Logfile of random's system information tool 1.10 (written by random/random) Run by simone at 2015-12-10 21:13:29 Microsoft® Windows Vista™ Home Premium Service Pack 2 System drive C: has 35 GB (31%) free of 113 GB Total RAM: 3066 MB (51% free) ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\simone\AppData\Roaming\Mozilla\Firefox\Profiles\uyg629qk.default "{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 20.0.0.235 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_235.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.40.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5] "Description"=Windows Presentation Foundation plug-in for Mozilla browsers "Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.0] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll C:\Users\simone\AppData\Roaming\Mozilla\Firefox\Profiles\uyg629qk.default\extensions\ abs@avira.com ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-04 460712] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-04 172968] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-04-17 6111232] "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-07-26 13548064] "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-07-26 92704] "MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2015-04-29 981688] "BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184] "Sitecom UDS Control Center"=C:\Program Files\Sitecom\USB Device Server\Control Center.exe [2011-07-05 4105728] "Avira SystrayStartTrigger"=C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [2015-11-23 66320] "avgnt"=C:\Program Files\Avira\Antivirus\avgnt.exe [2015-10-07 782520] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-10-19 6564776] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\acengine] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "BindDirectlyToPropertySetStorage"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tbdelta.exetoolbar783881609.exe] "Debugger="tasklist.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux"=wdmaud.drv "vidc.XVID"=xvidvfw.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-12-10 21:09:04 ----D---- C:\Program Files\trend micro 2015-12-10 21:09:03 ----D---- C:\rsit 2015-12-10 16:26:11 ----D---- C:\ProgramData\Spotnet 2015-12-10 05:18:59 ----A---- C:\Windows\system32\drivers\SynTP.sys 2015-12-10 05:18:58 ----A---- C:\Windows\system32\vsp1cln.exe 2015-12-10 05:18:57 ----A---- C:\Windows\system32\WsmProv.dll 2015-12-10 05:18:57 ----A---- C:\Windows\system32\WsmCl.dll 2015-12-10 05:18:56 ----A---- C:\Windows\system32\WdfCoInstaller01000.dll 2015-12-10 05:18:56 ----A---- C:\Windows\system32\SynTPCo4.dll 2015-12-10 05:18:56 ----A---- C:\Windows\system32\SynTPAPI.dll 2015-12-10 05:18:56 ----A---- C:\Windows\system32\SynCtrl.dll 2015-12-10 05:18:56 ----A---- C:\Windows\system32\SynCOM.dll 2015-12-10 05:18:55 ----A---- C:\Windows\system32\SCP32.DLL 2015-12-10 05:18:54 ----A---- C:\Windows\system32\mstime.dll 2015-12-10 05:18:54 ----A---- C:\Windows\system32\MSSTDFMT.DLL 2015-12-10 05:18:53 ----A---- C:\Windows\system32\LANGWRBK.DLL 2015-12-10 05:18:52 ----A---- C:\Windows\system32\ieencode.dll 2015-12-10 05:18:52 ----A---- C:\Windows\system32\extmgr.dll 2015-12-10 05:18:51 ----A---- C:\Windows\system32\corpol.dll 2015-12-09 20:58:29 ----D---- C:\Users\simone\AppData\Roaming\Avira 2015-12-09 20:52:45 ----A---- C:\Windows\system32\drivers\ssmdrv.sys 2015-12-09 20:52:30 ----A---- C:\Windows\system32\drivers\avkmgr.sys 2015-12-09 20:52:30 ----A---- C:\Windows\system32\drivers\avipbb.sys 2015-12-09 20:52:29 ----A---- C:\Windows\system32\drivers\avgntflt.sys 