malwarebytes Corporation] XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D} -> {HKLM...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] -> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ IZArcCM\(Default) = {3BBAC0AD-8227-3462-C8EF-A36794DD8CD2} -> {HKLM...CLSID} = IZArc Shell Extension \InProcServer32\(Default) = C:\Program Files (x86)\IZArc\IZArcCM64.dll [null data] -> {HKLM...Wow...CLSID} = IZArc Shell Extension \InProcServer32\(Default) = C:\Program Files (x86)\IZArc\IZArcCM64.dll [null data] WorkFolders\(Default) = {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} -> {HKLM...CLSID} = Work Folders Context Menu Handler \InProcServer32\(Default) = C:\Windows\System32\WorkfoldersShell.dll [MS] XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D} -> {HKLM...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] -> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {F764812A-132C-4013-9960-5CBBEB408A0E}\(Default) = (no title provided) -> {HKLM...Wow...CLSID} = NeroShellExt Class \InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Nero\NeroShellExt\\NeroShellExt.dll [Nero AG] HKLM\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\ Nokia\(Default) = {416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} -> {HKLM...CLSID} = Nokia Phone Browser \InProcServer32\(Default) = C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PhoneBrowser64.dll [Nokia] -> {HKLM...Wow...CLSID} = Nokia Phone Browser \InProcServer32\(Default) = C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PhoneBrowser.dll [Nokia] HKLM\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\ ClassicCopyExt\(Default) = {8C83ACB1-75C3-45D2-882C-EFA32333491C} -> {HKLM...CLSID} = ClassicCopyExt Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer64.dll [IvoSoft] -> {HKLM...Wow...CLSID} = ClassicCopyExt Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer32.dll [IvoSoft] HKLM\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers\ ACE\(Default) = {5E2121EE-0300-11D4-8D3B-444553540000} -> {HKLM...CLSID} = SimpleShlExt Class \InProcServer32\(Default) = C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [Advanced Micro Devices, Inc.] WorkFolders\(Default) = {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} -> {HKLM...CLSID} = Work Folders Context Menu Handler \InProcServer32\(Default) = C:\Windows\System32\WorkfoldersShell.dll [MS] XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D} -> {HKLM...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] -> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\ {F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = PDF Column Info -> {HKLM...Wow...CLSID} = PDF Shell Extension \InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll [Adobe Systems, Inc.] HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\ AVG Shell Extension\(Default) = {9F97547E-4609-42C5-AE0C-81C61FFAEBC3} -> {HKLM...CLSID} = AVG Shell Extension Class \InProcServer32\(Default) = C:\Program Files (x86)\AVG\AVG2015\avgsea.dll [AVG Technologies CZ, s.r.o.] -> {HKLM...Wow...CLSID} = AVG Shell Extension Class \InProcServer32\(Default) = C:\Program Files (x86)\AVG\AVG2015\avgse.dll [AVG Technologies CZ, s.r.o.] MBAMShlExt\(Default) = {57CE581A-0CB6-4266-9CA0-19364C90A0B3} -> {HKLM...CLSID} = MBAMShlExt Class \InProcServer32\(Default) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [Malwarebytes Corporation] WinRAR\(Default) = {B41DB860-64E4-11D2-9906-E49FADC173CA} -> {HKLM...CLSID} = WinRAR \InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal] WinRAR32\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA} -> {HKLM...Wow...CLSID} = WinRAR \InProcServer32\(Default) = C:\Program Files\WinRAR\rarext32.dll [Alexander Roshal] XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D} -> {HKLM...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] -> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler \InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] {A4FD8DDB-5800-4414-97F9-7457AC8EE4F0}\(Default) = (no title provided) -> {HKLM...Wow...CLSID} = NBShellHook Class \InProcServer32\(Default) = C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBShell.dll [Nero AG] HKLM\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\ ClassicCopyExt\(Default) = {8C83ACB1-75C3-45D2-882C-EFA32333491C} -> {HKLM...CLSID} = ClassicCopyExt Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer64.dll [IvoSoft] -> {HKLM...Wow...CLSID} = ClassicCopyExt Class \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer32.dll [IvoSoft] NBShellHook\(Default) = {A4FD8DDB-5800-4414-97F9-7457AC8EE4F0} -> {HKLM...Wow...CLSID} = NBShellHook Class \InProcServer32\(Default) = C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBShell.dll [Nero AG] WinRAR\(Default) = {B41DB860-64E4-11D2-9906-E49FADC173CA} -> {HKLM...CLSID} = WinRAR \InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal] WinRAR32\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA} -> {HKLM...Wow...CLSID} = WinRAR \InProcServer32\(Default) = C:\Program Files\WinRAR\rarext32.dll [Alexander Roshal] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ EnableShellExecuteHooks = (REG_DWORD) dword:0x00000001 {unrecognized setting} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ EnableCursorSuppression = (REG_DWORD) dword:0x00000001 {unrecognized setting} EnableLinkedConnections = (REG_DWORD) dword:0x00000001 {unrecognized setting} HideFastUserSwitching = (REG_DWORD) dword:0x00000000 {unrecognized setting} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ Wallpaper = C:\Users\test\AppData\Roaming\Microsoft\Windows Photo Viewer\Achtergrond van Windows Photo Viewer.jpg Windows Portable Device AutoPlay Handlers ----------------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ DVDFab5OnDVDArrival\ Provider = DVDFab 8 InvokeProgID = DVDFab5Open InvokeVerb = Open HKLM\SOFTWARE\Classes\DVDFab5Open\shell\Open\command\(Default) = C:\PROGRA~2\DVDFAB~1\DVDFab.exe [Fengtao Software Inc.] MediaHub10BluRayOnArrival\ Provider = Nero MediaHub 10 InvokeProgID = OpenWithNeroMediaHub10 InvokeVerb = open HKLM\SOFTWARE\Classes\OpenWithNeroMediaHub10\shell\open\command\(Default) = "C:\Program Files (x86)\Nero\Nero 10\Nero MediaHub\MediaHub.exe" %L [null data] MediaHub10CDAudioOnArrival\ Provider = Nero MediaHub 10 InvokeProgID = OpenWithNeroMediaHub10 InvokeVerb = open HKLM\SOFTWARE\Classes\OpenWithNeroMediaHub10\shell\open\command\(Default) = "C:\Program Files (x86)\Nero\Nero 10\Nero MediaHub\MediaHub.exe" %L [null data] MediaHub10DVDMovieOnArrival\ Provider = Nero MediaHub 10 InvokeProgID = OpenWithNeroMediaHub10 InvokeVerb = open HKLM\SOFTWARE\Classes\OpenWithNeroMediaHub10\shell\open\command\(Default) = "C:\Program Files (x86)\Nero\Nero 10\Nero MediaHub\MediaHub.exe" %L [null data] MediaHub10SVCDMovieOnArrival\ Provider = Nero MediaHub 10 InvokeProgID = OpenWithNeroMediaHub10 InvokeVerb = open HKLM\SOFTWARE\Classes\OpenWithNeroMediaHub10\shell\open\command\(Default) = "C:\Program Files (x86)\Nero\Nero 10\Nero MediaHub\MediaHub.exe" %L [null data] MediaHub10VCDMovieOnArrival\ Provider = Nero MediaHub 10 InvokeProgID = OpenWithNeroMediaHub10 InvokeVerb = open HKLM\SOFTWARE\Classes\OpenWithNeroMediaHub10\shell\open\command\(Default) = "C:\Program Files (x86)\Nero\Nero 10\Nero MediaHub\MediaHub.exe" %L [null data] MediaHub10WPDOnArrival\ Provider = Nero MediaHub 10 CLSID = {A55803CC-4D53-404c-8557-FD63DBA95D24} InitCmdLine = /WiaCmd;"C:\Program Files (x86)\Nero\Nero 10\Nero MediaHub\MediaHub.exe" -Import %1 %2; -> {HKLM...CLSID} = WPDShextAutoplay \LocalServer32\(Default) = C:\WINDOWS\system32\WPDShextAutoplay.exe [MS] MSFhConfigBackup\ Provider = @C:\WINDOWS\system32\fhautoplay.dll,-100 InvokeProgID = FHConfig.AutoPlayHandler InvokeVerb = config HKLM\SOFTWARE\Classes\FHConfig.AutoPlayHandler\shell\config\command\(Default) = fhmanagew -autoplay [MS] MSLivePhotoAcquireDropHandler\ Provider = @%ProgramFiles(x86)%\Windows Live\Photo Gallery\regres.dll,-10 InvokeProgID = Microsoft.LivePhotoAcqDTShim.1 InvokeVerb = open HKLM\SOFTWARE\Classes\Microsoft.LivePhotoAcqDTShim.1\shell\open\DropTarget\CLSID = {00F33137-EE26-412F-8D71-F84E4C2C6625} -> {HKLM...CLSID} = Windows Live Photo Gallery Viewer Autoplay Shim \InProcServer32\(Default) = C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShimx64.dll [MS] MSLiveShowPicturesOnArrival\ Provider = @%ProgramFiles(x86)%\Windows Live\Photo Gallery\regres.dll,-10 InvokeProgID = Microsoft.Photos.LiveAutoplayShim.1 InvokeVerb = open HKLM\SOFTWARE\Classes\Microsoft.Photos.LiveAutoplayShim.1\shell\open\DropTarget\CLSID = {00F30F90-3E96-453B-AFCD-D71989ECC2C7} -> {HKLM...CLSID} = Windows Live Photo Gallery Viewer Autoplay Shim \InProcServer32\(Default) = C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShimx64.dll [MS] MSPlayCDAudioOnArrival\ Provider = @wmploc.dll,-6502 InvokeProgID = WMP.AudioCD InvokeVerb = play HKLM\SOFTWARE\Classes\WMP.AudioCD\shell\play\command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /device:AudioCD "%L" [MS] MSPlayDVDMovieOnArrival\ Provider = @wmploc.dll,-6502 InvokeProgID = WMP.DVD InvokeVerb = play HKLM\SOFTWARE\Classes\WMP.DVD\shell\play\command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L" [MS] MSPlaySuperVideoCDMovieOnArrival\ Provider = @wmploc.dll,-6502 InvokeProgID = WMP.VCD InvokeVerb = play HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L" [MS] MSPlayVideoCDMovieOnArrival\ Provider = @wmploc.dll,-6502 InvokeProgID = WMP.VCD InvokeVerb = play HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L" [MS] MSPromptEachTime\ Provider = @C:\WINDOWS\system32\shell32.dll,-17411 ProgID = Shell.Autoplay InitCmdLine = PromptEachTime HKLM\SOFTWARE\Classes\Shell.Autoplay\CLSID\(Default) = {995C996E-D918-4a8c-A302-45719A6F4EA7} -> {HKLM...CLSID} = Shell Hardware Mixed Content Handler \LocalServer32\(Default) = C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} [MS] MSPromptEachTimeNoContent\ Provider = @C:\WINDOWS\system32\shell32.dll,-17411 ProgID = Shell.Autoplay InitCmdLine = PromptEachTimeNoContent HKLM\SOFTWARE\Classes\Shell.Autoplay\CLSID\(Default) = {995C996E-D918-4a8c-A302-45719A6F4EA7} -> {HKLM...CLSID} = Shell Hardware Mixed Content Handler \LocalServer32\(Default) = C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} [MS] MSWMPBurnCDOnArrival\ Provider = @wmploc.dll,-6502 InvokeProgID = WMP.BurnCD InvokeVerb = Burn HKLM\SOFTWARE\Classes\WMP.BurnCD\shell\Burn\Command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:CDWrite /Device:"%L" [MS] NeroBurningROM10CopyCD\ Provider = Nero Burning ROM 10 InvokeProgID = Nero.BurningROM.10.AutoPlay InvokeVerb = CopyCD HKLM\SOFTWARE\Classes\Nero.BurningROM.10.AutoPlay\shell\CopyCD\command\(Default) = C:\Program Files (x86)\Nero\Nero 10\Nero Burning ROM\nero.exe -w /Dialog:DiscCopy [Nero AG] NeroBurningROM10LaunchNBR\ Provider = Nero Burning ROM 10 InvokeProgID = Nero.BurningROM.10.AutoPlay InvokeVerb = LanchNE HKLM\SOFTWARE\Classes\Nero.BurningROM.10.AutoPlay\shell\LanchNE\command\(Default) = C:\Program Files (x86)\Nero\Nero 10\Nero Burning ROM\nero.exe [Nero AG] NeroExpress10CopyCD\ Provider = Nero Express 10 InvokeProgID = Nero.Express.10.AutoPlay InvokeVerb = CopyCD HKLM\SOFTWARE\Classes\Nero.Express.10.AutoPlay\shell\CopyCD\command\(Default) = C:\Program Files (x86)\Nero\Nero 10\Nero Express\NeroExpress.exe -w /Dialog:DiscCopy [Nero AG] NeroExpress10LaunchNE\ Provider = Nero Express 10 InvokeProgID = Nero.Express.10.AutoPlay InvokeVerb = LanchNE HKLM\SOFTWARE\Classes\Nero.Express.10.AutoPlay\shell\LanchNE\command\(Default) = C:\Program Files (x86)\Nero\Nero 10\Nero Express\NeroExpress.exe [Nero AG] NeroVision10VideoCapture\ Provider = Nero Vision 10 ProgID = Shell.HWEventHandlerShellExecute InitCmdLine = "C:\Program Files (x86)\Nero\Nero 10\Nero Vision\NeroVision.exe" /New:VideoCapture HKLM\SOFTWARE\Classes\Shell.HWEventHandlerShellExecute\CLSID\(Default) = {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7} -> {HKLM...CLSID} = Shell Execute Hardware Event Handler \LocalServer32\(Default) = C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7} [MS] PDVD10PlayBluRayOnArrival\ Provider = PowerDVD 10 InvokeProgID = BluRay InvokeVerb = PlayWithPowerDVD10 HKLM\SOFTWARE\Classes\BluRay\shell\PlayWithPowerDVD10\Command\(Default) = "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe" "%L" [CyberLink Corp.] PDVD10PlayCDAudioOnArrival\ Provider = PowerDVD 10 InvokeProgID = AudioCD InvokeVerb = PlayWithPowerDVD10 HKLM\SOFTWARE\Classes\AudioCD\shell\PlayWithPowerDVD10\Command\(Default) = "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe" "%L" [CyberLink Corp.] PDVD10PlayDVDMovieOnArrival\ Provider = PowerDVD 10 InvokeProgID = DVD InvokeVerb = PlayWithPowerDVD10 HKLM\SOFTWARE\Classes\DVD\shell\PlayWithPowerDVD10\Command\(Default) = "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe" "%L" [CyberLink Corp.] PDVD10PlayEnhancedDVDOnArrival\ Provider = PowerDVD 10 InvokeProgID = EnDVD InvokeVerb = PlayWithPowerDVD10 HKLM\SOFTWARE\Classes\EnDVD\shell\PlayWithPowerDVD10\Command\(Default) = "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe" "%L" [CyberLink Corp.] PDVD10PlaySVCDOnArrival\ Provider = PowerDVD 10 InvokeProgID = SVCD InvokeVerb = PlayWithPowerDVD10 HKLM\SOFTWARE\Classes\SVCD\shell\PlayWithPowerDVD10\Command\(Default) = "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe" "%L" [CyberLink Corp.] PDVD10PlayVCDMovieOnArrival\ Provider = PowerDVD 10 InvokeProgID = VCD InvokeVerb = PlayWithPowerDVD10 HKLM\SOFTWARE\Classes\VCD\shell\PlayWithPowerDVD10\Command\(Default) = "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe" "%L" [CyberLink Corp.] WIA_{62B12F44-E11D-4812-98CB-35664A8860C2}\ Provider = ControlCenter3 CLSID = {A55803CC-4D53-404c-8557-FD63DBA95D24} InitCmdLine = /WiaCmd;C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /StiDevice:%1 /StiEvent:%2; -> {HKLM...CLSID} = WPDShextAutoplay \LocalServer32\(Default) = C:\WINDOWS\system32\WPDShextAutoplay.exe [MS] WIA_{6561A56A-D822-46B4-A96B-A05B12051B14}\ Provider = Readiris CLSID = {A55803CC-4D53-404c-8557-FD63DBA95D24} InitCmdLine = /WiaCmd;C:\Program Files (x86)\Readiris Pro 10 Demo\readiris.exe /StiDevice:%1 /StiEvent:%2; -> {HKLM...CLSID} = WPDShextAutoplay \LocalServer32\(Default) = C:\WINDOWS\system32\WPDShextAutoplay.exe [MS] Non-disabled Scheduled Tasks: {++} ----------------------------- C:\Windows\System32\Tasks Adobe Acrobat Update Task -> launches: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [Adobe Systems Incorporated] Adobe Flash Player Updater -> launches: C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [Adobe Systems Incorporated] AutoKMS -> launches: C:\WINDOWS\AutoKMS\AutoKMS.exe [null data] CCleanerSkipUAC -> launches: "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0) [Piriform Ltd] CreateChoiceProcessTask -> launches: C:\Windows\BrowserChoice\browserchoice.exe /launch [file not found] Driver Booster SkipUAC (Fernand) -> launches: C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe /skipuac [file not found] GoogleUpdateTaskMachineCore -> launches: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c [Google Inc.] GoogleUpdateTaskMachineUA -> launches: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler [Google Inc.] HPCeeScheduleForFernand -> launches: C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForFernand (null) [null data] HPCeeScheduleForFERNAND-HP$ -> launches: C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForFERNAND-HP$ (null) [null data] HRWOUO -> launches: C:\Users\Fernand\AppData\Roaming\HRWOUO.exe /infocmdline=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 [file not found] MirageAgent -> (HIDDEN!) launches: C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [CyberLink] SidebarExecute -> launches: C:\Program Files\Windows Sidebar\sidebar.exe /addGadget [file not found] {65880091-FE1A-4308-A33E-CE1BD8A42E0C} -> launches: C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\JDownloader\JDUninstall.exe" [MS] {9B7ECB96-81D3-4CEB-B7FE-4860381B540B} -> launches: C:\Windows\system32\pcalua.exe -a "C:\Users\Fernand\Downloads\Readiris Pro 10 + Crack\Crack.exe" -d "C:\Users\Fernand\Downloads\Readiris Pro 10 + Crack" [MS] {A74FDF57-5930-43DD-89E6-650D7320EA59} -> launches: C:\Windows\system32\pcalua.exe -a F:\setup.exe -d F:\ [MS] {AE11FDF4-1A54-4341-8A7F-752012AE0C57} -> launches: C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\TornPlusTV_version1.11\Uninstall.exe" -c /fcp=1 [MS] {D812853D-82F4-43A1-8882-B190F7A93411} -> launches: C:\Program Files (x86)\Skype\Phone\Skype.exe [Skype Technologies S.A.] {E132B5D8-46F8-465F-A968-341D7CF99BE2} -> launches: C:\WINDOWS\system32\pcalua.exe -a C:\Users\Fernand\AppData\Local\Temp\devcon.exe -d C:\Users\Fernand\AppData\Local\Temp -c REMOVE *AMDIO [MS] {F3B6F48E-7FF0-4F2F-BE7D-3E33CF4E91D3} -> launches: C:\Windows\system32\pcalua.exe -a "C:\Users\Fernand\Downloads\Nero Multimedia Suite 10.0.13100\Nero Multimedia Suite 10.0.13100\Nero Multimedia Suite 10.0.13100.exe" -d "C:\Users\Fernand\Downloads\Nero Multimedia Suite 10.0.13100\Nero Multimedia Suite 10.0.13100" [MS] C:\Windows\System32\Tasks\Hewlett-Packard\HP Support Assistant HP Support Assistant Quick Start -> launches: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart [null data] PC Health Analysis -> launches: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis [null data] Update Check -> launches: C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe /s /p 1 [null data] C:\Windows\System32\Tasks\Microsoft\Windows\.NET Framework .NET Framework NGEN v4.0.30319 -> (HIDDEN!) launches: {84F0FAE1-C27B-4F6F-807B-28CF6F96287D} -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = mscoree.dll [MS] .NET Framework NGEN v4.0.30319 64 -> (HIDDEN!) launches: {429BC048-379E-45E0-80E4-EB1977941B5C} -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = mscoree.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client AD RMS Rights Policy Template Management (Manual) -> launches: {BF5CB148-7C77-4d8a-A53E-D81C70CF743C} -> {HKLM...CLSID} = AD RMS Rights Policy Template Management (Manual) Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\msdrm.dll [MS] -> {HKLM...Wow...CLSID} = AD RMS Rights Policy Template Management (Manual) Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\msdrm.