Logfile of random's system information tool 1.10 (written by random/random) Run by Laptop at 2016-02-03 19:12:16 Microsoft Windows 8.1 System drive C: has 541 GB (80%) free of 676 GB Total RAM: 8139 MB (66% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:12:26, on 3/02/2016 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.18123) Boot mode: Normal Running processes: C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe C:\Program Files (x86)\CyberLink\Shared files\brs.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files\trend micro\Laptop.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://duckduckgo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {4c60e5ab-5c68-4c59-abaa-885010b24b32} - C:\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65SrcAs.dll (file missing) F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll O2 - BHO: Zonealarm Helper Object - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\bh\zonealarm.dll (file missing) O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing) O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: CyberLink Product - 2013/12/09 20:15:01 (CLKMSVC10_9EC60124) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: Energy Server Service (ESRV_SVC) - Unknown owner - C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: McAfee Security Scan Component Host Service for Sony (McComponentHostServiceSony) - McAfee, Inc. - C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe O23 - Service: Mobile Broadband HL Service - Unknown owner - C:\ProgramData\MobileBrServ\mbbservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NetworkSupport - Sony Corporation - C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: VAIO Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe O23 - Service: VAIO Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe O23 - Service: VAIO Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe O23 - Service: VAIO Entertainment Common Service (SpfService) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: User Energy Server Service (USER_ESRV_SVC) - Unknown owner - C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe O23 - Service: VCService - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update\vuagent.exe O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- End of file - 11522 bytes ======Listing Processes====== wininit.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS C:\WINDOWS\system32\atiesrxx.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\System32\spoolsv.exe "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\Bluetooth Suite\adminservice.exe" C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files\Intel\iCLS Client\HeciServer.exe" dashost.exe {cf0ed11c-4ab8-44cf-a7026a33d6ba3189} "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" "C:\ProgramData\MobileBrServ\mbbservice.exe" -service "C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe" C:\WINDOWS\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe" C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe C:\WINDOWS\SysWOW64\DllHost.exe /Processid:{CB45D4CA-8A34-4EF1-9957-6134E5270E83} C:\WINDOWS\system32\SearchIndexer.exe /Embedding "C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe" "--AUTO_START" "--start" "--address" "127.0.0.1" "--port" "49265" "--depend_on_key" "SYSTEM\CurrentControlSet\Services\ESRV_SVC" "--depend_on_value" "run" "--time_in_ms" "--pause" "5000" "--library" "C:\Program Files\Sony\VAIO Care\ESRV\intel_modeler.dll" "--no_pl" "--watchdog" "10" "--watchdog_cpu_usage_limit" "50" "--end_on_error" "--kernel_priority_boost" "--shutdown_priority_boost" "--device_options" " time=no output=w output_folder='C:\ProgramData\Sony Corporation\VAIO Care\inteldata' limit_output_by=time output_limit=3600000 output_buffer=1024 il='C:\Program Files\Sony\VAIO Care\ESRV\intel_process_input.dll','process_input_options.txt' il='C:\Program Files\Sony\VAIO Care\ESRV\intel_system_power_state_input.dll' il='C:\Program Files\Sony\VAIO Care\ESRV\intel_quality_and_reliability_input.dll' il='C:\Program Files\Sony\VAIO Care\ESRV\acpi_battery_input.dll' il='C:\Program Files\Sony\VAIO Care\ESRV\sema_thermal_input.dll' il='C:\Program Files\Sony\VAIO Care\ESRV\wifi_input.dll' il='C:\Program Files\Sony\VAIO Care\ESRV\devices_use_input.dll','service=yes' il='C:\Program Files\Sony\VAIO Care\ESRV\intel_disktrace_input.dll','pause=60000 working_dir=C:\ProgramData\Sony Corporation\VAIO Care\inteldata override_existing_tracing=no limit_output_by_filesize_mb=100' os='C:\Program Files\Sony\VAIO Care\ESRV\os_counters.txt' " "C:\Program Files\Sony\VAIO Improvement\vim.exe" -System C:\WINDOWS\system32\DllHost.exe /Processid:{B32DAC50-97B2-4BF7-A8DB-418294621529} C:\Windows\System32\wbem\WmiPrvSE.exe "C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" "C:\Program Files\Sony\VAIO Update\vuagent.exe" "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE" "C:\Program Files\Sony\VAIO Care\VCService.exe" "C:\Program Files\Sony\VAIO Care\VCAgent.exe" \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet "C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:848 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:428 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:856 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:844 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:340 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:420 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:420 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe" /RuntimeWide /StopEvent:864 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7ee96022-f1d4-4d65-a8df-dcbcfe213da9 -SystemEventPortName:HostProcess-d9645dff-767f-4f04-8b71-16f8c00f950c -IoCancelEventPortName:HostProcess-efdf212f-a374-4062-bf4f-13fef74256b8 -NonStateChangingEventPortName:HostProcess-aa6f6ed1-ec0e-4b11-95d7-b9395f5bd6fb -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ae69fb93-28b0-4afd-83cb-b48a30cf5525 -DeviceGroupId:WpdFsGroup "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" C:\WINDOWS\System32\WinLogon.exe -SpecialSession -hiberboot "C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe" atieclxx taskhostex.exe C:\WINDOWS\Explorer.EXE "C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE" "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SONYAPO "C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" "C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe" "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 "C:\Program Files (x86)\CyberLink\Shared files\brs.exe" "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0 "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" C:\Windows\System32\wbem\unsecapp.exe -Embedding "" "--start" "--register_port" "--address" "127.0.0.1" "--port" "49266" "--pause_on_user_switching" "--depend_on_key" "SYSTEM\CurrentControlSet\Services\ESRV_SVC" "--depend_on_value" "run" "--time_in_ms" "--pause" "5000" "--library" "C:\Program Files\Sony\VAIO Care\ESRV\intel_modeler.dll" "--no_pl" "--watchdog" "10" "--watchdog_cpu_usage_limit" "50" "--end_on_error" "--kernel_priority_boost" "--shutdown_priority_boost" "--device_options" " time=no output=no output_folder='C:\ProgramData\Sony Corporation\VAIO Care\inteldata\userlogs' limit_output_by=time output_limit=3600000 output_buffer=1024 il='C:\Program Files\Sony\VAIO Care\ESRV\foreground_window_input.dll' " \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe" /Stationary "C:\Program Files\Sony\VAIO Care\VCSystemTray.exe" CheckIoloLicense "C:\WINDOWS\system32\mmc.exe" C:\WINDOWS\system32\eventvwr.msc "C:\Program Files\Sony\VAIO Improvement\vim.exe" -User "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Laptop\Documents\Teksten - internationale pol\DWM\Vluchtelingenkampen en reacties van de media.docx" C:\WINDOWS\splwow64.exe 8192 "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5256 CREDAT:267521 /prefetch:2 "C:\WINDOWS\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding C:\Windows\System32\RuntimeBroker.exe -Embedding "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5256 CREDAT:660752 /prefetch:2 "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5256 CREDAT:2430297 /prefetch:2 "C:\WINDOWS\system32\mmc.exe" "C:\WINDOWS\system32\services.msc" C:\Windows\System32\wbem\WmiPrvSE.exe "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5256 CREDAT:3413471 /prefetch:2 "C:\Users\Laptop\AppData\Local\Microsoft\Windows\INetCache\IE\NRVCUA2R\RSITx64.exe" ======Scheduled tasks folder====== C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-08-05 553896] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}] CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-05-31 66688] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-12-06 885152] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-08-05 211880] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}] MSS+ Identifier - C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll [2014-01-16 96128] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}] Zonealarm Helper Object - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\bh\zonealarm.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}] Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08 202144] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-06 664184] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08 1619352] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-08-20 1214608] "CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-03-24 2184520] "CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208] "Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll,LogiFetch [] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-05-27 3928264] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-05-31 133248] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-07-04 766688] "ISBMgr.exe"=C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2012-08-18 68776] "PMBVolumeWatcher"=C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2012-07-27 724576] "Adobe Reader Speed