2015-12-09 20:50:00 ----D---- C:\Program Files\Avira 2015-12-09 20:49:59 ----D---- C:\ProgramData\Avira 2015-12-09 20:10:04 ----D---- C:\Program Files\MSSOAP 2015-12-09 20:10:04 ----D---- C:\Program Files\Common Files\MSSoap 2015-12-09 13:41:01 ----A---- C:\Windows\system32\user32.dll 2015-12-09 13:41:01 ----A---- C:\Windows\system32\d3d10warp.dll 2015-12-09 13:41:01 ----A---- C:\Windows\system32\d3d10level9.dll 2015-12-09 13:41:01 ----A---- C:\Windows\system32\d3d10core.dll 2015-12-09 13:41:01 ----A---- C:\Windows\system32\d3d10_1core.dll 2015-12-09 13:41:01 ----A---- C:\Windows\system32\d3d10_1.dll 2015-12-09 13:41:01 ----A---- C:\Windows\system32\d3d10.dll 2015-12-09 13:41:01 ----A---- C:\Windows\system32\d2d1.dll 2015-12-09 13:41:00 ----A---- C:\Windows\system32\win32k.sys 2015-12-09 13:41:00 ----A---- C:\Windows\system32\FntCache.dll 2015-12-09 13:41:00 ----A---- C:\Windows\system32\DWrite.dll 2015-12-09 13:39:28 ----A---- C:\Windows\system32\els.dll 2015-12-09 13:35:43 ----A---- C:\Windows\system32\comsvcs.dll 2015-12-09 13:35:43 ----A---- C:\Windows\system32\catsrvut.dll 2015-12-09 13:35:34 ----A---- C:\Windows\system32\drivers\rmcast.sys 2015-12-09 13:25:27 ----D---- C:\ProgramData\Samsung 2015-12-08 21:45:37 ----A---- C:\Windows\system32\vbscript.dll 2015-12-08 21:45:37 ----A---- C:\Windows\system32\mshta.exe 2015-12-08 21:45:37 ----A---- C:\Windows\system32\dxtmsft.dll 2015-12-08 21:45:36 ----A---- C:\Windows\system32\urlmon.dll 2015-12-08 21:45:36 ----A---- C:\Windows\system32\msfeedssync.exe 2015-12-08 21:45:36 ----A---- C:\Windows\system32\msfeedsbs.dll 2015-12-08 21:45:36 ----A---- C:\Windows\system32\jsproxy.dll 2015-12-08 21:45:36 ----A---- C:\Windows\system32\jscript.dll 2015-12-08 21:45:35 ----A---- C:\Windows\system32\url.dll 2015-12-08 21:45:35 ----A---- C:\Windows\system32\msfeeds.dll 2015-12-08 21:45:35 ----A---- C:\Windows\system32\ieUnatt.exe 2015-12-08 21:45:35 ----A---- C:\Windows\system32\iertutil.dll 2015-12-08 21:45:34 ----A---- C:\Windows\system32\jscript9.dll 2015-12-08 21:45:33 ----A---- C:\Windows\system32\wininet.dll 2015-12-08 21:45:33 ----A---- C:\Windows\system32\ieframe.dll 2015-12-08 21:45:32 ----A---- C:\Windows\system32\mshtmled.dll 2015-12-08 21:45:32 ----A---- C:\Windows\system32\ieui.dll 2015-12-08 21:45:32 ----A---- C:\Windows\system32\dxtrans.dll 2015-12-08 21:45:29 ----A---- C:\Windows\system32\mshtml.dll 2015-12-08 21:27:22 ----D---- C:\FRST 2015-12-07 22:06:12 ----D---- C:\Users\simone\AppData\Roaming\AVG 2015-12-07 19:01:17 ----D---- C:\ProgramData\F-Secure 2015-12-07 16:08:53 ----D---- C:\Users\simone\AppData\Roaming\Runscanner.net 2015-12-06 23:20:34 ----ASH---- C:\hiberfil.sys 2015-12-06 22:18:07 ----D---- C:\AVG_Remover 2015-12-06 17:32:48 ----D---- C:\Program Files\NVIDIA Corporation 2015-12-05 22:54:35 ----D---- C:\Program Files\Eusing Free Registry Cleaner 2015-12-05 19:08:56 ----D---- C:\ProgramData\TEMP 2015-12-05 19:08:56 ----D---- C:\ProgramData\Logs 2015-12-03 17:40:21 ----D---- C:\Users\simone\AppData\Roaming\27715 2015-12-02 22:36:35 ----D---- C:\S 2015-12-02 22:35:50 ----D---- C:\Users\simone\AppData\Roaming\Opera Software 2015-12-02 22:35:24 ----A---- C:\Windows\system32\msvcp71.dll 2015-12-02 22:35:24 ----A---- C:\Windows\system32\drvc.dll 2015-12-02 22:35:07 ----D---- C:\Program Files\Opera 2015-12-02 22:34:48 ----D---- C:\Program Files\eRightSoft 2015-12-02 16:24:10 ----D---- C:\Program Files\AVG 2015-12-02 16:22:06 ----HD---- C:\ProgramData\Common Files 2015-12-02 16:22:06 ----D---- C:\ProgramData\AVG 2015-12-02 16:21:47 ----D---- C:\Users\simone\AppData\Roaming\RPEng 