svaes

Mijn computer werkt trager dan normaal. Ik krijg geregeld van mijn avast antivirusprogramma een uitnodiging om "Grimefighter" te installeren, hetgeen mijn computer sneller zou maken. Nochtans meldt avast dat alles in orde is. Maar hij werkt wel degelijk veel trager dan normaal. Wat kan ik doen? Dank bij voorbaat Stefan - - - Updated - - - Overigens heb ik ook veel last van reclame pop-ups/banners tijdens het surfen.

Het probleem lijkt opgelost. Hartelijk dank! Stefan Vaes

Zie hier de log van jrt: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.7 (10.15.2013:3) OS: Windows 7 Home Premium x64 Ran by Stefan on vr 01/11/2013 at 20:33:31,32 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dd000e12-c224-49a5-899e-0b37dbd95f15} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{dd000e12-c224-49a5-899e-0b37dbd95f15} ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Stefan\AppData\Roaming\mozilla\firefox\profiles\7zljadmx.default\minidumps [8 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on vr 01/11/2013 at 20:39:02,64 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Zie hier het logje van Adw Cleaner # AdwCleaner v3.010 - Report created 01/11/2013 at 19:38:18 # Updated 20/10/2013 by Xplode # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : Stefan - VAES-PC # Running from : C:\Users\Stefan\Downloads\adwcleaner.exe # Option : Clean ***** [ Services ] ***** Service Deleted : vToolbarUpdater17.0.12 ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\AVG Secure Search Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2 Folder Deleted : C:\Program Files (x86)\AVG Secure Search Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search Folder Deleted : C:\Users\Stefan\AppData\Local\AVG Secure Search Folder Deleted : C:\Users\Stefan\AppData\Local\Bundled software uninstaller Folder Deleted : C:\Users\Stefan\AppData\Local\FilesFrog Update Checker Folder Deleted : C:\Users\Stefan\AppData\LocalLow\AVG Secure Search Folder Deleted : C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker Folder Deleted : C:\Users\Gast\AppData\Local\AVG Secure Search Folder Deleted : C:\Users\Gast\AppData\LocalLow\AVG Secure Search File Deleted : C:\END File Deleted : C:\Windows\System32\roboot64.exe File Deleted : C:\Users\Stefan\Desktop\Optimizer Pro.lnk File Deleted : C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\7zljadmx.default\user.js ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1 Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1 Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol Key Deleted : HKLM\SOFTWARE\Classes\S Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1 Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKCU\Software\AVG Secure Search Key Deleted : HKCU\Software\BI Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\Optimizer Pro Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\Somoto Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F} Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C} Key Deleted : HKLM\Software\AVG Secure Search Key Deleted : HKLM\Software\AVG Security Toolbar Key Deleted : HKLM\Software\systweak Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1 ***** [ Browsers ] ***** -\\ Internet Explorer v10.0.9200.16720 -\\ Mozilla Firefox v24.0 (nl) [ File : C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\7zljadmx.default\prefs.js ] [ File : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\jnqztrk5.default\prefs.js ] ************************* AdwCleaner[R0].txt - [6582 octets] - [01/11/2013 19:37:44] AdwCleaner[s0].txt - [6306 octets] - [01/11/2013 19:38:18] ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [6366 octets] ##########

