Mintz
-
Items
16 -
Registratiedatum
-
Laatst bezocht
Inhoudstype
Profielen
Forums
Store
Berichten die geplaatst zijn door Mintz
-
-
Zo, logje zit er hier weer bij!
-
Hey Kape!
Het lijkt erop dat het weg is! Geen berichtjes meer van MBAM. Super! Logje kan je hieronder vinden.
-
Ja, MBAM geef nog altijd zelfde melding.
"PUP.Optional.Winsock.Hijackbot C:\Windows\SysWOW64\ASProxyOff.ini"
Enig idee?
Cheers!
-
Zo, hier is het nieuwe logje.
-
Super!
Logje van Zoek is bijgevoegd. Duurde ongeveer een 40 tal min tegen dat alles gescand was.
Heropstart was nodig en dan zei MBAM onmiddellijk weer dat die Winsock Hijackbot er was.
Cheers!
-
Hi!
Mijn computer is plots heel traag geworden en MBAM blijft maar meldingen geven dat een Winsock Hijackbot gevonden is genaamd ASProxyOFF.ini
Logje is bijgevoegd.
Scannen met Mbam Premium geeft wel aan dat het bestandje is in quarantaine geplaatst maar het blijft terug komen.
Kunnen jullie helpen?
Cheers!
-
Super!
Bedankt Mako! En zoals ze in China zouden zeggen: 谢谢!
-
Ah geen probleem. Is makkelijk teruggezet. Zou QQ liever niet gebruiken maar het is jammer genoeg de enige manier om op kantoor met elkaar te communiceren. Verschrikkelijk software.
Verder lijkt alles weer perfect te draaien!
Super bedankt voor de hulp Mako!
-
Het rare is dat ik tot voor kort geen meldingen kreeg over geblokkeerde IP adressen. Laten staan zal waarschijnlijk wel de beste oplossing zijn.
Ondertussen hebben de 2 tools ook eens rondgekeken en dit zijn de 2 logs:
Grappig dat JRT de Tencent Folders heeft verwijderd. Tencent is het grootste software bedrijf van China en maakt de Chinese tegenhangers van facebook, whatsapp, en skype.
QQ, het programma dat op mijn PC stond en nu dus verwijderd is, is inderdaad verschrikkelijke software maar jammer genoeg nodig om te communiceren met mijn Chinese collega's.
Terug installeren dan maar.
-
Zo, hier zijn de 2 logjes!
Op zich is het niet zo raar dat de Chinese adressen bovendrijven omdat ik zelf in China verblijf.
Maar dit is wel de eerste keer dat MBAM deze IP adressen tegenhoud. Vroeger kreeg ik nooit meldingen.
Ondertussen merk ik wel dat mij PC al aanzienlijk beter werkt en zijn er geen voelbare problemen meer.
-
Hey Mako,
Ik heb MBAM 1.75 Pro op de PC staan met een up to date library. Wil je dat ik 2.0 download?
Snel eens een scan gedaan met 1.75 en dat leverde niks op. Maar het leverde ook niks op toen de PC besmet was dus weet ik niet zeker als het betrouwbaar is.
Wat ik wel merk is dat MBAM elke dag connecties tegenhoud. Wat hij vroeger nooit deed. Dit is het logje van vandaag bijvoorbeeld:
2014/04/24 10:53:48 +0800 SIMONDERBAIX-PC Simon Derbaix IP-BLOCK 219.152.25.191 (Type: outgoing, Port: 53999, Process: skype.exe)
2014/04/24 10:53:48 +0800 SIMONDERBAIX-PC Simon Derbaix IP-BLOCK 219.152.25.191 (Type: outgoing, Port: 54000, Process: skype.exe)
2014/04/24 10:53:48 +0800 SIMONDERBAIX-PC Simon Derbaix IP-BLOCK 219.152.25.191 (Type: outgoing, Port: 54001, Process: skype.exe)
2014/04/24 10:53:48 +0800 SIMONDERBAIX-PC Simon Derbaix IP-BLOCK 219.152.25.191 (Type: outgoing, Port: 54002, Process: skype.exe)
2014/04/24 12:48:56 +0800 SIMONDERBAIX-PC (null) MESSAGE Starting protection
2014/04/24 12:48:56 +0800 SIMONDERBAIX-PC (null) MESSAGE Protection started successfully
2014/04/24 12:48:56 +0800 SIMONDERBAIX-PC (null) MESSAGE Starting IP protection
2014/04/24 12:48:59 +0800 SIMONDERBAIX-PC (null) MESSAGE IP Protection started successfully
2014/04/24 13:53:41 +0800 SIMONDERBAIX-PC Simon Derbaix MESSAGE Executing scheduled update: Daily
2014/04/24 13:54:23 +0800 SIMONDERBAIX-PC Simon Derbaix MESSAGE Scheduled update executed successfully: database updated from version v2014.04.23.01 to version v2014.04.24.04
2014/04/24 13:54:23 +0800 SIMONDERBAIX-PC Simon Derbaix MESSAGE Starting database refresh
2014/04/24 13:54:23 +0800 SIMONDERBAIX-PC Simon Derbaix MESSAGE Stopping IP protection
2014/04/24 13:54:24 +0800 SIMONDERBAIX-PC Simon Derbaix MESSAGE IP Protection stopped successfully
2014/04/24 13:54:29 +0800 SIMONDERBAIX-PC Simon Derbaix MESSAGE Database refreshed successfully
2014/04/24 13:54:29 +0800 SIMONDERBAIX-PC Simon Derbaix MESSAGE Starting IP protection
2014/04/24 13:54:32 +0800 SIMONDERBAIX-PC Simon Derbaix MESSAGE IP Protection started successfully
2014/04/24 18:04:36 +0800 SIMONDERBAIX-PC Simon Derbaix IP-BLOCK 219.146.150.170 (Type: outgoing, Port: 50303, Process: skype.exe)
Geen idee als je er iets mee bent...
