User2015

Ik begrijp het maar zag staan dat je de bijlage wel al had bekeken En als je met een besmette computer zit is elke minuut cruciaal. Hoe kan ik trouwens mijn mogelijk besmette usb sticks weer gebruiken?

??

Heb het logje geplaatst kweezie wabbit

Probleem met het geluid opgelost. Heb de realtek drivers geinstalleerd

Zo ziet mijn vorige knop er dus regelmatig uit: Enig idee wat dit is?

Zo ziet het streepje er ongeveer uit. Het is enkel als ik SOMS met men muis over de 'vorige pagina' knop ga

Nu,de popup (snap5) , komt na de startup er nog steeds op. Ook hoor ik het geluidje dat een driver niet is geinstalleerd ofzo. Je kent het geluid als je een USB ofzo insteekt, het tegenoverstellende geluid daarvan. Het klinkt ongeveer zo 'tu du du' Alsook, mijn voorste headphone aansluiting werkt niet als ik er iets op aansluit. Heb onlangs mijn pc geherinstalleerd en ik denk dat er nog drivers ontbreken ofzo. Ik heb daarna niets speciaals gedaan. Logje zit als bijlage erbij AdwCleanerS1.txt

Wat ik wel merk, en ik begrijp wat u probeert te zoeken. De hacker injecteerd zijn script in firefox. Soms als ik met de muis beweeg over de 'vorige pagina' knop,zie ik iets wat niet hoort. Weet niet goed hoe ik het moet uitleggen. Ik probeer een snap te maken Er komt een soort ja hoe moet ik het zeggen. Pixel op. Precies of ik gebruik een beta versie van firefox waar nog fouten inzitten. Een soort van streepje zeg maar. Dit komt soms als ik met de muis over de vorige knop ga. Een soort flickering pixel achtig ding. Niet groot hoor. Maar gewoon ja, weet echt niet hoe ik het moet verwoorden. Alsof er een bug in de vorige knop zit ofzo Het soort streepjes als je scherm niet goed is aangesloten of er een probleem is met de videokaart. Echt niet groot of storend,maar wel argwaantrekkend

Maar dan komt de toolbar toch terug? Hier als bijlage het logje en een snap van de overblijvende popup zoek-results.txt

Het ligt aan men VPN denk ik. Google.ae (arabische emiraten) Logje komt er zo aan. En heb het over Yahoo Messenger dat niet meer werkt.

Nu deed ik net een prestatiescan met Avast free anti virus, en kom uit op dit: Moet ik dit voltooien of gaan er dan belangrijkste instellingen verloren? En ben inderdaad af van de popups. Maar nu komt er een andere op. Iets met updatetooler ofzoiets. Alsook werkt Yahoo niet meer Uuuhm ik weet niet of ik de enige ben maar Google staat in het Arabisch? Er staat naast google Arabische Emiraten? WTF

Geen malware gevonden en er werd geen logje geopend ofzo? Hoe kan ik nu zeker zijn dat men pc malware/trojan vrij is?

Ik heb trouwens nog een router liggen. E3000 van CISCO. Kan ik met een VyprVPN nog meer doen zoals de VPN instellen vanaf de router? Je kon ook zoiets doen met de router zodat je nog meer kan aanpassen. Wie weet hoe het nuweer noemt? als ik intype router flashen kom ik op niks uit.

Ik wou daarnet een nieuwe snap plaatse maar toen kreeg ik deze melding: 2 bijlages de melding en een snap van zonealarm.

Hier een snip als bijlage: ik gebruik een VPN maar heb daar niets aan veranderd. enkel via the vyprvpn app. is het nodig om aan die opties iets te veranderen? mvg vreemd. een reactie die ik daarnet plaatste kwam hierop het scherm toen ik op meer opties klikte. mmm..