Zie hier de log van zoek.exe: Zoek.exe Version 4.0.0.5 Updated 26-October-2013 Tool run by Stefan on vr 01/11/2013 at 18:58:20,13. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Stefan\Documents\zoek\zoek.exe [script inserted] ==== System Restore Info ====================== 1/11/2013 19:02:16 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\AGEIA Technologies deleted successfully C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully C:\ProgramData\Oracle deleted successfully C:\Users\Stefan\AppData\Roaming\5200 deleted successfully C:\Users\Stefan\AppData\Roaming\Systweak deleted successfully C:\Users\Gast\AppData\Local\VirtualStore deleted successfully C:\Users\Stefan\AppData\Local\VirtualStore deleted successfully C:\Users\Stefan\AppData\Local\Wisdom-soft deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3003179804-4138232797-2048808043-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_USERS\S-1-5-21-3003179804-4138232797-2048808043-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_USERS\S-1-5-21-3003179804-4138232797-2048808043-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\70e6ca8c deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\70e6ca8c deleted successfully ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Optimizer Pro"=- [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce] "CleanSetup"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=- ==== Deleting Files \ Folders ====================== C:\Users\Stefan\AppData\Roaming\Systweak not found C:\ProgramData\DVD Shrink deleted C:\Program Files (x86)\DVD Shrink deleted C:\Users\Stefan\AppData\Roaming\0F1F1C2Y1H1P1C0I0T deleted "C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll" deleted "C:\Program Files (x86)\Optimizer Pro" deleted "C:\Program Files (x86)\Optimizer Pro" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2013-10-08 07:06:38 D1E75542EC8D1B4851765A57AC63618E 1908 ----a-w- C:\Windows\diagerr.xml 2013-10-08 07:06:38 32996720214B21FE880D6A351D7709D9 2562 ----a-w- C:\Windows\diagwrn.xml 2013-10-08 07:02:41 332FEAB1435662FC6C672E25BEB37BE3 2871808 ----a-w- C:\Windows\explorer.exe 2013-10-08 07:00:29 127AA81343A7C6F665C22CB1293B0A90 67072 ----a-w- C:\Windows\splwow64.exe 2013-10-07 13:58:46 AAE3FA6E8156E4577E1F0AC195F4F11E 2079816 ----a-w- C:\Windows\RtlExUpd.dll ====== C:\Users\Stefan\AppData\Local\Temp ==== 2013-11-01 17:47:37 5143DE017172519CBE8A3B6CF5B37B46 3689984 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\burningcore\nero.burningcore.msi 2013-11-01 17:47:36 F4C3B67E5392B5926C3AAAA302EECC50 11838976 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\lightscribeSystemSoftware\LS_HSI.msi 2013-11-01 17:47:36 F3D5AC9FDDAA29E99E17A63E67815F0E 866816 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\burningromhelpchm\nero.burningromhelpchm.msi 2013-11-01 17:47:36 DCF07996347AE673AED11350505B7E7C 1164800 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\prerequisites\nero.prerequisites.msi 2013-11-01 17:47:36 D2184FD2B0A12A8075AA848ABD26415C 4019712 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\burningrom\nero.burningrom.msi 2013-11-01 17:47:36 CEDE02D7AF62449A2C38C49ABECC0CD3 4995416 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\microsoftVcRedist2010Sp1X86\vcredist_x86.exe 2013-11-01 17:47:36 C4DCFC4316FC0B1DFBE0E6816BD40A04 2143232 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\controlcenter\nero.controlcenter.msi 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\systemRequirementValidator\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\rebootValidator\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\msi4.5ForWindowsxpX86\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\msi4.5ForWindows6.0X86\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\msi4.5ForWindows6.0X64\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\microsoftVcRedist2010Sp1X86\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\lightscribeSystemSoftware\PRQStarter-1.exe 2013-11-01 17:47:36 B202B667D9D9C108EF4ECA13CEEBD43F 727280 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\setup.exe 2013-11-01 17:47:36 AAA66E9F2C20EBFFF88915B583F8F2D0 867328 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\controlcenterhelpchm\nero.controlcenterhelpchm.msi 2013-11-01 17:47:36 A525514358477366B548299468A77EAD 90384 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\lightscribeSystemSoftware\LS_LAUNCHER.exe 2013-11-01 17:47:36 983CEAB565ADE2B9B4B56A32E7F39C74 26369024 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\nero.neroburningrom2014.msi 2013-11-01 17:47:36 92A1B1C178AF342AD1E85CEE782ED046 81920 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\lightscribeSystemSoftware\LSDriveDetect.exe 2013-11-01 17:47:36 484FFB097DA921660C64E414549043FD 1291776 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\update\Nero.Update.msi 2013-11-01 17:47:36 448447E0BA4560CD558EDDB5F5B0809E 3327000 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\msi4.5ForWindowsxpX86\WindowsXP-KB942288-v3-x86.exe 2013-11-01 17:47:36 3FCCD20F89D4D186890128EF3F878366 2566416 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\systemRequirementValidator\NeroOSValidator.exe 2013-11-01 17:47:36 3B860CA171831A5BF822FFF7FCBD2EB5 2609152 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\corecomponents\nero.corecomponents.msi 2013-11-01 17:47:36 10CEF759A0E65FF7820277F0F941FE87 867328 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\applications\sharedvideocodecs\nero.sharedvideocodecs.msi 2013-11-01 15:35:07 DC1AB7CE3B89FC7CAC369D8B246CDAFE 2818048 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_tpi_vcredist-x86-2005Sp1\vcredist.msi 2013-11-01 15:35:07 39044759DA9FD2B42864BC1AED78B349 5854504 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\setupx.exe 2013-11-01 15:35:07 0F53D59DF42827E7AF4FC207E600A999 483328 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_app_75\Toolbar.exe 2013-11-01 15:35:06 F9ACFAA1439C8FB77FF221D30600A4A2 1411584 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_tpi_msxml-4\neroxml.msi 2013-11-01 15:35:06 D82CA828131C425B06A777505E90A8EA 3551744 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_app_63\unit.msi 2013-11-01 15:35:06 90F70A8831571C99FB11F6A470CEE553 3551232 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_app_76\unit.msi 2013-11-01 15:35:06 788E658E4ECE18E3C518279F699E0370 3933696 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_app_30\unit.msi 2013-11-01 15:35:06 4CFD33E310C77B2EEF0D4223DDCE9DEC 46592 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_app_61\unit.msi 2013-11-01 15:35:06 40D3C344B4F7DED60AD5A63A28BFBB17 26624 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_oem_15\unit.msi 2013-11-01 15:35:06 044CE4BB4C17E7EC1751D2837C65EE88 3625472 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_app_15\unit.msi 2013-11-01 15:06:42 EFC4643607D821EE5B1E306B5181917C 1117491 ----a-w- C:\Users\Stefan\AppData\Local\Temp\dvdshrink32setup.exe 2013-11-01 15:06:31 2F5252E50745E47DB355B005725DAE05 327880 ----a-w- C:\Users\Stefan\AppData\Local\Temp\appshat-distribution.exe 2013-11-01 15:05:54 D57FEA9E22BE0F7FDDAD91724ED8CD20 6665808 ----a-w- C:\Users\Stefan\AppData\Local\Temp\OptimizerPro.exe 2013-11-01 15:05:53 CF310D35273BD1261DB9D90A447AB51F 17455448 ----a-w- C:\Users\Stefan\AppData\Local\Temp\Mobogenie_Setup_2.1.23_515.exe 2013-11-01 15:05:45 FC0CB8F2ADA86F7EC51F9FB6FFB56C19 7884008 ----a-w- C:\Users\Stefan\AppData\Local\Temp\MoviesToolbarSetup_Somoto_9_10_2013.exe 2013-11-01 15:05:42 EF7D1863F4980AB0C8BDA142FEE67F92 200072 ----a-w- C:\Users\Stefan\AppData\Local\Temp\UpdateCheckerSetup.exe 2013-10-19 05:13:43 3AD87A91AF76A298F68F5064E6571D19 11281588 ----a-w- C:\Users\Stefan\AppData\Local\Temp\is266438442\54166795_stp.EXE ====== Java Cache ===== 2013-10-08 10:03:56 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stefan\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-1b4dbf32 2013-10-09 14:23:49 86C47CA21A599230CA54E8F5EBDB6A07 124 ----a-w- C:\Users\Stefan\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\7\6619ee07-672f6235 ====== C:\Windows\SysWOW64 ===== 2013-11-01 17:16:09 F76E1461807291997B309BF34CCC59E2 675840 ----a-w- C:\Windows\SysWOW64\ac3filter.ax 2013-11-01 17:16:09 60AFBD58F9DFAF558003BD13E60F6BB3 892928 ----a-w- C:\Windows\SysWOW64\iconv.dll 2013-11-01 17:16:09 54352979771C1EEF5B00DEBE308368AF 496640 ----a-w- C:\Windows\SysWOW64\xvid.ax 2013-10-25 12:30:39 9223A2810B73069F4A03A636052EF14A 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe 2013-10-25 12:30:35 DC1342498BEE7EF1646E9D63138B69CC 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe 2013-10-25 12:30:35 9B0B14B405E0EDF76B5F5E31A49EB753 96168 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-25 12:30:35 658633D255FEF154EA1CB8705B4468C5 174504 ----a-w- C:\Windows\SysWOW64\java.exe ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\Sysnative\drivers\VirtualAudio5.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\Sysnative\drivers\VirtualAudio4.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\Sysnative\drivers\VirtualAudio3.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\Sysnative\drivers\VirtualAudio2.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\Sysnative\drivers\VirtualAudio1.sys 2013-11-01 17:04:28 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\Sysnative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2013-10-09 14:11:37 A1F53D2A00E64679A1D81B61D2333D06 46368 ----a-w- C:\Windows\Sysnative\drivers\avgtpx64.sys 2013-10-09 11:31:37 E2C933EDBC389386EBE6D2BA953F43D8 785624 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys 2013-10-09 11:31:37 80B0F7D5CCF86CEB5D402EAAF61FEC31 100864 ----a-w- C:\Windows\Sysnative\drivers\usbcir.sys 2013-10-09 11:31:37 1F775DA4CF1A3A1834207E975A72E9D7 185344 ----a-w- C:\Windows\Sysnative\drivers\usbvideo.sys 2013-10-09 11:31:36 B0435098C81D04CAFFF80DDB746CD3A2 109824 ----a-w- C:\Windows\Sysnative\drivers\USBAUDIO.sys 2013-10-09 11:31:36 856E76B3641746ABBC2946BED1372098 32896 ----a-w- C:\Windows\Sysnative\drivers\hidparse.sys 2013-10-09 11:31:36 597C3699384E53CC59587ED50CCE5CA2 76800 ----a-w- C:\Windows\Sysnative\drivers\hidclass.sys 2013-10-09 11:31:35 1A4F75E63C9FB84B85DFFC6B63FD5404 140800 ----a-w- C:\Windows\Sysnative\drivers\mrxdav.sys 2013-10-09 11:31:30 40AF23633D197905F03AB5628C558C51 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2013-10-09 11:31:30 314C17917AC8523EC77A710215012A65 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys 2013-10-09 11:31:21 88612F1CE3BF42256913BF6E61C70D52 983488 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys 2013-10-09 11:30:04 E73A7A04FDAC9DD46EE2A4257F09E91C 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys 2013-10-09 11:30:04 ACCEA6BC68D0C9A78EB97EE159028B4E 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys 2013-10-09 11:30:04 A83D0EC9AE4C31704442099D40BA2471 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys 2013-10-09 11:30:04 9406D801042FAF859CF81B2C886413DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys 2013-10-09 11:30:04 861C197502A5057E68F0AC75D9EFCDD7 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys 2013-10-09 11:30:04 311C1DD1088E55BEAE15954D17F50646 52736 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys 2013-10-09 11:30:04 280E90CBF4B2DDD169F0728CB44D726F 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys 2013-10-08 09:00:18 F188B7394D81010767B6DF3178519A37 80384 ----a-w- C:\Windows\Sysnative\drivers\BTHUSB.SYS 2013-10-08 09:00:18 738D0E9272F59EB7A1449C3EC118E6C4 552960 ----a-w- C:\Windows\Sysnative\drivers\bthport.sys 2013-10-08 08:59:13 FED648B01349A3C8395A5169DB5FB7D6 91648 ----a-w- C:\Windows\Sysnative\drivers\USBSTOR.SYS 2013-10-08 08:59:13 DAB0E87525C10052BF65F06152F37E4A 166272 ----a-w- C:\Windows\Sysnative\drivers\nvstor.sys 2013-10-08 08:59:13 D4121AE6D0C0E7E13AA221AA57EF2D49 107904 ----a-w- C:\Windows\Sysnative\drivers\amdsata.sys 2013-10-08 08:59:13 AAAF44DB3BD0B9D1FB6969B23ECC8366 410496 ----a-w- C:\Windows\Sysnative\drivers\iaStorV.sys 2013-10-08 08:59:13 540DAF1CEA6094886D72126FD7C33048 27008 ----a-w- C:\Windows\Sysnative\drivers\amdxata.sys 2013-10-08 08:59:13 19CB37AC38B802BE9C441D094521A29A 189824 ----a-w- C:\Windows\Sysnative\drivers\storport.sys 2013-10-08 08:59:13 0A92CB65770442ED0DC44834632F66AD 148352 ----a-w- C:\Windows\Sysnative\drivers\nvraid.sys 2013-10-08 08:24:21 933222B19FF3E7EA5F65517EA1F7D57E 3 ----a-w- C:\Windows\Sysnative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-10-08 08:24:20 AEA0A67275CFBA0E463E00C6E9A1DDAE 54376 ----a-w- C:\Windows\Sysnative\drivers\WdfLdr.sys 2013-10-08 08:20:14 AD64450A4ABE076F5CB34CC08EEACB07 30208 ----a-w- C:\Windows\Sysnative\drivers\TsUsbGD.sys 2013-10-08 08:20:14 313F68E1A3E6345A4F47A36B07062F34 19456 ----a-w- C:\Windows\Sysnative\drivers\rdpvideominiport.sys 2013-10-08 08:20:14 17C6B51CBCCDED95B3CC14E22791F85E 57856 ----a-w- C:\Windows\Sysnative\drivers\TsUsbFlt.sys 2013-10-08 08:05:18 DDA4CAF29D8C0A297F886BFE561E6659 198656 ----a-w- C:\Windows\Sysnative\drivers\WUDFRd.sys 2013-10-08 08:05:18 AB886378EEB55C6C75B4F2D14B6C869F 87040 ----a-w- C:\Windows\Sysnative\drivers\WUDFPf.sys 2013-10-08 08:05:17 933222B19FF3E7EA5F65517EA1F7D57E 3 ----a-w- C:\Windows\Sysnative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-10-08 08:00:46 6BD9295CC032DD3077C671FCCF579A7B 23408 ----a-w- C:\Windows\Sysnative\drivers\fs_rec.sys 2013-10-08 07:57:56 AAFCB52FE0037207FB6FBEA070D25EFE 458712 ----a-w- C:\Windows\Sysnative\drivers\cng.sys 2013-10-08 07:57:56 7EFB9333E4ECCE6AE4AE9D777D9E553E 154480 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys 2013-10-08 07:56:11 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\Sysnative\drivers\Msft_Kernel_SABI_01009.Wdf 2013-10-08 07:55:34 62DB6CC4B0818F1B5F3441241B098F12 13824 ----a-w- C:\Windows\Sysnative\drivers\SABI.sys 2013-10-08 07:46:59 CE1B54F1ED2080B15DAF9044EC92075A 11274528 ----a-w- C:\Windows\Sysnative\drivers\nvlddmkm.sys 2013-10-08 07:46:59 554964B900AE2954B8B589B6287034AC 196384 ----a-w- C:\Windows\Sysnative\drivers\nvhda64v.sys 2013-10-08 07:02:58 1F04CFB79DD5FB7694468CE3FB3DCC31 265064 ----a-w- C:\Windows\Sysnative\drivers\dxgmms1.sys 2013-10-08 07:02:28 D711B3C1D5F42C0C2415687BE09FC163 288768 ----a-w- C:\Windows\Sysnative\drivers\mrxsmb10.sys 2013-10-08 07:02:28 A5D9106A73DC88564C825D317CAC68AC 158208 ----a-w- C:\Windows\Sysnative\drivers\mrxsmb.sys 2013-10-08 07:02:28 9423E9D355C8D303E76B8CFBD8A5C30C 128000 ----a-w- C:\Windows\Sysnative\drivers\mrxsmb20.sys 2013-10-08 07:02:22 B98F8C6E31CD07B2E6F71F7F648E38C0 1656680 ----a-w- C:\Windows\Sysnative\drivers\ntfs.sys 2013-10-08 07:02:15 059F00DEF82BF41E433B7ED465847726 155584 ----a-w- C:\Windows\Sysnative\drivers\ataport.sys 2013-10-08 07:02:13 760E38053BF56E501D562B70AD796B88 950128 ----a-w- C:\Windows\Sysnative\drivers\ndis.sys 2013-10-08 07:02:13 0E01641D96889BDEB22DE12D30575B08 41472 ----a-w- C:\Windows\Sysnative\drivers\RNDISMP.sys 2013-10-08 07:02:04 92B3172E8C14C1444682F510843A9988 19968 ----a-w- C:\Windows\Sysnative\drivers\usb8023.sys 2013-10-08 07:02:03 97A7070AEA4C058B6418519E869A63B4 95600 ----a-w- C:\Windows\Sysnative\drivers\ksecdd.sys 2013-10-08 07:02:00 1B16D0BD9841794A6E0CDE0CEF744ABC 45568 ----a-w- C:\Windows\Sysnative\drivers\tcpipreg.sys 2013-10-08 07:01:58 9BBD8B5855BC6578957F82341F9CDE5A 27520 ----a-w- C:\Windows\Sysnative\drivers\Diskdump.sys 2013-10-08 07:01:39 B4ADEBBF5E3677CCE9651E0F01F7CC28 410112 ----a-w- C:\Windows\Sysnative\drivers\srv2.sys 2013-10-08 07:01:39 441FBA48BFF01FDB9D5969EBC1838F0B 467456 ----a-w- C:\Windows\Sysnative\drivers\srv.sys 2013-10-08 07:01:39 27E461F0BE5BFF5FC737328F749538C3 168448 ----a-w- C:\Windows\Sysnative\drivers\srvnet.sys 2013-10-08 07:01:37 4CE278FC9671BA81A138D70823FCAA09 39936 ----a-w- C:\Windows\Sysnative\drivers\tssecsrv.sys 2013-10-08 07:01:31 E61608AA35E98999AF9AAEEEA6114B0A 210944 ----a-w- C:\Windows\Sysnative\drivers\rdpwd.sys 2013-10-08 07:01:20 E9766131EEADE40A27DC27D2D68FBA9C 75120 ----a-w- C:\Windows\Sysnative\drivers\partmgr.sys 2013-10-08 07:00:51 7942B7AC3FF598F8A1736D51ADAF04E8 376688 ----a-w- C:\Windows\Sysnative\drivers\netio.sys 2013-10-08 07:00:51 41C67E4205C606A103DEC8651D0B6FE6 288088 ----a-w- C:\Windows\Sysnative\drivers\FWPKCLNT.SYS 2013-10-08 07:00:49 8F6322049018354F45F05A2FD2D4E5E0 