De Free Codec Pack is ondertussen van de PC af.
Allesinds al heel hard bedankt voor super hulp!
-
Zo, beide tools hebben hun ding gedaan. De logjes kan je als bijlage vinden!
-
Even opnieuw proberen:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Simon Derbaix at 2014-04-21 16:51:33
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 15 GB (15%) free of 94 GB
Total RAM: 3798 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:51:38, on 21/04/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\spotify.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\StrongVPN\StrongDial.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\Tencent\QQIntl\Bin\QQ.exe
C:\Program Files (x86)\Tencent\QQIntl\Bin\TXPlatform.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Program Files\trend micro\Simon Derbaix.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [spotify] "C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [strongVPN Client] "C:\Program Files (x86)\StrongVPN\StrongDial.exe" --silent
O4 - HKCU\..\Run: [KiesPDLR.exe] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{0B5B235B-6861-4591-92EE-D5C358C61A0B}: NameServer = 210.21.196.6,221.5.88.88
O17 - HKLM\System\CCS\Services\Tcpip\..\{1533AC16-7AFD-4139-B8C0-9C7AD90A7BB5}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{352A7F84-2DA0-4063-B5DC-6C26C8981AA7}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{3AEE2DB3-BBA2-473A-AF4C-A71BEA4ED632}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{4B410BB5-05D4-47BB-9C93-500D49EF3964}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{50A0840C-EDCC-4303-8A19-247CEFB1783A}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{59D1623D-8F78-456D-9DB2-42BE263F4017}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{60CE1F32-B682-40C9-9C4B-9DE8FF17ACE8}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{618B979A-F539-4981-92B0-13FF61EF270F}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{902DC9E6-EAC2-4ED8-B794-5EC12D80BE68}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{C35FC9D5-711B-4CC4-B595-4A4C94860862}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{D5F757C4-B566-4C32-A2C8-7FA53AB1DFFB}: NameServer = 8.8.8.8 8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Security Service (BTHSSecurityMgr) - Intel® Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel® Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: SamsungDeviceConfiguration (SamsungDeviceConfigurationWinService) - Unknown owner - C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: StrongVPN Service - Black Oak Computers, Inc. - C:\Program Files (x86)\StrongVPN\StrongService.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics CO., LTD. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
--
End of file - 14514 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe"
C:\windows\SysWOW64\irstrtsv.exe
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\xampp\mysql\bin\mysqld --defaults-file=C:\xampp\mysql\bin\my.ini mysql
C:\windows\System32\svchost.exe -k HPZ12
C:\windows\System32\svchost.exe -k HPZ12
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\Program Files (x86)\StrongVPN\StrongService.exe"
C:\windows\system32\WLANExt.exe 25755616
\??\C:\windows\system32\conhost.exe "840661540-140505265-9212547955276485841265604539-2922396842023341885719781657
"taskhost.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Users\Simon Derbaix\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
"C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"C:\Program Files (x86)\StrongVPN\StrongDial.exe" --silent
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" Run
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
taskeng.exe {AFD9DCD7-AA8A-4867-9E6D-012AA94A33FE}
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="1304.1.2025291422\1252128725" /prefetch:673131151
"C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="1304.2.1958491515\1069193165" /prefetch:673131151
"C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="1304.3.1178440505\1591552396" /prefetch:673131151
"C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="1304.4.1249153261\915481076" /prefetch:673131151
"C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=gpu-process --channel="1304.5.1639419328\1383993864" --no-sandbox --lang=en-US --log-severity=disable --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2618 --lang=en-US --log-severity=disable /prefetch:822062411
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe"
"C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe"
C:\windows\system32\igfxext.exe -Embedding
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Samsung\S Agent\CommonAgent.exe"
"C:\Program Files\Samsung\Easy Support Center\SamoyedAgent.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\windows\System32\alg.exe
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ffbf65dd-b385-411d-a6fd-5d004f00c159 -SystemEventPortName:HostProcess-fccd80c8-739f-40b6-b3a0-32c3354f4170 -IoCancelEventPortName:HostProcess-7b22c7d6-97fb-4779-b365-12131733ac8a -NonStateChangingEventPortName:HostProcess-a5555217-4d20-47c3-9068-d2341b0de518 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d9441b40-2cc4-454b-a772-1e2f3945e8cd -DeviceGroupId:
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe"
rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\windows\system32\hkcmd.exe
C:\windows\system32\igfxpers.exe
rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSSA
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe" -Embedding
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\windows\system32\svchost.exe -k HPService
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe" /SERVICE
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2364
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Simon Derbaix\Desktop\Category Description.docx"
