Logfile of random's system information tool 1.10 (written by random/random) Run by Koen at 2017-12-18 18:54:45 Microsoft Windows 10 Home System drive C: has 52 GB (34%) free of 154 GB Total RAM: 6126 MB (45% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:54:50, on 18-12-2017 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.15063.0608) Boot mode: Normal Running processes: C:\Program Files (x86)\AVG\Framework\Common\avguix.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Users\Koen\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe C:\Program Files (x86)\Launch Manager\LMworker.exe C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe C:\ProgramData\FLEXnet\Connect\11\agent.exe C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE\mbam.exe C:\Program Files\trend micro\Koen.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://downloaden.superfiles.com/nl/index.php?rvs=hompag R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit= O2 - BHO: The Amazon Assistant for Internet Explorer - {0ddcea2a-7b00-4349-8acb-af7ba6da251f} - mscoree.dll (file missing) O2 - BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.3.8.566\AVG Web TuneUp.dll (file missing) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer\clear.fi\MediaEspresso" UpdateWithCreateOnce "Software\CyberLink\MediaEspresso\6.1" O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [PDFHook] C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe O4 - HKLM\..\Run: [PDF5 Registry Controller] C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe O4 - HKLM\..\Run: [ControlCenter4] "C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe" /autorun O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN O4 - HKLM\..\Run: [BrHelp] C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe /AUTORUN O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe" O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe" O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe" /lps=fmw O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [OneDrive] "C:\Users\Koen\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background O4 - HKCU\..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler O4 - HKCU\..\Run: [iCloudServices] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE') O4 - Startup: Intel(R) Turbo Boost Technology Monitor 2.0.lnk = C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: PokerStars.be - {878AC5FC-BE78-4bae-896C-7F75B790A71E} - C:\Program Files (x86)\PokerStars.BE\PokerStarsUpdate.exe O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{d2990a18-bfbe-488e-87b9-d923d9b71978}: NameServer = 8.8.8.8,8.8.4.4 O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: Amazon Assistant Service - Unknown owner - C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVG Antivirus - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe O23 - Service: avgbIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing) O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe O23 - Service: PDFProFiltSrvPP - Nuance Communications, Inc. - C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing) O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing) O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 16240 bytes ======Listing Processes====== winlogon.exe c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay "fontdrvhost.exe" "fontdrvhost.exe" C:\WINDOWS\system32\svchost.exe -k DcomLaunch c:\windows\system32\svchost.exe -k rpcss c:\windows\system32\svchost.exe -k dcomlaunch -s LSM "dwm.exe" c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService c:\windows\system32\svchost.exe -k netsvcs -s Schedule C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog C:\WINDOWS\system32\atiesrxx.exe c:\windows\system32\svchost.exe -k localservice -s nsi c:\windows\system32\svchost.exe -k netsvcs -s UserManager c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp atieclxx c:\windows\system32\svchost.exe -k appmodel -s StateRepository c:\windows\system32\svchost.exe -k localservice -s EventSystem c:\windows\system32\svchost.exe -k netsvcs -s Themes c:\windows\system32\svchost.exe -k networkservice -s NlaSvc c:\windows\system32\svchost.exe -k netsvcs -s SENS c:\windows\system32\svchost.exe -k localservice -s netprofm c:\windows\system32\svchost.exe -k localservice -s FontCache c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted c:\windows\system32\svchost.exe -k netsvcs -s Appinfo c:\windows\system32\svchost.exe -k networkservice -s Dnscache C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s NgcCtnrSvc c:\windows\system32\svchost.exe -k apphost -s AppHostSvc "C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe" c:\windows\system32\svchost.exe -k netsvcs -s CertPropSvc c:\windows\system32\svchost.exe -k networkservice -s CryptSvc "C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe" "C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe" "C:\Program Files\Acer\Acer Updater\UpdaterService.exe" "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe" "C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe" "C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe" c:\windows\system32\svchost.exe -k netsvcs -s WpnService c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt "C:\Program Files (x86)\Launch Manager\dsiwmis.exe" C:\WINDOWS\System32\svchost.exe -k utcsvc