223752 ----a-w- C:\Windows\Sysnative\drivers\fvevol.sys 2013-10-08 07:00:41 6C02A83164F5CC0A262F4199F0871CF5 90624 ----a-w- C:\Windows\Sysnative\drivers\bowser.sys 2013-10-07 14:18:42 51C5ECEB1CDEE2468A1748BE550CFBC8 23552 ----a-w- C:\Windows\Sysnative\drivers\tdtcp.sys 2013-10-07 13:58:52 CCEDD47ABD068C58C8513DEB785093BB 3379272 ----a-w- C:\Windows\Sysnative\drivers\RTKVHD64.sys 2013-10-07 13:58:52 B8381E8753AF1AD487F96279D6A62584 3180264 ----a-w- C:\Windows\Sysnative\drivers\rtvienna.dat 2013-10-07 13:58:51 AADAFDA81303668BE6ED82AA357564CE 449481 ----a-w- C:\Windows\Sysnative\drivers\RTAIODAT.DAT 2013-10-07 13:36:00 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\Sysnative\drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-10-07 13:12:02 A6284C8C29CCCCAD9109C4DA5CD916BD 508520 ----a-w- C:\Windows\Sysnative\drivers\Rtlh64.sys ====== C:\Windows\Tasks ====== 2013-11-01 17:44:06 03C4B06233F43C71DAE724A11190FE89 3346 ----a-w- C:\Windows\Sysnative\Tasks\{3D804DBA-2203-40F1-BF11-7C85C62F16FC} 2013-11-01 15:07:10 106813200E0351D8C7FDE0505F7C727A 3250 ----a-w- C:\Windows\Sysnative\Tasks\SomotoUpdateCheckerAutoStart 2013-11-01 14:56:02 85A9BC5F7A98C7601895A65F03442D49 400 ----a-w- C:\Windows\Tasks\ViewPassword Update.job 2013-11-01 14:56:02 75E4A972B2F7F076A582AAD99E20D4BE 3050 ----a-w- C:\Windows\Sysnative\Tasks\ViewPassword Update 2013-10-15 06:40:09 EBA889DDF81209C4FB4764285CE98427 940 ----a-w- C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-15 06:40:09 C9D400934CBC0CF893C5F9998280E8FA 3878 ----a-w- C:\Windows\Sysnative\Tasks\Adobe Flash Player Updater 2013-10-09 14:12:20 9B7DD89F133CA1BD9830886D99F9EC12 3230 ----a-w- C:\Windows\Sysnative\Tasks\SidebarExecute 2013-10-09 13:53:34 CFE67308BF06ED641E2C4E634BDAF55E 5044 ----a-w- C:\Windows\Sysnative\Tasks\Microsoft Office 15 Sync Maintenance for Vaes-PC-Stefan Vaes-PC 2013-10-09 13:06:12 -------- d-----w- C:\Windows\Sysnative\Tasks\OfficeSoftwareProtectionPlatform 2013-10-08 08:52:08 FCA11D2F2749684B395EFEED4896603B 3536 ----a-w- C:\Windows\Sysnative\Tasks\CreateChoiceProcessTask 2013-10-08 07:56:15 1B5D7066C6362EAAF90D880B23B9223B 3224 ----a-w- C:\Windows\Sysnative\Tasks\EasyDisplayMgr 2013-10-08 07:56:13 E19FBA42DAB689DEBABDEF29B8EB5E74 2994 ----a-w- C:\Windows\Sysnative\Tasks\WifiManager ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-11-01 17:01:02 -------- d-----w- C:\Program Files\trend micro 2013-10-09 13:04:12 -------- d-----w- C:\Program Files\Microsoft Office 2013-10-08 07:53:07 -------- d-----w- C:\Program Files\7-Zip 2013-10-08 07:52:55 -------- d-----w- C:\Program Files\Java 2013-10-08 07:46:11 -------- d-----w- C:\Program Files\NVIDIA Corporation 2013-10-07 13:59:08 -------- d-----w- C:\Program Files\Realtek 2013-10-07 13:41:06 -------- d-----w- C:\Program Files\Intel ======= C:\PROGRA~2 ===== 2013-11-01 17:16:12 -------- d-----w- C:\PROGRA~2\COMMON~1\Aimersoft 2013-11-01 17:16:07 -------- d-----w- C:\PROGRA~2\Aimersoft 2013-11-01 16:10:12 -------- d-----w- C:\PROGRA~2\DVDFab 9 2013-11-01 15:42:05 -------- d-----w- C:\PROGRA~2\Nero 2013-11-01 15:41:39 -------- d-----w- C:\PROGRA~2\COMMON~1\Nero 2013-11-01 15:24:14 -------- d-----w- C:\PROGRA~2\DVDx 4.0 2013-11-01 15:07:16 -------- d-----w- C:\PROGRA~2\Mobogenie 2013-11-01 14:56:02 -------- d-----w- C:\PROGRA~2\ViewPassword 2013-10-19 05:15:18 -------- d-----w- C:\PROGRA~2\Wisdom-soft ScreenHunter 6.0 Free 2013-10-18 15:00:42 -------- d-----w- C:\PROGRA~2\Audible 2013-10-09 15:27:09 -------- d-----w- C:\PROGRA~2\Microsoft SkyDrive 2013-10-09 15:23:37 -------- d-----w- C:\PROGRA~2\Mozilla Maintenance Service 2013-10-09 14:11:31 -------- d-----w- C:\PROGRA~2\COMMON~1\AVG Secure Search 2013-10-09 14:11:28 -------- d-----w- C:\PROGRA~2\AVG Secure Search 2013-10-09 14:07:48 -------- d-----w- C:\PROGRA~2\AVG 2013-10-09 13:09:30 -------- d-----w- C:\PROGRA~2\COMMON~1\DESIGNER 2013-10-09 13:08:57 -------- d-----w- C:\PROGRA~2\Microsoft SQL Server 2013-10-09 13:06:41 -------- d-----w- C:\PROGRA~2\Microsoft Analysis Services 2013-10-09 13:05:53 -------- d-----w- C:\PROGRA~2\Microsoft Office 2013-10-08 09:00:24 -------- d-----w- C:\PROGRA~2\Microsoft.NET 2013-10-08 07:55:29 -------- d-----w- C:\PROGRA~2\Samsung 2013-10-08 07:53:41 -------- d-----w- C:\PROGRA~2\COMMON~1\Adobe 2013-10-08 07:53:41 -------- d-----w- C:\PROGRA~2\Adobe 2013-10-08 07:53:19 -------- d-----w- C:\PROGRA~2\VideoLAN 2013-10-08 07:53:09 -------- d-----w- C:\PROGRA~2\Combined Community Codec Pack 2013-10-08 07:52:50 -------- d-----w- C:\PROGRA~2\COMMON~1\Java 2013-10-08 07:52:41 -------- d-----w- C:\PROGRA~2\Java 2013-10-08 07:48:20 -------- d-----w- C:\PROGRA~2\NVIDIA Corporation 2013-10-07 13:58:50 -------- d--h--w- C:\PROGRA~2\InstallShield Installation Information 2013-10-07 13:58:50 -------- d-----w- C:\PROGRA~2\Realtek 2013-10-07 13:58:46 -------- d--h--w- C:\PROGRA~2\Temp 2013-10-07 13:58:43 -------- d-----w- C:\PROGRA~2\COMMON~1\InstallShield 2013-10-07 13:42:17 -------- d-----w- C:\PROGRA~2\COMMON~1\Intel Corporation 2013-10-07 13:37:32 -------- d-----w- C:\PROGRA~2\Intel ======= C: ===== 2013-10-09 14:02:02 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\END ====== C:\Users\Stefan\AppData\Roaming ====== 2013-11-01 17:32:30 -------- d-----w- C:\Users\Stefan\AppData\Local\FileViewPro 2013-11-01 17:32:26 -------- d-----w- C:\Users\Stefan\AppData\Roaming\IsolatedStorage 2013-11-01 17:16:12 -------- d-----w- C:\Users\Stefan\AppData\Local\Aimersoft 2013-11-01 16:10:23 -------- d-----w- C:\Users\Stefan\AppData\Roaming\NVIDIA 2013-11-01 16:10:21 -------- d-----w- C:\Users\Stefan\AppData\Roaming\DVDFab9 2013-11-01 15:50:30 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Nero 2013-11-01 15:08:41 -------- d-----w- C:\Users\Stefan\AppData\Local\Bundled software uninstaller 2013-11-01 15:08:00 -------- d-----w- C:\Users\Stefan\AppData\Local\Mobogenie 2013-11-01 15:08:00 -------- d-----w- C:\Users\Stefan\AppData\Local\cache 2013-11-01 15:07:09 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker 2013-11-01 15:07:09 -------- d-----w- C:\Users\Stefan\AppData\Local\FilesFrog Update Checker 2013-10-30 07:25:28 -------- d-----w- C:\Users\Stefan\AppData\Local\Diagnostics 2013-10-19 23:20:11 -------- d-----w- C:\Users\Gast\AppData\Locallow\Microsoft 2013-10-19 23:19:22 25BD9AE0371A5AA8AE537BD2C172D10D 111536 ----a-w- C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-19 23:19:22 -------- d-----w- C:\Users\Gast\AppData\Roaming\Intel Corporation 2013-10-19 23:18:19 -------- d-----w- C:\Users\Gast\AppData\Local\AVG Secure Search 2013-10-19 23:18:13 -------- d-----w- C:\Users\Gast\AppData\Roaming\Mozilla 2013-10-19 23:18:13 -------- d-----w- C:\Users\Gast\AppData\Local\Mozilla 2013-10-19 23:17:57 -------- d-----w- C:\Users\Gast\AppData\Roaming\AVG2014 2013-10-19 23:17:54 -------- d-----w- C:\Users\Gast\AppData\Locallow\AVG Secure Search 2013-10-19 23:17:54 -------- d-----w- C:\Users\Gast\AppData\Local\Avg2014 2013-10-19 23:17:25 -------- d-----w- C:\Users\Gast\AppData\Roaming\Adobe 2013-10-19 23:17:23 -------- d-----r- C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-10-19 23:17:23 -------- d-----r- C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-10-19 23:17:03 -------- d-----w- C:\Users\Gast\AppData\Roaming\Identities 2013-10-19 23:16:36 -------- d-s---w- C:\Users\Gast\AppData\Roaming\Microsoft 2013-10-19 23:16:36 -------- d-----w- C:\Users\Gast\AppData\Roaming\TuneUp Software 2013-10-19 23:16:36 -------- d-----w- C:\Users\Gast\AppData\Roaming\Media Center Programs 2013-10-19 23:16:36 -------- d-----w- C:\Users\Gast\AppData\Local\Temp 2013-10-19 23:16:36 -------- d-----w- C:\Users\Gast\AppData\Local\Microsoft Help 2013-10-19 23:16:36 -------- d-----w- C:\Users\Gast\AppData\Local\Microsoft 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-19 09:51:49 -------- d-----w- C:\Users\Default\AppData\Roaming\TuneUp Software 2013-10-19 09:51:49 -------- d-----w- C:\Users\Default User\AppData\Roaming\TuneUp Software 2013-10-19 05:15:20 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter 6 Free 2013-10-18 15:02:30 -------- d-----w- C:\Users\Stefan\AppData\Local\Audible 2013-10-16 04:25:38 -------- d-----w- C:\Users\Default\AppData\Local\Microsoft Help 2013-10-16 04:25:38 -------- d-----w- C:\Users\Default User\AppData\Local\Microsoft Help 2013-10-15 05:37:06 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Locallow\AVG Secure Search 2013-10-09 15:23:47 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Mozilla 2013-10-09 15:23:47 -------- d-----w- C:\Users\Stefan\AppData\Local\Mozilla 2013-10-09 14:12:40 -------- d-----w- C:\Users\Stefan\AppData\Roaming\AVG2014 2013-10-09 14:12:37 -------- d-----w- C:\Users\Stefan\AppData\Local\AVG Secure Search 2013-10-09 14:12:18 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\AVG2014 2013-10-09 14:11:56 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Avg2014 2013-10-09 14:11:54 -------- d-----w- C:\Users\Stefan\AppData\Roaming\TuneUp Software 2013-10-09 14:11:42 -------- d-----w- C:\Users\Stefan\AppData\Locallow\AVG Secure Search 2013-10-09 14:10:49 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-10-09 14:08:03 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Dropbox 2013-10-09 14:07:48 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Local\Avg2014 2013-10-09 14:05:36 -------- d-----w- C:\Users\Stefan\AppData\Local\Avg2014 2013-10-09 13:06:38 -------- d-----w- C:\Users\Stefan\AppData\Local\Microsoft Help 2013-10-09 11:25:33 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\PnrpSqm 2013-10-09 11:22:59 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Roaming\PeerNetworking 2013-10-08 07:54:29 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Adobe 2013-10-08 07:54:29 -------- d-----w- C:\Users\Stefan\AppData\Locallow\Adobe 2013-10-08 07:54:29 -------- d-----w- C:\Users\Stefan\AppData\Local\Adobe 2013-10-08 07:54:26 -------- d-----w- C:\Users\Stefan\AppData\Roaming\vlc 2013-10-08 07:53:08 -------- d-----w- C:\Users\Stefan\AppData\Local\Programs 2013-10-08 07:52:35 -------- d-----w- C:\Users\Stefan\AppData\Locallow\Sun 2013-10-07 15:05:56 -------- d-s---w- C:\Windows\serviceprofiles\Localservice\AppData\Locallow\Microsoft 2013-10-07 14:53:39 -------- d-s---w- C:\Windows\serviceprofiles\networkservice\AppData\Locallow\Microsoft 2013-10-07 14:14:45 -------- d-s---w- C:\Users\Stefan\AppData\Locallow\Microsoft 2013-10-07 13:41:29 ADA2C2C7DBCB37EB099199F5D665BFD8 111536 ----a-w- C:\Users\Stefan\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-07 13:41:28 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Intel Corporation 2013-10-07 12:46:05 -------- d-----r- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-10-07 12:46:05 -------- d-----r- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-10-07 12:45:56 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Identities 2013-10-07 12:45:37 -------- d-s---w- C:\Users\Stefan\AppData\Roaming\Microsoft 2013-10-07 12:45:37 -------- d-----w- C:\Users\Stefan\AppData\Roaming\Media Center Programs 2013-10-07 12:45:37 -------- d-----w- C:\Users\Stefan\AppData\Local\Temp 2013-10-07 12:45:37 -------- d-----w- C:\Users\Stefan\AppData\Local\Microsoft 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories ====== C:\Users\Stefan ====== 2013-11-01 17:46:46 A395AA5EB8FC63E4B1A8F69A96AEDDFE 82047856 ----a-w- C:\Users\Stefan\Desktop\Nero_BurningROM2014-15.0.02700_trial.exe 2013-11-01 17:46:18 2548BC04F59B07DB4396CA5123CF284A 400736 ----a-w- C:\Users\Stefan\Downloads\SoftonicDownloader_voor_nero-burning-rom.exe 2013-11-01 17:32:26 -------- d-----w- C:\ProgramData\IsolatedStorage 2013-11-01 17:16:10 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aimersoft 2013-11-01 16:10:19 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 9 2013-11-01 16:09:05 3EBA3DF346904AE90B139DFFAC18DCE8 46070856 ----a-w- C:\Users\Stefan\Desktop\DVDFab9063.exe 2013-11-01 15:43:41 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2013-11-01 15:41:45 -------- d-----w- C:\ProgramData\Nero 2013-11-01 15:24:38 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDx 4.0 2013-11-01 15:08:34 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Shrink 2013-11-01 15:08:06 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 2013-11-01 15:08:00 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stefan\daemonprocess.txt 2013-11-01 15:05:38 A03592875F26DC6547E5B080BFC63A70 163352 ----a-w- C:\Users\Stefan\Desktop\DVDShrink_downloader_by_DVDShrink.exe 2013-10-19 23:17:23 -------- d-----r- C:\Users\Gast\Searches 2013-10-19 23:16:53 -------- d-----r- C:\Users\Gast\Contacts 2013-10-19 23:16:37 6FC234AD3752E1267B34FB12BCD6718B 20 --sh--w- C:\Users\Gast\ntuser.ini 2013-10-19 23:16:36 -------- d--h--w- C:\Users\Gast\AppData 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Videos 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Saved Games 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Pictures 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Music 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Links 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Favorites 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Downloads 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Documents 2013-10-19 23:16:36 -------- d-----r- C:\Users\Gast\Desktop 2013-10-19 09:51:50 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2013-10-19 05:15:20 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter 6 Free 2013-10-18 15:00:49 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudibleManager 2013-10-09 15:27:08 -------- d-----r- C:\Users\Stefan\SkyDrive 2013-10-09 15:26:53 -------- d-----w- C:\ProgramData\Microsoft SkyDrive 2013-10-09 15:23:37 -------- d-----w- C:\ProgramData\Mozilla 2013-10-09 14:13:43 -------- d-----r- C:\Users\Stefan\Dropbox 2013-10-09 14:11:32 -------- d-----w- C:\ProgramData\AVG Secure Search 2013-10-09 14:09:52 -------- d-----w- C:\ProgramData\AVG2014 2013-10-09 14:05:36 -------- d--h--w- C:\ProgramData\Common Files 2013-10-09 13:09:52 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2013-10-09 13:09:09 -------- d-----w- C:\ProgramData\regid.1991-06.com.microsoft 2013-10-09 13:06:37 -------- d-----w- C:\ProgramData\Microsoft Help 2013-10-08 07:56:13 -------- d-----w- C:\ProgramData\SAMSUNG 2013-10-08 07:55:29 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2013-10-08 07:53:31 -------- d-----w- C:\ProgramData\Adobe 2013-10-08 07:53:22 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2013-10-08 07:53:11 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack 2013-10-08 07:53:07 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2013-10-08 07:52:50 -------- d-----w- C:\ProgramData\Sun 2013-10-08 07:52:46 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2013-10-08 07:49:17 -------- d-----w- C:\ProgramData\NVIDIA 2013-10-08 07:47:37 -------- d-----w- C:\ProgramData\NVIDIA Corporation 2013-10-07 13:41:21 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\Intel 2013-10-07 13:41:13 -------- d-----w- C:\ProgramData\Intel 2013-10-07 13:41:13 -------- d-----r- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2013-10-07 13:40:32 -------- d-----w- C:\Users\Stefan\Intel 2013-10-07 12:46:05 -------- d-----r- C:\Users\Stefan\Searches 2013-10-07 12:45:53 -------- d-----r- C:\Users\Stefan\Contacts 2013-10-07 12:45:37 6FC234AD3752E1267B34FB12BCD6718B 20 --sh--w- C:\Users\Stefan\ntuser.ini 2013-10-07 12:45:37 -------- d--h--w- C:\Users\Stefan\AppData 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Videos 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Saved Games 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Pictures 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Music 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Links 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Favorites 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Downloads 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Documents 2013-10-07 12:45:37 -------- d-----r- C:\Users\Stefan\Desktop ====== C: exe-files == 2013-11-01 17:47:36 CEDE02D7AF62449A2C38C49ABECC0CD3 4995416 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\microsoftVcRedist2010Sp1X86\vcredist_x86.