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\AppID SmartScreenSpecific -> launches: {9f2b0085-9218-42a1-88b0-9f0e65851666} -> {HKLM...CLSID} = Windows SmartScreen Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\apprepsync.dll [MS] -> {HKLM...Wow...CLSID} = Windows SmartScreen Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\apprepsync.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Application Experience AitAgent -> launches: aitagent /increment [MS] Microsoft Compatibility Appraiser -> launches: %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy [MS] ProgramDataUpdater -> launches: %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate [MS] StartupAppTask -> launches: %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask [MS] C:\Windows\System32\Tasks\Microsoft\Windows\ApplicationData CleanupTemporaryState -> launches: %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Autochk Proxy -> launches: %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Bluetooth UninstallDeviceTask -> launches: BthUdTask.exe $(Arg0) [MS] C:\Windows\System32\Tasks\Microsoft\Windows\CertificateServicesClient SystemTask -> launches: {58fb76b9-ac85-4e55-ac04-427593b1d060} -> {HKLM...CLSID} = Certificate Services Client Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\dimsjob.dll [MS] -> {HKLM...Wow...CLSID} = Certificate Services Client Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\dimsjob.dll [MS] UserTask -> launches: {58fb76b9-ac85-4e55-ac04-427593b1d060} -> {HKLM...CLSID} = Certificate Services Client Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\dimsjob.dll [MS] -> {HKLM...Wow...CLSID} = Certificate Services Client Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\dimsjob.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Chkdsk ProactiveScan -> launches: {cf4270f5-2e43-4468-83b3-a8c45bb33ea1} -> {HKLM...CLSID} = Proactive Scan \InProcServer32\(Default) = C:\Windows\System32\pstask.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program BthSQM -> (HIDDEN!) launches: {c8367320-6f85-11e0-a1f0-0800200c9a66} -> {HKLM...CLSID} = BthSQM \InProcServer32\(Default) = C:\WINDOWS\System32\BthSQM.dll [MS] Consolidator -> launches: %SystemRoot%\System32\wsqmcons.exe [MS] KernelCeipTask -> (HIDDEN!) launches: {e7ed314f-2816-4c26-aeb5-54a34d02404c} -> {HKLM...CLSID} = KernelCeipCustomHandler \InProcServer32\(Default) = C:\WINDOWS\System32\kernelceip.dll [MS] UsbCeip -> (HIDDEN!) launches: {c27f6b1d-fe0b-45e4-9257-38799fa69bc8} -> {HKLM...CLSID} = UsbCeip \InProcServer32\(Default) = C:\WINDOWS\System32\usbceip.dll [MS] -> {HKLM...Wow...CLSID} = UsbCeip \InProcServer32\(Default) = C:\WINDOWS\System32\usbceip.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Data Integrity Scan Data Integrity Scan for Crash Recovery -> (HIDDEN!) launches: {DCFD3EA8-D960-4719-8206-490AE315F94F} -> {HKLM...CLSID} = Data Integrity Scan \InProcServer32\(Default) = C:\Windows\System32\discan.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Defrag ScheduledDefrag -> launches: %windir%\system32\defrag.exe -c -h -o -$ [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Device Setup Metadata Refresh -> (HIDDEN!) launches: {23C1F3CF-C110-4512-ACA9-7B6174ECE888} -> {HKLM...CLSID} = DsmRefreshTask Class \InProcServer32\(Default) = C:\WINDOWS\System32\DeviceSetupManagerAPI.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Diagnosis Scheduled -> (HIDDEN!) launches: {c1f85ef8-bcc2-4606-bb39-70c523715eb3} -> {HKLM...CLSID} = ScheduledDiagnosticCustomHandler \InProcServer32\(Default) = C:\WINDOWS\System32\sdiagschd.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\DiskCleanup SilentCleanup -> launches: %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive% [MS] C:\Windows\System32\Tasks\Microsoft\Windows\DiskFootprint Diagnostics -> launches: {5b6b6834-34f0-49b9-ad4e-81d4994c7a74} -> {HKLM...CLSID} = Disk Footprint Diagnostics Task \InProcServer32\(Default) = C:\WINDOWS\system32\DfpCommon.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\FileHistory File History (maintenance mode) -> launches: {89917B7C-A1A6-11DF-8BF6-18A90531A85A} -> {HKLM...CLSID} = FhTaskHandler Class \InProcServer32\(Default) = C:\WINDOWS\System32\fhtask.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Location Notifications -> launches: %windir%\System32\LocationNotifications.exe [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance WinSAT -> launches: A9A33436-678B-4c9c-A211-7CC38785E79D -> {HKLM...CLSID} = WinSAT Task Manger Task \InProcServer32\(Default) = C:\WINDOWS\system32\WinSATAPI.dll [MS] -> {HKLM...Wow...CLSID} = WinSAT Task Manger Task \InProcServer32\(Default) = C:\WINDOWS\system32\WinSATAPI.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Media Center ActivateWindowsSearch -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch [MS] ConfigureInternetTimeService -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService [MS] DispatchRecoveryTasks -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) [MS] ehDRMInit -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DRMInit [MS] InstallPlayReady -> launches: %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) [MS] mcupdate -> launches: %SystemRoot%\ehome\mcupdate $(Arg0) [MS] mcupdate_scheduled -> launches: %SystemRoot%\ehome\mcupdate -crl -hms -pscn 15 [MS] MediaCenterRecoveryTask -> launches: %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask [MS] ObjectStoreRecoveryTask -> launches: %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask [MS] OCURActivate -> launches: %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate [MS] OCURDiscovery -> launches: %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) [MS] PBDADiscovery -> launches: %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery [MS] PBDADiscoveryW1 -> launches: %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery [MS] PBDADiscoveryW2 -> launches: %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery [MS] PvrRecoveryTask -> launches: %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask [MS] PvrScheduleTask -> launches: %SystemRoot%\ehome\mcupdate.exe -PvrSchedule [MS] RegisterSearch -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) [MS] ReindexSearchRoot -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot [MS] SqlLiteRecoveryTask -> launches: %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask [MS] StartRecording -> launches: %SystemRoot%\ehome\ehrec /StartRecording [MS] UpdateRecordPath -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) [MS] C:\Windows\System32\Tasks\Microsoft\Windows\MemoryDiagnostic ProcessMemoryDiagnosticEvents -> (HIDDEN!) launches: {8168e74a-b39f-46d8-adcd-7bed477b80a3} -> {HKLM...CLSID} = MemoryDiagnosticTaskHandler \InProcServer32\(Default) = C:\WINDOWS\System32\MemoryDiagnostic.dll [MS] RunFullMemoryDiagnostic -> (HIDDEN!) launches: {8168e74a-b39f-46d8-adcd-7bed477b80a3} -> {HKLM...CLSID} = MemoryDiagnosticTaskHandler \InProcServer32\(Default) = C:\WINDOWS\System32\MemoryDiagnostic.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts MNO Metadata Parser -> launches: %SystemRoot%\System32\MbaeParserTask.exe [MS] C:\Windows\System32\Tasks\Microsoft\Windows\MobilePC HotStart -> launches: {06DA0625-9701-43da-BFD7-FBEEA2180A1E} [InProcServer32 entry not found] C:\Windows\System32\Tasks\Microsoft\Windows\MUI Lpksetup -> launches: C:\Windows\System32\lpksetup.exe -v [MS] LPRemove -> launches: %windir%\system32\lpremove.exe [MS] Mcbuilder -> launches: C:\Windows\System32\mcbuilder.exe [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia SystemSoundsService -> launches: {2DEA658F-54C1-4227-AF9B-260AB5FC3543} -> {HKLM...CLSID} = Microsoft PlaySoundService Class \InProcServer32\(Default) = C:\WINDOWS\System32\PlaySndSrv.dll [MS] -> {HKLM...Wow...CLSID} = Microsoft PlaySoundService Class \InProcServer32\(Default) = C:\WINDOWS\System32\PlaySndSrv.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\NetCfg BindingWorkItemQueueHandler -> launches: {5AA199A0-1CED-43A5-9B85-3226086738A3} -> {HKLM...CLSID} = Binding Engine Task Handler \InProcServer32\(Default) = C:\Windows\System32\netcfgx.dll [MS] -> {HKLM...Wow...CLSID} = Binding Engine Task Handler \InProcServer32\(Default) = C:\Windows\SysWOW64\netcfgx.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\NetTrace GatherNetworkInfo -> launches: %windir%\system32\gatherNetworkInfo.vbs [null data] C:\Windows\System32\Tasks\Microsoft\Windows\PI Secure-Boot-Update -> launches: {5014B7C8-934E-4262-9816-887FA745A6C4} -> {HKLM...CLSID} = TPM Maintenance Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\TpmTasks.dll [MS] Sqm-Tasks -> launches: {5014B7C8-934E-4262-9816-887FA745A6C4} -> {HKLM...CLSID} = TPM Maintenance Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\TpmTasks.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Plug and Play Device Install Group Policy -> (HIDDEN!) launches: {60400283-b242-4fa8-8c25-caf695b88209} -> {HKLM...CLSID} = Device Installation Group Policy Task Handler \InProcServer32\(Default) = C:\Windows\System32\pnppolicy.dll [MS] Device Install Reboot Required -> (HIDDEN!) launches: {48794782-6a1f-47b9-bd52-1d5f95d49c1b} -> {HKLM...CLSID} = Device Installation Reboot Dialog Task \InProcServer32\(Default) = C:\Windows\System32\pnpui.dll [MS] Plug and Play Cleanup -> launches: {DEF03232-9688-11E2-BE7F-B4B52FD966FF} -> {HKLM...CLSID} = Plug and Play Maintenance Task \InProcServer32\(Default) = C:\Windows\System32\pnpclean.dll [MS] Sysprep Generalize Drivers -> launches: %SystemRoot%\System32\drvinst.exe 6 [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics AnalyzeSystem -> launches: {927ea2af-1c54-43d5-825e-0074ce028eee} -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = C:\WINDOWS\System32\energytask.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\RAC RacTask -> (HIDDEN!) launches: {42060D27-CA53-41f5-96E4-B1E8169308A6} -> {HKLM...CLSID} = ReliabilityAnalysisCustomHandler \InProcServer32\(Default) = C:\WINDOWS\system32\RacEngn.dll [MS] -> {HKLM...Wow...CLSID} = ReliabilityAnalysisCustomHandler \InProcServer32\(Default) = C:\WINDOWS\system32\RacEngn.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Ras MobilityManager -> launches: {c463a0fc-794f-4fdf-9201-01938ceacafa} -> {HKLM...CLSID} = RasMobilityManager \InProcServer32\(Default) = C:\WINDOWS\system32\rasmbmgr.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Registry RegIdleBackup -> (HIDDEN!) launches: {ca767aa8-9157-4604-b64b-40747123d5f2} -> {HKLM...CLSID} = RegistryIdleBackupHandler \InProcServer32\(Default) = C:\WINDOWS\System32\regidle.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\RemoteAssistance RemoteAssistanceTask -> (HIDDEN!) launches: %windir%\system32\RAServer.exe /offerraupdate [MS] C:\Windows\System32\Tasks\Microsoft\Windows\RemovalTools MRT_HB -> launches: C:\WINDOWS\system32\MRT.exe /EHB /Q [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Servicing StartComponentCleanup -> launches: 752073A1-23F2-4396-85F0-8FDB879ED0ED [InProcServer32 entry not found] C:\Windows\System32\Tasks\Microsoft\Windows\SettingSync BackgroundUploadTask -> (HIDDEN!) launches: {59B9640B-3F70-4D1C-B159-F26EEB8A4C87} -> {HKLM...CLSID} = Delayed Background Upload Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\SettingSyncCore.dll [MS] -> {HKLM...Wow...CLSID} = Delayed Background Upload Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\SettingSyncCore.dll [MS] BackupTask -> (HIDDEN!) launches: {60A4C78C-E2B8-4E6E-876F-DA203B02C05E} -> {HKLM...CLSID} = Backup Upload Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\SettingSyncCore.dll [MS] -> {HKLM...Wow...CLSID} = Backup Upload Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\SettingSyncCore.dll [MS] NetworkStateChangeTask -> (HIDDEN!) launches: {A4173A49-F373-4475-9A0F-2D615204DC20} -> {HKLM...CLSID} = Network State Change Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\SettingSyncCore.dll [MS] -> {HKLM...Wow...CLSID} = Network State Change Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\SettingSyncCore.