c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS c:\windows\system32\svchost.exe -k localservice -s WinHttpAutoProxySvc c:\windows\system32\svchost.exe -k netsvcs -s IKEEXT c:\windows\system32\svchost.exe -k iissvcs c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks C:\WINDOWS\system32\svchost.exe -k imgsvc c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SysMain C:\WINDOWS\system32\mqsvc.exe c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc dashost.exe {4a74f3d9-a708-4780-bb9bfe79cdacb580} c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s lmhosts c:\windows\system32\svchost.exe -k netsvcs -s Browser c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -s PolicyAgent c:\windows\system32\svchost.exe -k localservice -s CDPSvc c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NgcSvc c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s Netman c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc sihost.exe c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E} "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" C:\WINDOWS\Explorer.EXE "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" C:\WINDOWS\system32\SearchIndexer.exe /Embedding c:\windows\system32\svchost.exe -k localservice -s LicenseManager C:\Windows\System32\RuntimeBroker.exe -Embedding c:\windows\system32\svchost.exe -k netsvcs -s DoSvc "C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca c:\windows\system32\svchost.exe -k unistacksvcgroup "C:\Program Files\Windows Defender\MSASCuiL.exe" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4 "C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe" /fmw.trayonly "C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon "C:\Program Files\iTunes\iTunesHelper.exe" C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background AVGUI.exe /nogui C:\WINDOWS\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun "C:\Users\Koen\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background "C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe" -scheduler "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" "C:\Program Files\iPod\bin\iPodService.exe" "C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow "C:\Program Files (x86)\Launch Manager\LManager.exe" "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" "C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe" "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" "C:\Program Files (x86)\Launch Manager\LMworker.exe" "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon "C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" "C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe" -BootProc "C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe" /AUTORUN "C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe" /AUTORUN "C:\Program Files (x86)\Browny02\BrYNSvc.exe" "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe" "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" -BootProc C:\WINDOWS\splwow64.exe 8192 "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" C:\WINDOWS\system32\SettingSyncHost.exe -Embedding "C:\Program Files\Intel\TurboBoost\TurboBoost.exe" c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc "C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe "C:\Program Files (x86)\Nero\Update\NASvc.exe" C:\WINDOWS\System32\svchost.exe -k netsvcs -s BITS C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F} "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding c:\windows\system32\svchost.exe -k netsvcs -s lfsvc C:\ProgramData\FLEXnet\Connect\11\agent.exe -Embedding "C:\Program Files\WindowsApps\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca "C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca "C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.12111.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca "C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1709.2703.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe\HxTsr.exe" -ServerName:Hx.IPC.Server c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DsSvc "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca C:\Windows\System32\smartscreen.exe -Embedding "C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE\mbam.exe" C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -s WdiSystemHost "C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca C:\WINDOWS\system32\browser_broker.exe -Embedding "C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca "C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca "C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca "C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca C:\Windows\System32\SystemSettingsBroker.exe -Embedding "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-713678596-1275393618-1992589981-10004_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-713678596-1275393618-1992589981-10004 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1" C:\WINDOWS\system32\AUDIODG.EXE 0x474 C:\Windows\System32\DataExchangeHost.exe -Embedding C:\Windows\System32\InstallAgent.exe -Embedding "C:\WINDOWS\system32\SearchFilterHost.exe" 0 700 704 712 8192 708 "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" C:\WINDOWS\system32\svchost.exe -k netsvcs -s wlidsvc "C:\Users\Koen\Desktop\RSITx64.exe" C:\WINDOWS\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppShield.job - c:\programdata\{c06283e3-5480-4bac-c062-283e35480f8d}\file commander premium v3.1.13183 cracked apk is here !.exe --startup=1 --single C:\WINDOWS\tasks\AutoKMS.job - C:\Windows\AutoKMS\AutoKMS.exe C:\WINDOWS\tasks\AutoKMSDaily.job - C:\Windows\AutoKMS\AutoKMS.exe C:\WINDOWS\tasks\ROC_REG_JAN_DELETE.job - C:\ProgramData\AVG January 2013 Campaign\ROC.exe /DELETE_FROM_SYSTEM=1 =========Mozilla firefox========= ProfilePath - C:\Users\Koen\AppData\Roaming\Mozilla\Firefox\Profiles\op6chvxy.default [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 28.0.0.126 Plugin "Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1215155.