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\systemRequirementValidator\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\rebootValidator\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\msi4.5ForWindowsxpX86\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\msi4.5ForWindows6.0X86\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\msi4.5ForWindows6.0X64\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\microsoftVcRedist2010Sp1X86\PRQStarter-1.exe 2013-11-01 17:47:36 B632F265AF1745A79FF5CF5BEB10F273 165648 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\lightscribeSystemSoftware\PRQStarter-1.exe 2013-11-01 17:47:36 B202B667D9D9C108EF4ECA13CEEBD43F 727280 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\setup.exe 2013-11-01 17:47:36 A525514358477366B548299468A77EAD 90384 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\lightscribeSystemSoftware\LS_LAUNCHER.exe 2013-11-01 17:47:36 92A1B1C178AF342AD1E85CEE782ED046 81920 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\lightscribeSystemSoftware\LSDriveDetect.exe 2013-11-01 17:47:36 448447E0BA4560CD558EDDB5F5B0809E 3327000 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\msi4.5ForWindowsxpX86\WindowsXP-KB942288-v3-x86.exe 2013-11-01 17:47:36 3FCCD20F89D4D186890128EF3F878366 2566416 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NeroInstallFiles\NERO20131016141023647\ISSetupPrerequisites\systemRequirementValidator\NeroOSValidator.exe 2013-11-01 17:46:46 A395AA5EB8FC63E4B1A8F69A96AEDDFE 82047856 ----a-w- C:\Users\Stefan\Desktop\Nero_BurningROM2014-15.0.02700_trial.exe 2013-11-01 17:46:18 2548BC04F59B07DB4396CA5123CF284A 400736 ----a-w- C:\Users\Stefan\Downloads\SoftonicDownloader_voor_nero-burning-rom.exe 2013-11-01 17:45:04 FCEB840BFBBDB3412FB5D72EEB80F516 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$ISSBT2C.exe 2013-11-01 17:45:04 EEE7ED796291A1B358AA93AD7A016409 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$IHX1W0H.exe 2013-11-01 17:45:04 EBBE49E85F55039ACFB051B881A43D96 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$IKOCBV1.exe 2013-11-01 17:45:04 E03CD3C4A4E404F71195E7C759B29005 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$IGGGTE4.exe 2013-11-01 17:45:04 D4189C56E18DE6D2CB43568E094C4360 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$IJLAL85.exe 2013-11-01 17:45:04 C7E05DC30D7A92E388E1B21DE6C51D63 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$I60W0RW.exe 2013-11-01 17:45:04 BF185467405488FC76189AFDD34855B1 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$I88RH8V.exe 2013-11-01 17:45:04 B23C6D240BF356FB1B7F9DBE5B38E814 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$I7A8Z41.exe 2013-11-01 17:45:04 AC723EE8A2FD06D54E7DC70CD2412F05 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$IIRF31O.exe 2013-11-01 17:45:04 72D6743B7FC137B015E06F0BFD4CC455 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$I7DK06I.exe 2013-11-01 17:45:04 4F4BAD435E3C4C2968C2D2BF60CBE4E2 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$IEV4YI2.exe 2013-11-01 17:45:04 2BDD22AA39382F74AEC55679B7F33A81 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$I15XG38.exe 2013-11-01 17:45:04 0CE2D496E77F3897B29150FDEFC00E19 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$IPTNSVH.exe 2013-11-01 17:29:50 65295BFEAC7F8D27FC637C6F2E03DCFB 2388400 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$RPTNSVH.exe 2013-11-01 17:16:12 3A09D8AC12A36B7D961AC80C23460C3F 1667072 ----a-w- C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe 2013-11-01 17:16:12 2B890FB719923055F363E0C3F139D10E 723294 ----a-w- C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\unins000.exe 2013-11-01 17:16:09 DA0000D6326698972ACDFA6BE2EF1670 253952 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\CmdConverter.exe 2013-11-01 17:16:08 FED648BFC3E25348FD547690E85AC007 326144 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\PlaySvr.exe 2013-11-01 17:16:08 AB35B26C496283AC5574107F5E5839C8 97056 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\amd64\DriverSetup.exe 2013-11-01 17:16:08 A9B762CFCC5A988D4B65DF13DDE421AA 51016 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Setup.exe 2013-11-01 17:16:08 A102C2CCF149FAA19C739F98F2710BFA 222208 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\CommandQTPlayer.exe 2013-11-01 17:16:08 7A20A89667967D04B04BA5526A3E6B56 992398 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Aimersoft Helper Compact.exe 2013-11-01 17:16:08 7741EF32514ECF9A3530202313A7E370 89376 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\x86\DriverSetup.exe 2013-11-01 17:16:08 52326677B98F864A3FFA3325F1E98D23 465920 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\MetadataConvert.exe 2013-11-01 17:16:07 DF31D600F2DD5E00A9AA234158BB20DE 2059776 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\DRMMediaConverter.exe 2013-11-01 17:16:07 CE1019CD626FA92F9A518F3B9D59CC44 801118 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\unins000.exe 2013-11-01 17:15:31 F66956CE488BFF9AB72243CB26EFFC0E 13332486 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$R7DK06I.exe 2013-11-01 17:01:02 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Stefan.exe 2013-11-01 17:00:22 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$R15XG38.exe 2013-11-01 16:10:15 D9FF547DF27616679B1D3B7D532F48FF 182776 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFab2Dto3D.exe 2013-11-01 16:10:15 D69F7D3552837F8D07050A6E14651167 180216 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabBluRay2Mobile3D.exe 2013-11-01 16:10:15 BED0EAB1C05C98395645429A8E74FD48 180728 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabFile2Mobile.exe 2013-11-01 16:10:15 AEB5AB975FFDA1B6AA82EB81763430FA 180768 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabBluRay2BluRay.exe 2013-11-01 16:10:15 A51EC85A81A8E7B11F3610538054C988 180728 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabBluRay2Mobile.exe 2013-11-01 16:10:15 A2AC590BF725B9506C1BE7B19D577A56 180728 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabBluRay2DVD.exe 2013-11-01 16:10:15 91DF740EDD0D828D6DFC4F1545E17A75 180216 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabFile2BluRay.exe 2013-11-01 16:10:15 76A6859F6AE756A951DECB0CBBDA8112 183288 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabDVD2DVD.exe 2013-11-01 16:10:15 3B75CF637E0E2BB6FB29946F7122497D 181752 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabFile2DVD.exe 2013-11-01 16:10:15 352403FAE3C1035610C0B6F4139C1564 193328 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabAddonDVD.exe 2013-11-01 16:10:15 27E51DA69725F8E3430416A8DE9C1062 181752 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabFileMover.exe 2013-11-01 16:10:15 224BDE43A113F30EBCE6D9BC351D06BF 195576 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabAddonBluRay.exe 2013-11-01 16:10:15 117D280AF3E4296F7C9ACBE0EC6D7013 183288 ----a-w- C:\Program Files (x86)\DVDFab 9\Options\DVDFabDVD2Mobile.exe 2013-11-01 16:10:14 E910402CE59E1326A39B8C9AE263A097 534560 ----a-w- C:\Program Files (x86)\DVDFab 9\FabCore.exe 2013-11-01 16:10:14 E41D948487C28A1799C8277D49EB7B9E 149024 ----a-w- C:\Program Files (x86)\DVDFab 9\FabRegOp.exe 2013-11-01 16:10:14 43D9C4AD630AD7B5B750DB3DBA48489C 318496 ----a-w- C:\Program Files (x86)\DVDFab 9\FabCheck.exe 2013-11-01 16:10:13 EE2893492789FFDD51836CC79C681005 1630752 ----a-w- C:\Program Files (x86)\DVDFab 9\FabReport.exe 2013-11-01 16:10:13 A5353D384F9B3EE44FB01956F4DDF649 1186848 ----a-w- C:\Program Files (x86)\DVDFab 9\FileMover.exe 2013-11-01 16:10:12 E8F084DB1D8260BCD72DA33F8E6D9251 1290784 ----a-w- C:\Program Files (x86)\DVDFab 9\unins000.exe 2013-11-01 16:10:12 6A105C9695D1E7E1F248B99D88689650 12309536 ----a-w- C:\Program Files (x86)\DVDFab 9\DVDFab.exe 2013-11-01 16:09:05 3EBA3DF346904AE90B139DFFAC18DCE8 46070856 ----a-w- C:\Users\Stefan\Desktop\DVDFab9063.exe 2013-11-01 16:07:37 A10474012F9E8A67114C5C7E3942C676 400720 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$R88RH8V.exe 2013-11-01 15:35:07 39044759DA9FD2B42864BC1AED78B349 5854504 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\setupx.exe 2013-11-01 15:35:07 0F53D59DF42827E7AF4FC207E600A999 483328 ----a-w- C:\Users\Stefan\AppData\Local\Temp\NERO1004997\unit_app_75\Toolbar.exe 2013-11-01 15:34:24 CE50CE5090D6EF3321C95F59E6BF0DD6 57182416 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$REV4YI2.exe 2013-11-01 15:32:02 11C83041227B73C0C490FFE16A5D65C3 57187288 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$RSSBT2C.exe 2013-11-01 15:24:37 756FA9BAE799354C1B24A1254BCAFFE3 82579 ----a-w- C:\Program Files (x86)\DVDx 4.0\Uninstall.exe 2013-11-01 15:22:57 F03239A987B6E3E84306900FA3CAC75A 88542309 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$R60W0RW.exe 2013-11-01 15:08:41 C66293CCD7CBE84B1B8F393CA5E4E6D7 224256 ----a-w- C:\Users\Stefan\AppData\Local\Bundled software uninstaller\biclient.exe 2013-11-01 15:07:09 A29AE906C3A3AA83E934E77C8E198C8E 61990 ----a-w- C:\Users\Stefan\AppData\Local\FilesFrog Update Checker\uninstall.exe 2013-11-01 15:06:42 EFC4643607D821EE5B1E306B5181917C 1117491 ----a-w- C:\Users\Stefan\AppData\Local\Temp\dvdshrink32setup.exe 2013-11-01 15:06:31 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stefan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F114R052\dvdshrink32setup[1].exe 2013-11-01 15:06:31 2F5252E50745E47DB355B005725DAE05 327880 ----a-w- C:\Users\Stefan\AppData\Local\Temp\appshat-distribution.exe 2013-11-01 15:06:00 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stefan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DDD8A3KI\appshat-distribution[1].exe 2013-11-01 15:05:54 D57FEA9E22BE0F7FDDAD91724ED8CD20 6665808 ----a-w- C:\Users\Stefan\AppData\Local\Temp\OptimizerPro.exe 2013-11-01 15:05:53 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stefan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F114R052\OptimizerPro[1].exe 2013-11-01 15:05:53 CF310D35273BD1261DB9D90A447AB51F 17455448 ----a-w- C:\Users\Stefan\AppData\Local\Temp\Mobogenie_Setup_2.1.23_515.exe 2013-11-01 15:05:51 E70CDCC45794FC5D47EE6B4C0E36B061 319024 ----a-w- C:\Program Files (x86)\AVG\AVG2014\avgndisa.exe 2013-11-01 15:05:46 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stefan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HOT3KPP\Mobogenie_Setup_2.1.23_515[1].exe 2013-11-01 15:05:45 FC0CB8F2ADA86F7EC51F9FB6FFB56C19 7884008 ----a-w- C:\Users\Stefan\AppData\Local\Temp\MoviesToolbarSetup_Somoto_9_10_2013.exe 2013-11-01 15:05:42 EF7D1863F4980AB0C8BDA142FEE67F92 200072 ----a-w- C:\Users\Stefan\AppData\Local\Temp\UpdateCheckerSetup.exe 2013-11-01 15:05:42 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stefan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F114R052\UpdateCheckerSetup[1].exe 2013-11-01 15:05:42 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stefan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HOT3KPP\MoviesToolbarSetup_Somoto_9_10_2013[1].exe 2013-11-01 15:05:38 A03592875F26DC6547E5B080BFC63A70 163352 ----a-w- C:\Users\Stefan\Desktop\DVDShrink_downloader_by_DVDShrink.exe 2013-11-01 14:56:01 5868A7D26D9F8890D36C1B17A12AB662 152066 ----a-w- C:\Program Files (x86)\ViewPassword\Uninstall.exe 2013-11-01 14:56:01 1BB32094470E2889D48F0A6DA7287DE1 232960 ----a-w- C:\Program Files (x86)\ViewPassword\ViewPassword.exe 2013-11-01 14:54:56 45C19C1CB060F3055C3D623D617AB626 169272 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$RKOCBV1.exe 2013-11-01 14:49:28 13ED826B6D3FC5EF39FD39EA4915A68C 400712 ----a-w- C:\$Recycle.Bin\S-1-5-21-3003179804-4138232797-2048808043-1000\$RGGGTE4.exe 2013-10-29 20:13:58 45AB7AEDCC4B9BA5E3679096FCE01111 229288 ----a-w- C:\Users\Stefan\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe 2013-10-29 20:12:46 9E4092168E32A19672F36A6DC14FFC37 29769240 ----a-w- C:\Users\Stefan\AppData\Roaming\Dropbox\bin\Dropbox.exe === C: other files == 2013-11-01 17:16:08 F67C4950E3B07684AC483CB718C2A3C1 27496 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\x86\VirtualAudio5.sys 2013-11-01 17:16:08 F67C4950E3B07684AC483CB718C2A3C1 27496 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\x86\VirtualAudio4.sys 2013-11-01 17:16:08 F67C4950E3B07684AC483CB718C2A3C1 27496 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\x86\VirtualAudio3.sys 2013-11-01 17:16:08 F67C4950E3B07684AC483CB718C2A3C1 27496 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\x86\VirtualAudio2.sys 2013-11-01 17:16:08 F67C4950E3B07684AC483CB718C2A3C1 27496 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\x86\VirtualAudio1.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\System32\drivers\VirtualAudio5.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\System32\drivers\VirtualAudio4.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\System32\drivers\VirtualAudio3.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\System32\drivers\VirtualAudio2.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Windows\System32\drivers\VirtualAudio1.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\amd64\VirtualAudio5.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\amd64\VirtualAudio4.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\amd64\VirtualAudio3.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\amd64\VirtualAudio2.sys 2013-11-01 17:16:08 ADD2FE1A9F4EE41A6D724819550D4E1F 31080 ----a-w- C:\Program Files (x86)\Aimersoft\DRM Media Converter\Driver\amd64\VirtualAudio1.sys 2013-11-01 14:56:02 BB01B9A8BF47DFD9B7A9419394EC6B69 6126 ----a-w- C:\Program Files (x86)\ViewPassword\134.xpi 2013-11-01 14:56:01 560FCF3CE553AE09AE5130E5430BF227 16998 ----a-w- C:\Program Files (x86)\ViewPassword\134.crx ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-3003179804-4138232797-2048808043-1000\Software\Microsoft\Windows\CurrentVersion\Run] "SkyDrive"="C:\Users\Stefan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe /background" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "AVG_UI"="C:\Program Files (x86)\AVG\AVG2014\avgui.exe /TRAYONLY" "vProt"="C:\Program Files (x86)\AVG Secure Search\vprot.exe" "mobilegeni daemon"="C:\Program Files (x86)\Mobogenie\DaemonProcess.exe" "Aimersoft Helper Compact.exe"="C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "SkyDrive"="C:\Users\Stefan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe /background" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="c:\\progra~2\\optimi~1\\optpro~1.dll" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe 60" "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" ==== Startup Folders ====================== 2013-10-09 14:11:29 1049 ----a-w- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2013-10-19 05:15:20 2054 ----a-w- C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ScreenHunter 6.0 Free.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [20/10/2013 20:43] C:\Windows\tasks\ViewPassword Update.job --a------ [undetermined Task] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\EasyDisplayMgr" ["C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe"] "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\SysNative\tasks\SomotoUpdateCheckerAutoStart" [C:\Users\Stefan\AppData\Local\FilesFrog Update Checker\update_checker.exe] "C:\Windows\SysNative\tasks\ViewPassword Update" [C:\Program Files (x86)\ViewPassword\ViewPassword.exe] "C:\Windows\SysNative\tasks\WifiManager" ["%programfiles(x86)%\Samsung\Easy Display Manager\WifiManager.exe"] "C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Analyzer" [C:\Program Files (x86)\Norton Identity Safe\Engine\2014.5.0.67\SymErr.exe] "C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Processor" [C:\Program Files (x86)\Norton Identity Safe\Engine\2014.5.0.67\SymErr.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "{cb056958-eb1d-47a5-a7c2-35fd94d51b3f}"="C:\Program Files (x86)\ViewPassword\134.xpi" [01/11/2013 15:56] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\7zljadmx.default - YouTube Video and Audio Downloader - %ProfilePath%\extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\7zljadmx.default 4BF70B35B943BD73BD6E13EB7C1BA4B3 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll - Shockwave Flash ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions jmojojliiicbbihpjmiepllaiflnjobc - C:\Program Files (x86)\ViewPassword\134.crx[01/11/2013 15:56] ==== EOF on vr 01/11/2013 at 19:06:34,16 ======================

