zottemus

Op 27/12 heeft pc verschillende updates van Windows 10 gedaan oa Onderdelenupdate naar Windows 10, versie 1709 Update for Windows10 Version 1709 for x64-based systems ( KB4058043 ) Beveiligingsupdate voor Adobe Flash player voor op Windows 10 version 1709 voor x64 gebaseerde systemen ( KB4053577 ) Update for Windows10 Version 1709 for x64-based systems ( KB4041994 ) Sindsdien kan ik enkel nog email verzenden vanuit Incredimail maar geen mails meer binnenhalen. Als ik op ontvangen klik doet hij zelfs geen moeite om op te halen, er komt onmiddellijk "operation incomplete" op het scherm. Ik heb in Incredimail een Gmail account en een Outllook Hotmail account en beiden hebben hetzelfde probleem . Omdat updates belangrijk zijn voor de computer weet ik nu niet hoe ik het probleem best aanpak en welke update dit probleem heeft veroorzaakt. Kan iemand helpen aub? Alvast bedankt!

hoe doe je de health test van HD Tune? als ik op health klik zie ik geen start knopje. Neen, heb mijn backup moeten stoppen een lange tijd geleden, die schijf zat steeds direct vol en dat vertraagde ook enorm. Ook virus scanner heb ik niet meer, Het enige wat ik doe op de pc is surfen en heel veel foto's opslaan, voor de rest staan er practisch geen programma's op.

Ik heb ondertussen de HD Tune kunnen doen. Hoe moet ik de uitslag posten? Heel het vierkant is groen behalve 3 rode vakjes

Ik heb de HD Tune sessie vlak voor ik gaan slapen ben terug laten lopen en deze ochtend was de computer terug uit zichzelf opgestart ( ik zag dat hij windows updates heeft uitgevoerd) dus weeral vind ik nergens de uitslag van de HD Tune scan. Wat betreft de Ccleaner die niet door de Google Chrome internet cache geraakt, Hij geraakt ook niet door de internetgeschiedenis van chrome en cookies en de andere onderdelen van dat gedeelte van Google chrome. Ik slaag er dan op dat moment ook niet in om hem te doen stoppen want hij blijft dan vast hangen zodat ik heel de computer geforceerd moet afsluiten en terug opstarten. Als ik alles uitvink van dit gedeelte Google Chrome , dan loopt ie wel verder tot het einde.

ik ga het vandaag terug proberen maar ik ga er niet blijven bijzitten want dat gaat de hele dag duren. Wat ik vroeger altijd wekelijks deed was ccleaner laten cleanen maar dat lukt nu niet meer want hij blijft een eeuwigheid "hangen" bij google chrome internet cache opschonen.

ik heb deze HD tune gedaan in veilige modus maar toen ik terug kwam zien stond de pc op gewone modus te draaien dus ik weet niet wat het resultaat was, kan ik dat ergens terugvinden?

zie in bijlage de scanlog. Probleem is niet opgelost , nog steeds kan ik nergens op klikken , kan dit zijn omdat mijn schijven vol zitten? MB Scanlog.txt

Hallo ABBS, moet ik enkel scannen op rootkits aanvinken want alle andere mogelijkheden waren reeds aangevinkt dus ik heb dit zo laten staan. weet niet hoelang het nog gaat duren maar scan loopt ondertussen al meer als 10 uren en heb het vermoeden dat dit nog een week gaat duren. Ik denk dat pc zwaar geinfecteerd is want zelfs dit bericht schrijven duurt een eeuwigheid. Ik schrijf iets en de tekst die ik schrijf komt pas tevoorschijn na enkele minuten.

dat ga ik zo meteen doen, moet ik dan gewoon op "run" klikken of ook op "health" en "error scan" ? en herstelt die dan automatisch of moet ik hier iets posten?

hallo, mijn computer is naar de bom denk ik. Ik merkte de laatste tijd al dat ie soms enorm traag pagina's laadt en bevriest maar ik kan soms gewoon niet meer met de muis op iets klikken want hij reageert op niets, zelfs niet op documenten. Ook geprobeerd om ccleaner te doen maar daar blijft hij uren hangen op de chrome geschiedenis. Weet niet wat er aan de hand is. Ben al blij dat ik nu eindelijk deze pagina heb kunnen opvragen zodat ik hulp kan vragen.

Hoi, nee hoor niks nieuws? bij jou vraag of ik via verkenner de kaart openkrijg is het antwoord ja. Maar ze verwijderen kan ik niet van de kaart. Mijn oorspronkelijk probleem is niet opgelost namelijk de melding die op het scherm verschijnt als je bv je sd-kaart of camera aansluit op de pc. Vroeger kwam er dan een soort waarschuwing onderaan die vroeg wat te doen. Volgens mij is dat verdwenen na een update van iets. duuuuuusss..............................help !

Ja , in verkenner zie ik het als ik de kaart erin steek. Maar hij geft van daaruit niet de optie om foto's te importeren, camera geeft hij ook weer als ik die aansluit op pc

bij mij staat alles in t engels, hoe vind ik die verkenner?

staat ( en stond) allemaal correct aangevinkt dus ik begrijp het niet wat er mis is.

Hallo, normaal als ik foto's van mijn camera op mijn pc wil overzetten steen ik het sd kaartje in mijn pc en opent zich een venstertje een soort pop-up om te vragen of ik wil importeren. Nu sinds een week gebeurt er niets als ik mijn camera via usb aansluit of ook niet als ik het sd kaartje in de pc steek. Waarschijnlijk is dit een kleine instelling in de pc die veranderd is maar ik vind die tool nergens. Kan iemand me helpen? ik heb windows 7

altijd. Dat kan toch niet? de E schijf loopt helemaal vol op 1 week tijd.

nog steeds even traag en nog steeds loopt hij regelmatig vast bij het surfen op websites. Ook als ik op picasa mijn foto's wil opslagen die ik bijgewerkt heb krijg ik melding dat mijn schijf vermoedelijk vol is. zelfs als ik mijn eigen video's wil bekijken ( kleine filmpjes van nog geen 1 minuut lang loop ik vast). Ook als ik mijn emaild wil lezen en naar beneden scroll om de volgend email te lezen loop ik vast en moet ik wachten tot soms 5 minuten voor het zandlopertje weg is. Ik weet niet of het probleem met virussen te maken heeft, ik denk eerder in de processen die de pc op de achtergrond draait. Zo zie ik in mijn computer dat mijn schijven continu vol lopen zie bijgevoegde foto die ik gemaakt heb. Kan je me ermee helpen?

het logje was leeg, geen adware gevonden op pc!

deze ging sneller! in bijlage logje zoek-results.txt

Hoop dat het bestand erbij is. Als jullie vinden dat er rommelprogramma's opstaan mogen jullie die ook al verwijderen hoor ( advanced system care) Ook is er steeds iets van google back up foto's,is dat nodig? zoek-results.txt

ik heb zonet mijn logje ook in malware en visrussen geplaatst.