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Setup\gwx launchtrayprocess -> launches: %windir%\system32\GWX\GWX.exe /tasklaunch [MS] refreshgwxconfig -> launches: %windir%\system32\GWX\GWXConfigManager.exe /RefreshConfig [MS] refreshgwxcontent -> launches: %windir%\system32\GWX\GWXConfigManager.exe /RefreshContent [MS] runappraiser -> launches: %windir%\system32\GWX\GWXConfigManager.exe /RunAppraiser [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Shell CreateObjectTask -> (HIDDEN!) launches: {990a9f8f-301f-45f7-8d0e-68c5952dba43} -> {HKLM...CLSID} = Shell Create Object Task Delegate \InProcServer32\(Default) = C:\WINDOWS\system32\shell32.dll [MS] -> {HKLM...Wow...CLSID} = Shell Create Object Task Delegate \InProcServer32\(Default) = C:\WINDOWS\system32\shell32.dll [MS] FamilySafetyMonitor -> launches: %windir%\System32\wpcmon.exe [MS] FamilySafetyRefresh -> launches: {EBF00FCB-0769-4b81-9BEC-6C05514111AA} -> {HKLM...CLSID} = FamilySafety.WebSync \InProcServer32\(Default) = C:\Windows\System32\WpcWebSync.dll [MS] IndexerAutomaticMaintenance -> launches: {3FBA60A6-7BF5-4868-A2CA-6623B3DFFEA6} -> {HKLM...CLSID} = Automatic Maintenance task to enable Windows Search to make progress while in Connected Standby \InProcServer32\(Default) = C:\WINDOWS\System32\srchadmin.dll [MS] -> {HKLM...Wow...CLSID} = Automatic Maintenance task to enable Windows Search to make progress while in Connected Standby \InProcServer32\(Default) = C:\WINDOWS\System32\srchadmin.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\SideShow GadgetManager -> launches: {FF87090D-4A9A-4f47-879B-29A80C355D61} [InProcServer32 entry not found] C:\Windows\System32\Tasks\Microsoft\Windows\SkyDrive Idle Sync Maintenance Task -> launches: {bf6c1e47-86ec-4194-9ce5-13c15dcb2001} [InProcServer32 entry not found] Routine Maintenance Task -> launches: {1b1f472e-3221-4826-97db-2c2324d389ae} [InProcServer32 entry not found] C:\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform SvcRestartTask -> (HIDDEN!) launches: {B1AEBB5D-EAD9-4476-B375-9C3ED9F32AFC} -> {HKLM...CLSID} = SppSvcRestartTaskHandler Class \InProcServer32\(Default) = C:\WINDOWS\System32\sppcext.dll [MS] -> {HKLM...Wow...CLSID} = SppSvcRestartTaskHandler Class \InProcServer32\(Default) = C:\WINDOWS\System32\sppcext.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\SpacePort SpaceAgentTask -> launches: %windir%\system32\SpaceAgent.exe [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Sysmain WsSwapAssessmentTask -> launches: %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask [MS] C:\Windows\System32\Tasks\Microsoft\Windows\SystemRestore SR -> launches: %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Task Manager Interactive -> (HIDDEN!) launches: {855fec53-d2e4-4999-9e87-3414e9cf0ff4} -> {HKLM...CLSID} = RunTask \InProcServer32\(Default) = C:\WINDOWS\system32\wdc.dll [MS] -> {HKLM...Wow...CLSID} = RunTask \InProcServer32\(Default) = C:\WINDOWS\system32\wdc.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\TaskScheduler Idle Maintenance -> launches: {57BFCFDD-EEE4-4DBB-A751-3CDEB169FF44} -> {HKLM...CLSID} = Maintenance Launcher Handler \InProcServer32\(Default) = C:\WINDOWS\system32\msched.dll [MS] Maintenance Configurator -> launches: {645E29EA-4B0A-464C-8B7D-1A6B9F9D92A8} -> {HKLM...CLSID} = Maintenance Configurator \InProcServer32\(Default) = C:\WINDOWS\system32\msched.dll [MS] Manual Maintenance -> launches: {57BFCFDD-EEE4-4DBB-A751-3CDEB169FF44} -> {HKLM...CLSID} = Maintenance Launcher Handler \InProcServer32\(Default) = C:\WINDOWS\system32\msched.dll [MS] Regular Maintenance -> launches: {57BFCFDD-EEE4-4DBB-A751-3CDEB169FF44} -> {HKLM...CLSID} = Maintenance Launcher Handler \InProcServer32\(Default) = C:\WINDOWS\system32\msched.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Tcpip IpAddressConflict1 -> launches: %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem [MS] IpAddressConflict2 -> launches: %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem [MS] C:\Windows\System32\Tasks\Microsoft\Windows\TextServicesFramework MsCtfMonitor -> (HIDDEN!) launches: {01575cfe-9a55-4003-a5e1-f38d1ebdcbe1} -> {HKLM...CLSID} = MsCtfMonitor task handler \InProcServer32\(Default) = C:\WINDOWS\system32\MsCtfMonitor.dll [MS] -> {HKLM...Wow...CLSID} = MsCtfMonitor task handler \InProcServer32\(Default) = C:\WINDOWS\system32\MsCtfMonitor.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Time Synchronization ForceSynchronizeTime -> launches: {A31AD6C2-FF4C-43D4-8E90-7101023096F9} -> {HKLM...CLSID} = Time Synchronization Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\TimeSyncTask.dll [MS] SynchronizeTime -> launches: %windir%\system32\sc.exe start w32time task_started [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Time Zone SynchronizeTimeZone -> launches: %windir%\system32\tzsync.exe [MS] C:\Windows\System32\Tasks\Microsoft\Windows\TPM Tpm-Maintenance -> launches: {5014B7C8-934E-4262-9816-887FA745A6C4} -> {HKLM...CLSID} = TPM Maintenance Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\TpmTasks.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\UPnP UPnPHostConfig -> launches: sc.exe config upnphost start= auto [MS] C:\Windows\System32\Tasks\Microsoft\Windows\WDI ResolutionHost -> (HIDDEN!) launches: {900be39d-6be8-461a-bc4d-b0fa71f5ecb1} -> {HKLM...CLSID} = DiagnosticInfrastructureCustomHandler \InProcServer32\(Default) = C:\WINDOWS\System32\wdi.dll [MS] -> {HKLM...Wow...CLSID} = DiagnosticInfrastructureCustomHandler \InProcServer32\(Default) = C:\WINDOWS\System32\wdi.