Beste zie hier de log van de RSIT: Logfile of random's system information tool 1.09 (written by random/random) Run by Stefan at 2013-11-01 18:01:02 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 423 GB (89%) free of 477 GB Total RAM: 3957 MB (34% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:01:12, on 1/11/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16720) Boot mode: Normal Running processes: C:\Users\Stefan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe C:\Users\Stefan\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\AVG\AVG2014\avgui.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Users\Stefan\AppData\Local\FilesFrog Update Checker\update_checker.exe C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE15\CSISYN~1.EXE C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe C:\Program Files\trend micro\Stefan.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: ViewPassword - {dd000e12-c224-49a5-899e-0b37dbd95f15} - C:\Program Files (x86)\ViewPassword\134.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe O4 - HKLM\..\RunOnce: [CleanSetup] cmd /C rmdir /S /Q "C:\Users\Stefan\AppData\Local\Temp\nro.tmp\" O4 - HKCU\..\Run: [skyDrive] "C:\Users\Stefan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background O4 - HKCU\..\Run: [Optimizer Pro] C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = Stefan\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: ScreenHunter 6.0 Free.lnk = C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office15\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office15\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O20 - AppInit_DLLs: c:\progra~2\optimi~1\optpro~1.dll O23 - Service: Optimizer Pro Crash Monitor (70e6ca8c) - Unknown owner - c:\progra~2\optimi~1\OptProCrash.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater17.0.12 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 10859 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe C:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=76f81771-d101-4354-95d2-9305dd0adc1c /coreSdkOptions=4364 /logConfFile="C:\Windows\TEMP\7add1952-ec36-4b01-8cd9-d11052393709-18c-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\system32\WLANExt.exe 39350112 \??\C:\Windows\system32\conhost.exe "60621176120257959261142814025-80522124-5310812341687691084-1213232980-1711005494 C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "c:\progra~2\optimi~1\OptProCrash.exe" "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\AVG\AVG2014\avgfws.exe" "C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe" "C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe" "C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties" \??\C:\Windows\system32\conhost.exe "-3855929851403537796-1890422388-148087328719773640342110081319-1053169093-526565108 "C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe" "C:\Program Files (x86)\AVG\AVG2014\avgemca.exe" C:\Windows\system32\svchost.exe -k bthsvcs "taskhost.exe" taskeng.exe {831BAFD8-64D9-4AF1-A7D5-6C787EB76D36} "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=1b9ce813-02d6-4d29-9cc9-8757c298a536 /coreSdkOptions=4096 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\cb633a5c-699a-456c-8279-ed38d640104b-980-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Users\Stefan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background "C:\Users\Stefan\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup "C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe" "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY "C:\Program Files (x86)\AVG Secure Search\vprot.exe" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Users\Stefan\AppData\Local\FilesFrog Update Checker\update_checker.exe" /auto "C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe" "C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe" hide "C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE15\CSISYN~1.EXE" -Embedding "C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" "C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe" C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE" "LogonUI.exe" /flags:0x0 "C:\Program Files\Internet Explorer\iexplore.exe" C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe -Embedding "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:124 CREDAT:529686 /prefetch:2 "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=7128.1330fe00.1600004818 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 7128 "\\.\pipe\gecko-crash-server-pipe.7128" plugin "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe" --proxy-stub-channel=Flash6716.1089F308.18802 --host-broker-channel=Flash6716.1089F308.31268 --host-pid=6716 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll" "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe" --channel=6852.0024F820.474716873 --proxy-stub-channel=Flash6716.1089F308.18802 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll" --host-npapi-version=27 --type=renderer C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\sppsvc.exe "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe24_ Global\UsGthrCtrlFltPipeMssGthrPipe24 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528 "C:\Users\Stefan\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\ViewPassword Update.job =========Mozilla firefox========= ProfilePath - C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\7zljadmx.default prefs.js - "browser.search.useDBForOrder" - "false" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 11.9.900.117 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] "Description"= "Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.0.12\\npsitesafety.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.45.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0] "Description"=Microsoft Lync Plug-in for Firefox "Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.0] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 11.9.900.117 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.40.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Windows\system32\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled C:\Program Files (x86)\Mozilla Firefox\plugins\ npMeetingJoinPluginOC.dll nppdf32.dll C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\7zljadmx.default\searchplugins\ cambridge-dictionaries-online.xml ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01 205416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 553384] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL [2013-09-13 878296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2013-09-13 2328264] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 210856] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2013-07-10 139424] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll [2013-10-15 3353624] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2013-09-13 705240] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-09-13 1724616] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dd000e12-c224-49a5-899e-0b37dbd95f15}] ViewPassword - C:\Program Files (x86)\ViewPassword\134.dll [2013-11-01 137216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll [2013-10-15 3353624] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"=C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-03-29 13513288] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "SkyDrive"=C:\Users\Stefan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-10-09 257136] "Optimizer Pro"=C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [2013-10-24 134648] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-09-05 958576] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2013-10-07 4908592] "vProt"=C:\Program Files (x86)\AVG Secure Search\vprot.exe [2013-10-15 2404376] "mobilegeni daemon"=C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce] "CleanSetup"=cmd /C rmdir /S /Q C:\Users\Stefan\AppData\Local\Temp\nro.tmp\ [] C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Stefan\AppData\Roaming\Dropbox\bin\Dropbox.exe ScreenHunter 6.0 Free.lnk - C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=" C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2013-11-01 18:01:02 ----D---- C:\rsit 2013-11-01 18:01:02 ----D---- C:\Program Files\trend micro 2013-11-01 17:31:40 ----D---- C:\Users\Stefan\AppData\Roaming\21575 2013-11-01 17:10:23 ----D---- C:\Users\Stefan\AppData\Roaming\NVIDIA 2013-11-01 17:10:21 ----D---- C:\Users\Stefan\AppData\Roaming\DVDFab9 2013-11-01 17:10:12 ----D---- C:\Program Files (x86)\DVDFab 9 2013-11-01 16:50:30 ----D---- C:\Users\Stefan\AppData\Roaming\Nero 2013-11-01 16:42:05 ----D---- C:\Program Files (x86)\Nero 2013-11-01 16:41:45 ----D---- C:\ProgramData\Nero 2013-11-01 16:24:14 ----D---- C:\Program Files (x86)\DVDx 4.0 2013-11-01 16:20:59 ----D---- C:\KOKOWAEAEH 2013-11-01 16:08:34 ----D---- C:\ProgramData\DVD Shrink 2013-11-01 16:08:34 ----D---- C:\Program Files (x86)\DVD Shrink 2013-11-01 16:08:05 ----D---- C:\Program Files (x86)\Optimizer Pro 2013-11-01 16:07:16 ----D---- C:\Program Files (x86)\Mobogenie 2013-11-01 15:56:02 ----D---- C:\Program Files (x86)\ViewPassword 2013-10-25 13:31:01 ----D---- C:\ProgramData\Oracle 2013-10-25 13:30:39 ----A---- C:\Windows\SYSWOW64\javaws.exe 2013-10-25 13:30:35 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2013-10-25 13:30:35 ----A---- C:\Windows\SYSWOW64\javaw.exe 2013-10-25 13:30:35 ----A---- C:\Windows\SYSWOW64\java.exe 2013-10-19 06:15:18 ----D---- C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free 2013-10-19 06:14:43 ----D---- C:\Users\Stefan\AppData\Roaming\0F1F1C2Y1H1P1C0I0T 2013-10-18 16:00:47 ----N---- C:\Windows\SYSWOW64\msxml3a.dll 2013-10-18 16:00:47 ----N---- C:\Windows\SYSWOW64\msvcr71.dll 2013-10-18 16:00:47 ----N---- C:\Windows\SYSWOW64\msvcp71.dll 2013-10-18 16:00:47 ----N---- C:\Windows\SYSWOW64\mfc71.dll 2013-10-18 16:00:42 ----D---- C:\Program Files (x86)\Audible 2013-10-16 05:52:40 ----A---- C:\Windows\SYSWOW64\wininet.dll 2013-10-16 05:52:40 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2013-10-16 05:52:40 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe 2013-10-16 05:52:40 ----A---- C:\Windows\SYSWOW64\msrating.dll 2013-10-16 05:52:40 ----A---- C:\Windows\SYSWOW64\msls31.dll 2013-10-16 05:52:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2013-10-16 05:52:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2013-10-16 05:52:40 ----A---- C:\Windows\SYSWOW64\elshyph.dll 2013-10-16 05:52:40 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2013-10-16 05:52:40 ----A---- C:\Windows\system32\elshyph.dll 2013-10-16 05:52:39 ----A---- C:\Windows\SYSWOW64\wextract.exe 2013-10-16 05:52:39 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2013-10-16 05:52:39 ----A---- C:\Windows\SYSWOW64\inseng.dll 2013-10-16 05:52:37 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2013-10-16 05:52:37 ----A---- C:\Windows\SYSWOW64\iexpress.exe 2013-10-16 05:52:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2013-10-16 05:52:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\pngfilt.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\occache.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\mshtmler.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\mshta.exe 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\jscript.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\imgutil.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\iesysprep.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\iepeers.dll 2013-10-16 05:52:32 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\url.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\licmgr10.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\ieui.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\icardie.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2013-10-16 05:52:31 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2013-10-16 05:52:31 ----A---- C:\Windows\system32\urlmon.dll 2013-10-16 05:52:31 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-16 05:52:31 ----A---- C:\Windows\system32\msrating.dll 2013-10-16 05:52:31 ----A---- C:\Windows\system32\iertutil.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\wininet.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\webcheck.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\url.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\msls31.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\mshtmlmedia.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\jsproxy.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\iesetup.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\iernonce.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\iedkcs32.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\ieapfltr.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\ieapfltr.dat 2013-10-16 05:52:30 ----A---- C:\Windows\system32\ie4uinit.exe 2013-10-16 05:52:30 ----A---- C:\Windows\system32\icardie.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\dxtrans.dll 2013-10-16 05:52:30 ----A---- C:\Windows\system32\dxtmsft.dll 2013-10-16 05:52:29 ----A---- C:\Windows\system32\wextract.exe 2013-10-16 05:52:29 ----A---- C:\Windows\system32\vbscript.dll 2013-10-16 05:52:29 ----A---- C:\Windows\system32\mshtmled.dll 2013-10-16 05:52:29 ----A---- C:\Windows\system32\mshtml.dll 2013-10-16 05:52:29 ----A---- C:\Windows\system32\msfeeds.dll 2013-10-16 05:52:29 ----A---- C:\Windows\system32\licmgr10.dll 2013-10-16 05:52:29 ----A---- C:\Windows\system32\inseng.dll 2013-10-16 05:52:29 ----A---- C:\Windows\system32\iexpress.exe 2013-10-16 05:52:28 ----A---- C:\Windows\system32\SetIEInstalledDate.exe 2013-10-16 05:52:28 ----A---- C:\Windows\system32\pngfilt.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\occache.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\mshtmler.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\mshta.exe 2013-10-16 05:52:28 ----A---- C:\Windows\system32\msfeedssync.exe 2013-10-16 05:52:28 ----A---- C:\Windows\system32\msfeedsbs.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\jscript9.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\jscript.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\imgutil.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\ieUnatt.exe 2013-10-16 05:52:28 ----A---- C:\Windows\system32\ieui.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\iesysprep.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\iepeers.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\ieframe.dll 2013-10-16 05:52:28 ----A---- C:\Windows\system32\IEAdvpack.dll 2013-10-15 07:41:08 ----D---- C:\Users\Stefan\AppData\Roaming\Macromedia 2013-10-15 07:40:14 ----D---- C:\ProgramData\McAfee 2013-10-15 07:40:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2013-10-15 07:40:07 ----D---- C:\Windows\SYSWOW64\Macromed 2013-10-15 07:40:06 ----D---- C:\Windows\system32\Macromed 2013-10-09 16:30:52 ----HD---- C:\SkyDriveTemp 2013-10-09 16:27:09 ----D---- C:\Program Files (x86)\Microsoft SkyDrive 2013-10-09 16:26:53 ----D---- C:\ProgramData\Microsoft SkyDrive 2013-10-09 16:23:47 ----D---- C:\Users\Stefan\AppData\Roaming\Mozilla 2013-10-09 16:23:37 ----D---- C:\ProgramData\Mozilla 2013-10-09 16:23:37 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-09 15:12:40 ----D---- C:\Users\Stefan\AppData\Roaming\AVG2014 2013-10-09 15:11:54 ----D---- C:\Users\Stefan\AppData\Roaming\TuneUp Software 2013-10-09 15:11:37 ----A---- C:\Windows\system32\drivers\avgtpx64.sys 2013-10-09 15:11:32 ----D---- C:\ProgramData\AVG Secure Search 2013-10-09 15:11:28 ----D---- C:\Program Files (x86)\AVG Secure Search 2013-10-09 15:09:52 ----HD---- C:\$AVG 2013-10-09 15:09:52 ----D---- C:\ProgramData\AVG2014 2013-10-09 15:08:03 ----D---- C:\Users\Stefan\AppData\Roaming\Dropbox 2013-10-09 15:07:48 ----D---- C:\Program Files (x86)\AVG 2013-10-09 15:05:36 ----HD---- C:\ProgramData\Common Files 2013-10-09 15:05:36 ----D---- C:\ProgramData\MFAData 2013-10-09 15:02:39 ----D---- C:\Users\Stefan\AppData\Roaming\Systweak 2013-10-09 15:02:38 ----A---- C:\Windows\system32\roboot64.exe 2013-10-09 14:09:09 ----D---- C:\ProgramData\regid.1991-06.com.microsoft 2013-10-09 14:09:01 ----D---- C:\Program Files (x86)\Mozilla Firefox 2013-10-09 14:08:57 ----D---- C:\Windows\PCHEALTH 2013-10-09 14:08:57 ----D---- C:\Program Files (x86)\Microsoft SQL Server 2013-10-09 14:06:41 ----D---- C:\Program Files (x86)\Microsoft Analysis Services 2013-10-09 14:06:37 ----D---- C:\ProgramData\Microsoft Help 2013-10-09 14:05:53 ----D---- C:\Program Files (x86)\Microsoft Office 2013-10-09 14:04:12 ----D---- C:\Program Files\Microsoft Office 2013-10-09 13:58:53 ----RHD---- C:\MSOCache 2013-10-09 12:31:40 ----A---- C:\Windows\SYSWOW64\comctl32.dll 2013-10-09 12:31:40 ----A---- C:\Windows\system32\comctl32.dll 2013-10-09 12:31:38 ----A---- C:\Windows\SYSWOW64\lpk.dll 2013-10-09 12:31:38 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2013-10-09 12:31:38 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2013-10-09 12:31:38 ----A---- C:\Windows\SYSWOW64\d3d11.dll 2013-10-09 12:31:38 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2013-10-09 12:31:38 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2013-10-09 12:31:38 ----A---- C:\Windows\system32\lpk.dll 2013-10-09 12:31:38 ----A---- C:\Windows\system32\fontsub.dll 2013-10-09 12:31:38 ----A---- C:\Windows\system32\dciman32.dll 2013-10-09 12:31:38 ----A---- C:\Windows\system32\d3d11.dll 2013-10-09 12:31:38 ----A---- C:\Windows\system32\atmlib.dll 2013-10-09 12:31:38 ----A---- C:\Windows\system32\atmfd.dll 2013-10-09 12:31:37 ----A---- C:\Windows\system32\drivers\Wdf01000.sys 2013-10-09 12:31:37 ----A---- C:\Windows\system32\drivers\usbvideo.sys 2013-10-09 12:31:37 ----A---- C:\Windows\system32\drivers\usbcir.sys 2013-10-09 12:31:36 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys 2013-10-09 12:31:36 ----A---- C:\Windows\system32\drivers\hidparse.sys 2013-10-09 12:31:36 ----A---- C:\Windows\system32\drivers\hidclass.sys 2013-10-09 12:31:35 ----A---- C:\Windows\SYSWOW64\WebClnt.dll 2013-10-09 12:31:35 ----A---- C:\Windows\SYSWOW64\davclnt.dll 2013-10-09 12:31:35 ----A---- C:\Windows\system32\WebClnt.dll 2013-10-09 12:31:35 ----A---- C:\Windows\system32\drivers\mrxdav.sys 2013-10-09 12:31:35 ----A---- C:\Windows\system32\davclnt.dll 2013-10-09 12:31:30 ----A---- C:\Windows\system32\mswsock.dll 2013-10-09 12:31:30 ----A---- C:\Windows\system32\drivers\tcpip.sys 2013-10-09 12:31:30 ----A---- C:\Windows\system32\drivers\afd.sys 2013-10-09 12:31:29 ----A---- C:\Windows\SYSWOW64\mswsock.dll 2013-10-09 12:31:28 ----A---- C:\Windows\system32\win32k.sys 2013-10-09 12:31:26 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2013-10-09 12:31:26 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2013-10-09 12:31:26 ----A---- C:\Windows\system32\tdh.dll 2013-10-09 12:31:26 ----A---- C:\Windows\system32\ntoskrnl.exe 2013-10-09 12:31:26 ----A---- C:\Windows\system32\ntdll.dll 2013-10-09 12:31:26 ----A---- C:\Windows\system32\advapi32.dll 2013-10-09 12:31:25 ----A---- C:\Windows\SYSWOW64\wow32.dll 2013-10-09 12:31:25 ----A---- C:\Windows\SYSWOW64\user.exe 2013-10-09 12:31:25 ----A---- C:\Windows\SYSWOW64\tdh.dll 2013-10-09 12:31:25 ----A---- C:\Windows\SYSWOW64\setup16.exe 2013-10-09 12:31:25 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2013-10-09 12:31:25 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2013-10-09 12:31:25 ----A---- C:\Windows\SYSWOW64\instnm.exe 2013-10-09 12:31:25 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2013-10-09 12:31:25 ----A---- C:\Windows\system32\wow64.dll 2013-10-09 12:31:22 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 12:31:22 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 12:31:21 ----A---- C:\Windows\system32\scavengeui.dll 2013-10-09 12:31:21 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys 2013-10-09 12:30:04 ----A---- C:\Windows\system32\drivers\usbuhci.sys 2013-10-09 12:30:04 ----A---- C:\Windows\system32\drivers\usbport.sys 2013-10-09 12:30:04 ----A---- C:\Windows\system32\drivers\usbohci.sys 2013-10-09 12:30:04 ----A---- C:\Windows\system32\drivers\usbhub.sys 2013-10-09 12:30:04 ----A---- C:\Windows\system32\drivers\usbehci.sys 2013-10-09 12:30:04 ----A---- C:\Windows\system32\drivers\usbd.sys 2013-10-09 12:30:04 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2013-10-08 11:25:41 ----D---- C:\ProgramData\Norton 2013-10-08 11:25:36 ----D---- C:\ProgramData\NortonInstaller 2013-10-08 10:00:24 ----D---- C:\Program Files (x86)\Microsoft.NET 2013-10-08 10:00:18 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS 2013-10-08 10:00:18 ----A---- C:\Windows\system32\drivers\bthport.sys 2013-10-08 09:59:13 ----A---- C:\Windows\SYSWOW64\fsutil.exe 2013-10-08 09:59:13 ----A---- C:\Windows\SYSWOW64\esent.dll 2013-10-08 09:59:13 ----A---- C:\Windows\system32\fsutil.exe 2013-10-08 09:59:13 ----A---- C:\Windows\system32\esent.dll 2013-10-08 09:59:13 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS 2013-10-08 09:59:13 ----A---- C:\Windows\system32\drivers\storport.sys 2013-10-08 09:59:13 ----A---- C:\Windows\system32\drivers\nvstor.sys 2013-10-08 09:59:13 ----A---- C:\Windows\system32\drivers\nvraid.sys 2013-10-08 09:59:13 ----A---- C:\Windows\system32\drivers\iaStorV.sys 2013-10-08 09:59:13 ----A---- C:\Windows\system32\drivers\amdxata.sys 2013-10-08 09:59:13 ----A---- C:\Windows\system32\drivers\amdsata.sys 2013-10-08 09:59:07 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2013-10-08 09:59:07 ----A---- C:\Windows\system32\WindowsCodecs.dll 2013-10-08 09:56:08 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2013-10-08 09:56:08 ----A---- C:\Windows\system32\DWrite.dll 2013-10-08 09:48:09 ----D---- C:\Windows\SYSWOW64\Wat 2013-10-08 09:48:09 ----D---- C:\Windows\system32\Wat 2013-10-08 09:34:02 ----D---- C:\Windows\system32\MRT 2013-10-08 09:34:01 ----A---- C:\Windows\system32\MRT.exe 2013-10-08 09:24:20 ----A---- C:\Windows\system32\Wdfres.dll 2013-10-08 09:24:20 ----A---- C:\Windows\system32\drivers\WdfLdr.sys 2013-10-08 09:20:14 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2013-10-08 09:20:14 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2013-10-08 09:20:14 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll 2013-10-08 09:20:14 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys 2013-10-08 09:20:14 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys 2013-10-08 09:20:14 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys 2013-10-08 09:20:13 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll 2013-10-08 09:20:13 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2013-10-08 09:20:13 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll 2013-10-08 09:20:13 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2013-10-08 09:20:13 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll 2013-10-08 09:20:13 ----A---- C:\Windows\SYSWOW64\aaclient.dll 2013-10-08 09:20:13 ----A---- C:\Windows\system32\wksprtPS.dll 2013-10-08 09:20:13 ----A---- C:\Windows\system32\wksprt.exe 2013-10-08 09:20:13 ----A---- C:\Windows\system32\TSWbPrxy.exe 2013-10-08 09:20:13 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll 2013-10-08 09:20:13 ----A---- C:\Windows\system32\tsgqec.dll 2013-10-08 09:20:13 ----A---- C:\Windows\system32\rdpudd.dll 2013-10-08 09:20:13 ----A---- C:\Windows\system32\rdpendp_winip.dll 2013-10-08 09:20:13 ----A---- C:\Windows\system32\rdpcorets.dll 2013-10-08 09:20:13 ----A---- C:\Windows\system32\mstsc.exe 2013-10-08 09:20:13 ----A---- C:\Windows\system32\MsRdpWebAccess.dll 2013-10-08 09:20:13 ----A---- C:\Windows\system32\aaclient.dll 2013-10-08 09:20:12 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2013-10-08 09:20:12 ----A---- C:\Windows\system32\mstscax.dll 2013-10-08 09:14:58 ----A---- C:\Windows\system32\browserchoice.exe 2013-10-08 09:05:18 ----A---- C:\Windows\system32\drivers\WUDFRd.sys 2013-10-08 09:05:18 ----A---- C:\Windows\system32\drivers\WUDFPf.sys 2013-10-08 09:05:17 ----A---- C:\Windows\system32\WUDFx.dll 2013-10-08 09:05:17 ----A---- C:\Windows\system32\WUDFSvc.dll 2013-10-08 09:05:17 ----A---- C:\Windows\system32\WUDFPlatform.dll 2013-10-08 09:05:17 ----A---- C:\Windows\system32\WUDFHost.exe 2013-10-08 09:05:17 ----A---- C:\Windows\system32\WUDFCoinstaller.dll 2013-10-08 09:01:26 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll 2013-10-08 09:01:26 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll 2013-10-08 09:01:26 ----A---- C:\Windows\system32\UIAnimation.dll 2013-10-08 09:01:26 ----A---- C:\Windows\system32\msmpeg2vdec.dll 2013-10-08 09:01:25 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2013-10-08 09:01:25 ----A---- C:\Windows\system32\WMPhoto.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-10-08 09:01:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-10-08 09:01:24 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll 2013-10-08 09:01:24 ----A---- C:\Windows\SYSWOW64\dxgi.dll 2013-10-08 09:01:24 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2013-10-08 09:01:24 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll 2013-10-08 09:01:24 ----A---- C:\Windows\SYSWOW64\d3d10core.dll 2013-10-08 09:01:24 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll 2013-10-08 09:01:24 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll 2013-10-08 09:01:24 ----A---- C:\Windows\system32\XpsGdiConverter.dll 2013-10-08 09:01:24 ----A---- C:\Windows\system32\dxgi.dll 2013-10-08 09:01:24 ----A---- C:\Windows\system32\d3d10warp.dll 2013-10-08 09:01:24 ----A---- C:\Windows\system32\d3d10level9.dll 2013-10-08 09:01:24 ----A---- C:\Windows\system32\d3d10core.dll 2013-10-08 09:01:24 ----A---- C:\Windows\system32\d3d10_1core.dll 2013-10-08 09:01:24 ----A---- C:\Windows\system32\d3d10_1.dll 2013-10-08 09:01:23 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll 2013-10-08 09:01:23 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll 2013-10-08 09:01:23 ----A---- C:\Windows\SYSWOW64\d3d10.dll 2013-10-08 09:01:23 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2013-10-08 09:01:23 ----A---- C:\Windows\system32\XpsPrint.dll 2013-10-08 09:01:23 ----A---- C:\Windows\system32\WindowsCodecsExt.dll 2013-10-08 09:01:23 ----A---- C:\Windows\system32\FntCache.dll 2013-10-08 09:01:23 ----A---- C:\Windows\system32\d3d10.dll 2013-10-08 09:01:23 ----A---- C:\Windows\system32\d2d1.dll 2013-10-08 09:00:46 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2013-10-08 09:00:46 ----A---- C:\Windows\system32\imagehlp.dll 2013-10-08 09:00:46 ----A---- C:\Windows\system32\drivers\fs_rec.sys 2013-10-08 09:00:45 ----A---- C:\Windows\SYSWOW64\wmi.dll 2013-10-08 09:00:45 ----A---- C:\Windows\system32\wmi.dll 2013-10-08 08:57:56 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2013-10-08 08:57:56 ----A---- C:\Windows\SYSWOW64\secur32.dll 2013-10-08 08:57:56 ----A---- C:\Windows\SYSWOW64\schannel.dll 2013-10-08 08:57:56 ----A---- C:\Windows\system32\schannel.dll 2013-10-08 08:57:56 ----A---- C:\Windows\system32\lsasrv.dll 2013-10-08 08:57:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2013-10-08 08:57:56 ----A---- C:\Windows\system32\drivers\cng.sys 2013-10-08 08:57:54 ----A---- C:\Windows\SYSWOW64\qdvd.dll 2013-10-08 08:57:54 ----A---- C:\Windows\system32\qdvd.dll 2013-10-08 08:56:13 ----D---- C:\ProgramData\SAMSUNG 2013-10-08 08:55:34 ----A---- C:\Windows\system32\drivers\SABI.sys 2013-10-08 08:55:29 ----D---- C:\Program Files (x86)\Samsung 2013-10-08 08:54:29 ----D---- C:\Users\Stefan\AppData\Roaming\Adobe 2013-10-08 08:54:26 ----D---- C:\Users\Stefan\AppData\Roaming\vlc 2013-10-08 08:53:41 ----D---- C:\Program Files (x86)\Adobe 2013-10-08 08:53:31 ----D---- C:\ProgramData\Adobe 2013-10-08 08:53:19 ----D---- C:\Program Files (x86)\VideoLAN 2013-10-08 08:53:09 ----D---- C:\Program Files (x86)\Combined Community Codec Pack 2013-10-08 08:53:07 ----D---- C:\Program Files\7-Zip 2013-10-08 08:53:01 ----A---- C:\Windows\system32\npDeployJava1.dll 2013-10-08 08:53:01 ----A---- C:\Windows\system32\javaws.exe 2013-10-08 08:53:01 ----A---- C:\Windows\system32\deployJava1.dll 2013-10-08 08:52:59 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll 2013-10-08 08:52:59 ----A---- C:\Windows\system32\javaw.exe 2013-10-08 08:52:59 ----A---- C:\Windows\system32\java.exe 2013-10-08 08:52:55 ----D---- C:\Program Files\Java 2013-10-08 08:52:50 ----D---- C:\ProgramData\Sun 2013-10-08 08:52:41 ----D---- C:\Program Files (x86)\Java 2013-10-08 08:49:17 ----D---- C:\ProgramData\NVIDIA 2013-10-08 08:48:20 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2013-10-08 08:48:20 ----D---- C:\Program Files (x86)\AGEIA Technologies 2013-10-08 08:47:57 ----A---- C:\Windows\system32\nvvsvc.exe 2013-10-08 08:47:57 ----A---- C:\Windows\system32\nvsvcr.dll 2013-10-08 08:47:57 ----A---- C:\Windows\system32\nvsvc64.dll 2013-10-08 08:47:57 ----A---- C:\Windows\system32\nvshext.dll 2013-10-08 08:47:57 ----A---- C:\Windows\system32\nvmctray.dll 2013-10-08 08:47:57 ----A---- C:\Windows\system32\nvcpl.dll 2013-10-08 08:47:42 ----A---- C:\Windows\SYSWOW64\OpenCL.dll 2013-10-08 08:47:42 ----A---- C:\Windows\system32\OpenCL.dll 2013-10-08 08:47:37 ----D---- C:\ProgramData\NVIDIA Corporation 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvopencl.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\NvIFR.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\NvFBC.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvcuda.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll 2013-10-08 08:46:59 ----A---- C:\Windows\SYSWOW64\nvapi.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvwgf2umx.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvopencl.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvoglv64.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\NvIFR64.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvhdap64.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvhdagenco6420103.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\NvFBC64.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvdispgenco6432723.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvdispco6432723.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvd3dumx.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvcuvid.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvcuvenc.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvcuda.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvcompiler.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\nvapi64.dll 2013-10-08 08:46:59 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys 2013-10-08 08:46:59 ----A---- C:\Windows\system32\drivers\nvhda64v.sys 2013-10-08 08:46:11 ----D---- C:\Program Files\NVIDIA Corporation 2013-10-08 08:45:45 ----D---- C:\NVIDIA 2013-10-08 08:03:09 ----A---- C:\Windows\SYSWOW64\xmllite.dll 2013-10-08 08:03:09 ----A---- C:\Windows\system32\xmllite.dll 2013-10-08 08:02:58 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll 2013-10-08 08:02:58 ----A---- C:\Windows\SYSWOW64\odbccu32.dll 2013-10-08 08:02:58 ----A---- C:\Windows\SYSWOW64\odbccr32.dll 2013-10-08 08:02:58 ----A---- C:\Windows\system32\odbctrac.dll 2013-10-08 08:02:58 ----A---- C:\Windows\system32\odbccu32.dll 2013-10-08 08:02:58 ----A---- C:\Windows\system32\odbccr32.dll 2013-10-08 08:02:58 ----A---- C:\Windows\system32\odbccp32.dll 2013-10-08 08:02:58 ----A---- C:\Windows\system32\drivers\dxgmms1.sys 2013-10-08 08:02:58 ----A---- C:\Windows\system32\cdd.dll 2013-10-08 08:02:57 ----A---- C:\Windows\SYSWOW64\odbctrac.dll 2013-10-08 08:02:57 ----A---- C:\Windows\SYSWOW64\odbccp32.dll 2013-10-08 08:02:55 ----A---- C:\Windows\SYSWOW64\poqexec.exe 2013-10-08 08:02:55 ----A---- C:\Windows\system32\poqexec.exe 2013-10-08 08:02:49 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll 2013-10-08 08:02:49 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll 2013-10-08 08:02:49 ----A---- C:\Windows\system32\dhcpcsvc6.dll 2013-10-08 08:02:49 ----A---- C:\Windows\system32\dhcpcore6.dll 2013-10-08 08:02:44 ----A---- C:\Windows\SYSWOW64\wintrust.dll 2013-10-08 08:02:44 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll 2013-10-08 08:02:44 ----A---- C:\Windows\SYSWOW64\cryptnet.dll 2013-10-08 08:02:44 ----A---- C:\Windows\SYSWOW64\crypt32.dll 2013-10-08 08:02:44 ----A---- C:\Windows\system32\wintrust.dll 2013-10-08 08:02:44 ----A---- C:\Windows\system32\cryptsvc.dll 2013-10-08 08:02:44 ----A---- C:\Windows\system32\cryptnet.dll 2013-10-08 08:02:44 ----A---- C:\Windows\system32\crypt32.dll 2013-10-08 08:02:41 ----A---- C:\Windows\SYSWOW64\explorer.exe 2013-10-08 08:02:41 ----A---- C:\Windows\SYSWOW64\CPFilters.dll 2013-10-08 08:02:41 ----A---- C:\Windows\system32\CPFilters.dll 2013-10-08 08:02:41 ----A---- C:\Windows\explorer.exe 2013-10-08 08:02:40 ----A---- C:\Windows\SYSWOW64\sbe.dll 2013-10-08 08:02:40 ----A---- C:\Windows\system32\sbe.dll 2013-10-08 08:02:37 ----A---- C:\Windows\system32\quartz.dll 2013-10-08 08:02:36 ----A---- C:\Windows\SYSWOW64\quartz.dll 2013-10-08 08:02:35 ----A---- C:\Windows\system32\ntshrui.dll 2013-10-08 08:02:34 ----A---- C:\Windows\SYSWOW64\ntshrui.dll 2013-10-08 08:02:34 ----A---- C:\Windows\system32\tquery.dll 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\tquery.dll 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\mssvp.dll 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\mssrch.dll 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\mssphtb.dll 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\mssph.dll 2013-10-08 08:02:33 ----A---- C:\Windows\SYSWOW64\msscntrs.dll 2013-10-08 08:02:33 ----A---- C:\Windows\system32\SearchProtocolHost.exe 2013-10-08 08:02:33 ----A---- C:\Windows\system32\SearchIndexer.exe 2013-10-08 08:02:33 ----A---- C:\Windows\system32\SearchFilterHost.exe 2013-10-08 08:02:33 ----A---- C:\Windows\system32\mssvp.dll 2013-10-08 08:02:33 ----A---- C:\Windows\system32\mssrch.dll 2013-10-08 08:02:33 ----A---- C:\Windows\system32\mssphtb.dll 2013-10-08 08:02:33 ----A---- C:\Windows\system32\mssph.dll 2013-10-08 08:02:33 ----A---- C:\Windows\system32\msscntrs.dll 2013-10-08 08:02:30 ----A---- C:\Windows\SYSWOW64\authui.dll 2013-10-08 08:02:30 ----A---- C:\Windows\system32\consent.exe 2013-10-08 08:02:30 ----A---- C:\Windows\system32\authui.dll 2013-10-08 08:02:30 ----A---- C:\Windows\system32\appinfo.dll 2013-10-08 08:02:28 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2013-10-08 08:02:28 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2013-10-08 08:02:28 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2013-10-08 08:02:27 ----A---- C:\Windows\SYSWOW64\webio.dll 2013-10-08 08:02:27 ----A---- C:\Windows\system32\webio.dll 2013-10-08 08:02:25 ----A---- C:\Windows\system32\wwansvc.dll 2013-10-08 08:02:25 ----A---- C:\Windows\system32\wwanprotdim.dll 2013-10-08 08:02:22 ----A---- C:\Windows\system32\drivers\ntfs.sys 2013-10-08 08:02:16 ----A---- C:\Windows\SYSWOW64\tzres.dll 2013-10-08 08:02:16 ----A---- C:\Windows\system32\tzres.dll 2013-10-08 08:02:15 ----A---- C:\Windows\system32\drivers\ataport.sys 2013-10-08 08:02:13 ----A---- C:\Windows\system32\drivers\RNDISMP.sys 2013-10-08 08:02:13 ----A---- C:\Windows\system32\drivers\ndis.sys 2013-10-08 08:02:11 ----A---- C:\Windows\SYSWOW64\mfc42.dll 2013-10-08 08:02:11 ----A---- C:\Windows\system32\mfc42u.dll 2013-10-08 08:02:11 ----A---- C:\Windows\system32\mfc42.dll 2013-10-08 08:02:10 ----A---- C:\Windows\SYSWOW64\mfc42u.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-10-08 08:02:06 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-10-08 08:02:06 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2013-10-08 08:02:06 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2013-10-08 08:02:06 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2013-10-08 08:02:06 ----A---- C:\Windows\system32\winsrv.dll 2013-10-08 08:02:06 ----A---- C:\Windows\system32\smss.exe 2013-10-08 08:02:06 ----A---- C:\Windows\system32\KernelBase.dll 2013-10-08 08:02:06 ----A---- C:\Windows\system32\kernel32.dll 2013-10-08 08:02:06 ----A---- C:\Windows\system32\csrsrv.dll 2013-10-08 08:02:06 ----A---- C:\Windows\system32\conhost.exe 2013-10-08 08:02:06 ----A---- C:\Windows\system32\apisetschema.dll 2013-10-08 08:02:05 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL 2013-10-08 08:02:05 ----A---- C:\Windows\system32\WMVDECOD.DLL 2013-10-08 08:02:04 ----A---- C:\Windows\system32\drivers\usb8023.sys 2013-10-08 08:02:03 ----A---- C:\Windows\system32\sspisrv.dll 2013-10-08 08:02:03 ----A---- C:\Windows\system32\sspicli.dll 2013-10-08 08:02:03 ----A---- C:\Windows\system32\secur32.dll 2013-10-08 08:02:03 ----A---- C:\Windows\system32\rdrmemptylst.exe 2013-10-08 08:02:03 ----A---- C:\Windows\system32\rdpwsx.dll 2013-10-08 08:02:03 ----A---- C:\Windows\system32\rdpcorekmts.dll 2013-10-08 08:02:03 ----A---- C:\Windows\system32\lsass.exe 2013-10-08 08:02:03 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2013-10-08 08:02:02 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll 2013-10-08 08:02:02 ----A---- C:\Windows\system32\rpcrt4.dll 2013-10-08 08:02:01 ----A---- C:\Windows\SYSWOW64\msxml6.dll 2013-10-08 08:02:01 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2013-10-08 08:02:01 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2013-10-08 08:02:01 ----A---- C:\Windows\system32\msxml6.dll 2013-10-08 08:02:01 ----A---- C:\Windows\system32\msxml3r.dll 2013-10-08 08:02:01 ----A---- C:\Windows\system32\msxml3.dll 2013-10-08 08:02:00 ----A---- C:\Windows\SYSWOW64\nlaapi.dll 2013-10-08 08:02:00 ----A---- C:\Windows\SYSWOW64\netevent.dll 2013-10-08 08:02:00 ----A---- C:\Windows\SYSWOW64\netcorehc.dll 2013-10-08 08:02:00 ----A---- C:\Windows\SYSWOW64\ncsi.dll 2013-10-08 08:02:00 ----A---- C:\Windows\system32\nlasvc.dll 2013-10-08 08:02:00 ----A---- C:\Windows\system32\nlaapi.dll 2013-10-08 08:02:00 ----A---- C:\Windows\system32\netevent.dll 2013-10-08 08:02:00 ----A---- C:\Windows\system32\netcorehc.dll 2013-10-08 08:02:00 ----A---- C:\Windows\system32\ncsi.dll 2013-10-08 08:02:00 ----A---- C:\Windows\system32\iphlpsvc.dll 2013-10-08 08:02:00 ----A---- C:\Windows\system32\drivers\tcpipreg.sys 2013-10-08 08:01:58 ----A---- C:\Windows\system32\drivers\Diskdump.sys 2013-10-08 08:01:57 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe 2013-10-08 08:01:57 ----A---- C:\Windows\SYSWOW64\dnsapi.dll 2013-10-08 08:01:57 ----A---- C:\Windows\system32\profsvc.dll 