C:\windows\splwow64.exe 12288
/MLogin:A79E59DC-148B-404F-81D4-5FAF1F30AF8E_0_0__PreProcess0000000000000000000000000000000000000000000000000 C:\Program Files (x86)\Tencent\QQIntl\Bin\QQ.exe
"C:\Program Files (x86)\Tencent\QQIntl\Bin\TXPlatform.exe" -Embedding
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1700.faf1bf0.1097256357 "C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 1700 "\\.\pipe\gecko-crash-server-pipe.1700" plugin
"C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --proxy-stub-channel=Flash808.5FCD7F48.19902 --host-broker-channel=Flash808.5FCD7F48.10009 --host-pid=808 --host-npapi-version=27 --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll"
"C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --channel=5620.0037F710.870654288 --proxy-stub-channel=Flash808.5FCD7F48.19902 --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" --host-npapi-version=27 --type=renderer
taskeng.exe {639328E8-3609-456C-BB18-4F92C7DD6F14}
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Simon Derbaix\Downloads\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
C:\windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Simon Derbaix\AppData\Roaming\Mozilla\Firefox\Profiles\r920uggt.default
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@baidu.com/BDDownloadPlugin]
"Description"=BDDownload Plugin
"Path"=C:\Users\Simon Derbaix\AppData\Roaming\BaiduMiniDownloader\1.0.0.5\npBDDLPlug.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.55.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/npchrome]
"Description"=npchrome
"Path"=C:\Program Files (x86)\Common Files\Tencent\Npchrome\npchrome.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/npqscall]
"Description"=npqscall
"Path"=C:\Program Files (x86)\Common Files\Tencent\NPQSCALL\npqscall.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/TXSSO]
"Description"=QQ QuickLogin Helper
"Path"=C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.2.1\Bin\npSSOAxCtrlForPTLogin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\windows\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
C:\Users\Simon Derbaix\AppData\Roaming\Mozilla\Firefox\Profiles\r920uggt.default\extensions\
en-US@dictionaries.addons.mozilla.org
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-05-28 553376]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-28 211360]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-03-17 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-17 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Spotify"=C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Spotify.exe [2014-04-11 6087224]
"Spotify Web Helper"=C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-04-11 1171000]
"StrongVPN Client"=C:\Program Files (x86)\StrongVPN\StrongDial.exe [2014-02-25 1574896]
"KiesPDLR.exe"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2014-02-07 845120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR.exe]
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2014-02-07 845120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe [2014-02-07 1564992]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-02-07 311616]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-01-05 429056]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DelayedDesktopSwitchTimeout"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2014-04-21 16:51:34 ----D---- C:\Program Files\trend micro
2014-04-21 16:51:33 ----D---- C:\rsit
2014-04-20 19:35:57 ----D---- C:\Program Files\CCleaner
2014-04-20 19:34:44 ----D---- C:\Program Files (x86)\MSXML 4.0
2014-04-20 19:29:46 ----A---- C:\windows\SYSWOW64\vbscript.dll
2014-04-20 19:29:46 ----A---- C:\windows\system32\vbscript.dll
2014-04-20 17:40:19 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-04-20 17:40:19 ----A---- C:\windows\system32\iertutil.dll
2014-04-20 17:40:18 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-04-20 17:40:18 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-04-20 17:40:17 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-04-20 17:40:17 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-04-20 17:40:17 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2014-04-20 17:40:16 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-04-20 17:40:15 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-04-20 17:40:14 ----A---- C:\windows\system32\iernonce.dll
2014-04-20 17:40:13 ----A---- C:\windows\system32\urlmon.dll
2014-04-20 17:40:12 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-04-20 17:40:12 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2014-04-20 17:40:12 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-04-20 17:40:11 ----A---- C:\windows\SYSWOW64\ieui.dll
2014-04-20 17:40:11 ----A---- C:\windows\system32\msfeeds.dll
2014-04-20 17:40:09 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-04-20 17:40:07 ----A---- C:\windows\system32\iesetup.dll
2014-04-20 17:40:07 ----A---- C:\windows\system32\ie4uinit.exe
2014-04-20 17:40:06 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-04-20 17:40:06 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2014-04-20 17:40:05 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-04-20 17:40:05 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-04-20 17:40:05 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2014-04-20 17:40:05 ----A---- C:\windows\system32\jsproxy.dll
2014-04-20 17:40:05 ----A---- C:\windows\system32\ieetwcollector.exe
2014-04-20 17:40:04 ----A---- C:\windows\system32\ieui.dll
2014-04-20 17:40:04 ----A---- C:\windows\system32\ieframe.dll
2014-04-20 17:40:03 ----A---- C:\windows\system32\ieUnatt.exe
2014-04-20 17:40:02 ----A---- C:\windows\system32\jscript9diag.dll
2014-04-20 17:40:02 ----A---- C:\windows\system32\jscript9.dll
2014-04-20 17:40:02 ----A---- C:\windows\system32\ieapfltr.dll