Zoals gewenst.. Ik ben dus toch geinfecteerd? Voor ik de applicatie starte,heb ik internet verbroken. voor het geval de mogelijke hacker zijn exe plaatst waar de scanner niet komt. heeft de software internet nodig voor de scan voor definities? denk ik nu pas aan. hoe spoor ik deze trouwens op via een netwerk applicatie? heb het gevoel dat mijn iphone ook geinfecteerd is. kan dit? een netwerk logger bv? mvg AdwCleanerS0.txt

Zoals gewenst,logje als bijlage. Bedankt voor je hulp Mvg zoek-results2.txt

Bedankt voor je reactie! Zoals gewenst,het logje in bijlage Ook komen volgende 2 popups op mijn scherm telkens ik mijn pc herstart: http://www55.zippyshare.com/v/NYBQDfSE/file.html (is niet in een zip gwn direct afbeelding) Alvast bedankt zoek-results.txt

Logfile of random's system information tool 1.10 (written by random/random) Run by ikke at 2015-03-06 12:44:07 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 499 GB (52%) free of 954 GB Total RAM: 4061 MB (31% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 12:44:15, on 6/03/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.17229) Boot mode: Normal Running processes: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\ManyCam\ManyCam.exe C:\Program Files (x86)\Screen Recorder\NSR.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Users\ikke\Downloads\ProcessExplorer\procexp.exe C:\Users\ikke\Desktop\SecurityCheck.exe C:\Windows\SysWOW64\cmd.exe C:\Users\ikke\Desktop\WIGI.exe C:\Windows\SysWOW64\NOTEPAD.EXE C:\Users\ikke\Desktop\HijackThis.exe C:\Windows\SysWOW64\NOTEPAD.EXE C:\Windows\SysWOW64\notepad.exe C:\Program Files\trend micro\ikke.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe" O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ijtwsoft] regsvr32.exe C:\Users\ikke\AppData\Local\Ijtwsoft\WEBAPPDBG.DLL O4 - HKCU\..\Run: [Ahcbworks] C:\Windows\SysWOW64\regsvr32.exe C:\Users\ikke\AppData\Local\AZCworks\cpuz.dll O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [Mikogo] "C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-host.exe" -asp O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_80EFCD58332697325F19C231D17DEA21] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Mikogo-Service - BeamYourScreen GmbH - C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Service.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe -- End of file - 10385 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS "c:\Program Files\Microsoft Security Client\MsMpEng.exe" C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe" -service C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "taskhost.exe" "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe" C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Service.exe "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe" "C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe" C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Screen-Service.exe "c:\Program Files\Microsoft Security Client\NisSrv.exe" C:\Windows\system32\sppsvc.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a2d862ce-ece1-4866-a90d-44a0e8f743e6 -SystemEventPortName:HostProcess-32034dbd-e1a1-44d0-97e8-969dfd69ac7a -IoCancelEventPortName:HostProcess-b22a4375-51f0-42aa-b56c-35d3b718b76e -NonStateChangingEventPortName:HostProcess-07470047-8854-4bc8-8d76-a05800d4d443 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:195ef4e0-c3e6-48c9-a455-b20112370f72 -DeviceGroupId:WpdFsGroup "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey "C:\Program Files\iTunes\iTunesHelper.exe" "C:\Windows\System32\igfxtray.exe" "C:\Windows\System32\hkcmd.exe" "C:\Windows\System32\igfxpers.exe" "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun C:\Windows\system32\SearchIndexer.exe /Embedding C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files\iPod\bin\iPodService.