2013-10-08 08:01:57 ----A---- C:\Windows\system32\dnsrslvr.dll 2013-10-08 08:01:57 ----A---- C:\Windows\system32\dnscacheugc.exe 2013-10-08 08:01:57 ----A---- C:\Windows\system32\dnsapi.dll 2013-10-08 08:01:50 ----A---- C:\Windows\SYSWOW64\dpnet.dll 2013-10-08 08:01:50 ----A---- C:\Windows\system32\dpnet.dll 2013-10-08 08:01:49 ----A---- C:\Windows\SYSWOW64\qedit.dll 2013-10-08 08:01:49 ----A---- C:\Windows\system32\qedit.dll 2013-10-08 08:01:48 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2013-10-08 08:01:48 ----A---- C:\Windows\system32\ncrypt.dll 2013-10-08 08:01:46 ----A---- C:\Windows\system32\OxpsConverter.exe 2013-10-08 08:01:39 ----A---- C:\Windows\system32\drivers\srvnet.sys 2013-10-08 08:01:39 ----A---- C:\Windows\system32\drivers\srv2.sys 2013-10-08 08:01:39 ----A---- C:\Windows\system32\drivers\srv.sys 2013-10-08 08:01:38 ----A---- C:\Windows\SYSWOW64\usp10.dll 2013-10-08 08:01:38 ----A---- C:\Windows\system32\usp10.dll 2013-10-08 08:01:37 ----A---- C:\Windows\system32\drivers\tssecsrv.sys 2013-10-08 08:01:36 ----A---- C:\Windows\SYSWOW64\Wpc.dll 2013-10-08 08:01:36 ----A---- C:\Windows\SYSWOW64\gameux.dll 2013-10-08 08:01:36 ----A---- C:\Windows\system32\Wpc.dll 2013-10-08 08:01:36 ----A---- C:\Windows\system32\gameux.dll 2013-10-08 08:01:32 ----A---- C:\Windows\SYSWOW64\psisdecd.dll 2013-10-08 08:01:32 ----A---- C:\Windows\system32\psisdecd.dll 2013-10-08 08:01:31 ----A---- C:\Windows\system32\drivers\rdpwd.sys 2013-10-08 08:01:20 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2013-10-08 08:01:20 ----A---- C:\Windows\system32\kerberos.dll 2013-10-08 08:01:20 ----A---- C:\Windows\system32\drivers\partmgr.sys 2013-10-08 08:01:19 ----A---- C:\Windows\SYSWOW64\msi.dll 2013-10-08 08:01:19 ----A---- C:\Windows\system32\msi.dll 2013-10-08 08:01:15 ----A---- C:\Windows\system32\wow64win.dll 2013-10-08 08:01:15 ----A---- C:\Windows\system32\wow64cpu.dll 2013-10-08 08:01:15 ----A---- C:\Windows\system32\ntvdm64.dll 2013-10-08 08:01:05 ----A---- C:\Windows\SYSWOW64\synceng.dll 2013-10-08 08:01:05 ----A---- C:\Windows\system32\synceng.dll 2013-10-08 08:01:03 ----A---- C:\Windows\system32\shell32.dll 2013-10-08 08:01:02 ----A---- C:\Windows\SYSWOW64\shell32.dll 2013-10-08 08:01:01 ----A---- C:\Windows\SYSWOW64\shdocvw.dll 2013-10-08 08:01:01 ----A---- C:\Windows\system32\shdocvw.dll 2013-10-08 08:01:00 ----A---- C:\Windows\SYSWOW64\win32spl.dll 2013-10-08 08:01:00 ----A---- C:\Windows\system32\winresume.exe 2013-10-08 08:01:00 ----A---- C:\Windows\system32\winload.exe 2013-10-08 08:01:00 ----A---- C:\Windows\system32\win32spl.dll 2013-10-08 08:01:00 ----A---- C:\Windows\system32\kdusb.dll 2013-10-08 08:01:00 ----A---- C:\Windows\system32\kdcom.dll 2013-10-08 08:01:00 ----A---- C:\Windows\system32\kd1394.dll 2013-10-08 08:00:57 ----A---- C:\Windows\system32\taskhost.exe 2013-10-08 08:00:55 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll 2013-10-08 08:00:55 ----A---- C:\Windows\system32\cryptdlg.dll 2013-10-08 08:00:53 ----A---- C:\Windows\SYSWOW64\drvinst.exe 2013-10-08 08:00:53 ----A---- C:\Windows\SYSWOW64\devrtl.dll 2013-10-08 08:00:53 ----A---- C:\Windows\SYSWOW64\devobj.dll 2013-10-08 08:00:53 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll 2013-10-08 08:00:53 ----A---- C:\Windows\system32\umpnpmgr.dll 2013-10-08 08:00:51 ----A---- C:\Windows\system32\drivers\netio.sys 2013-10-08 08:00:51 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS 2013-10-08 08:00:50 ----A---- C:\Windows\SYSWOW64\netapi32.dll 2013-10-08 08:00:50 ----A---- C:\Windows\SYSWOW64\browcli.dll 2013-10-08 08:00:50 ----A---- C:\Windows\system32\netapi32.dll 2013-10-08 08:00:50 ----A---- C:\Windows\system32\browser.dll 2013-10-08 08:00:50 ----A---- C:\Windows\system32\browcli.dll 2013-10-08 08:00:49 ----A---- C:\Windows\SYSWOW64\prevhost.exe 2013-10-08 08:00:49 ----A---- C:\Windows\system32\prevhost.exe 2013-10-08 08:00:49 ----A---- C:\Windows\system32\drivers\fvevol.sys 2013-10-08 08:00:48 ----A---- C:\Windows\SYSWOW64\srclient.dll 2013-10-08 08:00:48 ----A---- C:\Windows\system32\srcore.dll 2013-10-08 08:00:48 ----A---- C:\Windows\system32\FXSCOVER.exe 2013-10-08 08:00:47 ----A---- C:\Windows\SYSWOW64\inetcomm.dll 2013-10-08 08:00:47 ----A---- C:\Windows\system32\inetcomm.dll 2013-10-08 08:00:46 ----A---- C:\Windows\SYSWOW64\msvcrt.dll 2013-10-08 08:00:46 ----A---- C:\Windows\system32\msvcrt.dll 2013-10-08 08:00:45 ----A---- C:\Windows\system32\certutil.exe 2013-10-08 08:00:44 ----A---- C:\Windows\SYSWOW64\certutil.exe 2013-10-08 08:00:44 ----A---- C:\Windows\SYSWOW64\certenc.dll 2013-10-08 08:00:44 ----A---- C:\Windows\system32\certenc.dll 2013-10-08 08:00:41 ----A---- C:\Windows\system32\localspl.dll 2013-10-08 08:00:41 ----A---- C:\Windows\system32\drivers\bowser.sys 2013-10-08 08:00:40 ----A---- C:\Windows\SYSWOW64\oleaut32.dll 2013-10-08 08:00:40 ----A---- C:\Windows\SYSWOW64\oleacc.dll 2013-10-08 08:00:40 ----A---- C:\Windows\system32\oleaut32.dll 2013-10-08 08:00:40 ----A---- C:\Windows\system32\oleacc.dll 2013-10-08 08:00:39 ----A---- C:\Windows\SYSWOW64\EncDec.dll 2013-10-08 08:00:39 ----A---- C:\Windows\system32\EncDec.dll 2013-10-08 08:00:32 ----A---- C:\Windows\SYSWOW64\cdosys.dll 2013-10-08 08:00:32 ----A---- C:\Windows\system32\cdosys.dll 2013-10-08 08:00:29 ----A---- C:\Windows\system32\spoolsv.exe 2013-10-08 08:00:29 ----A---- C:\Windows\splwow64.exe 2013-10-08 07:52:54 ----A---- C:\Windows\SYSWOW64\packager.dll 2013-10-08 07:52:54 ----A---- C:\Windows\system32\packager.dll 2013-10-07 15:18:42 ----A---- C:\Windows\SYSWOW64\rdpcore.dll 2013-10-07 15:18:42 ----A---- C:\Windows\system32\rdpcore.dll 2013-10-07 15:18:42 ----A---- C:\Windows\system32\drivers\tdtcp.sys 2013-10-07 15:15:00 ----A---- C:\Windows\system32\wups2.dll 2013-10-07 15:15:00 ----A---- C:\Windows\system32\wucltux.dll 2013-10-07 15:15:00 ----A---- C:\Windows\system32\wuaueng.dll 2013-10-07 15:15:00 ----A---- C:\Windows\system32\wuauclt.exe 2013-10-07 15:14:54 ----A---- C:\Windows\system32\wups.dll 2013-10-07 15:14:54 ----A---- C:\Windows\system32\wudriver.dll 2013-10-07 15:14:54 ----A---- C:\Windows\system32\wuapi.dll 2013-10-07 15:14:46 ----A---- C:\Windows\system32\wuwebv.dll 2013-10-07 15:14:46 ----A---- C:\Windows\system32\wuapp.exe 2013-10-07 14:59:10 ----D---- C:\Windows\system32\SRSLabs 2013-10-07 14:59:08 ----D---- C:\Windows\SYSWOW64\RTCOM 2013-10-07 14:59:08 ----D---- C:\Program Files\Realtek 2013-10-07 14:58:52 ----A---- C:\Windows\SYSWOW64\SFCOM.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\WavesGUILib64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\SRSWOW64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\SRSTSX64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\SRSTSH64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\SRSHP64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\SFSS_APO.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\SFNHK64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\SFCOM64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\SFAPO64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\RtPgEx64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\RtlCPAPI64.dll 2013-10-07 14:58:52 ----A---- C:\Windows\system32\drivers\rtvienna.dat 2013-10-07 14:58:52 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RtkCoLDR64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RtkCfg64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RtkAPO64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RtkApi64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RTEEP64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RTEEL64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RTEEG64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RTEED64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RtDataProc64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RTCOM64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RP3DHT64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RP3DAA64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RCoRes64.dat 2013-10-07 14:58:51 ----A---- C:\Windows\system32\RCoInstII64.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\R4EEP64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\R4EEL64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\R4EEG64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\R4EED64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\R4EEA64A.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll 2013-10-07 14:58:51 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT 2013-10-07 14:58:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2013-10-07 14:58:50 ----D---- C:\Program Files (x86)\Realtek 2013-10-07 14:58:50 ----A---- C:\Windows\system32\MaxxAudioRealtek64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\KAAPORT64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\FMAPO64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSLFXAPO64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSGFXAPO64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSBoostDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\AERTAR64.dll 2013-10-07 14:58:50 ----A---- C:\Windows\system32\AERTAC64.dll 2013-10-07 14:58:46 ----HD---- C:\Program Files (x86)\Temp 2013-10-07 14:58:46 ----A---- C:\Windows\RtlExUpd.dll 2013-10-07 14:41:31 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2013-10-07 14:41:28 ----D---- C:\Users\Stefan\AppData\Roaming\Intel Corporation 2013-10-07 14:41:13 ----D---- C:\ProgramData\Intel 2013-10-07 14:41:06 ----D---- C:\Program Files\Intel 2013-10-07 14:40:43 ----SHD---- C:\Windows\Installer 2013-10-07 14:37:32 ----D---- C:\Program Files (x86)\Intel 2013-10-07 14:37:32 ----A---- C:\Windows\SYSWOW64\CSVer.dll 2013-10-07 14:36:17 ----D---- C:\Windows\Panther 2013-10-07 14:36:13 ----D---- C:\Intel 2013-10-07 14:12:02 ----A---- C:\Windows\system32\RTNUninst64.dll 2013-10-07 14:12:02 ----A---- C:\Windows\system32\RtNicProp64.dll 2013-10-07 14:12:02 ----A---- C:\Windows\system32\drivers\Rtlh64.sys 2013-10-07 13:45:56 ----D---- C:\Users\Stefan\AppData\Roaming\Identities 2013-10-07 13:45:37 ----SD---- C:\Users\Stefan\AppData\Roaming\Microsoft 2013-10-07 13:45:37 ----D---- C:\Users\Stefan\AppData\Roaming\Media Center Programs 2013-10-07 13:45:27 ----SHD---- C:\Recovery 2013-10-07 13:45:27 ----SHD---- C:\ProgramData\Sjablonen 2013-10-07 13:45:27 ----SHD---- C:\ProgramData\Menu Start 2013-10-07 13:45:27 ----SHD---- C:\ProgramData\Favorieten 2013-10-07 13:45:27 ----SHD---- C:\ProgramData\Documenten 2013-10-07 13:45:27 ----SHD---- C:\ProgramData\Bureaublad 2013-10-07 13:45:20 ----D---- C:\Windows\SoftwareDistribution 2013-10-07 13:38:23 ----D---- C:\Windows\Prefetch 2013-10-07 13:37:41 ----SHD---- C:\System Volume Information 2013-10-07 13:37:41 ----ASH---- C:\pagefile.sys 2013-10-07 13:37:41 ----ASH---- C:\hiberfil.sys ======List of files/folders modified in the last 1 month====== 2013-11-01 18:01:06 ----D---- C:\Windows\Temp 2013-11-01 18:01:02 ----RD---- C:\Program Files 2013-11-01 17:10:12 ----RD---- C:\Program Files (x86) 2013-11-01 16:51:37 ----D---- C:\Windows\system32\config 2013-11-01 16:41:45 ----HD---- C:\ProgramData 2013-11-01 16:41:39 ----D---- C:\Program Files (x86)\Common Files 2013-11-01 16:40:52 ----D---- C:\Windows\winsxs 2013-11-01 16:38:36 ----D---- C:\Windows\SysWOW64 2013-11-01 16:07:10 ----D---- C:\Windows\system32\Tasks 2013-11-01 16:06:29 ----D---- C:\Windows\system32\drivers 2013-11-01 16:06:29 ----D---- C:\Windows\inf 2013-11-01 16:06:26 ----D---- C:\Windows\system32\DriverStore 2013-11-01 16:06:26 ----D---- C:\Windows\system32\catroot 2013-11-01 15:56:02 ----D---- C:\Windows\Tasks 2013-11-01 08:04:24 ----D---- C:\Windows\System32 2013-11-01 08:04:24 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-10-30 09:03:13 ----D---- C:\Windows\system32\NDF 2013-10-21 06:47:25 ----D---- C:\Windows\system32\catroot2 2013-10-20 20:47:39 ----D---- C:\Windows 2013-10-20 20:43:12 ----D---- C:\Windows\Downloaded Program Files 2013-10-20 14:52:34 ----D---- C:\Windows\rescache 2013-10-20 00:16:48 ----SHD---- C:\$Recycle.Bin 2013-10-20 00:16:36 ----RD---- C:\Users 2013-10-18 15:09:37 ----D---- C:\Windows\SYSWOW64\nl-NL 2013-10-18 15:09:37 ----D---- C:\Windows\system32\nl-NL 2013-10-18 15:09:36 ----D---- C:\Program Files (x86)\Internet Explorer 2013-10-18 15:09:35 ----D---- C:\Program Files\Internet Explorer 2013-10-18 15:09:33 ----D---- C:\Windows\SYSWOW64\migration 2013-10-18 15:09:33 ----D---- C:\Windows\SYSWOW64\en-US 2013-10-18 15:09:30 ----D---- C:\Windows\system32\migration 2013-10-18 15:09:30 ----D---- C:\Windows\system32\en-US 2013-10-18 15:09:30 ----D---- C:\Windows\PolicyDefinitions 2013-10-17 13:18:47 ----D---- C:\Windows\system32\wdi 2013-10-17 13:18:16 ----RSD---- C:\Windows\assembly 2013-10-17 13:13:47 ----D---- C:\Windows\Logs 2013-10-17 06:35:35 ----D---- C:\Windows\Microsoft.NET 2013-10-16 06:26:03 ----D---- C:\Windows\AppPatch 2013-10-16 05:35:54 ----A---- C:\Windows\win.ini 2013-10-09 14:57:38 ----D---- C:\Program Files\Common Files 2013-10-09 14:09:40 ----RSD---- C:\Windows\Fonts 2013-10-09 14:09:33 ----D---- C:\Windows\ShellNew 2013-10-09 14:06:54 ----SD---- C:\ProgramData\Microsoft 2013-10-09 14:05:53 ----D---- C:\Program Files\Common Files\Microsoft Shared 2013-10-09 13:22:22 ----D---- C:\Windows\system32\LogFiles 2013-10-08 09:48:14 ----D---- C:\Windows\ehome 2013-10-08 09:48:14 ----D---- C:\Program Files\Common Files\System 2013-10-08 09:48:13 ----D---- C:\Windows\system32\wbem 2013-10-08 09:48:13 ----D---- C:\Windows\system32\drivers\nl-NL 2013-10-08 09:48:13 ----D---- C:\Program Files\Windows Defender 2013-10-08 09:48:13 ----D---- C:\Program Files (x86)\Windows Defender 2013-10-08 09:48:12 ----D---- C:\Windows\SYSWOW64\wbem 2013-10-08 09:48:01 ----D---- C:\Windows\SYSWOW64\zh-HK 2013-10-08 09:48:01 ----D---- C:\Windows\SYSWOW64\pt-PT 2013-10-08 09:48:01 ----D---- C:\Windows\SYSWOW64\pt-BR 2013-10-08 09:48:01 ----D---- C:\Windows\SYSWOW64\pl-PL 2013-10-08 09:48:01 ----D---- C:\Windows\SYSWOW64\ko-KR 2013-10-08 09:48:01 ----D---- C:\Windows\SYSWOW64\it-IT 2013-10-08 09:48:01 ----D---- C:\Windows\SYSWOW64\hu-HU 2013-10-08 09:48:01 ----D---- C:\Windows\SYSWOW64\el-GR 2013-10-08 09:48:01 ----D---- C:\Windows\system32\Boot 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\zh-TW 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\zh-CN 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\tr-TR 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\sv-SE 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\ru-RU 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\nb-NO 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\ja-JP 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\fr-FR 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\fi-FI 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\es-ES 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\de-DE 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\da-DK 2013-10-08 09:48:00 ----D---- C:\Windows\SYSWOW64\cs-CZ 2013-10-08 09:48:00 ----D---- C:\Windows\system32\zh-TW 2013-10-08 09:48:00 ----D---- C:\Windows\system32\zh-HK 2013-10-08 09:48:00 ----D---- C:\Windows\system32\zh-CN 2013-10-08 09:48:00 ----D---- C:\Windows\system32\tr-TR 2013-10-08 09:48:00 ----D---- C:\Windows\system32\sv-SE 2013-10-08 09:48:00 ----D---- C:\Windows\system32\ru-RU 2013-10-08 09:48:00 ----D---- C:\Windows\system32\pt-PT 2013-10-08 09:48:00 ----D---- C:\Windows\system32\pt-BR 2013-10-08 09:48:00 ----D---- C:\Windows\system32\pl-PL 2013-10-08 09:48:00 ----D---- C:\Windows\system32\nb-NO 2013-10-08 09:48:00 ----D---- C:\Windows\system32\ko-KR 2013-10-08 09:48:00 ----D---- C:\Windows\system32\ja-JP 2013-10-08 09:48:00 ----D---- C:\Windows\system32\it-IT 2013-10-08 09:48:00 ----D---- C:\Windows\system32\hu-HU 2013-10-08 09:48:00 ----D---- C:\Windows\system32\fr-FR 2013-10-08 09:48:00 ----D---- C:\Windows\system32\fi-FI 2013-10-08 09:48:00 ----D---- C:\Windows\system32\es-ES 2013-10-08 09:48:00 ----D---- C:\Windows\system32\el-GR 2013-10-08 09:48:00 ----D---- C:\Windows\system32\de-DE 2013-10-08 09:48:00 ----D---- C:\Windows\system32\da-DK 2013-10-08 09:48:00 ----D---- C:\Windows\system32\cs-CZ 2013-10-08 09:47:59 ----D---- C:\Program Files\Windows Journal 2013-10-08 09:34:02 ----D---- C:\Windows\debug 2013-10-08 08:47:52 ----D---- C:\Windows\Help 2013-10-07 14:40:44 ----D---- C:\Windows\system32\restore 2013-10-07 14:35:59 ----D---- C:\Windows\system32\drivers\UMDF 2013-10-07 13:51:25 ----D---- C:\Windows\system32\CodeIntegrity 2013-10-07 13:45:27 ----D---- C:\Program Files\Windows NT 2013-10-07 13:40:26 ----D---- C:\Windows\system32\sysprep ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2013-09-02 192824] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2013-09-02 294712] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2013-08-20 123704] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2013-09-08 31544] R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-08-07 644968] R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-08-07 28008] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2013-09-25 148792] R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2013-09-26 57144] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2013-09-02 241464] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2013-09-02 212280] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-08-01 251192] R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2013-10-09 46368] R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\Windows\system32\Drivers\SABI.sys [2009-05-28 13824] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R3 BCM43XX;Stuurprogramma voor Broadcom 802.11-netwerkadapter; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-05 4745280] R3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984] R3 BthPan;Bluetooth-apparaat (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784] R3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384] R3 HECIx64;Intel® Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-03-29 3379272] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-06-16 196384] R3 RFCOMM;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720] R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2011-09-08 508520] S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 70e6ca8c;Optimizer Pro Crash Monitor; c:\progra~2\optimi~1\OptProCrash.exe [2013-11-01 143488] R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640] R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [2013-09-25 1358944] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2013-10-03 3538480] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-25 301152] R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-09-12 920864] R2 vToolbarUpdater17.0.12;vToolbarUpdater17.0.12; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [2013-10-09 1734680] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-20 257416] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-09-11 118680] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-10-01 150648] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-08 1255736] -----------------EOF-----------------