2014-04-20 17:40:01 ----A---- C:\windows\system32\wininet.dll
2014-04-20 17:40:01 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-04-20 17:40:01 ----A---- C:\windows\system32\msrating.dll
2014-04-20 17:40:00 ----A---- C:\windows\system32\mshtml.dll
2014-04-20 11:49:54 ----A---- C:\windows\system32\wmploc.DLL
2014-04-20 11:49:53 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2014-04-20 11:49:53 ----A---- C:\windows\SYSWOW64\wmp.dll
2014-04-20 11:49:52 ----A---- C:\windows\system32\wmp.dll
2014-04-20 11:37:15 ----D---- C:\windows\Migration
2014-04-20 11:33:47 ----A---- C:\windows\system32\IEUDINIT.EXE
2014-04-20 11:23:49 ----A---- C:\windows\SYSWOW64\elshyph.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\wextract.exe
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\webcheck.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\url.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\occache.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\msls31.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\mshta.exe
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\jsIntl.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\jscript.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\inseng.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\imgutil.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\iexpress.exe
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\iepeers.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\icardie.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-04-20 11:23:26 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\wextract.exe
2014-04-20 11:23:26 ----A---- C:\windows\system32\webcheck.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\url.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2014-04-20 11:23:26 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2014-04-20 11:23:26 ----A---- C:\windows\system32\pngfilt.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\occache.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\msls31.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\mshtmlmedia.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\mshtmler.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\mshtmled.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\MshtmlDac.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\mshta.exe
2014-04-20 11:23:26 ----A---- C:\windows\system32\msfeedssync.exe
2014-04-20 11:23:26 ----A---- C:\windows\system32\msfeedsbs.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\licmgr10.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\jsIntl.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\jscript.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\inseng.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\imgutil.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\iexpress.exe
2014-04-20 11:23:26 ----A---- C:\windows\system32\iesysprep.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\iepeers.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\iedkcs32.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\ieapfltr.dat
2014-04-20 11:23:26 ----A---- C:\windows\system32\IEAdvpack.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\icardie.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\elshyph.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\dxtrans.dll
2014-04-20 11:23:26 ----A---- C:\windows\system32\dxtmsft.dll
2014-04-19 23:55:37 ----D---- C:\windows\system32\MRT
2014-04-19 22:55:32 ----A---- C:\windows\SYSWOW64\msieftp.dll
2014-04-19 22:55:32 ----A---- C:\windows\system32\msieftp.dll
2014-04-19 22:53:08 ----A---- C:\windows\system32\wwansvc.dll
2014-04-19 22:53:08 ----A---- C:\windows\system32\wwanprotdim.dll
2014-04-19 22:53:07 ----A---- C:\windows\SYSWOW64\comctl32.dll
2014-04-19 22:53:07 ----A---- C:\windows\system32\comctl32.dll
2014-04-19 22:51:32 ----A---- C:\windows\SYSWOW64\wintrust.dll
2014-04-19 22:51:32 ----A---- C:\windows\system32\wintrust.dll
2014-04-19 22:51:06 ----A---- C:\windows\system32\consent.exe
2014-04-19 22:51:05 ----A---- C:\windows\system32\appinfo.dll
2014-04-19 22:50:47 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2014-04-19 22:50:47 ----A---- C:\windows\system32\WMPhoto.dll
2014-04-19 22:49:59 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2014-04-19 22:49:59 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2014-04-19 22:49:59 ----A---- C:\windows\SYSWOW64\crypt32.dll
2014-04-19 22:49:59 ----A---- C:\windows\system32\cryptsvc.dll
2014-04-19 22:49:59 ----A---- C:\windows\system32\cryptnet.dll
2014-04-19 22:49:59 ----A---- C:\windows\system32\crypt32.dll
2014-04-19 22:49:51 ----A---- C:\windows\SYSWOW64\wer.dll
2014-04-19 22:49:51 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2014-04-19 22:49:51 ----A---- C:\windows\system32\wer.dll
2014-04-19 22:49:51 ----A---- C:\windows\system32\imagehlp.dll
2014-04-19 22:49:42 ----A---- C:\windows\SYSWOW64\tzres.dll
2014-04-19 22:49:42 ----A---- C:\windows\system32\tzres.dll
2014-04-19 22:49:38 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2014-04-19 22:49:38 ----A---- C:\windows\SYSWOW64\msxml3.dll
2014-04-19 22:49:38 ----A---- C:\windows\system32\msxml3r.dll
2014-04-19 22:49:38 ----A---- C:\windows\system32\msxml3.dll
2014-04-19 22:48:57 ----A---- C:\windows\system32\drivers\afd.sys
2014-04-19 22:44:44 ----A---- C:\windows\system32\win32k.sys
2014-04-19 22:44:44 ----A---- C:\windows\system32\drivers\portcls.sys
2014-04-19 22:44:44 ----A---- C:\windows\system32\drivers\drmk.sys
2014-04-19 22:44:41 ----A---- C:\windows\system32\drivers\ataport.sys
2014-04-19 22:44:29 ----A---- C:\windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-04-19 22:44:29 ----A---- C:\windows\SYSWOW64\credui.dll
2014-04-19 22:44:29 ----A---- C:\windows\SYSWOW64\authui.dll