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window --flag-switches-begin --flag-switches-end "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4192.0.369210294\1992498175" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,18,40 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x2e32 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2226 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "http://go.microsoft.com/fwlink/?LinkId=89429&OSV=6.1.7601.2.00010300.1.0.003.09.1033&LS=3&LegitCheckError=00000052&GenuineInfo=C004F063&Channel=8&ErrCode=C004F063" "taskhost.exe" "C:\Windows\system32\NOTEPAD.EXE" C:\Users\ikke\Documents\crf.txt "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5344.2245acf0.560034044 "C:\Windows\system32\Wat\npWatWeb.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 5344 "\\.\pipe\gecko-crash-server-pipe.5344" plugin "C:\Program Files (x86)\ManyCam\ManyCam.exe" "C:\Program Files (x86)\Screen Recorder\NSR.exe" "C:\Program Files\iTunes\iTunes.exe" "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe" --pipe \\.\pipe\30431029-128910065611314864 --parentPipe \??\C:\Windows\system32\conhost.exe "-608134338-1836574478-1990624144147599541325170722899255777079966489673559586 "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe" \??\C:\Windows\system32\conhost.exe "74184609654287314815336720539011934842059443565337126446-1769652339-1871652043 "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe" \??\C:\Windows\system32\conhost.exe "2144366170-2103217651-943511294-38262269-6857043379507032681264706978-90710500 C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" /CookieProxy "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5344.1e21a8b0.1423247737 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 5344 "\\.\pipe\gecko-crash-server-pipe.5344" plugin "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe" --proxy-stub-channel=Flash8136.5EC70590.12638 --host-broker-channel=Flash8136.5EC70590.5261 --host-pid=8136 --host-npapi-version=28 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll" "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe" --channel=4332.0039F884.2100749848 --proxy-stub-channel=Flash8136.5EC70590.12638 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll" --host-npapi-version=28 --type=renderer "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding "C:\Users\ikke\Downloads\ProcessExplorer\procexp.exe" "C:\Users\ikke\Downloads\ProcessExplorer\procexp.exe" "C:\Users\ikke\Desktop\SecurityCheck.exe" C:\Windows\system32\cmd.exe /c ""C:\Users\ikke\AppData\Local\Temp\RarSFX0\SecurityCheck\SecurityCheck.bat" " \??\C:\Windows\system32\conhost.exe "-1248754439-537073100-1514016980-1523536914-1914891037412973270378110724973338905 C:\Windows\system32\svchost.exe -k defragsvc "C:\Users\ikke\Desktop\WIGI.exe" "C:\Windows\system32\NOTEPAD.EXE" C:\Users\ikke\Desktop\WIGIReport[0].txt "C:\Users\ikke\Desktop\HijackThis.exe" "C:\Windows\system32\NOTEPAD.EXE" C:\Users\ikke\Desktop\hijackthis.log "C:\Users\ikke\Desktop\RSITx64.exe" NOTEPAD checkup.txt C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF} ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\ikke\AppData\Roaming\Mozilla\Firefox\Profiles\azl0lchs.default prefs.js - "browser.startup.homepage" - "google.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 16.0.0.305 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6] "Description"=Yahoo Messenger State Plugin "Path"=C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=C:\Windows\system32\Wat\npWatWeb.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 16.0.0.305 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=C:\Windows\system32\Wat\npWatWeb.dll C:\Users\ikke\AppData\Roaming\Mozilla\Firefox\Profiles\azl0lchs.default\extensions\ ffxtlbr@zonealarm.com {0C743D11-F0D9-032E-7453-F2EF2F185D55} {635abd67-4fe9-1b23-4f01-e679fa7484c1} C:\Users\ikke\AppData\Roaming\Mozilla\Firefox\Profiles\azl0lchs.default\searchplugins\ zonealarm.xml ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-01-28 357376] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}] &Yahoo! Toolbar Helper - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll [2013-08-07 1561880] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-25 460712] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-25 172968] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-01-28 297128] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll [2013-08-07 1561880] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 1332296] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-10-16 162328] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-10-16 386584] "Persistence"=C:\Windows\system32\igfxpers.exe [2010-10-16 415256] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584] "Ijtwsoft"=regsvr32.exe C:\Users\ikke\AppData\Local\Ijtwsoft\WEBAPPDBG.DLL [] "Ahcbworks"=C:\Windows\SysWOW64\regsvr32.exe [2009-07-14 14848] "EADM"=C:\Program Files (x86)\Origin\Origin.exe [2015-02-20 3619160] "Messenger (Yahoo!)"=C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe [2012-05-25 6595928] "Mikogo"=C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-host.exe [2014-12-12 6666568] "GoogleChromeAutoLaunch_80EFCD58332697325F19C231D17DEA21"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-02-28 809288] "AdobeBridge"= [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17 508800] "ZoneAlarm"=C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [2014-08-13 137352] "SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] "AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2010-10-16 271360] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-03-06 12:44:08 ----D---- C:\Program Files\trend micro 2015-03-06 12:44:06 ----D---- C:\rsit 2015-03-04 12:38:44 ----D---- C:\Windows\SYSWOW64\RTCOM 2015-03-04 12:38:44 ----D---- C:\Program Files\Realtek 2015-03-01 17:23:35 ----D---- C:\ProgramData\regid.1986-12.com.adobe 2015-03-01 17:22:32 ----D---- C:\Program Files\Adobe 2015-03-01 17:20:46 ----D---- C:\Program Files (x86)\Adobe 2015-03-01 17:15:45 ----D---- C:\Program Files\Common Files\Adobe 2015-03-01 17:10:56 ----D---- C:\ProgramData\Adobe 2015-02-28 19:04:51 ----D---- C:\Users\ikke\AppData\Roaming\Rylstim Screen Recorder 2015-02-28 17:56:22 ----D---- C:\Program Files (x86)\XviD 2015-02-28 17:56:02 ----D---- C:\Program Files (x86)\Screen Recorder 2015-02-28 11:01:31 ----HD---- C:\Program Files (x86)\Temp 2015-02-27 19:29:08 ----A---- C:\Users\ikke\AppData\Roaming\CamShapes.ini 2015-02-27 19:29:08 ----A---- C:\Users\ikke\AppData\Roaming\CamLayout.ini 2015-02-27 19:29:08 ----A---- C:\Users\ikke\AppData\Roaming\Camdata.ini 2015-02-27 14:19:34 ----D---- C:\Program Files\CamStudio 2.7 2015-02-27 12:58:45 ----D---- C:\Program Files (x86)\Check Point Software Technologies LTD 2015-02-27 12:58:40 ----D---- C:\Users\ikke\AppData\Roaming\Check Point Software Technologies LTD 2015-02-27 12:58:35 ----D---- C:\Program Files (x86)\CheckPoint 2015-02-26 13:45:43 ----D---- C:\Users\ikke\AppData\Roaming\Mikogo 2015-02-26 13:33:30 ----D---- C:\Program Files (x86)\Google 2015-02-25 20:49:45 ----D---- C:\ProgramData\Yahoo! Companion 2015-02-25 20:49:31 ----D---- C:\Users\ikke\AppData\Roaming\Yahoo! 2015-02-25 20:49:10 ----D---- C:\ProgramData\Yahoo! 2015-02-25 20:48:01 ----D---- C:\Program Files (x86)\Yahoo! 2015-02-25 20:37:20 ----D---- C:\Users\ikke\AppData\Roaming\ManyCam 2015-02-25 20:36:58 ----D---- C:\ProgramData\ManyCam 2015-02-25 20:36:57 ----D---- C:\Program Files (x86)\ManyCam 2015-02-25 20:36:46 ----D---- C:\ProgramData\EmailNotifier 2015-02-25 20:36:30 ----D---- C:\ProgramData\Visicom Media 2015-02-25 20:36:27 ----D---- C:\Program Files\Visicom Media 2015-02-25 20:22:36 ----D---- C:\Users\ikke\AppData\Roaming\Macromedia 2015-02-25 20:21:53 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-02-25 20:21:48 ----D---- C:\Windows\SYSWOW64\Macromed 2015-02-25 20:21:43 ----D---- C:\Windows\system32\Macromed 2015-02-25 20:08:13 ----D---- C:\ProgramData\Sun 2015-02-25 20:08:08 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2015-02-25 20:07:41 ----D---- C:\ProgramData\Oracle 