Beste ik heb een nieuwe harde schijf (vier weken) en AVG 2014 (gratis versie) geïnstalleerd. Maar sinds een tijdje krijg ik bij het surfen voortdurend reclameboodschappen en/of meldingen dat mijn pc gevaar loopt. Ik heb net de trial versie met firewall van AVG geactiveerd, maar het probleem blijft bestaan. Ik heb een scan van mijn hele computersysteem uitgevoerd, en AVG meldt mij dat ik geen enkele bedreiging/risico heb. Hoe kan ik dit probleem verhelpen? Dank Stefan

bedankt! Stefan

Beste ik gebruik Word 2010. Vaak gebeurt het dat ik bij het heropenen van een documenten die afbeeldingen die ik erin geplakt heb, niet meteen te zien krijg. Ik moet dan telkens met de rechtermuisknop op elke afbeeldingen gaan staan en eerst de keuze van tekstterugloop aanvinken vooraleer de afbeelding verschijnt. Hoe kan ik verkrijgen dat de afbeeldingen meteen zichtbaar worden bij het openen van het document? Dank bij voorbaat Stefan Vaes

Beste Kweezie Wabbit zie hier de log van zoek.exe Zoek.exe Version 4.0.0.4 Updated 10-July-2013 Tool run by Stefan Vaes on zo 14/07/2013 at 10:32:24,03. Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86 Running in: Normal Mode Internet Access Detected ==== System Restore Info ====================== 14/07/2013 10:33:30 System Restore is disabled. ==== System Restore Info ====================== 14/07/2013 10:33:53 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Firefox Extensions ====================== ProfilePath: C:\Users\Stefan Vaes\AppData\Roaming\Mozilla\Firefox\Profiles\h54dtm1w.default - RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext - DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} ==== Firefox Plugins ====================== Profilepath: C:\Users\Stefan Vaes\AppData\Roaming\Mozilla\Firefox\Profiles\h54dtm1w.default 01E4DA82C518853EF3B16209C038D7B9 - c:\program files\real\realplayer\Netscape6\nppl3260.dll - RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) 60F23A6CE8B9F9BE995EAACFF0022DFC - c:\program files\real\realplayer\Netscape6\nprpplugin.dll - RealPlayer Download Plugin 3D76B5C0E02ECC19C1F5756E8FD97F72 - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll - Shockwave Flash 3A523765D795DB006C010B915C3A840A - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat 42A9B216A7A288512CE2F9A6BCCE96BC - C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat A64F2C388DC26BE3E469EDC3657B14F4 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll - RealNetworks RealDownloader Chrome Background Extension Plug-In (32-bit) C45F7E59F2A0A6D3C4E90117F4752414 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll - RealNetworks RealDownloader PepperFlashVideoShim Plug-In (32-bit) F7AEAD4303A056F2D1685B43024776CA - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll - RealNetworks RealDownloader HTML5VideoShim Plug-In (32-bit) FA0A3008589567CB7196620B05C9F28D - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll - RealDownloader Plugin F00A0EF5835E1B96F783D617F1948704 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector D7EFF0B98C370E03D7E2593399D9B669 - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll - NVIDIA 3D Vision 75A1232EAC640B782CDD2132B5271AA8 - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll - NVIDIA 3D VISION C7794A997CEC29173A4401F3AE16C51F - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin 101700E93EB905992B518256CB441829 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll - Google Update ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[16/04/2013 03:11] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions apdfllckaahabafndbhieahigkjlhalf - C:\Users\STEFAN~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx[06/07/2013 10:38] RealDownloader - Gast - Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji Video Console - Gast - Default\Extensions\inppclldebcdcddpbhdbdkdfecfdlbcn RealDownloader - Stefan Vaes - Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR" {483830EE-A4CD-4b71-B0A3-3D82E62A6909} Unknown Url="Not_Found" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3111362489-1402011554-2166742631-1000\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Empty IE Cache ====================== C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Stefan Vaes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Stefan Vaes\AppData\Local\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Stefan Vaes\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Stefan Vaes\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Stefan Vaes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52N516LN will be deleted at reboot C:\Users\Stefan Vaes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JMJZM3SX will be deleted at reboot ==== Empty FireFox Cache ====================== C:\users\Gast\AppData\Local\Mozilla\Firefox\Profiles\fpqwpm33.default\Cache emptied successfully C:\users\Stefan Vaes\AppData\Local\Mozilla\Firefox\Profiles\h54dtm1w.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\users\Stefan Vaes\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== After Reboot ====================== ==== System Restore Info ====================== 14/07/2013 10:51:35 Zoek.exe System Restore Point Created Succesfully. ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\STEFAN~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Stefan Vaes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52N516LN" not found "C:\Users\Stefan Vaes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JMJZM3SX" deleted ==== EOF on zo 14/07/2013 at 10:52:48,97 ======================

Beste ik heb AdwCleaner uitgevoerd zoals u aanbevolen had. Hieronder de logfile: # AdwCleaner v2.305 - Verslag gemaakt op 12/07/2013 om 10:53:04 # Geactualiseerd op 11/07/2013 door Xplode # Besturingssysteem : Windows 7 Ultimate Service Pack 1 (32 bits) # Gebruiker : Stefan Vaes - STEFANVAES-PC # Opstarten Modus : Normale modus # Gelanceerd vanaf : C:\Users\Stefan Vaes\Downloads\adwcleaner.exe # Optie [Verwijderen] ***** [Diensten] ***** ***** [Files / Mappen] ***** File Verwijderd : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml File Verwijderd : C:\Users\Stefan Vaes\AppData\Roaming\Mozilla\Firefox\Profiles\h54dtm1w.default\searchplugins\delta.xml Map Verwijderd : C:\ProgramData\Babylon Map Verwijderd : C:\Users\Stefan Vaes\AppData\Roaming\Babylon Map Verwijderd : C:\Users\Stefan Vaes\AppData\Roaming\delta ***** [Register] ***** Sleutel Verwijderd : HKCU\Software\DataMngr Sleutel Verwijderd : HKCU\Software\DataMngr_Toolbar Sleutel Verwijderd : HKCU\Software\Delta Sleutel Verwijderd : HKCU\Software\f2d78dbd6fee15 Sleutel Verwijderd : HKLM\Software\AVG Secure Search Sleutel Verwijderd : HKLM\Software\Babylon Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Prod.cap Sleutel Verwijderd : HKLM\Software\DataMngr Sleutel Verwijderd : HKLM\SOFTWARE\f2d78dbd6fee15 Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32 Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASAPI32 Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASMANCS Sleutel Verwijderd : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966 Sleutel Verwijderd : HKLM\Software\SoftwareUpdater ***** [browsers] ***** -\\ Internet Explorer v10.0.9200.16635 [OK] Het register bevat geen enkele ongeoorloofde invoer. -\\ Mozilla Firefox v22.0 (nl) File : C:\Users\Stefan Vaes\AppData\Roaming\Mozilla\Firefox\Profiles\h54dtm1w.default\prefs.js C:\Users\Stefan Vaes\AppData\Roaming\Mozilla\Firefox\Profiles\h54dtm1w.default\user.js ... Verwijderd ! Verwijderd : user_pref("extensions.delta.admin", false); Verwijderd : user_pref("extensions.delta.aflt", "babsst"); Verwijderd : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); Verwijderd : user_pref("extensions.delta.autoRvrt", "false"); Verwijderd : user_pref("extensions.delta.dfltLng", "en"); Verwijderd : user_pref("extensions.delta.excTlbr", false); Verwijderd : user_pref("extensions.delta.id", "d49d9c2d0000000000000022159908ca"); Verwijderd : user_pref("extensions.delta.instlDay", "15769"); Verwijderd : user_pref("extensions.delta.instlRef", "sst"); Verwijderd : user_pref("extensions.delta.newTab", false); Verwijderd : user_pref("extensions.delta.prdct", "delta"); Verwijderd : user_pref("extensions.delta.prtnrId", "delta"); Verwijderd : user_pref("extensions.delta.rvrt", "false"); Verwijderd : user_pref("extensions.delta.smplGrp", "none"); Verwijderd : user_pref("extensions.delta.tlbrId", "base"); Verwijderd : user_pref("extensions.delta.tlbrSrchUrl", ""); Verwijderd : user_pref("extensions.delta.vrsn", "1.8.10.0"); Verwijderd : user_pref("extensions.delta.vrsnTs", "1.8.10.07:31:13"); Verwijderd : user_pref("extensions.delta.vrsni", "1.8.10.0"); File : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpm33.default\prefs.js [OK] De file bevat geen enkele ongeoorloofde invoer. -\\ Google Chrome v28.0.1500.71 File : C:\Users\Stefan Vaes\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] De file bevat geen enkele ongeoorloofde invoer. File : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] De file bevat geen enkele ongeoorloofde invoer. ************************* AdwCleaner[s1].txt - [4008 octets] - [12/07/2013 10:53:04] ########## EOF - C:\AdwCleaner[s1].txt - [4068 octets] ########## Wat is het verdict? Stefan

Beste ik heb zoals u hierboven voorgesteld hebt, een hijackthis scan uitgevoerd. Hieronder de logfile: Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 8:28:33, on 11/07/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16635) FIREFOX: 22.0 (nl) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\AVG\AVG2013\avgui.exe C:\Program Files\Browny02\Brother\BrStMonW.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Real\RealPlayer\Update\realsched.exe C:\Program Files\MyTomTom 3\MyTomTomSA.exe C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE C:\Users\Stefan Vaes\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe C:\Program Files\Google\Drive\googledrivesync.exe C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe C:\Users\Stefan Vaes\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe C:\Program Files\Google\Drive\googledrivesync.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe C:\Users\Stefan Vaes\Downloads\HijackThis(1).exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [bCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [brStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe /AUTORUN O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot O4 - HKCU\..\Run: [MyTomTomSA.exe] "C:\Program Files\MyTomTom 3\MyTomTomSA.exe" O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE" O4 - HKCU\..\Run: [skyDrive] "C:\Users\Stefan Vaes\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart O4 - HKUS\S-1-5-18\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user') O4 - Startup: Dropbox.lnk = Stefan Vaes\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Global Startup: Audible Download Manager.lnk = C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files\Browny02\BrYNSvc.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- End of file - 6620 bytes Kan u mij zeggen of het gaat om malware, dan wel of ik de batterij in de bios moet laten vervangen? Als dit laatste het geval is, moet ik naar een computerwinkel gaan, veronderstel ik? Dank bij voorbaat Stefan Vaes

Beste ik gebruik Windows 7 Ultimate. Ik merk sinds kort dat als ik mijn computer opstart de datum ontregeld is. Eerst was het zo dat hij terug op 2002 stond, ik heb dat terug gecorrigeerd via het configuratiescherm. Nu gebeurt het dat wel de datum juist is, maar het uur op 0:00 staat bij het opstarten.

Als ik een afbeelding van het internet kopieer (ctrl + c) en hem daarna in een word-document wil plakken (ctrl + v) krijg ik eerst een lege afbeelding (enkel een kader) en moet daarna met de rechtermuisknop de wijze van "tekstterugloop" aanduiden vooraleer de afbeelding verschijnt. Kan dit niet zonder deze tussenstap?

Ik heb Windows 7 Ultimate. Als ik op het word-icoon rechtsboven klik, krijg ik het volgende: zie afbeelding. Op die manier zo ik nog niet welke verschillende documenten er openstaan en hoe ik van het ene naar het andere kan gaan.

Ik heb Windows 7 Ultimate. Als ik op het word-icoon rechtsboven klik, krijg ik het volgende: Op die manier zo ik nog niet welke verschillende documenten er openstaan en hoe ik van het ene naar het andere kan gaan.

Beste ik heb sinds kort Word 2010. Als ik een tweede scherm in Word open, minimaliseert het eerste automatisch. Als ik daarna terug naar het eerste scherm wil, moet ik niet alleen het tweede minimaliseren (dat is normaal) maar moet ik in mijn benedenbalk links het eerste document opnieuw herstellen naar het vorige formaat. Hoe kan ik ervoor zorgen dat de eerder geopende documenten meteen zichtbaar worden als ik het bovenste document minimaliseer? Dank bij voorbaat Stefan

Bedankt voor de info. Zie hier mijn nieuwe log van malwarebytes: Malwarebytes Anti-Malware (-evaluatieversie-) 1.62.0.1300 Malwarebytes : Free anti-malware download Databaseversie: v2012.08.12.04 Windows 7 Service Pack 1 x64 NTFS (Veilige modus) Internet Explorer 9.0.8112.16421 UGent :: HOME6LS0MP1 [administrator] Realtime bescherming: Uitgeschakeld 13/08/2012 12:36:02 mbam-log-2012-08-13 (12-36-02).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 232303 Verstreken tijd: 2 minuut/minuten, 6 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) (einde) En hier de log van hijackthis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 12:39:56, on 13/08/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16447) Boot mode: Safe mode Running processes: C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe E:\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [Facebook Update] "C:\Users\UGent\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe O4 - Global Startup: vpngui.exe.lnk = ? O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: http://minerva.ugent.be O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = UGent.be O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = UGent.be O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = UGent.be O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11559 bytes Kan ik nu de veilige modus verlaten en kijken of het probleem is opgelost door gewoon op te starten? Bedankt alleszins voor de hulp!

Ik heb inderdaad vanuit veilige modus een hijackthis log gemaakt van de beheerdersaccount. U vindt hem hieronder: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:24:05, on 13/08/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16447) Boot mode: Safe mode Running processes: C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe E:\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [Facebook Update] "C:\Users\UGent\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKCU\..\Run: [amkhilqkxzedbaf] C:\ProgramData\amkhilqk.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe O4 - Global Startup: vpngui.exe.lnk = ? O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: http://minerva.ugent.be O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = UGent.be O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = UGent.be O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = UGent.be O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11699 bytes Wat moet ik nu doen?

En wat moet ik dan doen - vanuit veilige modus?

beste hieronder de log van malwarebytes: 2012/08/12 16:14:52 +0200 HOME6LS0MP1 Gast MESSAGE Starting protection 2012/08/12 16:14:55 +0200 HOME6LS0MP1 Gast MESSAGE Protection started successfully 2012/08/12 16:14:58 +0200 HOME6LS0MP1 Gast MESSAGE Starting IP protection 2012/08/12 16:14:59 +0200 HOME6LS0MP1 Gast MESSAGE IP Protection started successfully 2012/08/12 16:15:03 +0200 HOME6LS0MP1 Gast MESSAGE Starting database refresh 2012/08/12 16:15:03 +0200 HOME6LS0MP1 Gast MESSAGE Stopping IP protection 2012/08/12 16:16:37 +0200 HOME6LS0MP1 Gast MESSAGE IP Protection stopped 2012/08/12 16:16:39 +0200 HOME6LS0MP1 Gast MESSAGE Database refreshed successfully 2012/08/12 16:16:39 +0200 HOME6LS0MP1 Gast MESSAGE Starting IP protection 2012/08/12 16:16:40 +0200 HOME6LS0MP1 Gast MESSAGE IP Protection started successfully 2012/08/12 16:19:53 +0200 HOME6LS0MP1 UGent MESSAGE Starting protection 2012/08/12 16:19:56 +0200 HOME6LS0MP1 UGent MESSAGE Protection started successfully 2012/08/12 16:19:59 +0200 HOME6LS0MP1 UGent MESSAGE Starting IP protection 2012/08/12 16:20:01 +0200 HOME6LS0MP1 UGent MESSAGE IP Protection started successfully 2012/08/12 16:23:00 +0200 HOME6LS0MP1 Gast MESSAGE Executing scheduled update: Daily 2012/08/12 16:23:01 +0200 HOME6LS0MP1 Gast MESSAGE Database already up-to-date hoe moet ik de pc in veilige modus opstarten? dank bij voorbaat

Beste ik heb het ukash politie-virus op de laptop van mijn zoon ontdekt. Ik kan niet meer op de beheerdersaccount, maar wel nog op de gastaccount, die functioneert nog normaal. Via die gastaccount heb ik Malwarebites anti malware al laten lopen, alsmede ook Hijackthis. Hieronder vindt u de logfile. Kan u mij zeggen wat ik verder moet doen? dank bij voorbaat! Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:59:56, on 12/08/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16447) Boot mode: Normal Running processes: C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe C:\Program Files (x86)\Citrix\ICA Client\concentr.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\Gast\Downloads\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Homepage — Universiteit Gent R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe O4 - Global Startup: vpngui.exe.lnk = ? O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: http://minerva.ugent.be O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = UGent.be O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = UGent.be O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = UGent.be O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = UGent.be O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11656 bytes