mijn pc is sinds lange tijd heel traag en ik moet hem dikwijls terug opstarten omdat hij dikwijls blijft hangen tijdens het surfen, precies of hij kan het zo allemaal niet meer aan. Ik heb het vermoeden dat hij dingen op de achtergrond doet die helemaal niet nodig zijn. Ook krijg ik dikwijls melding dat mijn HP2 (E) schijf vol is,dit gebeurt elke week en ik doe dan format om ze terug leeg te maken. Ook is er iets dat mijn computer op windows 10 wil zetten dat dikwijls begint te lopen en dat schakel ik dan terug uit. Is er iemand die me aan de hand van enkele programma's kan helpen om de boel eens te analyseren en op te schonen? Ik gebruik ccleaner en advanced system care elke week dan loopt het "iets" sneller voor een dag of 2 maar dat is geen oplossing. Logje: Logfile of random's system information tool 1.10 (written by random/random) Run by Ann at 2015-10-28 12:16:11 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 376 GB (54%) free of 702 GB Total RAM: 6071 MB (59% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 12:16:20, on 28/10/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.18057) Boot mode: Normal Running processes: C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe C:\Users\Ann\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe C:\Program Files (x86)\Sweex\UWD\VMonitor.exe C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe C:\Windows\SysWOW64\ctfmon.exe C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe C:\Program Files\trend micro\Ann.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/ig R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [iObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files (x86)\CCleaner\CCleaner64.exe" /MONITOR O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Ann\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Google Photos Backup] "C:\Users\Ann\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe" /autostart O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Sweex snapshot button monitor.lnk = ? O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: Cron Service for Prey (CronService) - Fork Ltd. - C:\Prey\platform\windows\cronsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) -- End of file - 13202 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k LocalService "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" atieclxx "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe" "C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe" "C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE" "C:\Program Files (x86)\Bonjour\mDNSResponder.exe" "C:\Prey\platform\windows\cronsvc.exe" C:\Windows\System32\svchost.exe -k utcsvc C:\Windows\SysWOW64\svchost.exe -k netsvcs C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt "c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe" "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe" WLIDSvcM.exe 3288 "C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" view=DOCKVIEW "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto C:\Windows\system32\svchost.exe -k HPService C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2bb3c8d3-95db-4986-a84c-523ffd0b4f9e -SystemEventPortName:HostProcess-6abc2953-efb3-4995-a797-ae0b13f3d9f5 -IoCancelEventPortName:HostProcess-4851f51e-a3a8-4071-af3d-cc1dd9669efc -NonStateChangingEventPortName:HostProcess-b3537b14-48fc-492e-964e-c8c9c3a92a5e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:399f8d90-0e3a-4a36-b1db-1403327330fd -DeviceGroupId:WpdFsGroup "C:\Users\Ann\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe" /autostart "C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe" "C:\Program Files (x86)\Sweex\UWD\VMonitor.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe" "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" "C:\Windows\system32\GWX\GWX.exe" "C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe" "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart Wireless B109n-z#1419499147" -Startup "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding ctfmon.exe "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart /autostart C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe "C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0 "C:\Program Files (x86)\CCleaner\CCleaner.exe" /MONITOR /uac "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe" C:\Windows\system32\svchost.exe -k SDRSVC C:\Windows\servicing\TrustedInstaller.exe "LogonUI.exe" /flags:0x0 "C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe" "C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe" -Embedding "C:\Program Files\Internet Explorer\iexplore.exe" -newtab C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-042d-fc53ee6c3b13 /binaryPath="C:\Program Files (x86)\AVG\AVG2015\" "C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -scheduled "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -noframemerging http://toolbar.google.com/command?navigate=122D88BE-1DF2-4059-BD6B-289E8FC2DBE3 C:\Windows\system32\Macromed\Flash\FlashUtil64_19_0_0_226_ActiveX.exe -Embedding "C:\Program Files\Internet Explorer\iexplore.exe" http://track.pc-helpforum.be/track/click/30483147/www.pc-helpforum.be?p=eyJzIjoiUU83MTFGVlZacWhHUnBDTy1nTWZRX2RuOEdjIiwidiI6MSwicCI6IntcInVcIjozMDQ4MzE0NyxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnBjLWhlbHBmb3J1bS5iZVxcXC90b3BpY1xcXC80OTAxOS1ob2UtbWFhay1qZS1lZW4tbG9namUtbWV0LXJzaXQtbWV0LXZpZGVvXFxcL1wiLFwiaWRcIjpcImY5NjU1Yzc3NjBiYjRmN2U4OGJlOTExZjdmMDQ2MDhlXCIsXCJ1cmxfaWRzXCI6W1wiNzQ2MjNjOTUyNTEyOTczYzlkMjg0MzRhNDFlYjM5Y2IyYmEzNDY4OFwiXX0ifQ "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:127468 CREDAT:267521 /prefetch:2 "C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe" C:\Windows\system32\svchost.exe -k defragsvc "C:\Users\Ann\Desktop\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2372668859-1852268327-715560521-1000Core.job - C:\Users\Ann\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2372668859-1852268327-715560521-1000UA.job - C:\Users\Ann\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\HPCeeScheduleForAnn.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForAnn (null) C:\Windows\tasks\PCDRScheduledMaintenance.job - C:\Program Files\PC-Doctor for Windows\pcdrcui.exe -fh scripts\monthly.xml -st PCDRScheduledMaintenance =========Mozilla firefox========= ProfilePath - C:\Users\Ann\AppData\Roaming\Mozilla\Firefox\Profiles\knndb4cl.default prefs.js - "browser.startup.homepage" - "https://mysearch.avg.com/?cid={718E0CD9-E261-4160-9090-91A48AE0F06B}&mid=2a3c849d707547d6a3ff9128c09ffef1-e27165e4895c30416ef4d5795164f98330028cc5〈=nl&ds=AVG&coid=avgtbavg&cmpid=0715av&pr=fr&d=2015-07-24 09:02:38&v=4.1.5.143&pid=wtu&sg=&sap=hp" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 19.0.0.226 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0] "Description"=Picasa3 plugin "Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5] "Description"=Office Live Update v1.5 "Path"=C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 19.0.0.226 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll C:\Users\Ann\AppData\Roaming\Mozilla\Firefox\Profiles\knndb4cl.default\extensions\ iobitascsurfingprotection@iobit.com ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}] ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-07-30 2471744] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-24 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-29 460384] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-24 194504] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}] Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2015-04-01 672032] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}] Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-29 172640] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-24 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-24 194504] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2009-09-14 610360] "PC-Doctor for Windows localizer"=C:\Program Files\PC-Doctor for Windows\localizer.exe [2009-09-17 95728] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-07-29 14021336] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HPADVISOR"=C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2009-09-29 1685048] "Advanced SystemCare 8"=C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2015-04-08 2429728] "CCleaner Monitoring"=C:\Program Files (x86)\CCleaner\CCleaner64.exe [2015-01-20 7404312] "swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-10-29 39408] "Google Update"=C:\Users\Ann\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-24 144200] "Google Photos Backup"=C:\Users\Ann\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [2015-10-13 3787080] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup] C:\Users\Ann\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe /autostart [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iolo Startup] C:\Program Files (x86)\iolo\Common\Lib\ioloLManager.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"=c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [2008-11-20 62768] "IAStorIcon"=C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [2009-10-02 284696] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-12-01 98304] "HP Software Update"=c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2008-12-08 54576] "Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2009-09-02 60464] "GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] "IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2014-10-13 1802048] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2015-10-19 3779496] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe Sweex snapshot button monitor.lnk - C:\Program Files (x86)\Sweex\UWD\VMonitor.exe [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2010-01-14 52272] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableLockWorkstation"=0 "DisableTaskMgr"=0 "DisableChangePassword"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "HideFastUserSwitching"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "wave3"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv "wave1"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave2"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2015-10-28 12:16:11 ----D---- C:\rsit 2015-10-28 12:16:11 ----D---- C:\Program Files\trend micro 2015-10-23 18:31:21 ----A---- C:\Windows\system32\win32k.sys 2015-10-21 15:48:50 ----SHD---- C:\found.000 2015-10-19 12:32:18 ----A---- C:\Windows\system32\drivers\avgidsdrivera.sys 2015-10-15 09:09:58 ----A---- C:\Windows\system32\invagent.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\generaltel.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\devinv.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\CompatTelRunner.exe 2015-10-15 09:09:58 ----A---- C:\Windows\system32\appraiser.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\aeinv.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\acmigration.dll 2015-10-14 08:29:34 ----A---- C:\Windows\system32\shell32.dll 2015-10-14 08:29:34 ----A---- C:\Windows\system32\ExplorerFrame.dll 2015-10-14 08:29:32 ----A---- C:\Windows\SYSWOW64\shell32.dll 2015-10-14 08:29:31 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll 2015-10-14 08:29:21 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-10-14 08:29:21 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2015-10-14 08:29:21 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-10-14 08:29:21 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\occache.