2015-02-25 20:07:36 ----D---- C:\Program Files (x86)\Java 2015-02-25 20:03:51 ----D---- C:\Users\ikke\AppData\Roaming\Skype 2015-02-25 20:03:36 ----RD---- C:\Program Files (x86)\Skype 2015-02-25 20:03:24 ----D---- C:\ProgramData\Skype 2015-02-25 19:14:59 ----A---- C:\Windows\system32\powertracker.dll 2015-02-25 19:14:58 ----A---- C:\Windows\system32\perftrack.dll 2015-02-25 19:14:57 ----A---- C:\Windows\SYSWOW64\wdi.dll 2015-02-25 19:14:57 ----A---- C:\Windows\system32\wdi.dll 2015-02-25 15:19:31 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-02-24 15:50:01 ----HDC---- C:\ProgramData\{C2A88E6D-FA3D-462B-BDFF-A09B1EFA8FBE} 2015-02-24 15:37:50 ----HDC---- C:\ProgramData\{C78336EC-F2EB-4640-99A4-DFE96581B90B} 2015-02-24 13:36:43 ----D---- C:\Users\ikke\AppData\Roaming\Teragon Audio 2015-02-20 22:46:35 ----D---- C:\Program Files\Sonic Charge 2015-02-20 13:28:37 ----D---- C:\Program Files (x86)\iTunes 2015-02-20 13:28:36 ----D---- C:\Program Files\iPod 2015-02-20 13:28:35 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-02-20 13:28:35 ----D---- C:\Program Files\iTunes 2015-02-20 11:32:08 ----D---- C:\Program Files (x86)\Origin Games 2015-02-20 11:30:06 ----D---- C:\Users\ikke\AppData\Roaming\Origin 2015-02-20 11:27:15 ----D---- C:\ProgramData\Origin 2015-02-20 11:27:13 ----D---- C:\ProgramData\Electronic Arts 2015-02-20 11:26:39 ----D---- C:\Program Files (x86)\Origin 2015-02-17 12:22:45 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll 2015-02-17 12:22:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll 2015-02-17 12:22:45 ----A---- C:\Windows\system32\XAudio2_7.dll 2015-02-17 12:22:45 ----A---- C:\Windows\system32\XAPOFX1_5.dll 2015-02-17 12:22:44 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll 2015-02-17 12:22:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll 2015-02-17 12:22:44 ----A---- C:\Windows\system32\xactengine3_7.dll 2015-02-17 12:22:44 ----A---- C:\Windows\system32\D3DCompiler_43.dll 2015-02-17 12:22:43 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll 2015-02-17 12:22:43 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll 2015-02-17 12:22:43 ----A---- C:\Windows\system32\d3dx11_43.dll 2015-02-17 12:22:43 ----A---- C:\Windows\system32\d3dcsx_43.dll 2015-02-17 12:22:42 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll 2015-02-17 12:22:42 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll 2015-02-17 12:22:42 ----A---- C:\Windows\system32\D3DX9_43.dll 2015-02-17 12:22:42 ----A---- C:\Windows\system32\d3dx10_43.dll 2015-02-17 12:22:41 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll 2015-02-17 12:22:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll 2015-02-17 12:22:41 ----A---- C:\Windows\system32\XAudio2_6.dll 2015-02-17 12:22:41 ----A---- C:\Windows\system32\XAPOFX1_4.dll 2015-02-17 12:22:40 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll 2015-02-17 12:22:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll 2015-02-17 12:22:40 ----A---- C:\Windows\system32\xactengine3_6.dll 2015-02-17 12:22:40 ----A---- C:\Windows\system32\X3DAudio1_7.dll 2015-02-17 12:22:38 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll 2015-02-17 12:22:38 ----A---- C:\Windows\system32\XAudio2_5.dll 2015-02-17 12:22:37 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll 2015-02-17 12:22:37 ----A---- C:\Windows\system32\xactengine3_5.dll 2015-02-17 12:22:36 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll 2015-02-17 12:22:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll 2015-02-17 12:22:36 ----A---- C:\Windows\system32\d3dcsx_42.dll 2015-02-17 12:22:36 ----A---- C:\Windows\system32\D3DCompiler_42.dll 2015-02-17 12:22:35 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll 2015-02-17 12:22:35 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll 2015-02-17 12:22:35 ----A---- C:\Windows\system32\d3dx11_42.dll 2015-02-17 12:22:35 ----A---- C:\Windows\system32\d3dx10_42.dll 2015-02-17 12:22:34 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll 2015-02-17 12:22:34 ----A---- C:\Windows\system32\D3DX9_42.dll 2015-02-17 12:22:33 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll 2015-02-17 12:22:33 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll 2015-02-17 12:22:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll 2015-02-17 12:22:33 ----A---- C:\Windows\system32\D3DX9_41.dll 2015-02-17 12:22:33 ----A---- C:\Windows\system32\d3dx10_41.dll 2015-02-17 12:22:33 ----A---- C:\Windows\system32\D3DCompiler_41.dll 2015-02-17 12:22:32 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll 2015-02-17 12:22:32 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll 2015-02-17 12:22:32 ----A---- C:\Windows\system32\XAudio2_4.dll 2015-02-17 12:22:32 ----A---- C:\Windows\system32\XAPOFX1_3.dll 2015-02-17 12:22:31 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll 2015-02-17 12:22:31 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll 2015-02-17 12:22:31 ----A---- C:\Windows\system32\xactengine3_4.dll 2015-02-17 12:22:31 ----A---- C:\Windows\system32\X3DAudio1_6.dll 2015-02-17 12:22:30 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll 2015-02-17 12:22:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll 2015-02-17 12:22:30 ----A---- C:\Windows\system32\d3dx10_40.dll 2015-02-17 12:22:30 ----A---- C:\Windows\system32\D3DCompiler_40.dll 2015-02-17 12:22:29 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll 2015-02-17 12:22:29 ----A---- C:\Windows\system32\D3DX9_40.dll 2015-02-17 12:22:28 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll 2015-02-17 12:22:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll 2015-02-17 12:22:28 ----A---- C:\Windows\system32\XAudio2_3.dll 2015-02-17 12:22:28 ----A---- C:\Windows\system32\XAPOFX1_2.dll 2015-02-17 12:22:27 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll 2015-02-17 12:22:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll 2015-02-17 12:22:27 ----A---- C:\Windows\system32\xactengine3_3.dll 2015-02-17 12:22:27 ----A---- C:\Windows\system32\X3DAudio1_5.dll 2015-02-17 12:22:26 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll 2015-02-17 12:22:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll 2015-02-17 12:22:26 ----A---- C:\Windows\system32\XAudio2_2.dll 2015-02-17 12:22:26 ----A---- C:\Windows\system32\XAPOFX1_1.dll 2015-02-17 12:22:25 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll 2015-02-17 12:22:25 ----A---- C:\Windows\system32\xactengine3_2.dll 2015-02-17 12:22:24 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll 2015-02-17 12:22:24 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll 2015-02-17 12:22:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll 2015-02-17 12:22:24 ----A---- C:\Windows\system32\D3DX9_39.dll 2015-02-17 12:22:24 ----A---- C:\Windows\system32\d3dx10_39.dll 2015-02-17 12:22:24 ----A---- C:\Windows\system32\D3DCompiler_39.dll 2015-02-17 12:22:22 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll 2015-02-17 12:22:22 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll 2015-02-17 12:22:22 ----A---- C:\Windows\system32\XAudio2_1.dll 2015-02-17 12:22:22 ----A---- C:\Windows\system32\XAPOFX1_0.dll 2015-02-17 12:22:21 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll 2015-02-17 12:22:21 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll 2015-02-17 12:22:21 ----A---- C:\Windows\system32\xactengine3_1.dll 2015-02-17 12:22:21 ----A---- C:\Windows\system32\X3DAudio1_4.dll 2015-02-17 12:22:20 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll 2015-02-17 12:22:20 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll 2015-02-17 12:22:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll 2015-02-17 12:22:20 ----A---- C:\Windows\system32\D3DX9_38.dll 2015-02-17 12:22:20 ----A---- C:\Windows\system32\d3dx10_38.dll 2015-02-17 12:22:20 ----A---- C:\Windows\system32\D3DCompiler_38.dll 2015-02-17 12:22:19 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll 2015-02-17 12:22:19 ----A---- C:\Windows\system32\XAudio2_0.dll 