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Windows Error Reporting QueueReporting -> launches: %windir%\system32\wermgr.exe -queuereporting [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Windows Filtering Platform BfeOnServiceStartTypeChange -> (HIDDEN!) launches: %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Windows Media Sharing UpdateLibrary -> launches: "%ProgramFiles%\Windows Media Player\wmpnscfg.exe" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\WindowsBackup ConfigNotification -> launches: %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION [MS] C:\Windows\System32\Tasks\Microsoft\Windows\WindowsUpdate Scheduled Start -> launches: C:\WINDOWS\system32\sc.exe start wuauserv [MS] Scheduled Start With Network -> launches: C:\WINDOWS\system32\sc.exe start wuauserv [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Wininet CacheTask -> launches: {0358b920-0ac7-461f-98f4-58e32cd89148} -> {HKLM...CLSID} = Wininet Cache task object \InProcServer32\(Default) = C:\WINDOWS\system32\wininet.dll [MS] -> {HKLM...Wow...CLSID} = Wininet Cache task object \InProcServer32\(Default) = C:\WINDOWS\system32\wininet.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\WOF WIM-Hash-Management -> launches: {B7BFFB5A-EFA8-4D8C-BBDE-C8D5FAAF54A1} -> {HKLM...CLSID} = WOF Task Handler \InProcServer32\(Default) = C:\WINDOWS\system32\WofTasks.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Work Folders Work Folders Logon Synchronization -> launches: {97d47d56-3777-49fb-8e8f-90d7e30e1a1e} -> {HKLM...CLSID} = Work Folder Logon Trigger Class \InProcServer32\(Default) = C:\Windows\System32\WorkFoldersShell.dll [MS] Work Folders Maintenance Work -> launches: {63260bce-a3fb-4a34-aa51-d4d8e877b62b} -> {HKLM...CLSID} = Work Folder Maintenance Task Class \InProcServer32\(Default) = C:\Windows\System32\WorkFoldersShell.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows\WS Badge Update -> launches: {00CCDDF6-5107-424D-853D-3907AE5502DC} -> {HKLM...CLSID} = WinStore Tile Badge Updater \InProcServer32\(Default) = C:\WINDOWS\winstore\WinStoreUI.dll [MS] License Validation -> (HIDDEN!) launches: rundll32.exe WSClient.dll,WSpTLR licensing [MS] Sync Licenses -> launches: {10F591BE-3C84-418A-86DD-BAA002E2F36E} -> {HKLM...CLSID} = WinStore License Sync task \InProcServer32\(Default) = C:\WINDOWS\winstore\WinStoreUI.dll [MS] WSRefreshBannedAppsListTask -> (HIDDEN!) launches: rundll32.exe WSClient.dll,RefreshBannedAppsList [MS] WSTask -> launches: {E52C9A25-F3E8-49E4-BAA7-FAD0EF620129} -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = C:\WINDOWS\System32\WSService.dll [MS] C:\Windows\System32\Tasks\Microsoft\Windows Live\SOXE Extractor Definitions Update Task -> launches: {3519154C-227E-47F3-9CC9-12C3F05817F1} -> {HKLM...Wow...CLSID} = Windows Live Social Object Extractor Engine Definition Updater \InProcServer32\(Default) = C:\Program Files (x86)\Windows Live\SOXE\wlsoxe.dll [MS] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = %SystemRoot%\system32\napinsp.dll [MS] 000000000002\LibraryPath = %SystemRoot%\system32\pnrpnsp.dll [MS] 000000000003\LibraryPath = %SystemRoot%\system32\pnrpnsp.dll [MS] 000000000004\LibraryPath = %SystemRoot%\system32\NLAapi.dll [MS] 000000000005\LibraryPath = %SystemRoot%\System32\mswsock.dll [MS] 000000000006\LibraryPath = %SystemRoot%\System32\winrnr.dll [MS] 000000000007\LibraryPath = %SystemRoot%\system32\wshbth.dll [MS] HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\ {++} 000000000001\LibraryPath = %SystemRoot%\system32\napinsp.dll [MS] 000000000002\LibraryPath = %SystemRoot%\system32\pnrpnsp.dll [MS] 000000000003\LibraryPath = %SystemRoot%\system32\pnrpnsp.dll [MS] 000000000004\LibraryPath = %SystemRoot%\system32\NLAapi.dll [MS] 000000000005\LibraryPath = %SystemRoot%\System32\mswsock.dll [MS] 000000000006\LibraryPath = %SystemRoot%\System32\winrnr.dll [MS] 000000000007\LibraryPath = %SystemRoot%\system32\wshbth.dll [MS] Transport Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 11 HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries64\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 11 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ {553891B7-A0D5-4526-BE18-D3CE461D6310} = (no title provided) -> {HKLM...CLSID} = Classic Explorer Bar \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer64.dll [IvoSoft] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\ {553891B7-A0D5-4526-BE18-D3CE461D6310} = (no title provided) -> {HKLM...Wow...CLSID} = Classic Explorer Bar \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer32.dll [IvoSoft] Explorer Bars HKLM\SOFTWARE\Classes\CLSID\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}\(Default) = Groove Folder Synchronization Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS] HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}\(Default) = Groove Folder Synchronization Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\ {2670000A-7350-4F3C-8081-5663EE0C6C49}\ ButtonText = Verzenden naar OneNote MenuText = &Verzenden naar OneNote CLSIDExtension = {48E73304-E1D6-4330-914C-F5F514E3486C} -> {HKLM...CLSID} = Send to OneNote from Internet Explorer button \InProcServer32\(Default) = C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll [MS] {56753E59-AF1D-4FBA-9E15-31557124ADA2}\ MenuText = Classic IE9 Settings Exec = C:\Program Files\Classic Shell\ClassicIE9_32.exe [IvoSoft] {64964764-1101-4BBD-8891-B56B1A53B9B3}\ BandCLSID = {553891B7-A0D5-4526-BE18-D3CE461D6310} -> {HKLM...CLSID} = Classic Explorer Bar \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer64.dll [IvoSoft] {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ ButtonText = &Gekoppelde notities van OneNote MenuText = &Gekoppelde notities van OneNote CLSIDExtension = {FFFDC614-B694-4AE6-AB38-5D6374584B52} -> {HKLM...CLSID} = Linked Notes button \InProcServer32\(Default) = C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll [MS] {EE932B49-D5C0-4D19-A3DA-CE0849258DE6}\ ButtonText = Free YouTube Download MenuText = Free YouTube Download CLSIDExtension = {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\ {219C3416-8CB2-491A-A3C7-D9FCDDC9D600}\ ButtonText = @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 MenuText = @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 CLSIDExtension = {5F7B1267-94A9-47F5-98DB-E99415F33AEC} -> {HKLM...Wow...CLSID} = BlogThisToolbarButton Class \InProcServer32\(Default) = C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll [MS] {25510184-5A38-4A99-B273-DCA8EEF6CD08}\ ButtonText = @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 MenuText = @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 Exec = C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe [null data] {2670000A-7350-4F3C-8081-5663EE0C6C49}\ ButtonText = Verzenden naar OneNote MenuText = &Verzenden naar OneNote CLSIDExtension = {48E73304-E1D6-4330-914C-F5F514E3486C} -> {HKLM...Wow...CLSID} = Send to OneNote from Internet Explorer button \InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll [MS] {56753E59-AF1D-4FBA-9E15-31557124ADA2}\ MenuText = Classic IE9 Settings Exec = C:\Program Files\Classic Shell\ClassicIE9_32.exe [IvoSoft] {64964764-1101-4BBD-8891-B56B1A53B9B3}\ BandCLSID = {553891B7-A0D5-4526-BE18-D3CE461D6310} -> {HKLM...Wow...CLSID} = Classic Explorer Bar \InProcServer32\(Default) = C:\Program Files\Classic Shell\ClassicExplorer32.dll [IvoSoft] {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\ ButtonText = &Gekoppelde notities van OneNote MenuText = &Gekoppelde notities van OneNote CLSIDExtension = {FFFDC614-B694-4AE6-AB38-5D6374584B52} -> {HKLM...Wow...CLSID} = Linked Notes button \InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll [MS] {A95FE080-8F5D-11D2-A20B-00AA003C157A}\ ButtonText = @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 MenuText = @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 Script = res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 [Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ Adobe Acrobat Update Service, AdobeARMservice, "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [Adobe Systems Incorporated] AMD External Events Utility, AMD External Events Utility, C:\WINDOWS\system32\atiesrxx.exe [AMD] AMD FUEL Service, AMD FUEL Service, C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe /launchService [Advanced Micro Devices, Inc.] Andrea ST Filters Service, AESTFilters, C:\Program Files\IDT\WDM\AESTSr64.exe [Andrea Electronics Corporation] App Readiness, AppReadiness, C:\WINDOWS\System32\svchost.exe -k AppReadiness {C:\WINDOWS\system32\AppReadiness.dll [MS]} Audio Service, STacSV, C:\Program Files\IDT\WDM\STacSV64.exe [IDT, Inc.] AVG WatchDog, avgwd, "C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe" [AVG Technologies CZ, s.r.o.] AVGIDSAgent, AVGIDSAgent, "C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe" [AVG Technologies CZ, s.r.o.] Classic Shell Service, ClassicShellService, "C:\Program Files\Classic Shell\ClassicShellService.exe" [IvoSoft] Freemake Improver, Freemake Improver, "C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe" [null data] GamesAppIntegrationService, GamesAppIntegrationService, "C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe" [WildTangent] HP Auto, HPAuto, "C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe" [Hewlett-Packard] HP Client Services, HPClientSvc, "C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe" [Hewlett-Packard Company] HP Quick Synchronization Service, HPDrvMntSvc.exe, "C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe" [Hewlett-Packard Company] HP Service, hpsrv, C:\WINDOWS\system32\Hpservice.exe [Hewlett-Packard Company] HP Software Framework Service, hpqwmiex, "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe" [Hewlett-Packard Company] HP Support Assistant Service, HP Support Assistant Service, "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe" [null data] HP Support Solutions Framework Service, HPSupportSolutionsFrameworkService, "C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe" [null data] HPWMISVC, HPWMISVC, C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [Hewlett-Packard Development Company, L.P.] Hulpservice voor toepassingshost, AppHostSvc, C:\WINDOWS\system32\svchost.exe -k apphost {C:\WINDOWS\system32\inetsrv\apphostsvc.dll [MS]} IconMan_R, IconMan_R, "C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe" [Realsil Microelectronics Inc.] MBAMScheduler, MBAMScheduler, "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" [Malwarebytes Corporation] MBAMService, MBAMService, "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe" [Malwarebytes Corporation] Message Queuing, MSMQ, C:\WINDOWS\system32\mqsvc.exe [MS] Nero Update, NAUpdate, "C:\Program Files (x86)\Nero\Update\NASvc.exe" [Nero AG] Net.Msmq Listener Adapter, NetMsmqActivator, "C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator [MS] Net.Pipe Listener Adapter, NetPipeActivator, C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [MS] Network Connection Broker, NcbService, C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted {C:\WINDOWS\System32\ncbservice.dll [MS]} Office Software Protection Platform, osppsvc, "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE" [MS] TomTomHOMEService, TomTomHOMEService, "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe" [TomTom] TrueSuiteService, FPLService, "C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe" [HP] Windows Process Activation Service, WAS, C:\WINDOWS\system32\svchost.exe -k iissvcs {C:\WINDOWS\system32\inetsrv\iisw3adm.dll [MS]} World Wide Web Publishing-service, W3SVC, C:\WINDOWS\system32\svchost.exe -k iissvcs {C:\WINDOWS\system32\inetsrv\iisw3adm.dll [MS]} Safe Mode Drivers & Services (subkey name, subkey default value): ----------------------------------------------------------------- HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\ <> SystemEventsBroker, Service <> PEVSystemStart, Service HKLM\System\CurrentControlSet\Control\SafeBoot\Network\ <> SystemEventsBroker, Service <> PEVSystemStart, Service ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\\Users\TEMP.Fernand-HP.001\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\\Users\test\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\\Users\test\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== No Flash Cache Found ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=172 folders=49 92315345 bytes) ==== Empty Temp Folders ====================== C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\WINDOWS\TEMP successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on ma 13/04/2015 at 16:31:13,14 ======================