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-10-14 08:29:20 ----A---- C:\Windows\system32\iernonce.dll 2015-10-14 08:29:20 ----A---- C:\Windows\system32\ie4uinit.exe 2015-10-14 08:29:19 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-10-14 08:29:19 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-10-14 08:29:19 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-10-14 08:29:19 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-10-14 08:29:18 ----A---- C:\Windows\system32\urlmon.dll 2015-10-14 08:29:18 ----A---- C:\Windows\system32\occache.dll 2015-10-14 08:29:18 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-10-14 08:29:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-10-14 08:29:18 ----A---- C:\Windows\system32\iedkcs32.dll 2015-10-14 08:29:17 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-10-14 08:29:17 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-10-14 08:29:17 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-10-14 08:29:17 ----A---- C:\Windows\system32\msfeeds.dll 2015-10-14 08:29:17 ----A---- C:\Windows\system32\dxtrans.dll 2015-10-14 08:29:16 ----A---- C:\Windows\system32\iesetup.dll 2015-10-14 08:29:16 ----A---- C:\Windows\system32\ieapfltr.dll 2015-10-14 08:29:15 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2015-10-14 08:29:15 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-10-14 08:29:15 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-10-14 08:29:15 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-10-14 08:29:15 ----A---- C:\Windows\system32\vbscript.dll 2015-10-14 08:29:15 ----A---- C:\Windows\system32\iertutil.dll 2015-10-14 08:29:14 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-10-14 08:29:14 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-10-14 08:29:14 ----A---- C:\Windows\system32\jsproxy.dll 2015-10-14 08:29:14 ----A---- C:\Windows\system32\ieui.dll 2015-10-14 08:29:14 ----A---- C:\Windows\system32\ieframe.dll 2015-10-14 08:29:14 ----A---- C:\Windows\system32\dxtmsft.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\webcheck.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\mshtmled.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\jscript.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\ieUnatt.exe 2015-10-14 08:29:12 ----A---- C:\Windows\system32\wininet.dll 2015-10-14 08:29:12 ----A---- C:\Windows\system32\jscript9diag.dll 2015-10-14 08:29:12 ----A---- C:\Windows\system32\jscript9.dll 2015-10-14 08:29:11 ----A---- C:\Windows\system32\msrating.dll 2015-10-14 08:29:11 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-10-14 08:29:11 ----A---- C:\Windows\system32\mshtml.dll 2015-10-14 08:28:44 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-10-14 08:28:42 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-10-14 08:28:42 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-10-14 08:28:40 ----A---- C:\Windows\system32\lsasrv.dll 2015-10-14 08:28:40 ----A---- C:\Windows\system32\kernel32.dll 2015-10-14 08:28:39 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2015-10-14 08:28:39 ----A---- C:\Windows\system32\ntdll.dll 2015-10-14 08:28:39 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-10-14 08:28:38 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\wow64.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\winsrv.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\srcore.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\rstrui.exe 2015-10-14 08:28:38 ----A---- C:\Windows\system32\rpcrt4.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\KernelBase.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\kerberos.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\conhost.exe 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\wow32.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\wdigest.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\srclient.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\setup16.exe 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\secur32.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\schannel.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\cryptbase.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\credssp.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\auditpol.exe 2015-10-14 08:28:37 ----A---- C:\Windows\system32\wow64win.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\wow64cpu.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\wdigest.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\TSpkg.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\sspisrv.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\sspicli.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\srclient.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\smss.exe 2015-10-14 08:28:37 ----A---- C:\Windows\system32\secur32.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\schannel.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\ntvdm64.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\ncrypt.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\msv1_0.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\lsass.exe 2015-10-14 08:28:37 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2015-10-14 08:28:37 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2015-10-14 08:28:37 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2015-10-14 08:28:37 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-10-14 08:28:37 ----A---- C:\Windows\system32\csrsrv.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\cryptbase.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\credssp.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\auditpol.exe 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 08:28:35 ----A---- C:\Windows\SYSWOW64\instnm.exe 2015-10-14 08:28:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 08:28:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2015-10-14 08:28:34 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 08:28:34 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\user.exe 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\msobjs.dll 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2015-10-14 08:28:34 ----A---- C:\Windows\system32\msaudite.dll 2015-10-14 08:28:34 ----A---- C:\Windows\system32\apisetschema.dll 2015-10-14 08:28:34 ----A---- C:\Windows\system32\adtschema.dll 2015-10-14 08:28:33 ----A---- C:\Windows\system32\msobjs.dll 2015-10-14 08:28:03 ----A---- C:\Windows\SYSWOW64\appidapi.dll 2015-10-14 08:28:03 ----A---- C:\Windows\system32\appidpolicyconverter.exe 2015-10-14 08:28:02 ----A---- C:\Windows\system32\appidsvc.dll 2015-10-14 08:28:02 ----A---- C:\Windows\system32\appidapi.dll 2015-10-14 08:28:01 ----A---- C:\Windows\system32\setbcdlocale.dll 2015-10-14 08:28:01 ----A---- C:\Windows\system32\drivers\appid.sys 2015-10-14 08:28:01 ----A---- C:\Windows\system32\appidcertstorecheck.exe 2015-10-13 11:24:00 ----A---- C:\Windows\SYSWOW64\GPhotos.scr 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wuwebv.dll 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wups.dll 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wudriver.dll 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wuapp.exe 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wuapi.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuwebv.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wups2.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wups.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wudriver.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wucltux.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuaueng.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuauclt.exe 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuapp.exe 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuapi.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wu.upgrade.ps.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\WinSetupUI.dll 2015-10-07 19:55:34 ----A---- C:\Windows\system32\icaapi.dll 2015-10-07 19:55:34 ----A---- C:\Windows\system32\drivers\tssecsrv.sys 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\ucrtbase.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2015-09-29 18:19:55 ----D---- C:\Users\Ann\AppData\Roaming\Sun 2015-09-19 08:52:36 ----D---- C:\Program Files (x86)\IncrediMail 2015-09-18 20:48:27 ----D---- C:\Program Files (x86)\Photo Notifier and Animation Creator 2015-09-14 20:02:16 ----A---- C:\Windows\system32\drivers\AtihdW76.sys 2015-09-14 20:02:16 ----A---- C:\Windows\system32\DelayAPO.dll 2015-09-14 19:59:21 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys 2015-09-14 19:59:18 ----A---- C:\Windows\system32\SETF07B.tmp 2015-09-14 19:59:17 ----A---- C:\Windows\system32\RTCOM64.dll 2015-09-14 19:58:58 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT 2015-09-14 19:58:57 ----A---- C:\Windows\system32\SETEE67.tmp 2015-09-14 19:58:54 ----A---- C:\Windows\system32\RCoInstII64.dll 2015-09-13 10:03:01 ----A---- C:\Windows\SYSWOW64\InkEd.dll 2015-09-13 10:03:01 ----A---- C:\Windows\system32\jnwmon.dll 2015-09-13 10:03:01 ----A---- C:\Windows\system32\InkEd.dll 2015-09-13 10:02:51 ----A---- C:\Windows\system32\schedsvc.dll 2015-09-13 10:02:41 ----A---- C:\Windows\SYSWOW64\tzres.dll 2015-09-13 10:02:41 ----A---- C:\Windows\system32\tzres.dll 2015-09-13 10:02:33 ----A---- C:\Windows\SYSWOW64\dwmcore.dll 2015-09-13 10:02:33 ----A---- C:\Windows\SYSWOW64\dwmapi.dll 2015-09-13 10:02:33 ----A---- C:\Windows\system32\dwmcore.dll 2015-09-13 10:02:33 ----A---- C:\Windows\system32\dwmapi.dll 2015-09-13 10:01:30 ----A---- C:\Windows\system32\UtcResources.dll 2015-09-13 10:01:30 ----A---- C:\Windows\system32\diagtrack.dll 2015-09-13 10:01:27 ----A---- C:\Windows\system32\tdh.dll 2015-09-13 10:01:25 ----A---- C:\Windows\SYSWOW64\tdh.dll 2015-09-13 10:01:25 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2015-09-13 10:01:25 ----A---- C:\Windows\system32\advapi32.dll 2015-09-13 10:00:40 ----A---- C:\Windows\SYSWOW64\authui.dll 2015-09-13 10:00:40 ----A---- C:\Windows\system32\consent.exe 2015-09-13 10:00:40 ----A---- C:\Windows\system32\authui.dll 2015-09-13 10:00:39 ----A---- C:\Windows\system32\appinfo.dll 2015-09-13 10:00:34 ----A---- C:\Windows\SYSWOW64\msxml6.dll 2015-09-13 10:00:34 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2015-09-13 10:00:34 ----A---- C:\Windows\system32\msxml6.dll 2015-09-13 10:00:34 ----A---- C:\Windows\system32\msxml3.dll 2015-09-13 10:00:33 ----A---- C:\Windows\SYSWOW64\msxml6r.dll 2015-09-13 10:00:33 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2015-09-13 10:00:33 ----A---- C:\Windows\system32\msxml6r.dll 2015-09-13 10:00:33 ----A---- C:\Windows\system32\msxml3r.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\lpk.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\lpk.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\fontsub.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\dciman32.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\atmlib.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\atmfd.dll 2015-09-10 07:58:25 ----HD---- C:\$Windows.