Launcher"=c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2015-09-24 40336] "Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-06-25 152896] "BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2013-04-26 181208] "AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-12-06 7021880] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-05-31 133248] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "SoftwareSASGeneration"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoRun"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "VIDC.YUY2"=msyuv.dll "vidc.i420"=iyuv_32.dll "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "VIDC.YVYU"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "VIDC.UYVY"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.msvc"=msvidc32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "wave2"=wdmaud.drv "mixer2"=wdmaud.drv "midi2"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2016-02-03 19:12:16 ----D---- C:\rsit 2016-02-03 19:12:16 ----D---- C:\Program Files\trend micro 2016-01-19 08:04:45 ----A---- C:\WINDOWS\system32\mshtml.dll 2016-01-19 08:04:43 ----A---- C:\WINDOWS\system32\jscript9.dll 2016-01-19 08:04:42 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll 2016-01-19 08:04:36 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2016-01-19 08:04:31 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll 2016-01-19 08:04:29 ----A---- C:\WINDOWS\system32\wininet.dll 2016-01-19 08:04:28 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll 2016-01-19 08:04:28 ----A---- C:\WINDOWS\system32\vbscript.dll 2016-01-19 08:04:27 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll 2016-01-19 08:04:27 ----A---- C:\WINDOWS\system32\mshtmled.dll 2016-01-19 08:04:25 ----A---- C:\WINDOWS\system32\urlmon.dll 2016-01-19 08:04:25 ----A---- C:\WINDOWS\system32\inetcomm.dll 2016-01-19 08:04:25 ----A---- C:\WINDOWS\system32\ieframe.dll 2016-01-19 08:04:24 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll 2016-01-19 08:04:24 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll 2016-01-19 08:04:24 ----A---- C:\WINDOWS\system32\msfeeds.dll 2016-01-19 08:04:24 ----A---- C:\WINDOWS\system32\jscript.dll 2016-01-19 08:04:23 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll 2016-01-19 08:04:23 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll 2016-01-19 08:04:23 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll 2016-01-19 08:04:23 ----A---- C:\WINDOWS\system32\ieapfltr.dll 2016-01-19 08:03:03 ----A---- C:\WINDOWS\system32\qedit.dll 2016-01-19 08:03:02 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll 2016-01-19 08:02:40 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll 2016-01-19 08:02:40 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL 2016-01-19 08:02:40 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll 2016-01-19 08:02:39 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL 2016-01-19 08:02:39 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll 2016-01-19 08:02:39 ----A---- C:\WINDOWS\system32\mfcore.dll 2016-01-19 08:02:38 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll 2016-01-19 08:02:38 ----A---- C:\WINDOWS\system32\mfnetsrc.dll 2016-01-19 08:02:37 ----A---- C:\WINDOWS\system32\WMADMOD.DLL 2016-01-19 08:02:37 ----A---- C:\WINDOWS\system32\mfnetcore.dll 2016-01-19 08:02:36 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL 2016-01-19 08:02:36 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll 2016-01-19 08:02:33 ----A---- C:\WINDOWS\system32\evr.dll 2016-01-19 08:02:32 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL 2016-01-19 08:02:32 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL 2016-01-19 08:02:32 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL 2016-01-19 08:02:32 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll 2016-01-19 08:02:32 ----A---- C:\WINDOWS\SYSWOW64\evr.dll 2016-01-19 08:02:32 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL 2016-01-19 08:02:32 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL 2016-01-19 08:02:32 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL 2016-01-19 08:02:32 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-01-19 08:02:32 ----A---- C:\WINDOWS\system32\quartz.dll 2016-01-19 08:02:32 ----A---- C:\WINDOWS\system32\mfsvr.dll 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll 2016-01-19 08:02:31 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\WMADMOE.