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX] "Description"=Canon Easy-PhotoPrint EX "Path"=C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.151.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.151.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0] "Description"= "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 28.0.0.126 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll C:\Program Files (x86)\Mozilla Firefox\extensions\ belgiumeid@eid.belgium.be C:\Users\Koen\AppData\Roaming\Mozilla\Firefox\Profiles\op6chvxy.default\extensions\ e@GpUhtEE.edu N@yMX0g3wMV.com TvG4KzF7H@Tl.net ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0ddcea2a-7b00-4349-8acb-af7ba6da251f}] Amazon Assistant - C:\WINDOWS\system32\mscoree.dll [2017-03-18 374784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.3.8.566\AVG Web TuneUp.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-23 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0ddcea2a-7b00-4349-8acb-af7ba6da251f}] Amazon Assistant - C:\WINDOWS\system32\mscoree.dll [2017-03-18 374784] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{551A852F-39A6-44A7-9C13-AFBEC9185A9D}] PlusIEEventHelper Class - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06 249856] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-18 473664] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] AVG Web TuneUp - C:\Program Files (x86)\AVG Web TuneUp\4.3.8.566\AVG Web TuneUp.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-23 194504] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-18 187968] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-23 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-23 194504] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-26 11619432] "RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-11-26 2185832] "Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-10-29 860040] "IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [] "CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-24 2726728] "AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [2017-10-31 239592] "AVGUI.exe"=C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [2017-05-26 263232] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2017-03-22 303928] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2012-03-08 4280184] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30877280] "OneDrive"=C:\Users\Koen\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-12-08 1551048] "ISUSPM"=C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2009-05-05 222496] "iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2017-03-16 67384] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe [2013-04-15 802136] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Koen^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^FrostWire On Startup.lnk] C:\Program Files (x86)\FrostWire 5\FrostWire.exe [2013-01-14 479736] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-11-04 767176] "LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-12-09 1025616] "BackupManagerTray"=C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2012-01-05 296984] "NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2011-09-16 115048] "MDS_Menu"=C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MUITransfer\MUIStartMenu.exe [2009-05-20 222504] "ArcadeMovieService"=C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [2010-12-10 177448] "BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184] "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2017-03-16 67896] "CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112] "IJNetworkScanUtility"=C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [2010-03-02 140640] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2012-10-25 421888] "PDFHook"=C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [2010-03-05 636192] "PDF5 Registry Controller"=C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [2010-03-05 62752] "ControlCenter4"=C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [2016-02-03 139776] "BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2014-05-22 4513792] "BrHelp"=C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [2013-03-07 1944576] "IndexSearch"=C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [2013-08-15 47432] "PaperPort PTD"=C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [2013-08-15 31048] "AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [2017-10-31 239592] "vProt"=C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05 587288] C:\Users\Koen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Intel(R) Turbo Boost Technology Monitor 2.0.lnk - C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DSCAutomationHostEnabled"=2 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 "NoDriveTypeAutoRun"=255 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "vidc.i420"=iyuv_32.dll "vidc.iyuv"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvu9"=tsbyuv.dll "vidc.yvyu"=msyuv.dll "wavemapper"=msacm32.