2014-04-19 22:44:29 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2014-04-19 22:44:29 ----A---- C:\windows\system32\credui.dll
2014-04-19 22:44:29 ----A---- C:\windows\system32\authui.dll
2014-04-19 22:44:25 ----A---- C:\windows\SYSWOW64\lpk.dll
2014-04-19 22:44:25 ----A---- C:\windows\SYSWOW64\fontsub.dll
2014-04-19 22:44:25 ----A---- C:\windows\SYSWOW64\dciman32.dll
2014-04-19 22:44:25 ----A---- C:\windows\SYSWOW64\atmfd.dll
2014-04-19 22:44:25 ----A---- C:\windows\system32\lpk.dll
2014-04-19 22:44:25 ----A---- C:\windows\system32\fontsub.dll
2014-04-19 22:44:25 ----A---- C:\windows\system32\dciman32.dll
2014-04-19 22:44:25 ----A---- C:\windows\system32\atmlib.dll
2014-04-19 22:44:25 ----A---- C:\windows\system32\atmfd.dll
2014-04-19 22:44:24 ----A---- C:\windows\SYSWOW64\atmlib.dll
2014-04-19 22:41:20 ----A---- C:\windows\SYSWOW64\sspicli.dll
2014-04-19 22:41:20 ----A---- C:\windows\SYSWOW64\secur32.dll
2014-04-19 22:41:20 ----A---- C:\windows\SYSWOW64\schannel.dll
2014-04-19 22:41:20 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2014-04-19 22:41:20 ----A---- C:\windows\system32\sspisrv.dll
2014-04-19 22:41:20 ----A---- C:\windows\system32\sspicli.dll
2014-04-19 22:41:20 ----A---- C:\windows\system32\secur32.dll
2014-04-19 22:41:20 ----A---- C:\windows\system32\schannel.dll
2014-04-19 22:41:20 ----A---- C:\windows\system32\ncrypt.dll
2014-04-19 22:41:20 ----A---- C:\windows\system32\lsass.exe
2014-04-19 22:41:20 ----A---- C:\windows\system32\lsasrv.dll
2014-04-19 22:41:20 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2014-04-19 22:41:20 ----A---- C:\windows\system32\drivers\ksecdd.sys
2014-04-19 22:41:20 ----A---- C:\windows\system32\drivers\cng.sys
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\secproc_ssp_isv.dll
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\secproc_ssp.dll
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\secproc_isv.dll
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\secproc.dll
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\RMActivate_ssp.exe
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\RMActivate_isv.exe
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\RMActivate.exe
2014-04-19 22:37:47 ----A---- C:\windows\SYSWOW64\msdrm.dll
2014-04-19 22:37:47 ----A---- C:\windows\system32\secproc_ssp_isv.dll
2014-04-19 22:37:47 ----A---- C:\windows\system32\secproc_ssp.dll
2014-04-19 22:37:47 ----A---- C:\windows\system32\secproc_isv.dll
2014-04-19 22:37:47 ----A---- C:\windows\system32\secproc.dll
2014-04-19 22:37:47 ----A---- C:\windows\system32\RMActivate_ssp_isv.exe
2014-04-19 22:37:47 ----A---- C:\windows\system32\RMActivate_ssp.exe
2014-04-19 22:37:47 ----A---- C:\windows\system32\RMActivate_isv.exe
2014-04-19 22:37:47 ----A---- C:\windows\system32\RMActivate.exe
2014-04-19 22:37:47 ----A---- C:\windows\system32\msdrm.dll
2014-04-19 22:36:59 ----A---- C:\windows\system32\drivers\usbuhci.sys
2014-04-19 22:36:59 ----A---- C:\windows\system32\drivers\usbport.sys
2014-04-19 22:36:59 ----A---- C:\windows\system32\drivers\usbohci.sys
2014-04-19 22:36:59 ----A---- C:\windows\system32\drivers\usbhub.sys
2014-04-19 22:36:59 ----A---- C:\windows\system32\drivers\usbehci.sys
2014-04-19 22:36:59 ----A---- C:\windows\system32\drivers\usbd.sys
2014-04-19 22:36:59 ----A---- C:\windows\system32\drivers\usbccgp.sys
2014-04-19 22:36:58 ----A---- C:\windows\SYSWOW64\d3d11.dll
2014-04-19 22:36:58 ----A---- C:\windows\system32\d3d11.dll
2014-04-19 22:36:50 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2014-04-19 22:36:50 ----A---- C:\windows\system32\smss.exe
2014-04-19 22:36:50 ----A---- C:\windows\system32\csrsrv.dll
2014-04-19 22:36:50 ----A---- C:\windows\system32\apisetschema.dll
2014-04-19 22:36:44 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2014-04-19 22:36:44 ----A---- C:\windows\system32\WMVDECOD.DLL
2014-04-19 22:36:41 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2014-04-19 22:36:32 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2014-04-19 22:36:32 ----A---- C:\windows\system32\rpcrt4.dll
2014-04-19 22:36:27 ----A---- C:\windows\system32\drivers\usbvideo.sys
2014-04-19 22:36:27 ----A---- C:\windows\system32\drivers\usbcir.sys
2014-04-19 22:36:21 ----A---- C:\windows\system32\drivers\usbscan.sys
2014-04-19 22:36:21 ----A---- C:\windows\system32\drivers\hidparse.sys
2014-04-19 22:36:21 ----A---- C:\windows\system32\drivers\hidclass.sys
2014-04-19 22:36:20 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2014-04-19 22:36:20 ----A---- C:\windows\SYSWOW64\davclnt.dll
2014-04-19 22:36:20 ----A---- C:\windows\system32\WebClnt.dll
2014-04-19 22:36:20 ----A---- C:\windows\system32\drivers\mrxdav.sys
2014-04-19 22:36:20 ----A---- C:\windows\system32\davclnt.dll
2014-04-19 22:36:18 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2014-04-19 22:36:18 ----A---- C:\windows\system32\d3d10warp.dll
2014-04-19 22:36:18 ----A---- C:\windows\system32\d2d1.dll
2014-04-19 22:36:17 ----A---- C:\windows\SYSWOW64\d2d1.dll
2014-04-19 22:35:51 ----A---- C:\windows\SYSWOW64\mswsock.dll
2014-04-19 22:35:51 ----A---- C:\windows\system32\mswsock.dll
2014-04-19 22:35:51 ----A---- C:\windows\system32\drivers\tssecsrv.sys
2014-04-19 22:35:45 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2014-04-19 22:35:45 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2014-04-19 22:35:45 ----A---- C:\windows\system32\ntoskrnl.exe
2014-04-19 22:35:45 ----A---- C:\windows\system32\ntdll.dll
2014-04-19 22:35:45 ----A---- C:\windows\system32\advapi32.dll
2014-04-19 22:35:44 ----A---- C:\windows\SYSWOW64\tdh.dll
2014-04-19 22:35:44 ----A---- C:\windows\SYSWOW64\ntdll.dll
2014-04-19 22:35:44 ----A---- C:\windows\SYSWOW64\advapi32.dll
2014-04-19 22:35:44 ----A---- C:\windows\system32\tdh.dll
2014-04-19 22:35:39 ----A---- C:\windows\system32\drivers\tcpip.sys