~BT 2015-08-19 10:53:56 ----A---- C:\Windows\system32\drivers\avgidsha.sys 2015-08-15 02:20:49 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-08-15 02:20:49 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-08-14 17:20:03 ----A---- C:\Windows\system32\sysmain.dll 2015-08-14 17:20:00 ----A---- C:\Windows\system32\drivers\mountmgr.sys 2015-08-14 17:19:58 ----A---- C:\Windows\system32\msmmsp.dll 2015-08-14 17:19:12 ----A---- C:\Windows\system32\basesrv.dll 2015-08-14 17:18:10 ----A---- C:\Windows\SYSWOW64\WebClnt.dll 2015-08-14 17:18:10 ----A---- C:\Windows\SYSWOW64\davclnt.dll 2015-08-14 17:18:10 ----A---- C:\Windows\system32\WebClnt.dll 2015-08-14 17:18:10 ----A---- C:\Windows\system32\davclnt.dll 2015-08-14 17:18:07 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2015-08-14 17:18:07 ----A---- C:\Windows\system32\FntCache.dll 2015-08-14 17:18:07 ----A---- C:\Windows\system32\DWrite.dll 2015-08-14 17:18:05 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2015-08-14 17:18:05 ----A---- C:\Windows\system32\d3d10warp.dll 2015-08-14 17:18:03 ----A---- C:\Windows\SYSWOW64\notepad.exe 2015-08-14 17:18:03 ----A---- C:\Windows\system32\notepad.exe 2015-08-14 17:18:03 ----A---- C:\Windows\notepad.exe 2015-08-14 17:18:01 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2015-08-14 17:18:01 ----A---- C:\Windows\system32\mstscax.dll 2015-08-14 17:18:00 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2015-08-14 17:18:00 ----A---- C:\Windows\SYSWOW64\aaclient.dll 2015-08-14 17:18:00 ----A---- C:\Windows\system32\tsgqec.dll 2015-08-14 17:18:00 ----A---- C:\Windows\system32\aaclient.dll 2015-08-04 10:32:36 ----A---- C:\Windows\system32\drivers\avgtdia.sys 2015-08-04 10:32:32 ----A---- C:\Windows\system32\drivers\avgmfx64.sys 2015-07-29 13:08:48 ----A---- C:\Windows\system32\SRRPTR64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\SRCOM64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\SRCOM.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\SRAPO64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\sltech64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\slprp64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\slcnt64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\sl3apo64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\RtPgEx64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RtkCfg64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RtkApi64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RtDataProc64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RltkAPO64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RCoRes64.dat 2015-07-29 13:08:44 ----A---- C:\Windows\system32\FMAPO64.dll 2015-07-29 13:08:43 ----A---- C:\Windows\system32\CX64APO.dll 2015-07-29 13:07:38 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys 2015-07-29 13:06:51 ----A---- C:\Windows\system32\RtNicProp64.dll 2015-07-29 13:06:51 ----A---- C:\Windows\system32\drivers\Rt64win7.sys ======List of files/folders modified in the last 3 months====== 2015-10-28 12:16:20 ----D---- C:\Windows\Prefetch 2015-10-28 12:16:11 ----RD---- C:\Program Files 2015-10-28 12:15:57 ----D---- C:\Windows\Temp 2015-10-28 11:59:32 ----A---- C:\Windows\SYSWOW64\TempWmicBatchFile.bat 2015-10-28 09:30:25 ----D---- C:\ProgramData\MFAData 2015-10-27 09:43:20 ----D---- C:\Windows 2015-10-26 20:19:09 ----SHD---- C:\Windows\Installer 2015-10-26 20:19:09 ----SHD---- C:\Config.Msi 2015-10-26 13:37:54 ----D---- C:\Windows\System32 2015-10-26 13:37:54 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-10-26 13:37:53 ----D---- C:\Windows\inf 2015-10-25 22:42:46 ----D---- C:\Windows\system32\config 2015-10-25 19:00:54 ----SHD---- C:\System Volume Information 2015-10-24 09:28:38 ----D---- C:\ProgramData\ProductData 2015-10-24 09:27:11 ----D---- C:\Windows\winsxs 2015-10-23 18:31:19 ----D---- C:\Windows\system32\catroot2 2015-10-23 08:35:01 ----D---- C:\Windows\system32\drivers 2015-10-22 12:59:15 ----D---- C:\Windows\Panther 2015-10-16 20:33:08 ----D---- C:\Windows\SysWOW64 2015-10-16 20:33:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-10-16 17:07:06 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-10-16 02:16:46 ----SD---- C:\Windows\system32\CompatTel 2015-10-16 02:16:45 ----D---- C:\Windows\system32\appraiser 2015-10-16 02:16:45 ----D---- C:\Windows\AppPatch 2015-10-15 20:19:22 ----D---- C:\Windows\rescache 2015-10-15 16:38:50 ----D---- C:\Windows\debug 2015-10-15 02:32:26 ----D---- C:\Windows\SYSWOW64\en-US 2015-10-15 02:32:26 ----D---- C:\Program Files\Internet Explorer 2015-10-15 02:32:25 ----D---- C:\Windows\system32\en-US 2015-10-15 02:32:25 ----D---- C:\Program Files (x86)\Internet Explorer 2015-10-15 02:32:22 ----D---- C:\Windows\system32\CodeIntegrity 2015-10-15 02:32:22 ----D---- C:\Windows\system32\Boot 2015-10-15 02:16:22 ----D---- C:\Windows\system32\MRT 2015-10-15 02:09:54 ----A---- C:\Windows\system32\MRT.exe 2015-10-15 02:09:44 ----D---- C:\ProgramData\Microsoft Help 2015-10-14 08:24:05 ----D---- C:\Users\Ann\AppData\Roaming\OwnRooms 2015-10-09 02:27:20 ----SD---- C:\Windows\system32\GWX 2015-10-09 02:17:07 ----SD---- C:\Windows\SYSWOW64\GWX 2015-10-01 23:56:01 ----D---- C:\Windows\system32\LogFiles 2015-10-01 20:59:12 ----D---- C:\Windows\Tasks 2015-10-01 20:59:12 ----D---- C:\Windows\system32\Tasks 2015-09-29 18:27:37 ----D---- C:\ProgramData\Oracle 2015-09-29 18:21:14 ----D---- C:\Program Files (x86)\Java 2015-09-29 18:20:22 ----D---- C:\Program Files (x86)\Common Files 2015-09-29 18:19:21 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2015-09-20 02:02:28 ----SD---- C:\ProgramData\Microsoft 2015-09-20 02:01:49 ----D---- C:\Program Files (x86)\Microsoft 2015-09-19 08:52:36 ----D---- C:\Program Files (x86) 2015-09-18 20:16:59 ----D---- C:\Program Files (x86)\HP Games 2015-09-18 20:16:53 ----D---- C:\ProgramData\WildTangent 2015-09-18 20:14:08 ----D---- C:\ProgramData\Skype 2015-09-17 19:07:41 ----D---- C:\Windows\system32\catroot 2015-09-15 18:30:37 ----D---- C:\ProgramData\AVG Security Toolbar 2015-09-15 14:46:14 ----D---- C:\Windows\system32\DriverStore 2015-09-15 14:46:08 ----D---- C:\Program Files\Common Files 2015-09-15 14:45:04 ----HD---- C:\ProgramData 2015-09-14 20:01:22 ----D---- C:\Windows\SYSWOW64\RTCOM 2015-09-14 02:48:26 ----D---- C:\Windows\Microsoft.NET 2015-09-14 02:48:06 ----RSD---- C:\Windows\assembly 2015-09-14 02:38:19 ----D---- C:\Program Files\Windows Journal 2015-09-14 02:38:18 ----D---- C:\Windows\ehome 2015-09-14 02:38:17 ----D---- C:\Windows\PolicyDefinitions 2015-09-13 09:05:35 ----D---- C:\Windows\system32\wfp 2015-09-13 09:05:28 ----D---- C:\Windows\system32\wbem 2015-09-13 09:02:55 ----D---- C:\Windows\servicing 2015-09-13 09:02:43 ----D---- C:\Users\Ann\AppData\Roaming\ProductData 2015-09-13 09:02:43 ----D---- C:\Users\Ann\AppData\Roaming\IObit 2015-09-13 09:02:05 ----D---- C:\Program Files\Common Files\Microsoft Shared 2015-09-13 09:01:19 ----D---- C:\Windows\registration 2015-09-06 07:55:58 ----A---- C:\Windows\SYSWOW64\bash.exe.stackdump 2015-08-20 08:00:20 ----D---- C:\Windows\Logs 2015-08-20 07:25:13 ----SD---- C:\Users\Ann\AppData\Roaming\Microsoft 2015-08-15 02:39:54 ----D---- C:\Windows\system32\drivers\en-US 2015-08-15 02:19:13 ----D---- C:\Program Files\Microsoft Silverlight 2015-08-15 02:19:13 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2015-07-31 20:16:08 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-07-31 07:49:00 ----D---- C:\Windows\SYSWOW64\drivers 2015-07-31 07:48:59 ----D---- C:\Windows\system32\drivers\AVG 2015-07-31 06:43:42 ----D---- C:\ProgramData\IObit 2015-07-30 13:25:02 ----D---- C:\Windows\SoftwareDistribution 2015-07-29 14:47:14 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2015-07-29 13:06:51 ----A---- C:\Windows\system32\RTNUninst64.dll ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2015-08-19 297904] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2015-05-07 378336] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2015-08-04 250800] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2015-03-20 40928] R0 iaStor;Intel RAID Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-10-02 537112] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2014-06-04 21184] R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2015-03-11 162784] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2015-10-19 315312] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2015-06-16 259040] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2015-08-04 300464] R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2014-12-25 26528] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-26 11172864] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-26 339456] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2015-09-14 96256] R3 AVER_H193;AVerMedia H193 Video Capture; C:\Windows\system32\drivers\AVer888RC_64.sys [2009-11-13 543616] R3 CXCIR;AVerMedia Consumer Infrared Receiver; C:\Windows\system32\DRIVERS\AVer888RCIR_64.sys [2009-11-13 39936] R3 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2013-03-23 23048] R3 HECIx64;Intel® Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-09-14 4514008] R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2014-12-25 2472136] R3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2013-11-19 34848] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2015-07-29 986368] R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-07-29 33448] R3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2013-11-19 23016] S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-11-19 123408] S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-26 11172864] S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-01-30 103448] S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920] S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] S3 StillCam;Still Serial Digital Camera Driver; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2010-04-19 50688] S3 usbscan;USB Scanner Driver; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496] S3 VMUVC;Vimicro Camera Service VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [2010-04-29 202112] S3 vvftUVC;Vimicro Camera Filter Service VMUVC; C:\Windows\system32\drivers\vvftUVC.sys [2008-07-01 303616] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [2015-04-03 814880] R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-26 237056] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2015-10-19 3642280] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2015-10-19 335656] R2 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648] R2 Bonjour Service;Bonjour-service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2010-07-27 345376] R2 CronService;Cron Service for Prey; C:\Prey\platform\windows\cronsvc.exe [2010-09-29 18432] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2015-05-19 99128] R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336] R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2014-09-30 344896] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728] R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-07-29 294616] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136] S2 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088] S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200] S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-07-30 2909472] S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136] S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16 269000] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200] S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-12-24 194032] S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-05-13 1129760] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-09-16 114688] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-07-07 148136] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-01 1255736] S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] -----------------EOF-----------------