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "MSVideo8"=VfWWDM32.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2017-12-18 17:38:39 ----D---- C:\rsit 2017-12-18 17:38:39 ----D---- C:\Program Files\trend micro 2017-12-18 17:19:09 ----SHD---- C:\Config.Msi 2017-12-08 18:21:40 ----HD---- C:\OneDriveTemp 2017-11-23 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\werui.dll 2017-11-23 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe 2017-11-23 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe 2017-11-23 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\wer.dll 2017-11-23 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE 2017-11-23 17:47:18 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll 2017-11-23 17:47:16 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll 2017-11-23 17:47:16 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll 2017-11-23 17:47:16 ----A---- C:\WINDOWS\SYSWOW64\cldapi.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll 2017-11-23 17:47:15 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll 2017-11-23 17:47:13 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll 2017-11-23 17:47:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll 2017-11-23 17:47:08 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll 2017-11-23 17:47:07 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe 2017-11-23 17:47:06 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll 2017-11-23 17:47:04 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll 2017-11-23 17:47:01 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll 2017-11-23 17:47:00 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll 2017-11-23 17:46:58 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll 2017-11-23 17:46:54 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll 2017-11-23 17:46:54 ----A---- C:\WINDOWS\system32\tquery.dll 2017-11-23 17:46:51 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll 2017-11-23 17:46:49 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll 2017-11-23 17:46:49 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll 2017-11-23 17:46:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll 2017-11-23 17:46:44 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll 2017-11-23 17:46:40 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll 2017-11-23 17:46:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll 2017-11-23 17:46:37 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll 2017-11-23 17:46:34 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll 2017-11-23 17:46:34 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys 2017-11-23 17:46:34 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll 2017-11-23 17:46:34 ----A---- C:\WINDOWS\SYSWOW64\dsreg.dll 2017-11-23 17:46:34 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll 2017-11-23 17:46:34 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll 2017-11-23 17:46:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Launcher.dll 2017-11-23 17:46:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll 2017-11-23 17:46:33 ----A---- C:\WINDOWS\SYSWOW64\user32.dll 2017-11-23 17:46:33 ----A---- C:\WINDOWS\system32\mssprxy.dll 2017-11-23 17:46:33 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys 2017-11-23 17:46:32 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll 2017-11-23 17:46:32 ----A---- C:\WINDOWS\SYSWOW64\OnDemandConnRouteHelper.dll 2017-11-23 17:46:32 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll 2017-11-23 17:46:32 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll 2017-11-23 17:46:32 ----A---- C:\WINDOWS\SYSWOW64\CertPKICmdlet.dll 2017-11-23 17:46:32 ----A---- C:\WINDOWS\system32\VPNv2CSP.dll 2017-11-23 17:46:31 ----A---- C:\WINDOWS\system32\utcutil.dll 2017-11-23 17:46:29 ----A---- C:\WINDOWS\system32\storewuauth.dll 2017-11-23 17:46:29 ----A---- C:\WINDOWS\system32\diagtrack.dll 2017-11-23 17:46:28 ----A---- C:\WINDOWS\system32\drivers\storport.sys 2017-11-23 17:46:27 ----A---- C:\WINDOWS\system32\mstscax.dll 2017-11-23 17:46:18 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe 2017-11-23 17:46:18 ----A---- C:\WINDOWS\system32\MusNotification.exe 2017-11-23 17:46:17 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll 2017-11-23 17:46:17 ----A---- C:\WINDOWS\system32\wpdshext.dll 2017-11-23 17:46:14 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll 2017-11-23 17:46:14 ----A---- C:\WINDOWS\system32\jscript9.dll 2017-11-23 17:46:09 ----A---- C:\WINDOWS\system32\KernelBase.dll 2017-11-23 17:46:09 ----A---- C:\WINDOWS\system32\Chakradiag.dll 2017-11-23 17:46:09 ----A---- C:\WINDOWS\system32\Chakra.dll 2017-11-23 17:46:07 ----A---- C:\WINDOWS\system32\rdpudd.dll 2017-11-23 17:46:06 ----A---- C:\WINDOWS\system32\MSVPXENC.dll 2017-11-23 17:46:03 ----A---- C:\WINDOWS\system32\Windows.Media.dll 2017-11-23 17:45:58 ----A---- C:\WINDOWS\system32\mshtml.dll 2017-11-23 17:45:52 ----A---- C:\WINDOWS\system32\edgehtml.dll 2017-11-23 17:45:52 ----A---- C:\WINDOWS\system32\drivers\ndis.sys 