2015-12-02 16:21:47 ----D---- C:\Program Files\Freemake 2015-12-02 16:11:34 ----D---- C:\ProgramData\Freemake 2015-12-02 14:33:39 ----D---- C:\Program Files\Gabest 2015-12-02 10:05:19 ----A---- C:\Windows\system32\xvidcore.dll 2015-12-02 10:05:18 ----D---- C:\Program Files\Xvid 2015-12-02 10:05:18 ----A---- C:\Windows\system32\xvidvfw.dll 2015-12-02 10:03:47 ----D---- C:\Program Files\AviSynth 2.5 2015-12-02 10:01:58 ----D---- C:\ProgramData\clone.AD 2015-11-18 18:01:52 ----D---- C:\Program Files\VSO 2015-11-18 15:16:08 ----D---- C:\Program Files\MKVToolNix 2015-11-18 14:57:47 ----D---- C:\Users\simone\AppData\Roaming\mkvtoolnix 2015-11-17 00:24:21 ----A---- C:\Windows\system32\ssubtmr6.dll 2015-11-16 23:16:55 ----A---- C:\Windows\system32\drivers\tdx.sys 2015-11-16 23:16:55 ----A---- C:\Windows\system32\drivers\afd.sys 2015-11-16 23:16:45 ----A---- C:\Windows\system32\kerberos.dll 2015-11-16 23:15:03 ----A---- C:\Windows\system32\ntdll.dll 2015-11-16 23:15:02 ----A---- C:\Windows\system32\ntkrnlpa.exe 2015-11-16 23:15:01 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-11-16 23:08:22 ----A---- C:\Windows\system32\drivers\ndis.sys 2015-11-16 23:02:54 ----A---- C:\Windows\system32\ncrypt.dll 2015-11-16 23:02:50 ----A---- C:\Windows\system32\schannel.dll 2015-11-16 23:02:49 ----A---- C:\Windows\system32\bcrypt.dll 2015-11-16 23:02:44 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-11-16 18:38:48 ----A---- C:\Windows\system32\pncrt.dll 2015-11-13 16:41:41 ----D---- C:\Program Files\CCleaner 2015-11-11 11:41:57 ----D---- C:\Program Files\Mozilla Firefox ======List of files/folders modified in the last 1 month====== 2015-12-10 21:13:33 ----D---- C:\Windows\Temp 2015-12-10 21:11:26 ----D---- C:\Windows\Prefetch 2015-12-10 21:09:04 ----RD---- C:\Program Files 2015-12-10 20:52:22 ----D---- C:\Windows\System32 2015-12-10 20:52:22 ----D---- C:\Windows\inf 2015-12-10 20:52:22 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-12-10 20:44:56 ----D---- C:\Windows\Minidump 2015-12-10 20:44:45 ----D---- C:\Windows 2015-12-10 20:42:19 ----D---- C:\Users\simone\AppData\Roaming\GrabIt 2015-12-10 20:20:38 ----D---- C:\Users\simone\AppData\Roaming\vlc 2015-12-10 17:57:37 ----D---- C:\Incompleet 2015-12-10 17:41:10 ----SHD---- C:\System Volume Information 2015-12-10 16:26:17 ----D---- C:\Program Files\Spotnet 2015-12-10 16:26:11 ----HD---- C:\ProgramData 2015-12-10 16:24:07 ----D---- C:\Program Files\Common Files 2015-12-10 12:54:28 ----D---- C:\Windows\Debug 2015-12-10 11:48:06 ----D---- C:\Windows\system32\catroot2 2015-12-09 20:56:06 ----D---- C:\Windows\system32\catroot 2015-12-09 20:52:45 ----D---- C:\Windows\system32\drivers 2015-12-09 20:51:11 ----SHD---- C:\Windows\Installer 2015-12-09 20:49:54 ----D---- C:\ProgramData\Package Cache 2015-12-09 20:14:40 ----HD---- C:\Program Files\InstallShield Installation Information 2015-12-09 20:14:35 ----D---- C:\Program Files\Samsung 2015-12-09 15:19:52 ----D---- C:\Windows\Microsoft.NET 2015-12-09 15:19:22 ----RSD---- C:\Windows\assembly 2015-12-09 14:11:54 ----D---- C:\Windows\rescache 2015-12-09 13:51:51 ----D---- C:\Program Files\Microsoft Silverlight 2015-12-09 13:45:24 ----D---- C:\Windows\system32\XPSViewer 2015-12-09 13:45:24 ----D---- C:\Windows\system32\migration 2015-12-09 13:45:24 ----D---- C:\Windows\ehome 2015-12-09 13:45:24 ----D---- C:\Program Files\Internet Explorer 2015-12-09 13:43:41 ----D---- C:\ProgramData\Microsoft Help 2015-12-09 13:41:15 ----D---- C:\Windows\winsxs 2015-12-09 13:34:38 ----D---- C:\Windows\system32\MRT 2015-12-09 13:27:51 ----A---- C:\Windows\system32\mrt.exe 2015-12-09 04:39:28 ----N---- C:\Windows\system32\MpSigStub.exe 2015-12-09 04:34:18 ----D---- C:\Windows\system32\config 2015-12-09 04:34:11 ----D---- C:\Windows\WinClon 2015-12-09 04:34:11 ----D---- C:\Windows\VMC302 2015-12-09 04:34:11 ----D---- C:\Windows\Tasks 2015-12-09 04:34:11 ----D---- C:\Windows\system32\spool 2015-12-09 04:34:11 ----D---- C:\Windows\system32\Msdtc 2015-12-09 04:34:08 ----D---- C:\Windows\system32\wbem 2015-12-09 04:34:08 ----D---- C:\Windows\registration 2015-12-08 23:49:26 ----SD---- C:\Users\simone\AppData\Roaming\Microsoft 2015-12-08 21:07:16 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2015-12-07 16:50:54 ----D---- C:\Windows\system32\Tasks 2015-12-07 08:17:02 ----D---- C:\Windows\system32\LogFiles 2015-12-06 20:48:34 ----D---- C:\Windows\system32\drivers\etc 2015-12-03 08:56:02 ----D---- C:\Users\simone\AppData\Roaming\HandBrake 2015-12-03 06:25:36 ----D---- C:\Users\simone\AppData\Roaming\DeepBurner 2015-12-03 06:25:35 ----D---- C:\Windows\system32\sysprep 2015-12-03 06:25:35 ----D---- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} 2015-12-03 04:53:58 ----D---- C:\Windows\tapi 2015-12-03 04:51:43 ----A---- C:\Windows\win.ini 2015-12-02 23:25:14 ----D---- C:\Program Files\Malwarebytes Anti-Malware 2015-12-02 22:36:17 ----RSD---- C:\Windows\Fonts 2015-12-02 17:37:25 ----D---- C:\Users\simone\AppData\Roaming\dvdcss 2015-11-26 01:40:10 ----D---- C:\Users\simone\AppData\Roaming\Vso 2015-11-26 01:40:10 ----D---- C:\ProgramData\VSO 2015-11-22 17:31:32 ----D---- C:\Users\simone\AppData\Roaming\transmission 2015-11-18 21:20:18 ----D---- C:\ProgramData\vsosdk 2015-11-18 18:18:54 ----A---- C:\Users\simone\AppData\Roaming\inst.exe 2015-11-17 02:34:52 ----D---- C:\Windows\PolicyDefinitions 2015-11-17 02:34:52 ----D---- C:\Program Files\Windows Journal 2015-11-12 21:44:22 ----D---- C:\Program Files\Mozilla Maintenance Service ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-07-22 319000] R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 245096] R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2015-10-07 136728] R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2015-10-07 37896] R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2015-10-07 31848] R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2015-10-07 108448] R2 KMDFMEMIO;SAMSUNG Kernel Driver; C:\Windows\system32\DRIVERS\kmdfmemio.sys [2006-11-14 13312] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-04-17 2098904] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-10-05 23256] R3 NETw5v32;Stuurprogramma voor Intel(R) Wireless WiFi Link Adapter onder Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-05-20 3663360] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-08-05 44576] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-07-26 7548000] R3 SitecomUDSMBus;UDS Master Bus of Kernel USB Software Bus by TCP; C:\Windows\System32\Drivers\SitecomUDSMBus.sys [2011-06-16 86912] R3 VMC302;Vimicro Camera Service VMC302; C:\Windows\System32\Drivers\VMC302.sys [2008-06-05 242048] R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560] R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-12-28 298496] S0 hitmanpro37duringboot;hitmanpro37duringboot; C:\Windows\system32\drivers\hitmanpro37.sys [] S3 ADDMEM;ADDMEM; \??