Het logje is gelukt, moet ik het op een ander forum plaatsten ook? Logfile of random's system information tool 1.10 (written by random/random) Run by Ann at 2015-10-28 12:16:11 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 376 GB (54%) free of 702 GB Total RAM: 6071 MB (59% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 12:16:20, on 28/10/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.18057) Boot mode: Normal Running processes: C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe C:\Users\Ann\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe C:\Program Files (x86)\Sweex\UWD\VMonitor.exe C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\AVG\AVG2015\avgui.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe C:\Windows\SysWOW64\ctfmon.exe C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe C:\Program Files\trend micro\Ann.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/ig R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [iObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW O4 - HKCU\..\Run: [Advanced SystemCare 8] "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files (x86)\CCleaner\CCleaner64.exe" /MONITOR O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Ann\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Google Photos Backup] "C:\Users\Ann\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe" /autostart O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Sweex snapshot button monitor.lnk = ? O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: Cron Service for Prey (CronService) - Fork Ltd. - C:\Prey\platform\windows\cronsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) -- End of file - 13202 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k LocalService "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" atieclxx "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe" "C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe" "C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE" "C:\Program Files (x86)\Bonjour\mDNSResponder.exe" "C:\Prey\platform\windows\cronsvc.exe" C:\Windows\System32\svchost.exe -k utcsvc C:\Windows\SysWOW64\svchost.exe -k netsvcs C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt "c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe" "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe" WLIDSvcM.exe 3288 "C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" view=DOCKVIEW "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto C:\Windows\system32\svchost.exe -k HPService C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2bb3c8d3-95db-4986-a84c-523ffd0b4f9e -SystemEventPortName:HostProcess-6abc2953-efb3-4995-a797-ae0b13f3d9f5 -IoCancelEventPortName:HostProcess-4851f51e-a3a8-4071-af3d-cc1dd9669efc -NonStateChangingEventPortName:HostProcess-b3537b14-48fc-492e-964e-c8c9c3a92a5e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:399f8d90-0e3a-4a36-b1db-1403327330fd -DeviceGroupId:WpdFsGroup "C:\Users\Ann\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe" /autostart "C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe" "C:\Program Files (x86)\Sweex\UWD\VMonitor.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe" "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" "C:\Windows\system32\GWX\GWX.exe" "C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe" "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart Wireless B109n-z#1419499147" -Startup "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding ctfmon.exe "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart /autostart C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe "C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0 "C:\Program Files (x86)\CCleaner\CCleaner.exe" /MONITOR /uac "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe" C:\Windows\system32\svchost.exe -k SDRSVC C:\Windows\servicing\TrustedInstaller.exe "LogonUI.exe" /flags:0x0 "C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe" "C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe" -Embedding "C:\Program Files\Internet Explorer\iexplore.exe" -newtab C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-042d-fc53ee6c3b13 /binaryPath="C:\Program Files (x86)\AVG\AVG2015\" "C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -scheduled "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -noframemerging http://toolbar.google.com/command?navigate=122D88BE-1DF2-4059-BD6B-289E8FC2DBE3 C:\Windows\system32\Macromed\Flash\FlashUtil64_19_0_0_226_ActiveX.exe -Embedding "C:\Program Files\Internet Explorer\iexplore.exe" http://track.pc-helpforum.be/track/click/30483147/www.pc-helpforum.be?p=eyJzIjoiUU83MTFGVlZacWhHUnBDTy1nTWZRX2RuOEdjIiwidiI6MSwicCI6IntcInVcIjozMDQ4MzE0NyxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnBjLWhlbHBmb3J1bS5iZVxcXC90b3BpY1xcXC80OTAxOS1ob2UtbWFhay1qZS1lZW4tbG9namUtbWV0LXJzaXQtbWV0LXZpZGVvXFxcL1wiLFwiaWRcIjpcImY5NjU1Yzc3NjBiYjRmN2U4OGJlOTExZjdmMDQ2MDhlXCIsXCJ1cmxfaWRzXCI6W1wiNzQ2MjNjOTUyNTEyOTczYzlkMjg0MzRhNDFlYjM5Y2IyYmEzNDY4OFwiXX0ifQ "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:127468 CREDAT:267521 /prefetch:2 "C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe" C:\Windows\system32\svchost.exe -k defragsvc "C:\Users\Ann\Desktop\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2372668859-1852268327-715560521-1000Core.job - C:\Users\Ann\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2372668859-1852268327-715560521-1000UA.job - C:\Users\Ann\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\HPCeeScheduleForAnn.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForAnn (null) C:\Windows\tasks\PCDRScheduledMaintenance.job - C:\Program Files\PC-Doctor for Windows\pcdrcui.exe -fh scripts\monthly.xml -st PCDRScheduledMaintenance =========Mozilla firefox========= ProfilePath - C:\Users\Ann\AppData\Roaming\Mozilla\Firefox\Profiles\knndb4cl.default prefs.js - "browser.startup.homepage" - "https://mysearch.avg.com/?cid={718E0CD9-E261-4160-9090-91A48AE0F06B}&mid=2a3c849d707547d6a3ff9128c09ffef1-e27165e4895c30416ef4d5795164f98330028cc5〈=nl&ds=AVG&coid=avgtbavg&cmpid=0715av&pr=fr&d=2015-07-24 09:02:38&v=4.1.5.143&pid=wtu&sg=&sap=hp" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 19.0.0.226 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0] "Description"=Picasa3 plugin "Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.60.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5] "Description"=Office Live Update v1.5 "Path"=C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 19.0.0.226 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll C:\Users\Ann\AppData\Roaming\Mozilla\Firefox\Profiles\knndb4cl.default\extensions\ iobitascsurfingprotection@iobit.com ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}] ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-07-30 2471744] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-24 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-29 460384] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-24 194504] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}] Advanced SystemCare Surfing Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2015-04-01 672032] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}] Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-29 172640] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-24 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-24 194504] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2009-09-14 610360] "PC-Doctor for Windows localizer"=C:\Program Files\PC-Doctor for Windows\localizer.exe [2009-09-17 95728] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-07-29 14021336] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HPADVISOR"=C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2009-09-29 1685048] "Advanced SystemCare 8"=C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2015-04-08 2429728] "CCleaner Monitoring"=C:\Program Files (x86)\CCleaner\CCleaner64.exe [2015-01-20 7404312] "swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-10-29 39408] "Google Update"=C:\Users\Ann\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-24 144200] "Google Photos Backup"=C:\Users\Ann\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [2015-10-13 3787080] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup] C:\Users\Ann\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe /autostart [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iolo Startup] C:\Program Files (x86)\iolo\Common\Lib\ioloLManager.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"=c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [2008-11-20 62768] "IAStorIcon"=C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [2009-10-02 284696] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-12-01 98304] "HP Software Update"=c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2008-12-08 54576] "Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2009-09-02 60464] "GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] "IObit Malware Fighter"=C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [2014-10-13 1802048] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2015-10-19 3779496] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe Sweex snapshot button monitor.lnk - C:\Program Files (x86)\Sweex\UWD\VMonitor.exe [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2010-01-14 52272] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableLockWorkstation"=0 "DisableTaskMgr"=0 "DisableChangePassword"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "HideFastUserSwitching"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "wave3"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv "wave1"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave2"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2015-10-28 12:16:11 ----D---- C:\rsit 2015-10-28 12:16:11 ----D---- C:\Program Files\trend micro 2015-10-23 18:31:21 ----A---- C:\Windows\system32\win32k.sys 2015-10-21 15:48:50 ----SHD---- C:\found.000 2015-10-19 12:32:18 ----A---- C:\Windows\system32\drivers\avgidsdrivera.sys 2015-10-15 09:09:58 ----A---- C:\Windows\system32\invagent.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\generaltel.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\devinv.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\CompatTelRunner.exe 2015-10-15 09:09:58 ----A---- C:\Windows\system32\appraiser.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\aeinv.dll 2015-10-15 09:09:58 ----A---- C:\Windows\system32\acmigration.dll 2015-10-14 08:29:34 ----A---- C:\Windows\system32\shell32.dll 2015-10-14 08:29:34 ----A---- C:\Windows\system32\ExplorerFrame.dll 2015-10-14 08:29:32 ----A---- C:\Windows\SYSWOW64\shell32.dll 2015-10-14 08:29:31 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll 2015-10-14 08:29:21 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-10-14 08:29:21 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2015-10-14 08:29:21 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-10-14 08:29:21 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\occache.