2017-11-23 17:45:46 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll 2017-11-23 17:45:42 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2017-11-23 17:45:36 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll 2017-11-23 17:45:34 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll 2017-11-23 17:45:32 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll 2017-11-23 17:45:31 ----A---- C:\WINDOWS\system32\ieproxy.dll 2017-11-23 17:45:29 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll 2017-11-23 17:45:29 ----A---- C:\WINDOWS\system32\wmpps.dll 2017-11-23 17:45:29 ----A---- C:\WINDOWS\system32\vbscript.dll 2017-11-23 17:45:29 ----A---- C:\WINDOWS\system32\SEMgrPS.dll 2017-11-23 17:45:29 ----A---- C:\WINDOWS\system32\jscript.dll 2017-11-23 17:45:28 ----A---- C:\WINDOWS\system32\wmp.dll 2017-11-23 17:45:23 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll 2017-11-23 17:45:22 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll 2017-11-23 17:45:22 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll 2017-11-23 17:45:22 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll 2017-11-23 17:45:22 ----A---- C:\WINDOWS\system32\ie4uinit.exe 2017-11-23 17:45:21 ----A---- C:\WINDOWS\system32\iedkcs32.dll 2017-11-23 17:45:19 ----A---- C:\WINDOWS\system32\msfeeds.dll 2017-11-23 17:45:16 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll 2017-11-23 17:45:14 ----A---- C:\WINDOWS\system32\wudriver.dll 2017-11-23 17:45:14 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll 2017-11-23 17:45:12 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll 2017-11-23 17:45:10 ----A---- C:\WINDOWS\system32\ieframe.dll 2017-11-23 17:45:08 ----A---- C:\WINDOWS\system32\wersvc.dll 2017-11-23 17:45:08 ----A---- C:\WINDOWS\system32\wermgr.exe 2017-11-23 17:45:08 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe 2017-11-23 17:45:08 ----A---- C:\WINDOWS\system32\WerFault.exe 2017-11-23 17:45:08 ----A---- C:\WINDOWS\system32\wer.dll 2017-11-23 17:45:08 ----A---- C:\WINDOWS\system32\odbcconf.dll 2017-11-23 17:45:08 ----A---- C:\WINDOWS\system32\Faultrep.dll 2017-11-23 17:45:08 ----A---- C:\WINDOWS\system32\browserbroker.dll 2017-11-23 17:45:05 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys 2017-11-23 17:45:03 ----A---- C:\WINDOWS\system32\dbgeng.dll 2017-11-23 17:45:01 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll 2017-11-23 17:44:58 ----A---- C:\WINDOWS\system32\ntoskrnl.exe 2017-11-23 17:44:50 ----A---- C:\WINDOWS\system32\FlightSettings.dll 2017-11-23 17:44:48 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll 2017-11-23 17:44:47 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll 2017-11-23 17:44:44 ----A---- C:\WINDOWS\system32\LocationFrameworkInternalPS.dll 2017-11-23 17:44:43 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-11-23 17:44:43 ----A---- C:\WINDOWS\system32\vss_ps.dll 2017-11-23 17:44:41 ----A---- C:\WINDOWS\system32\wcmsvc.dll 2017-11-23 17:44:38 ----A---- C:\WINDOWS\system32\CoreMessaging.dll 2017-11-23 17:44:36 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-11-23 17:44:31 ----A---- C:\WINDOWS\system32\winhttp.dll 2017-11-23 17:44:30 ----A---- C:\WINDOWS\system32\wininet.dll 2017-11-23 17:44:28 ----A---- C:\WINDOWS\system32\usocore.dll 2017-11-23 17:44:28 ----A---- C:\WINDOWS\system32\updatehandlers.dll 2017-11-23 17:44:28 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll 2017-11-23 17:44:26 ----A---- C:\WINDOWS\system32\msIso.dll 2017-11-23 17:44:25 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-11-23 17:44:21 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll 2017-11-23 17:44:21 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll 2017-11-23 17:44:21 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-11-23 17:44:21 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll 2017-11-23 17:44:21 ----A---- C:\WINDOWS\system32\aitstatic.exe 2017-11-23 17:44:18 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll 2017-11-23 17:44:18 ----A---- C:\WINDOWS\system32\wuuhext.dll 2017-11-23 17:44:18 ----A---- C:\WINDOWS\system32\SIHClient.exe 2017-11-23 17:44:16 ----A---- C:\WINDOWS\system32\wuaueng.dll 2017-11-23 17:44:16 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys 2017-11-23 17:44:16 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys 2017-11-23 17:44:16 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys 2017-11-23 17:44:14 ----A---- C:\WINDOWS\system32\dsreg.dll 2017-11-23 17:44:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-11-23 17:44:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-11-23 17:44:13 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-11-23 17:44:11 ----A---- C:\WINDOWS\system32\wsqmcons.exe 2017-11-23 17:44:11 ----A---- C:\WINDOWS\system32\wercplsupport.dll 2017-11-23 17:44:11 ----A---- C:\WINDOWS\system32\securekernel.exe 2017-11-23 17:44:11 ----A---- C:\WINDOWS\system32\hvloader.exe 2017-11-23 17:44:11 ----A---- C:\WINDOWS\system32\hvax64.exe 2017-11-23 17:44:11 ----A---- C:\WINDOWS\system32\DWWIN.EXE 2017-11-23 17:44:11 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys 2017-11-23 17:44:11 ----A---- C:\WINDOWS\system32\ci.dll 2017-11-23 17:44:08 ----A---- C:\WINDOWS\system32\werconcpl.dll 2017-11-23 17:44:06 ----A---- C:\WINDOWS\system32\werui.dll 2017-11-23 17:44:03 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll 2017-11-23 17:44:00 ----A---- C:\WINDOWS\system32\PCPKsp.dll 2017-11-23 17:43:58 ----A---- C:\WINDOWS\system32\hvix64.exe 2017-11-23 17:43:56 ----A---- C:\WINDOWS\system32\win32kbase.sys 2017-11-23 17:43:54 ----A---- C:\WINDOWS\system32\ClipSVC.dll 2017-11-23 17:43:50 ----A---- C:\WINDOWS\system32\shell32.dll 2017-11-23 17:43:46 ----A---- C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-11-23 17:43:44 ----A---- C:\WINDOWS\system32\win32appinventorycsp.dll 2017-11-23 17:43:44 ----A---- C:\WINDOWS\system32\invagent.dll 2017-11-23 17:43:44 ----A---- C:\WINDOWS\system32\DeviceCensus.exe 2017-11-23 17:43:44 ----A---- C:\WINDOWS\system32\dcntel.dll 2017-11-23 17:43:44 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe 2017-11-23 17:43:44 ----A---- C:\WINDOWS\system32\aepic.dll 2017-11-23 17:43:43 ----A---- C:\WINDOWS\system32\MPSSVC.dll 2017-11-23 17:43:43 ----A---- C:\WINDOWS\system32\generaltel.dll 2017-11-23 17:43:43 ----A---- C:\WINDOWS\system32\GamePanel.exe 2017-11-23 17:43:43 ----A---- C:\WINDOWS\system32\devinv.dll 2017-11-23 17:43:43 ----A---- C:\WINDOWS\system32\appraiser.dll 2017-11-23 17:43:43 ----A---- C:\WINDOWS\system32\aeinv.dll 2017-11-23 17:43:43 ----A---- C:\WINDOWS\system32\aadtb.dll 2017-11-23 17:43:40 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll 2017-11-23 17:43:40 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys 2017-11-23 17:43:39 ----A---- C:\WINDOWS\system32\Windows.System.Launcher.dll 2017-11-23 17:43:39 ----A---- C:\WINDOWS\system32\win32kfull.sys 2017-11-23 17:43:39 ----A---- C:\WINDOWS\system32\daxexec.dll 2017-11-23 17:43:39 ----A---- C:\WINDOWS\system32\aadcloudap.dll 2017-11-23 17:43:38 ----A---- C:\WINDOWS\system32\wuapi.dll 2017-11-23 17:43:38 ----A---- C:\WINDOWS\system32\profsvc.dll 2017-11-23 17:43:38 ----A---- C:\WINDOWS\system32\pcasvc.dll 2017-11-23 17:43:37 ----A---- C:\WINDOWS\system32\wow64win.dll 2017-11-23 17:43:37 ----A---- C:\WINDOWS\system32\winsrv.dll 2017-11-23 17:43:37 ----A---- C:\WINDOWS\system32\user32.dll 2017-11-23 17:43:37 ----A---- C:\WINDOWS\system32\schedsvc.dll 2017-11-23 17:43:37 ----A---- C:\WINDOWS\system32\cldapi.dll 2017-11-23 17:43:37 ----A---- C:\WINDOWS\system32\acmigration.dll 2017-11-23 17:43:36 ----A---- C:\WINDOWS\system32\ubpm.dll 2017-11-23 17:43:36 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll 2017-11-23 17:43:36 ----A---- C:\WINDOWS\system32\RMapi.dll 2017-11-23 17:43:36 ----A---- C:\WINDOWS\system32\drivers\cng.sys 2017-11-23 17:43:35 ----A---- C:\WINDOWS\system32\wuauclt.exe 2017-11-23 17:43:35 ----A---- C:\WINDOWS\system32\Windows.UI.Storage.dll 2017-11-23 17:43:35 ----A---- C:\WINDOWS\system32\ipnathlp.dll 2017-11-23 17:43:35 ----A---- C:\WINDOWS\system32\efswrt.dll 2017-11-23 17:43:35 ----A---- C:\WINDOWS\system32\drivers\Diskdump.sys 2017-11-23 17:43:35 ----A---- C:\WINDOWS\system32\CertPKICmdlet.dll 2017-11-23 17:43:34 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll 2017-11-23 17:43:34 ----A---- C:\WINDOWS\system32\drivers\luafv.sys 2017-11-23 17:43:34 ----A---- C:\WINDOWS\system32\drivers\Dumpstorport.sys 2017-11-23 17:43:34 ----A---- C:\WINDOWS\system32\DataUsageHandlers.dll 2017-11-23 17:43:33 ----A---- C:\WINDOWS\system32\wups.dll 2017-11-23 17:43:33 ----A---- C:\WINDOWS\system32\tzres.dll 2017-11-23 17:43:33 ----A---- C:\WINDOWS\system32\DataUsageLiveTileTask.exe ======List of files/folders modified in the last 1 month====== 2017-12-18 18:52:42 ----D---- C:\WINDOWS\Temp 2017-12-18 18:51:02 ----D---- C:\WINDOWS\system32\sru 2017-12-18 18:46:28 ----RD---- C:\Program Files 2017-12-18 18:46:28 ----HD---- C:\ProgramData 2017-12-18 18:45:53 ----D---- C:\WINDOWS\Prefetch 2017-12-18 18:29:28 ----RD---- C:\WINDOWS\Microsoft.NET 2017-12-18 18:01:00 ----D---- C:\Windows 2017-12-18 17:57:35 ----D---- C:\WINDOWS\System32 2017-12-18 17:57:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2017-12-18 17:56:09 ----A---- C:\WINDOWS\SYSWOW64\log.txt 2017-12-18 17:55:13 ----D---- C:\ProgramData\boost_interprocess 2017-12-18 17:50:21 ----D---- C:\WINDOWS\INF 2017-12-18 17:50:09 ----D---- C:\Program Files\Common Files 2017-12-18 17:50:09 ----AD---- C:\Program Files (x86)\Mozilla Firefox 2017-12-18 17:50:07 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2017-12-18 17:48:50 ----D---- C:\AdwCleaner 2017-12-18 17:48:39 ----D---- C:\WINDOWS\Tasks 2017-12-18 17:48:39 ----D---- C:\WINDOWS\system32\Tasks_Migrated 2017-12-18 17:48:39 ----D---- C:\WINDOWS\system32\Tasks 2017-12-18 17:48:35 ----RD---- C:\Program Files (x86) 2017-12-18 17:48:26 ----D---- C:\Program Files (x86)\Common Files 2017-12-18 17:19:11 ----SHD---- C:\WINDOWS\Installer 2017-12-18 17:10:03 ----D---- C:\Users\Koen\AppData\Roaming\Skype 2017-12-18 10:21:45 ----SHD---- C:\System Volume Information 2017-12-18 09:02:04 ----D---- C:\WINDOWS\system32\drivers 2017-12-18 09:00:37 ----D---- C:\WINDOWS\system32\catroot2 2017-12-18 08:56:45 ----A---- C:\WINDOWS\wininit.ini 2017-12-18 08:51:34 ----HD---- C:\Program Files\WindowsApps 2017-12-18 08:51:34 ----D---- C:\WINDOWS\AppReadiness 2017-12-18 08:38:00 ----D---- C:\WINDOWS\system32\config 2017-12-15 11:29:26 ----AD---- C:\WINDOWS\SysWOW64 2017-12-15 11:28:21 ----D---- C:\WINDOWS\system32\Macromed 2017-12-15 11:28:15 ----D---- C:\WINDOWS\SYSWOW64\Macromed 2017-12-10 21:37:04 ----DC---- C:\WINDOWS\Panther 2017-12-10 21:09:19 ----D---- C:\WINDOWS\Registration 2017-12-10 21:08:15 ----HD---- C:\$WINDOWS.