\C:\Users\ADMINI~1\AppData\Local\Temp\__Samsung_Update\ADDMEM.SYS [] S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888] S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\Windows\system32\DRIVERS\bcm4sbxp.sys [2006-11-02 45056] S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-21 19456] S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160] S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160] S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184] S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-02-14 80424] S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2007-07-15 80936] S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-07-15 16168] S3 drmkaud;Microsoft Kernel DRM-audiodecoder; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632] S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-12-06 170200] S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-10-05 51928] S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192] S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888] S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016] S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664] S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 95408] S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-02-21 50688] S3 SitecomUDSTcpBus;%UDS.SvcDesc%; C:\Windows\System32\Drivers\SitecomUDSTcpBus.sys [2011-06-16 139648] S3 UMPass;Microsoft UMPass Driver; C:\Windows\system32\DRIVERS\umpass.sys [2008-01-21 7680] S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448] S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136] S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656] S4 iaNvStor;Intel(R) Turbo Memory Controller; C:\Windows\system32\DRIVERS\iaNvStor.sys [2008-05-08 226328] S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616] S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128] R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-10-05 9216] R2 AntiVirSchedulerService;Avira Planner; C:\Program Files\Avira\Antivirus\sched.exe [2015-10-07 461672] R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\Antivirus\avguard.exe [2015-10-07 461672] R2 Avira.ServiceHost;Avira Service Host; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [2015-11-23 249624] R2 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service; C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2009-02-20 30312] R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504] R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-05-23 819200] R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504] R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 22216] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-07-26 196608] R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2008-05-23 466944] R2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944] R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 86880] R2 TeamViewer;TeamViewer 10; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2015-03-30 5448464] R3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168] S2 AntiVirMailService;Avira Mail Protection; C:\Program Files\Avira\Antivirus\avmailc.exe [2015-10-07 916968] S2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE [2015-10-07 1210512] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [2015-10-29 777744] S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200] S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-08 269504] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-11 147624] S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408] S3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 284504] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688] S4 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784] S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] -----------------EOF-----------------