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2015-10-14 08:29:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-10-14 08:29:20 ----A---- C:\Windows\system32\iernonce.dll 2015-10-14 08:29:20 ----A---- C:\Windows\system32\ie4uinit.exe 2015-10-14 08:29:19 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-10-14 08:29:19 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-10-14 08:29:19 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-10-14 08:29:19 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-10-14 08:29:18 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-10-14 08:29:18 ----A---- C:\Windows\system32\urlmon.dll 2015-10-14 08:29:18 ----A---- C:\Windows\system32\occache.dll 2015-10-14 08:29:18 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-10-14 08:29:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-10-14 08:29:18 ----A---- C:\Windows\system32\iedkcs32.dll 2015-10-14 08:29:17 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-10-14 08:29:17 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-10-14 08:29:17 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-10-14 08:29:17 ----A---- C:\Windows\system32\msfeeds.dll 2015-10-14 08:29:17 ----A---- C:\Windows\system32\dxtrans.dll 2015-10-14 08:29:16 ----A---- C:\Windows\system32\iesetup.dll 2015-10-14 08:29:16 ----A---- C:\Windows\system32\ieapfltr.dll 2015-10-14 08:29:15 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2015-10-14 08:29:15 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-10-14 08:29:15 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-10-14 08:29:15 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-10-14 08:29:15 ----A---- C:\Windows\system32\vbscript.dll 2015-10-14 08:29:15 ----A---- C:\Windows\system32\iertutil.dll 2015-10-14 08:29:14 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-10-14 08:29:14 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-10-14 08:29:14 ----A---- C:\Windows\system32\jsproxy.dll 2015-10-14 08:29:14 ----A---- C:\Windows\system32\ieui.dll 2015-10-14 08:29:14 ----A---- C:\Windows\system32\ieframe.dll 2015-10-14 08:29:14 ----A---- C:\Windows\system32\dxtmsft.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\webcheck.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\mshtmled.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\jscript.dll 2015-10-14 08:29:13 ----A---- C:\Windows\system32\ieUnatt.exe 2015-10-14 08:29:12 ----A---- C:\Windows\system32\wininet.dll 2015-10-14 08:29:12 ----A---- C:\Windows\system32\jscript9diag.dll 2015-10-14 08:29:12 ----A---- C:\Windows\system32\jscript9.dll 2015-10-14 08:29:11 ----A---- C:\Windows\system32\msrating.dll 2015-10-14 08:29:11 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-10-14 08:29:11 ----A---- C:\Windows\system32\mshtml.dll 2015-10-14 08:28:44 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-10-14 08:28:42 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-10-14 08:28:42 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-10-14 08:28:40 ----A---- C:\Windows\system32\lsasrv.dll 2015-10-14 08:28:40 ----A---- C:\Windows\system32\kernel32.dll 2015-10-14 08:28:39 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2015-10-14 08:28:39 ----A---- C:\Windows\system32\ntdll.dll 2015-10-14 08:28:39 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-10-14 08:28:38 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\wow64.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\winsrv.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\srcore.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\rstrui.exe 2015-10-14 08:28:38 ----A---- C:\Windows\system32\rpcrt4.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\KernelBase.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\kerberos.dll 2015-10-14 08:28:38 ----A---- C:\Windows\system32\conhost.exe 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-14 08:28:37 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\wow32.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\wdigest.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\srclient.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\setup16.exe 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\secur32.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\schannel.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\cryptbase.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\credssp.dll 2015-10-14 08:28:37 ----A---- C:\Windows\SYSWOW64\auditpol.exe 2015-10-14 08:28:37 ----A---- C:\Windows\system32\wow64win.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\wow64cpu.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\wdigest.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\TSpkg.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\sspisrv.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\sspicli.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\srclient.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\smss.exe 2015-10-14 08:28:37 ----A---- C:\Windows\system32\secur32.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\schannel.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\ntvdm64.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\ncrypt.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\msv1_0.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\lsass.exe 2015-10-14 08:28:37 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2015-10-14 08:28:37 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2015-10-14 08:28:37 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2015-10-14 08:28:37 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-10-14 08:28:37 ----A---- C:\Windows\system32\csrsrv.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\cryptbase.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\credssp.dll 2015-10-14 08:28:37 ----A---- C:\Windows\system32\auditpol.exe 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 08:28:36 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 08:28:35 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 08:28:35 ----A---- C:\Windows\SYSWOW64\instnm.exe 2015-10-14 08:28:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 08:28:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2015-10-14 08:28:34 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-10-14 08:28:34 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\user.exe 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\msobjs.dll 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2015-10-14 08:28:34 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2015-10-14 08:28:34 ----A---- C:\Windows\system32\msaudite.dll 2015-10-14 08:28:34 ----A---- C:\Windows\system32\apisetschema.dll 2015-10-14 08:28:34 ----A---- C:\Windows\system32\adtschema.dll 2015-10-14 08:28:33 ----A---- C:\Windows\system32\msobjs.dll 2015-10-14 08:28:03 ----A---- C:\Windows\SYSWOW64\appidapi.dll 2015-10-14 08:28:03 ----A---- C:\Windows\system32\appidpolicyconverter.exe 2015-10-14 08:28:02 ----A---- C:\Windows\system32\appidsvc.dll 2015-10-14 08:28:02 ----A---- C:\Windows\system32\appidapi.dll 2015-10-14 08:28:01 ----A---- C:\Windows\system32\setbcdlocale.dll 2015-10-14 08:28:01 ----A---- C:\Windows\system32\drivers\appid.sys 2015-10-14 08:28:01 ----A---- C:\Windows\system32\appidcertstorecheck.exe 2015-10-13 11:24:00 ----A---- C:\Windows\SYSWOW64\GPhotos.scr 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wuwebv.dll 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wups.dll 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wudriver.dll 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wuapp.exe 2015-10-07 19:57:07 ----A---- C:\Windows\SYSWOW64\wuapi.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuwebv.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wups2.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wups.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wudriver.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wucltux.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuaueng.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuauclt.exe 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuapp.exe 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wuapi.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\wu.upgrade.ps.dll 2015-10-07 19:57:07 ----A---- C:\Windows\system32\WinSetupUI.dll 2015-10-07 19:55:34 ----A---- C:\Windows\system32\icaapi.dll 2015-10-07 19:55:34 ----A---- C:\Windows\system32\drivers\tssecsrv.sys 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\ucrtbase.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2015-10-07 19:53:50 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2015-09-29 18:19:55 ----D---- C:\Users\Ann\AppData\Roaming\Sun 2015-09-19 08:52:36 ----D---- C:\Program Files (x86)\IncrediMail 2015-09-18 20:48:27 ----D---- C:\Program Files (x86)\Photo Notifier and Animation Creator 2015-09-14 20:02:16 ----A---- C:\Windows\system32\drivers\AtihdW76.sys 2015-09-14 20:02:16 ----A---- C:\Windows\system32\DelayAPO.dll 2015-09-14 19:59:21 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys 2015-09-14 19:59:18 ----A---- C:\Windows\system32\SETF07B.tmp 2015-09-14 19:59:17 ----A---- C:\Windows\system32\RTCOM64.dll 2015-09-14 19:58:58 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT 2015-09-14 19:58:57 ----A---- C:\Windows\system32\SETEE67.tmp 2015-09-14 19:58:54 ----A---- C:\Windows\system32\RCoInstII64.dll 2015-09-13 10:03:01 ----A---- C:\Windows\SYSWOW64\InkEd.dll 2015-09-13 10:03:01 ----A---- C:\Windows\system32\jnwmon.dll 2015-09-13 10:03:01 ----A---- C:\Windows\system32\InkEd.dll 2015-09-13 10:02:51 ----A---- C:\Windows\system32\schedsvc.dll 2015-09-13 10:02:41 ----A---- C:\Windows\SYSWOW64\tzres.dll 2015-09-13 10:02:41 ----A---- C:\Windows\system32\tzres.dll 2015-09-13 10:02:33 ----A---- C:\Windows\SYSWOW64\dwmcore.dll 2015-09-13 10:02:33 ----A---- C:\Windows\SYSWOW64\dwmapi.dll 2015-09-13 10:02:33 ----A---- C:\Windows\system32\dwmcore.dll 2015-09-13 10:02:33 ----A---- C:\Windows\system32\dwmapi.dll 2015-09-13 10:01:30 ----A---- C:\Windows\system32\UtcResources.dll 2015-09-13 10:01:30 ----A---- C:\Windows\system32\diagtrack.dll 2015-09-13 10:01:27 ----A---- C:\Windows\system32\tdh.dll 2015-09-13 10:01:25 ----A---- C:\Windows\SYSWOW64\tdh.dll 2015-09-13 10:01:25 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2015-09-13 10:01:25 ----A---- C:\Windows\system32\advapi32.dll 2015-09-13 10:00:40 ----A---- C:\Windows\SYSWOW64\authui.dll 2015-09-13 10:00:40 ----A---- C:\Windows\system32\consent.exe 2015-09-13 10:00:40 ----A---- C:\Windows\system32\authui.dll 2015-09-13 10:00:39 ----A---- C:\Windows\system32\appinfo.dll 2015-09-13 10:00:34 ----A---- C:\Windows\SYSWOW64\msxml6.dll 2015-09-13 10:00:34 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2015-09-13 10:00:34 ----A---- C:\Windows\system32\msxml6.dll 2015-09-13 10:00:34 ----A---- C:\Windows\system32\msxml3.dll 2015-09-13 10:00:33 ----A---- C:\Windows\SYSWOW64\msxml6r.dll 2015-09-13 10:00:33 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2015-09-13 10:00:33 ----A---- C:\Windows\system32\msxml6r.dll 2015-09-13 10:00:33 ----A---- C:\Windows\system32\msxml3r.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\lpk.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2015-09-13 09:56:32 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\lpk.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\fontsub.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\dciman32.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\atmlib.dll 2015-09-13 09:56:32 ----A---- C:\Windows\system32\atmfd.dll 2015-09-10 07:58:25 ----HD---- C:\$Windows.