~BT 2017-12-10 17:54:27 ----D---- C:\WINDOWS\Logs 2017-12-10 17:51:41 ----D---- C:\WINDOWS\system32\CatRoot 2017-12-10 17:51:40 ----D---- C:\WINDOWS\system32\DriverStore 2017-12-07 00:22:10 ----D---- C:\ProgramData\Microsoft Help 2017-12-05 08:26:30 ----D---- C:\WINDOWS\WinSxS 2017-12-01 08:23:46 ----D---- C:\Users\Koen\AppData\Roaming\Mozilla 2017-12-01 07:14:05 ----AD---- C:\Program Files\CCleaner 2017-12-01 07:11:44 ----D---- C:\WINDOWS\LiveKernelReports 2017-12-01 07:11:44 ----D---- C:\WINDOWS\debug 2017-11-28 07:23:43 ----D---- C:\WINDOWS\rescache 2017-11-27 14:14:45 ----D---- C:\WINDOWS\CbsTemp 2017-11-27 13:49:52 ----D---- C:\WINDOWS\SYSWOW64\nl-NL 2017-11-27 13:49:42 ----D---- C:\WINDOWS\system32\wbem 2017-11-27 13:49:41 ----D---- C:\WINDOWS\system32\nl-NL 2017-11-27 13:49:41 ----D---- C:\WINDOWS\system32\appraiser 2017-11-27 13:49:34 ----D---- C:\WINDOWS\ShellExperiences 2017-11-27 13:49:33 ----D---- C:\WINDOWS\Provisioning 2017-11-27 13:49:32 ----D---- C:\WINDOWS\AppPatch 2017-11-27 13:49:32 ----D---- C:\Program Files\Windows Photo Viewer 2017-11-27 13:49:32 ----D---- C:\Program Files (x86)\Windows Photo Viewer 2017-11-23 17:14:38 ----D---- C:\WINDOWS\system32\MRT 2017-11-23 09:20:15 ----RD---- C:\WINDOWS\assembly 2017-11-23 09:15:48 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe 2017-11-23 09:15:30 ----AC---- C:\WINDOWS\system32\MRT.exe 2017-11-23 08:39:54 ----D---- C:\WINDOWS\system32\drivers\etc ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 avgbidsh;avgbidsh; C:\WINDOWS\system32\drivers\avgbidsha.sys [2017-05-26 192584] R0 avgblog;avgblog; C:\WINDOWS\system32\drivers\avgbloga.sys [2017-05-26 336896] R0 avgbuniv;avgbuniv; C:\WINDOWS\system32\drivers\avgbuniva.sys [2017-05-26 51336] R0 avgRvrt;avgRvrt; C:\WINDOWS\system32\drivers\avgRvrt.sys [2017-05-26 76832] R0 avgVmm;avgVmm; C:\WINDOWS\system32\drivers\avgVmm.sys [2017-05-26 340824] R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-03-18 49568] R0 pwdrvio;pwdrvio; C:\WINDOWS\system32\pwdrvio.sys [2013-09-30 19152] R1 avgbdisk;avgbdisk; C:\WINDOWS\system32\drivers\avgbdiska.sys [2017-05-26 166624] R1 avgbidsdriver;avgbidsdriver; C:\WINDOWS\system32\drivers\avgbidsdrivera.sys [2017-05-26 314128] R1 avgRdr;avgRdr; C:\WINDOWS\system32\drivers\avgRdr2.sys [2017-05-26 102280] R1 avgSnx;avgSnx; C:\WINDOWS\system32\drivers\avgSnx.sys [2017-05-26 1008288] R1 avgSP;avgSP; C:\WINDOWS\system32\drivers\avgSP.sys [2017-05-26 570320] R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-03-18 54272] R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-03-18 8192] R2 avgMonFlt;avgMonFlt; C:\WINDOWS\system32\drivers\avgMonFlt.sys [2017-05-26 129776] R2 avgStm;avgStm; C:\WINDOWS\system32\drivers\avgStm.sys [2017-05-26 160008] R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2017-03-18 14336] R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-03-18 50688] R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2015-12-16 21648880] R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2015-12-16 674288] R3 athr;@netathrx.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athwnx.sys [2017-03-18 4233728] R3 AtiHDAudioService;@oem73.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2015-07-21 102912] R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-03-18 53664] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2010-11-26 2569704] R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2017-03-18 121344] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2017-12-18 192216] R3 MEIx64;@oem53.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface; C:\WINDOWS\System32\drivers\HECIx64.sys [2010-10-20 56344] R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2017-07-25 177664] R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432] S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-03-18 123808] S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-03-18 103328] S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-03-18 64416] S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-03-18 58784] S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-03-18 61848] S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-03-18 91040] S2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-03-18 12288] S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-03-18 20480] S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-03-18 17920] S3 avgHwid;avgHwid; C:\WINDOWS\system32\drivers\avgHwid.sys [2017-05-26 39424] S3 BthA2DP;@wdma_bt.inf,%BthA2DP.SvcDesc%;Bluetooth Stereo; C:\WINDOWS\system32\drivers\BthA2DP.sys [2017-03-18 181248] S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\System32\drivers\BthEnum.sys [2017-07-28 105472] S3 BthHFAud;@wdma_bt.inf,%DISPLAY_NAME%;Bluetooth Hands-Free; C:\WINDOWS\System32\drivers\BthHfAud.sys [2017-03-18 47104] S3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2017-07-28 97280] S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2017-09-05 130560] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2017-07-28 982016] S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2017-03-18 85504] S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-09-05 39424] S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-03-18 122880] S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-03-18 