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\MP43DECD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\mfvdsp.dll 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\mfps.dll 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\devenum.dll 2016-01-19 08:02:31 ----A---- C:\WINDOWS\system32\COLORCNV.DLL 2016-01-19 08:02:30 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL 2016-01-19 08:02:30 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL 2016-01-19 08:02:30 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL 2016-01-19 08:02:30 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll 2016-01-19 08:02:30 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL 2016-01-19 08:02:30 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll 2016-01-19 08:02:30 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL 2016-01-19 08:02:30 ----A---- C:\WINDOWS\system32\SysFxUI.dll 2016-01-19 08:02:30 ----A---- C:\WINDOWS\system32\qdvd.dll 2016-01-19 08:02:30 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL 2016-01-19 08:02:30 ----A---- C:\WINDOWS\system32\gdi32.dll 2016-01-19 08:02:29 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll 2016-01-19 08:02:29 ----A---- C:\WINDOWS\system32\ntoskrnl.exe 2016-01-19 08:02:29 ----A---- C:\WINDOWS\system32\ntdll.dll 2016-01-19 08:02:27 ----A---- C:\WINDOWS\system32\ncryptsslp.dll 2016-01-19 08:02:27 ----A---- C:\WINDOWS\system32\lsasrv.dll 2016-01-19 08:02:27 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys 2016-01-19 08:02:27 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys 2016-01-19 08:02:27 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys 2016-01-19 08:02:27 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\system32\schannel.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\system32\ncrypt.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\system32\generaltel.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\system32\drivers\cng.sys 2016-01-19 08:02:26 ----A---- C:\WINDOWS\system32\certcli.dll 2016-01-19 08:02:26 ----A---- C:\WINDOWS\system32\appraiser.dll 2016-01-19 08:02:25 ----A---- C:\WINDOWS\system32\invagent.dll 2016-01-19 08:02:25 ----A---- C:\WINDOWS\system32\devinv.dll 2016-01-19 08:02:25 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe 2016-01-19 08:02:25 ----A---- C:\WINDOWS\system32\aepic.dll 2016-01-19 08:02:25 ----A---- C:\WINDOWS\system32\aeinv.dll 2016-01-19 08:02:25 ----A---- C:\WINDOWS\system32\acmigration.dll 2016-01-19 08:01:17 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll 2016-01-19 08:01:17 ----A---- C:\WINDOWS\system32\advapi32.dll ======List of files/folders modified in the last 1 month====== 2016-02-03 19:12:16 ----RD---- C:\Program Files 2016-02-03 19:08:10 ----D---- C:\WINDOWS\system32\sru 2016-02-03 19:06:22 ----D---- C:\WINDOWS\Prefetch 2016-02-03 15:41:01 ----D---- C:\WINDOWS\Temp 2016-02-03 14:43:13 ----SD---- C:\ProgramData\Microsoft 2016-02-01 17:10:58 ----SHD---- C:\System Volume Information 2016-02-01 16:40:30 ----D---- C:\WINDOWS\system32\config 2016-02-01 16:37:04 ----D---- C:\WINDOWS\Microsoft.NET 2016-02-01 16:37:02 ----D---- C:\WINDOWS\system32\DriverStore 2016-02-01 15:58:22 ----D---- C:\WINDOWS\System32 2016-02-01 15:58:22 ----D---- C:\WINDOWS\Inf 2016-02-01 15:58:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2016-01-30 09:20:35 ----HD---- C:\ProgramData 2016-01-30 09:20:21 ----D---- C:\WINDOWS\SysWOW64 2016-01-21 13:30:44 ----D---- C:\WINDOWS\CbsTemp 2016-01-21 08:27:44 ----D---- C:\WINDOWS\system32\drivers 2016-01-20 09:25:27 ----D---- C:\WINDOWS\rescache 2016-01-20 08:49:03 ----D---- C:\WINDOWS\WinSxS 2016-01-19 10:25:56 ----A---- C:\WINDOWS\SYSWOW64\log.txt 2016-01-19 10:04:48 ----SHD---- C:\Config.Msi 2016-01-19 10:03:19 ----D---- C:\Program Files\Internet Explorer 2016-01-19 10:03:17 ----SD---- C:\WINDOWS\system32\CompatTel 2016-01-19 10:03:17 ----D---- C:\WINDOWS\system32\appraiser 2016-01-19 10:03:17 ----D---- C:\WINDOWS\apppatch 2016-01-19 09:05:45 ----SHD---- C:\WINDOWS\Installer 2016-01-19 09:05:43 ----D---- C:\ProgramData\Microsoft Help 2016-01-19 08:57:41 ----D---- C:\WINDOWS\system32\MRT 2016-01-19 08:57:40 ----A---- C:\WINDOWS\system32\MRT.exe 2016-01-19 08:00:26 ----D---- C:\WINDOWS\system32\catroot2 2016-01-18 18:28:15 ----D---- C:\WINDOWS\system32\NDF 2016-01-05 21:04:40 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe 2016-01-05 18:12:08 ----D---- C:\WINDOWS\Minidump 2016-01-05 18:11:38 ----D---- C:\Windows ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-12-06 65224] R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-12-06 273784] R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-11-07 647736] R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-12-06 93528] R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-01-21 1065208] R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-01-21 464256] R1 CLVirtualDrive;CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [2012-06-25 92536] R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680] R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-12-06 28656] R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-12-31 97648] R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-12-06 155304] R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088] R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2014-07-21 626688] R3 AthBTPort;@oem3.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-05-31 89800] R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256] R3 AtiHDAudioService;@oem10.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdW86.sys [2012-08-20 98472] R3 BTATH_A2DP;@oem34.