~BT 2015-08-19 10:53:56 ----A---- C:\Windows\system32\drivers\avgidsha.sys 2015-08-15 02:20:49 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-08-15 02:20:49 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-08-14 17:20:03 ----A---- C:\Windows\system32\sysmain.dll 2015-08-14 17:20:00 ----A---- C:\Windows\system32\drivers\mountmgr.sys 2015-08-14 17:19:58 ----A---- C:\Windows\system32\msmmsp.dll 2015-08-14 17:19:12 ----A---- C:\Windows\system32\basesrv.dll 2015-08-14 17:18:10 ----A---- C:\Windows\SYSWOW64\WebClnt.dll 2015-08-14 17:18:10 ----A---- C:\Windows\SYSWOW64\davclnt.dll 2015-08-14 17:18:10 ----A---- C:\Windows\system32\WebClnt.dll 2015-08-14 17:18:10 ----A---- C:\Windows\system32\davclnt.dll 2015-08-14 17:18:07 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2015-08-14 17:18:07 ----A---- C:\Windows\system32\FntCache.dll 2015-08-14 17:18:07 ----A---- C:\Windows\system32\DWrite.dll 2015-08-14 17:18:05 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2015-08-14 17:18:05 ----A---- C:\Windows\system32\d3d10warp.dll 2015-08-14 17:18:03 ----A---- C:\Windows\SYSWOW64\notepad.exe 2015-08-14 17:18:03 ----A---- C:\Windows\system32\notepad.exe 2015-08-14 17:18:03 ----A---- C:\Windows\notepad.exe 2015-08-14 17:18:01 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2015-08-14 17:18:01 ----A---- C:\Windows\system32\mstscax.dll 2015-08-14 17:18:00 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2015-08-14 17:18:00 ----A---- C:\Windows\SYSWOW64\aaclient.dll 2015-08-14 17:18:00 ----A---- C:\Windows\system32\tsgqec.dll 2015-08-14 17:18:00 ----A---- C:\Windows\system32\aaclient.dll 2015-08-04 10:32:36 ----A---- C:\Windows\system32\drivers\avgtdia.sys 2015-08-04 10:32:32 ----A---- C:\Windows\system32\drivers\avgmfx64.sys 2015-07-29 13:08:48 ----A---- C:\Windows\system32\SRRPTR64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\SRCOM64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\SRCOM.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\SRAPO64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\sltech64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\slprp64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\slcnt64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\sl3apo64.dll 2015-07-29 13:08:48 ----A---- C:\Windows\system32\RtPgEx64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RtkCfg64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RtkApi64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RtDataProc64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RltkAPO64.dll 2015-07-29 13:08:47 ----A---- C:\Windows\system32\RCoRes64.dat 2015-07-29 13:08:44 ----A---- C:\Windows\system32\FMAPO64.dll 2015-07-29 13:08:43 ----A---- C:\Windows\system32\CX64APO.dll 2015-07-29 13:07:38 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys 2015-07-29 13:06:51 ----A---- C:\Windows\system32\RtNicProp64.dll 2015-07-29 13:06:51 ----A---- C:\Windows\system32\drivers\Rt64win7.sys ======List of files/folders modified in the last 3 months====== 2015-10-28 12:16:20 ----D---- C:\Windows\Prefetch 2015-10-28 12:16:11 ----RD---- C:\Program Files 2015-10-28 12:15:57 ----D---- C:\Windows\Temp 2015-10-28 11:59:32 ----A---- C:\Windows\SYSWOW64\TempWmicBatchFile.bat 2015-10-28 09:30:25 ----D---- C:\ProgramData\MFAData 2015-10-27 09:43:20 ----D---- C:\Windows 2015-10-26 20:19:09 ----SHD---- C:\Windows\Installer 2015-10-26 20:19:09 ----SHD---- C:\Config.Msi 2015-10-26 13:37:54 ----D---- C:\Windows\System32 2015-10-26 13:37:54 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-10-26 13:37:53 ----D---- C:\Windows\inf 2015-10-25 22:42:46 ----D---- C:\Windows\system32\config 2015-10-25 19:00:54 ----SHD---- C:\System Volume Information 2015-10-24 09:28:38 ----D---- C:\ProgramData\ProductData 2015-10-24 09:27:11 ----D---- C:\Windows\winsxs 2015-10-23 18:31:19 ----D---- C:\Windows\system32\catroot2 2015-10-23 08:35:01 ----D---- C:\Windows\system32\drivers 2015-10-22 12:59:15 ----D---- C:\Windows\Panther 2015-10-16 20:33:08 ----D---- C:\Windows\SysWOW64 2015-10-16 20:33:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-10-16 17:07:06 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-10-16 02:16:46 ----SD---- C:\Windows\system32\CompatTel 2015-10-16 02:16:45 ----D---- C:\Windows\system32\appraiser 2015-10-16 02:16:45 ----D---- C:\Windows\AppPatch 2015-10-15 20:19:22 ----D---- C:\Windows\rescache 2015-10-15 16:38:50 ----D---- C:\Windows\debug 2015-10-15 02:32:26 ----D---- C:\Windows\SYSWOW64\en-US 2015-10-15 02:32:26 ----D---- C:\Program Files\Internet Explorer 2015-10-15 02:32:25 ----D---- C:\Windows\system32\en-US 2015-10-15 02:32:25 ----D---- C:\Program Files (x86)\Internet Explorer 2015-10-15 02:32:22 ----D---- C:\Windows\system32\CodeIntegrity 2015-10-15 02:32:22 ----D---- C:\Windows\system32\Boot 2015-10-15 02:16:22 ----D---- C:\Windows\system32\MRT 2015-10-15 02:09:54 ----A---- C:\Windows\system32\MRT.exe 2015-10-15 02:09:44 ----D---- C:\ProgramData\Microsoft Help 2015-10-14 08:24:05 ----D---- C:\Users\Ann\AppData\Roaming\OwnRooms 2015-10-09 02:27:20 ----SD---- C:\Windows\system32\GWX 2015-10-09 02:17:07 ----SD---- C:\Windows\SYSWOW64\GWX 2015-10-01 23:56:01 ----D---- C:\Windows\system32\LogFiles 2015-10-01 20:59:12 ----D---- C:\Windows\Tasks 2015-10-01 20:59:12 ----D---- C:\Windows\system32\Tasks 2015-09-29 18:27:37 ----D---- C:\ProgramData\Oracle 2015-09-29 18:21:14 ----D---- C:\Program Files (x86)\Java 2015-09-29 18:20:22 ----D---- C:\Program Files (x86)\Common Files 2015-09-29 18:19:21 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2015-09-20 02:02:28 ----SD---- C:\ProgramData\Microsoft 2015-09-20 02:01:49 ----D---- C:\Program Files (x86)\Microsoft 2015-09-19 08:52:36 ----D---- C:\Program Files (x86) 2015-09-18 20:16:59 ----D---- C:\Program Files (x86)\HP Games 2015-09-18 20:16:53 ----D---- C:\ProgramData\WildTangent 2015-09-18 20:14:08 ----D---- C:\ProgramData\Skype 2015-09-17 19:07:41 ----D---- C:\Windows\system32\catroot 2015-09-15 18:30:37 ----D---- C:\ProgramData\AVG Security Toolbar 2015-09-15 14:46:14 ----D---- C:\Windows\system32\DriverStore 2015-09-15 14:46:08 ----D---- C:\Program Files\Common Files 2015-09-15 14:45:04 ----HD---- C:\ProgramData 2015-09-14 20:01:22 ----D---- C:\Windows\SYSWOW64\RTCOM 2015-09-14 02:48:26 ----D---- C:\Windows\Microsoft.NET 2015-09-14 02:48:06 ----RSD---- C:\Windows\assembly 2015-09-14 02:38:19 ----D---- C:\Program Files\Windows Journal 2015-09-14 02:38:18 ----D---- C:\Windows\ehome 2015-09-14 02:38:17 ----D---- C:\Windows\PolicyDefinitions 2015-09-13 09:05:35 ----D---- C:\Windows\system32\wfp 2015-09-13 09:05:28 ----D---- C:\Windows\system32\wbem 2015-09-13 09:02:55 ----D---- C:\Windows\servicing 2015-09-13 09:02:43 ----D---- C:\Users\Ann\AppData\Roaming\ProductData 2015-09-13 09:02:43 ----D---- C:\Users\Ann\AppData\Roaming\IObit 2015-09-13 09:02:05 ----D---- C:\Program Files\Common Files\Microsoft Shared 2015-09-13 09:01:19 ----D---- C:\Windows\registration 2015-09-06 07:55:58 ----A---- C:\Windows\SYSWOW64\bash.exe.stackdump 2015-08-20 08:00:20 ----D---- C:\Windows\Logs 2015-08-20 07:25:13 ----SD---- C:\Users\Ann\AppData\Roaming\Microsoft 2015-08-15 02:39:54 ----D---- C:\Windows\system32\drivers\en-US 2015-08-15 02:19:13 ----D---- C:\Program Files\Microsoft Silverlight 2015-08-15 02:19:13 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2015-07-31 20:16:08 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-07-31 07:49:00 ----D---- C:\Windows\SYSWOW64\drivers 2015-07-31 07:48:59 ----D---- C:\Windows\system32\drivers\AVG 2015-07-31 06:43:42 ----D---- C:\ProgramData\IObit 2015-07-30 13:25:02 ----D---- C:\Windows\SoftwareDistribution 2015-07-29 14:47:14 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2015-07-29 13:06:51 ----A---- C:\Windows\system32\RTNUninst64.dll ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2015-08-19 297904] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2015-05-07 378336] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2015-08-04 250800] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2015-03-20 40928] R0 iaStor;Intel RAID Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-10-02 537112] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2014-06-04 21184] R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2015-03-11 162784] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2015-10-19 315312] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2015-06-16 259040] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2015-08-04 300464] R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2014-12-25 26528] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-26 11172864] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-26 339456] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2015-09-14 96256] R3 AVER_H193;AVerMedia H193 Video Capture; C:\Windows\system32\drivers\AVer888RC_64.sys [2009-11-13 543616] R3 CXCIR;AVerMedia Consumer Infrared Receiver; C:\Windows\system32\DRIVERS\AVer888RCIR_64.sys [2009-11-13 39936] R3 FileMonitor;FileMonitor; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2013-03-23 23048] R3 HECIx64;Intel® Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-09-14 4514008] R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2014-12-25 2472136] R3 RegFilter;RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2013-11-19 34848] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2015-07-29 986368] R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-07-29 33448] R3 UrlFilter;UrlFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2013-11-19 23016] S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-11-19 123408] S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-26 11172864] S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-01-30 103448] S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920] S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] S3 StillCam;Still Serial Digital Camera Driver; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2010-04-19 50688] S3 usbscan;USB Scanner Driver; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496] S3 VMUVC;Vimicro Camera Service VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [2010-04-29 202112] S3 vvftUVC;Vimicro Camera Filter Service VMUVC; C:\Windows\system32\drivers\vvftUVC.sys [2008-07-01 303616] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [2015-04-03 814880] R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-26 237056] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2015-10-19 3642280] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2015-10-19 335656] R2 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648] R2 Bonjour Service;Bonjour-service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2010-07-27 345376] R2 CronService;Cron Service for Prey; C:\Prey\platform\windows\cronsvc.exe [2010-09-29 18432] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2015-05-19 99128] R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336] R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2014-09-30 344896] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728] R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2015-07-29 294616] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136] S2 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088] S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200] S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-07-30 2909472] S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136] S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16 269000] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31 144200] S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-12-24 194032] S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-05-13 1129760] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-09-16 114688] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-07-07 148136] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-01 1255736] S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] -----------------EOF-----------------