347032] S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-03-18 2104224] S3 fssfltr;fssfltr; C:\WINDOWS\system32\DRIVERS\fssfltr.sys [2012-03-08 48488] S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-03-18 21504] S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-03-18 51104] S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-03-18 74648] S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-03-18 33280] S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-03-18 81408] S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656] S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504] S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-03-18 165376] S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448] S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-03-18 526240] S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-03-18 36864] S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-03-18 120320] S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-03-18 405408] S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-03-18 51104] S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-03-18 842656] S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-03-18 108960] S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-03-18 122368] S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-03-18 80896] S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-03-18 101376] S3 pwdspio;pwdspio; \??\C:\Windows\system32\pwdspio.sys [2013-09-30 12504] S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-03-18 936864] S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2017-08-01 180736] S3 RSUSBSTOR;@oem69.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2010-07-20 247400] S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-03-18 31128] S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-03-20 40352] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984] R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2015-12-16 255472] R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2017-03-17 83768] R2 AVG Antivirus;AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [2017-05-26 264432] R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2017-10-31 1428656] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096] R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 CDPUserSvc_5f2ee;Gebruikerservice voor Connected Devices Platform_5f2ee; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-12-09 311376] R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-10-29 868224] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-06 325656] R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2017-07-25 26112] R2 NAUpdate;Nero Update; C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432] R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2012-01-05 256536] R2 OneSyncSvc_5f2ee;Host synchroniseren_5f2ee; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R2 PDFProFiltSrvPP;PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [2013-08-15 145736] R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-09-30 336320] R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [2016-07-22 754784] R3 avgbIDSAgent;avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [2017-05-26 7396872] R3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2013-09-25 282112] R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2017-03-22 689464] R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 PimIndexMaintenanceSvc_5f2ee;Contact Data_5f2ee; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S2 Amazon Assistant Service;Amazon Assistant Service; C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe [2017-10-04 105136] S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S2 KMService;KMService; C:\WINDOWS\syswow64\srvany.exe [2012-02-19 8192] S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-18 136360] S2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-18 136360] S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2017-03-18 136360] S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496] S2 SMA.Multicasting.IGMP.QuerierService.exe;SMA IGMP Querier Service; C:\Program Files (x86)\SMA\Sunny Explorer\SMA.Multicasting.IGMP.QuerierService.exe [2015-06-24 21152] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-12-15 272384] S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 DevicesFlowUserSvc_5f2ee;DevicesFlow_5f2ee; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-03-18 86528] S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-03-10 655624] S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840] S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-05-22 194032] S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104] S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 MessagingService_5f2ee;MessagingService_5f2ee; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-12-18 194000] S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-09-12 159960] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-03-18 1284608] S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664] S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-03-18 891904] S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2017-03-18 52920] S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664] -----------------EOF-----------------