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-05-31 347336] R3 btath_avdt;@oem27.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-05-31 115912] R3 BTATH_BUS;@oem2.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2013-05-31 34384] R3 BTATH_HCRP;@oem7.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-05-31 179432] R3 BTATH_LWFLT;@oem23.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-05-31 77464] R3 BTATH_RCP;@oem24.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-05-31 136784] R3 BTATH_VDP;@oem27.inf,%BTATH_VDP.SvcDesc%;Bluetooth VDP Driver; C:\WINDOWS\system32\drivers\btath_vdp.sys [2013-05-31 428488] R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-04-28 599240] R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248] R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-09-24 226304] R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 118272] R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-08-20 4102928] R3 MEIx64;@oem11.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784] R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424] R3 RSPCIESTOR;@oem13.inf,%Rts5208%;Realtek PCIE CardReader Driver; C:\WINDOWS\system32\DRIVERS\RtsPStor.sys [2012-08-07 339600] R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT-stuurprogramma; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360] R3 semav6msr64;semav6msr64; \??\C:\WINDOWS\system32\drivers\semav6msr64.sys [2015-10-25 29352] R3 SFEP;@oem29.inf,%SvcDesc%;Sony Firmware Extension Parser; C:\WINDOWS\System32\drivers\SFEP.sys [2012-07-11 14336] R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-05-27 42696] R3 SOWS;@oem30.inf,%SOWS%;Sony Wireless State Device; C:\WINDOWS\System32\drivers\sows.sys [2012-06-11 24280] R3 SynTP;@oem20.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2015-05-27 626888] R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736] R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-05-11 1201664] S3 dg_ssudbus;@oem1.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [] S3 semav6thermal64ro;semav6thermal64ro; \??\C:\Windows\system32\drivers\semav6thermal64ro.sys [2015-07-30 13792] S3 ssudmdm;@oem15.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] S3 usb_rndisx;@netrndis.inf,%usb_rndis.Service.DispName%;USB RNDIS-adapter; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-08-22 20992] S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\WINDOWS\System32\drivers\usbscan.sys [2014-10-29 44544] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-09-14 82128] R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2014-07-21 239616] R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-05-31 310912] R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-12-06 226440] R2 ESRV_SVC;Energy Server Service; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [2015-08-26 413336] R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-08-07 2445968] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104] R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856] R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824] R2 Mobile Broadband HL Service;Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [2012-03-12 232288] R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [2012-07-27 474208] R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376] R2 VAIO Event Service;VAIO Event Service; C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe [2012-08-18 68776] R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] R3 VCService;VCService; C:\Program Files\Sony\VAIO Care\VCService.exe [2015-07-23 59928] R3 VUAgent;VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [2015-07-31 1653272] S2 CLKMSVC10_9EC60124;CyberLink Product - 2013/12/09 20:15:01; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2013-04-26 247768] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792] S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696] S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120] S3 McComponentHostServiceSony;McAfee Security Scan Component Host Service for Sony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [2014-01-16 289256] S3 NetworkSupport;NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [2013-09-28 625240] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 SOHCImp;VAIO Content Importer; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2012-08-08 123616] S3 SOHDms;VAIO Digital Media Server; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2012-08-08 460512] S3 SOHDs;VAIO Device Searcher; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2012-08-08 78048] S3 SpfService;VAIO Entertainment Common Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2011-12-01 289952] S3 USER_ESRV_SVC;User Energy Server Service; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [2015-08-26 413336] S3 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2012-07-19 476328] S3 VCFw;VAIO Content Folder Watcher; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2012-08-08 972000] -----------------EOF-----------------