2014-04-19 22:35:38 ----A---- C:\windows\system32\drivers\netio.sys
2014-04-19 22:35:32 ----A---- C:\windows\SYSWOW64\iologmsg.dll
2014-04-19 22:35:32 ----A---- C:\windows\system32\iologmsg.dll
2014-04-19 22:35:32 ----A---- C:\windows\system32\drivers\storport.sys
2014-04-19 22:35:32 ----A---- C:\windows\system32\drivers\msiscsi.sys
2014-04-19 22:35:32 ----A---- C:\windows\system32\drivers\Diskdump.sys
2014-04-19 22:35:21 ----A---- C:\windows\system32\shell32.dll
2014-04-19 22:35:20 ----A---- C:\windows\SYSWOW64\shell32.dll
2014-04-19 22:35:20 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2014-04-19 22:35:20 ----A---- C:\windows\system32\shdocvw.dll
2014-04-19 22:34:00 ----A---- C:\windows\SYSWOW64\win32spl.dll
2014-04-19 22:34:00 ----A---- C:\windows\SYSWOW64\gdi32.dll
2014-04-19 22:34:00 ----A---- C:\windows\system32\win32spl.dll
2014-04-19 22:34:00 ----A---- C:\windows\system32\gdi32.dll
2014-04-19 22:33:59 ----A---- C:\windows\SYSWOW64\qedit.dll
2014-04-19 22:33:59 ----A---- C:\windows\system32\qedit.dll
2014-04-19 22:33:50 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2014-04-19 22:33:50 ----A---- C:\windows\system32\cryptdlg.dll
2014-04-19 22:33:40 ----A---- C:\windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-04-19 22:33:40 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-04-19 22:33:39 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-04-19 22:33:39 ----A---- C:\windows\SYSWOW64\wow32.dll
2014-04-19 22:33:39 ----A---- C:\windows\SYSWOW64\setup16.exe
2014-04-19 22:33:39 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2014-04-19 22:33:39 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2014-04-19 22:33:39 ----A---- C:\windows\SYSWOW64\kernel32.dll
2014-04-19 22:33:39 ----A---- C:\windows\SYSWOW64\instnm.exe
2014-04-19 22:33:39 ----A---- C:\windows\system32\wow64win.dll
2014-04-19 22:33:39 ----A---- C:\windows\system32\wow64cpu.dll
2014-04-19 22:33:39 ----A---- C:\windows\system32\wow64.dll
2014-04-19 22:33:39 ----A---- C:\windows\system32\winsrv.dll
2014-04-19 22:33:39 ----A---- C:\windows\system32\ntvdm64.dll
2014-04-19 22:33:39 ----A---- C:\windows\system32\KernelBase.dll
2014-04-19 22:33:39 ----A---- C:\windows\system32\kernel32.dll
2014-04-19 22:33:39 ----A---- C:\windows\system32\conhost.exe
2014-04-19 22:33:38 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-04-19 22:33:38 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-04-19 22:33:38 ----A---- C:\windows\SYSWOW64\user.exe
2014-04-19 22:33:36 ----A---- C:\windows\system32\drivers\ntfs.sys
2014-04-19 22:33:25 ----A---- C:\windows\SYSWOW64\certutil.exe
2014-04-19 22:33:25 ----A---- C:\windows\system32\certutil.exe
2014-04-19 22:33:22 ----A---- C:\windows\SYSWOW64\certenc.dll
2014-04-19 22:33:22 ----A---- C:\windows\system32\certenc.dll
2014-04-19 22:33:12 ----A---- C:\windows\SYSWOW64\wscript.exe
2014-04-19 22:33:12 ----A---- C:\windows\SYSWOW64\scrrun.dll
2014-04-19 22:33:12 ----A---- C:\windows\SYSWOW64\cscript.exe
2014-04-19 22:33:12 ----A---- C:\windows\system32\wscript.exe
2014-04-19 22:33:12 ----A---- C:\windows\system32\scrrun.dll
2014-04-19 22:33:12 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2014-04-19 22:33:12 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2014-04-19 22:33:12 ----A---- C:\windows\system32\cscript.exe
2014-04-19 22:33:12 ----A---- C:\windows\system32\cdd.dll
2014-04-19 22:32:47 ----A---- C:\windows\SYSWOW64\DWrite.dll
2014-04-19 22:32:47 ----A---- C:\windows\system32\DWrite.dll
2014-04-19 22:32:40 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2014-04-19 22:32:40 ----A---- C:\windows\system32\WindowsCodecs.dll
2014-04-19 22:32:34 ----A---- C:\windows\SYSWOW64\nshwfp.dll
2014-04-19 22:32:34 ----A---- C:\windows\SYSWOW64\FWPUCLNT.DLL
2014-04-19 22:32:34 ----A---- C:\windows\system32\nshwfp.dll
2014-04-19 22:32:34 ----A---- C:\windows\system32\IKEEXT.DLL
2014-04-19 22:32:34 ----A---- C:\windows\system32\FWPUCLNT.DLL
2014-04-19 22:32:31 ----A---- C:\windows\system32\scavengeui.dll
2014-04-19 20:27:57 ----D---- C:\windows\temp
2014-04-19 20:27:51 ----A---- C:\ComboFix.txt
2014-04-19 20:16:19 ----A---- C:\windows\zip.exe
2014-04-19 20:16:19 ----A---- C:\windows\SWSC.exe
2014-04-19 20:16:19 ----A---- C:\windows\SWREG.exe
2014-04-19 20:16:19 ----A---- C:\windows\sed.exe
2014-04-19 20:16:19 ----A---- C:\windows\PEV.exe
2014-04-19 20:16:19 ----A---- C:\windows\NIRCMD.exe
2014-04-19 20:16:19 ----A---- C:\windows\MBR.exe
2014-04-19 20:16:19 ----A---- C:\windows\grep.exe
2014-04-19 20:14:53 ----D---- C:\Qoobox
2014-04-19 20:14:03 ----D---- C:\windows\erdnt
2014-04-19 02:55:30 ----D---- C:\windows\Microsoft Antimalware
2014-04-16 11:16:16 ----A---- C:\windows\SYSWOW64\javaws.exe
2014-04-16 11:16:13 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-04-16 11:16:13 ----A---- C:\windows\SYSWOW64\javaw.exe
2014-04-16 11:16:13 ----A---- C:\windows\SYSWOW64\java.exe
2014-04-15 09:16:15 ----D---- C:\Program Files (x86)\Microsoft OneDrive
2014-04-15 09:15:57 ----D---- C:\ProgramData\Microsoft OneDrive
2014-03-29 13:38:56 ----D---- C:\Program Files (x86)\Mozilla Firefox
======List of files/folders modified in the last 1 month======
2014-04-21 16:51:34 ----RD---- C:\Program Files
2014-04-21 16:49:06 ----D---- C:\Users\Simon Derbaix\AppData\Roaming\Skype
2014-04-21 16:46:49 ----D---- C:\windows\Microsoft.NET
2014-04-21 16:46:32 ----RSD---- C:\windows\assembly
2014-04-21 16:46:10 ----D---- C:\Users\Simon Derbaix\AppData\Roaming\Spotify
2014-04-21 15:40:24 ----D---- C:\windows\system32\config
2014-04-21 15:29:08 ----D---- C:\windows\System32
2014-04-21 15:29:08 ----D---- C:\windows\inf
2014-04-21 15:29:08 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-04-21 15:28:18 ----A---- C:\windows\SYSWOW64\log.txt
2014-04-21 15:26:17 ----D---- C:\windows\system32\Tasks
2014-04-21 15:25:39 ----A---- C:\IFRToolLog.txt