hallo, mijn pc is sinds lange tijd heel traag en ik moet hem dikwijls terug opstarten omdat hij dikwijls blijft hangen tijdens het surfen, precies of hij kan het zo allemaal niet meer aan. Ik heb het vermoeden dat hij dingen op de achtergrond doet die helemaal niet nodig zijn. Ook krijg ik dikwijls melding dat mijn HP2 (E) schijf vol is,dit gebeurt elke week en ik doe dan format om ze terug leeg te maken. Ook is er iets dat mijn computer op windows 10 wil zetten dat dikwijls begint te lopen en dat schakel ik dan terug uit. Is er iemand die me aan de hand van enkele programma's kan helpen om de boel eens te analyseren en op te schonen? Ik gebruik crapcleaner en advanced system care elke week dan loopt het "iets" sneller voor een dag of 2 maar dat is geen oplossing. Bedankt alvast!

Helaas niet Clarkie, ik kan wel in mijn hotmail gaan en zie daar wel de oudere mails maar ze laden niet in de incredimail. Alles wat nieuw is van mails komt wel netjes binnen in incredimail. Heb het programma verwijderd en enkele keren terug geinstalleerd, ook de oudere versie 2.0 ervan maar blijft hetzelfde. De mappen met alle onderverdelingen van mijn klanten ben ik kwijt. Ik kan wel advanced system care verwijderen van pc als u dat aanraadt ( mijn vriend had dit op mijn pc gezet) maar gaat dit iets veranderen denk je?