2014-04-21 15:24:35 ----D---- C:\Users\Simon Derbaix\AppData\Roaming\.strongvpn
2014-04-21 15:24:05 ----D---- C:\Windows
2014-04-21 15:24:05 ----D---- C:\Config.Msi
2014-04-21 13:25:00 ----D---- C:\windows\winsxs
2014-04-21 13:25:00 ----D---- C:\windows\system32\catroot
2014-04-21 09:08:00 ----SHD---- C:\windows\Installer
2014-04-21 09:07:55 ----D---- C:\ProgramData\Microsoft Help
2014-04-21 08:55:28 ----SHD---- C:\System Volume Information
2014-04-20 19:44:08 ----D---- C:\windows\SysWOW64
2014-04-20 19:44:08 ----D---- C:\Program Files\Internet Explorer
2014-04-20 19:44:08 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-20 19:38:15 ----D---- C:\Users\Simon Derbaix\AppData\Roaming\uTorrent
2014-04-20 19:38:15 ----D---- C:\Users\Simon Derbaix\AppData\Roaming\FileZilla
2014-04-20 19:37:50 ----D---- C:\windows\Panther
2014-04-20 19:37:50 ----D---- C:\windows\Logs
2014-04-20 19:37:50 ----D---- C:\windows\debug
2014-04-20 19:37:49 ----D---- C:\windows\Minidump
2014-04-20 19:34:44 ----D---- C:\Program Files (x86)
2014-04-20 19:33:21 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2014-04-20 17:34:34 ----D---- C:\windows\system32\catroot2
2014-04-20 12:01:11 ----D---- C:\Program Files (x86)\Windows Media Player
2014-04-20 12:01:10 ----D---- C:\windows\SYSWOW64\nl-NL
2014-04-20 12:01:10 ----D---- C:\windows\system32\nl-NL
2014-04-20 12:01:10 ----D---- C:\Program Files\Windows Media Player
2014-04-20 12:01:09 ----D---- C:\windows\SYSWOW64\migration
2014-04-20 12:01:09 ----D---- C:\windows\SYSWOW64\en-US
2014-04-20 12:01:08 ----D---- C:\windows\system32\migration
2014-04-20 12:01:08 ----D---- C:\windows\system32\en-US
2014-04-20 12:01:08 ----D---- C:\windows\PolicyDefinitions
2014-04-20 12:01:08 ----D---- C:\windows\AppPatch
2014-04-20 12:01:05 ----D---- C:\windows\system32\drivers
2014-04-20 12:01:04 ----D---- C:\Program Files\Windows Defender
2014-04-20 12:01:04 ----D---- C:\Program Files (x86)\Windows Defender
2014-04-20 12:00:56 ----D---- C:\Program Files\Windows Journal
2014-04-20 12:00:45 ----D---- C:\windows\system32\DriverStore
2014-04-20 11:58:21 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-04-20 11:49:40 ----D---- C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-04-20 11:37:15 ----SD---- C:\ProgramData\Microsoft
2014-04-20 11:12:49 ----D---- C:\ProgramData\Skype
2014-04-20 11:12:48 ----RD---- C:\Program Files (x86)\Skype
2014-04-19 23:46:06 ----D---- C:\Program Files\Microsoft Silverlight
2014-04-19 20:24:15 ----A---- C:\windows\system.ini
2014-04-19 20:24:07 ----D---- C:\$Recycle.Bin
2014-04-19 20:24:03 ----D---- C:\windows\system32\drivers\etc
2014-04-19 20:21:43 ----D---- C:\ProgramData
2014-04-19 20:20:07 ----D---- C:\windows\SYSWOW64\drivers
2014-04-19 20:20:07 ----D---- C:\Program Files (x86)\Common Files
2014-04-16 11:16:30 ----D---- C:\ProgramData\Oracle
2014-04-16 11:16:13 ----D---- C:\Program Files (x86)\Java
2014-04-14 19:02:23 ----D---- C:\xampp
2014-04-14 18:55:36 ----D---- C:\Program Files (x86)\ShopEx
2014-04-12 10:49:29 ----D---- C:\windows\Prefetch
2014-03-31 09:35:08 ----N---- C:\windows\system32\MpSigStub.exe
2014-03-31 03:51:02 ----A---- C:\windows\system32\MRT.exe
2014-03-30 14:15:00 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-24 14:37:02 ----D---- C:\Users\Simon Derbaix\AppData\Roaming\Tencent
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-11-29 568600]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-01-05 14652768]
R1 SABI;SAMSUNG Kernel Driver For Windows 7; \??\C:\windows\system32\Drivers\SABI.sys [2011-06-13 13824]
R1 VWiFiFlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
R3 acpials;ALS Sensor Filter; C:\windows\system32\DRIVERS\acpials.sys [2009-07-14 9728]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtuele adapter; C:\windows\system32\DRIVERS\AMPPAL.sys [2013-04-11 164832]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2012-02-16 31216]
R3 ETD;Samsung PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2012-10-09 325488]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2012-05-15 4035816]
R3 IntcDAud;Intel® Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 irstrtdv;Intel® Rapid Start Technology Driver; C:\windows\system32\DRIVERS\irstrtdv.sys [2012-02-07 26504]
R3 iwdbus;IWD Bus Enumerator; C:\windows\system32\DRIVERS\iwdbus.sys [2011-12-20 25496]
R3 MBAMProtector;MBAMProtector; \??\C:\windows\system32\drivers\mbam.sys [2013-04-04 25928]
R3 MEIx64;Intel® Management Engine Interface ; C:\windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series adapter stuurprogramma onder Windows 7 64 Bit; C:\windows\system32\DRIVERS\Netwsw00.sys [2013-05-08 11524096]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-23 648808]
R3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0); C:\windows\system32\DRIVERS\rusb3hub.sys [2013-02-08 114568]
R3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0); C:\windows\system32\DRIVERS\rusb3xhc.sys [2011-10-08 216064]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2011-01-25 18432]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\windows\system32\DRIVERS\amppal.sys [2013-04-11 164832]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\windows\System32\Drivers\BTHport.sys [2012-07-07 552960]
S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btmaudio;Intel Bluetooth Audio Service; C:\windows\system32\drivers\btmaud.sys [2011-11-30 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service; C:\windows\system32\DRIVERS\btmaux.sys [2011-11-30 94720]
S3 btmhsf;btmhsf; C:\windows\system32\DRIVERS\btmhsf.sys [2011-11-30 747008]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2014-01-23 108800]
S3 Dot4;MS IEEE-1284.4 Driver; C:\windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 droidpad;DroidPad Joystick; C:\windows\system32\DRIVERS\droidpad.sys [2012-12-25 21320]
S3 ibtfltcoex;ibtfltcoex; C:\windows\system32\DRIVERS\iBtFltCoex.sys [2012-02-14 60928]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\windows\system32\drivers\intelaud.sys [2011-12-20 34200]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 SBIOSIO;SBIOSIO; \??\C:\Users\SIMOND~1\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys []
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2014-01-23 206080]
S3 tapstrong;StrongVPN Adapter; C:\windows\system32\DRIVERS\tapstrong.sys [2013-08-13 35520]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Stuurprogramma voor USB-scanner; C:\windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 WinUsb;SAMSUNG Android USB Driver; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2013-04-11 772064]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-02-22 1014096]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2012-02-22 1104208]
R2 BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-09-12 135984]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2013-05-08 621296]
R2 HPSLPSVC;HP Network Devices Support; C:\windows\system32\svchost.exe [2011-03-01 27648]
R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
R2 Intel® ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-02-08 128280]
R2 irstrtsv;Intel® Rapid Start Technology Service; C:\windows\SysWOW64\irstrtsv.exe [2012-02-06 193536]
R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2012-02-08 161560]
R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2012-02-08 277784]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 mysql;mysql; C:\xampp\mysql\bin\mysqld --defaults-file=C:\xampp\mysql\bin\my.ini mysql []
R2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2011-03-01 27648]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2011-03-01 27648]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2013-05-08 149744]
R2 SamsungDeviceConfigurationWinService;SamsungDeviceConfiguration; C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [2012-02-13 31624]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 StrongVPN Service;StrongVPN Service; C:\Program Files (x86)\StrongVPN\StrongService.exe [2014-02-25 94704]
R2 SWUpdateService;SW Update Service; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [2013-10-21 3018800]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-02-17 4915040]
R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-02-08 363800]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2012-02-22 1304912]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-23 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12 257928]
S3 cphs;Intel® Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-02-03 274200]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-23 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-29 119408]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2013-05-08 273136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-02-13 1255736]
S4 aspnet_state;ASP.NET-statusservice; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
-----------------EOF-----------------
-
Hey Mako!
Haha, ok! Sorry daarvoor! Hier is dan het nieuwe logje!
Simon
[ATTACH]31488[/ATTACH]
-
Hey,
Zou er iemand mijn HijjackThis logje kunnen nakijken? Ik heb een vermoeden dat er iets fout loop met de PC.
Alvast bedankt!
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:43:32, on 21/04/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\spotify.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\StrongVPN\StrongDial.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Users\Simon Derbaix\Downloads\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [spotify] "C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Simon Derbaix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [strongVPN Client] "C:\Program Files (x86)\StrongVPN\StrongDial.exe" --silent
O4 - HKCU\..\Run: [KiesPDLR.exe] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{0B5B235B-6861-4591-92EE-D5C358C61A0B}: NameServer = 210.21.196.6,221.5.88.88
O17 - HKLM\System\CCS\Services\Tcpip\..\{1533AC16-7AFD-4139-B8C0-9C7AD90A7BB5}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{352A7F84-2DA0-4063-B5DC-6C26C8981AA7}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{3AEE2DB3-BBA2-473A-AF4C-A71BEA4ED632}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{4B410BB5-05D4-47BB-9C93-500D49EF3964}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{50A0840C-EDCC-4303-8A19-247CEFB1783A}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{59D1623D-8F78-456D-9DB2-42BE263F4017}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{60CE1F32-B682-40C9-9C4B-9DE8FF17ACE8}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{618B979A-F539-4981-92B0-13FF61EF270F}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{902DC9E6-EAC2-4ED8-B794-5EC12D80BE68}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{C35FC9D5-711B-4CC4-B595-4A4C94860862}: NameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{D5F757C4-B566-4C32-A2C8-7FA53AB1DFFB}: NameServer = 8.8.8.8 8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Security Service (BTHSSecurityMgr) - Intel® Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel® Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\windows\SysWOW64\irstrtsv.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: SamsungDeviceConfiguration (SamsungDeviceConfigurationWinService) - Unknown owner - C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: StrongVPN Service - Black Oak Computers, Inc. - C:\Program Files (x86)\StrongVPN\StrongService.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics CO., LTD. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
--
End of file - 14729 bytes
Winsock Hijackbot
in Archief Bestrijding malware & virussen
Geplaatst:
Super bedankt Kape en Kweezie Wabbit!