2015-02-17 12:22:17 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll 2015-02-17 12:22:17 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll 2015-02-17 12:22:17 ----A---- C:\Windows\system32\xactengine3_0.dll 2015-02-17 12:22:17 ----A---- C:\Windows\system32\X3DAudio1_3.dll 2015-02-17 12:22:16 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll 2015-02-17 12:22:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll 2015-02-17 12:22:16 ----A---- C:\Windows\system32\d3dx10_37.dll 2015-02-17 12:22:16 ----A---- C:\Windows\system32\D3DCompiler_37.dll 2015-02-17 12:22:15 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll 2015-02-17 12:22:15 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll 2015-02-17 12:22:15 ----A---- C:\Windows\system32\xactengine2_10.dll 2015-02-17 12:22:15 ----A---- C:\Windows\system32\D3DX9_37.dll 2015-02-17 12:22:14 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll 2015-02-17 12:22:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll 2015-02-17 12:22:14 ----A---- C:\Windows\system32\d3dx10_36.dll 2015-02-17 12:22:14 ----A---- C:\Windows\system32\D3DCompiler_36.dll 2015-02-17 12:22:13 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll 2015-02-17 12:22:13 ----A---- C:\Windows\system32\d3dx9_36.dll 2015-02-17 12:22:12 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll 2015-02-17 12:22:12 ----A---- C:\Windows\system32\xactengine2_9.dll 2015-02-17 12:22:11 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll 2015-02-17 12:22:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll 2015-02-17 12:22:11 ----A---- C:\Windows\system32\d3dx10_35.dll 2015-02-17 12:22:11 ----A---- C:\Windows\system32\D3DCompiler_35.dll 2015-02-17 12:22:10 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll 2015-02-17 12:22:10 ----A---- C:\Windows\system32\d3dx9_35.dll 2015-02-17 12:22:09 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll 2015-02-17 12:22:09 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll 2015-02-17 12:22:09 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll 2015-02-17 12:22:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll 2015-02-17 12:22:09 ----A---- C:\Windows\system32\xactengine2_8.dll 2015-02-17 12:22:09 ----A---- C:\Windows\system32\X3DAudio1_2.dll 2015-02-17 12:22:09 ----A---- C:\Windows\system32\d3dx10_34.dll 2015-02-17 12:22:09 ----A---- C:\Windows\system32\D3DCompiler_34.dll 2015-02-17 12:22:08 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll 2015-02-17 12:22:08 ----A---- C:\Windows\system32\d3dx9_34.dll 2015-02-17 12:22:07 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll 2015-02-17 12:22:07 ----A---- C:\Windows\system32\xinput1_3.dll 2015-02-17 12:22:06 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll 2015-02-17 12:22:06 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll 2015-02-17 12:22:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll 2015-02-17 12:22:06 ----A---- C:\Windows\system32\xactengine2_7.dll 2015-02-17 12:22:06 ----A---- C:\Windows\system32\d3dx10_33.dll 2015-02-17 12:22:06 ----A---- C:\Windows\system32\D3DCompiler_33.dll 2015-02-17 12:22:05 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll 2015-02-17 12:22:05 ----A---- C:\Windows\system32\d3dx9_33.dll 2015-02-17 12:22:04 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll 2015-02-17 12:22:04 ----A---- C:\Windows\system32\xactengine2_6.dll 2015-02-17 12:22:03 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll 2015-02-17 12:22:03 ----A---- C:\Windows\system32\xactengine2_5.dll 2015-02-17 12:22:02 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll 2015-02-17 12:22:02 ----A---- C:\Windows\SYSWOW64\d3dx10.dll 2015-02-17 12:22:02 ----A---- C:\Windows\system32\d3dx9_32.dll 2015-02-17 12:22:02 ----A---- C:\Windows\system32\d3dx10.dll 2015-02-17 12:22:01 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll 2015-02-17 12:22:01 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll 2015-02-17 12:22:01 ----A---- C:\Windows\system32\xactengine2_4.dll 2015-02-17 12:22:01 ----A---- C:\Windows\system32\x3daudio1_1.dll 2015-02-17 12:22:00 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll 2015-02-17 12:22:00 ----A---- C:\Windows\system32\d3dx9_31.dll 2015-02-17 12:21:59 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll 2015-02-17 12:21:59 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll 2015-02-17 12:21:59 ----A---- C:\Windows\system32\xinput1_2.dll 2015-02-17 12:21:59 ----A---- C:\Windows\system32\xactengine2_3.dll 2015-02-17 12:21:58 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll 2015-02-17 12:21:58 ----A---- C:\Windows\system32\xactengine2_2.dll 2015-02-17 12:21:57 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll 2015-02-17 12:21:57 ----A---- C:\Windows\system32\xinput1_1.dll 2015-02-17 12:21:56 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll 2015-02-17 12:21:56 ----A---- C:\Windows\system32\xactengine2_1.dll 2015-02-17 12:21:52 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll 2015-02-17 12:21:52 ----A---- C:\Windows\system32\d3dx9_30.dll 2015-02-17 12:21:51 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll 2015-02-17 12:21:51 ----A---- C:\Windows\system32\xactengine2_0.dll 2015-02-17 12:21:50 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll 2015-02-17 12:21:50 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll 2015-02-17 12:21:50 ----A---- C:\Windows\system32\x3daudio1_0.dll 2015-02-17 12:21:50 ----A---- C:\Windows\system32\d3dx9_29.dll 2015-02-17 12:21:48 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll 2015-02-17 12:21:48 ----A---- C:\Windows\system32\d3dx9_28.dll 2015-02-17 12:21:47 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll 2015-02-17 12:21:47 ----A---- C:\Windows\system32\d3dx9_27.dll 2015-02-17 12:21:43 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll 2015-02-17 12:21:43 ----A---- C:\Windows\system32\d3dx9_26.dll 2015-02-17 12:21:41 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll 2015-02-17 12:21:41 ----A---- C:\Windows\system32\d3dx9_25.dll 2015-02-17 12:21:38 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll 2015-02-17 12:21:38 ----A---- C:\Windows\system32\d3dx9_24.dll 2015-02-17 12:18:08 ----HD---- C:\Windows\msdownld.tmp 2015-02-17 12:17:57 ----D---- C:\Windows\SYSWOW64\directx 2015-02-16 20:36:33 ----D---- C:\Program Files (x86)\GMT-MAX.ORG 2015-02-14 10:45:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-02-14 10:45:09 ----A---- C:\Windows\system32\jscript9.dll 2015-02-13 12:25:40 ----D---- C:\Users\ikke\AppData\Roaming\Audacity 2015-02-13 12:23:39 ----D---- C:\Program Files (x86)\Audacity 2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-02-13 12:05:43 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-02-13 12:05:43 ----A---- C:\Windows\system32\iernonce.dll 2015-02-13 12:05:43 ----A---- C:\Windows\system32\iedkcs32.dll 2015-02-13 12:05:43 ----A---- C:\Windows\system32\ie4uinit.exe 2015-02-13 12:05:42 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-02-13 12:05:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-02-13 12:05:42 ----A---- C:\Windows\system32\urlmon.dll 2015-02-13 12:05:42 ----A---- C:\Windows\system32\msfeeds.dll 2015-02-13 12:05:42 ----A---- C:\Windows\system32\iesetup.dll 2015-02-13 12:05:41 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-02-13 12:05:41 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-02-13 12:05:41 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-02-13 12:05:41 ----A---- C:\Windows\system32\jsproxy.dll 2015-02-13 12:05:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-02-13 12:05:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-02-13 12:05:39 ----A---- C:\Windows\system32\vbscript.dll 2015-02-13 12:05:39 ----A---- C:\Windows\system32\msrating.dll 2015-02-13 12:05:39 ----A---- C:\Windows\system32\dxtmsft.dll 2015-02-13 12:05:38 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-02-13 12:05:37 ----A---- C:\Windows\system32\mshtmled.dll 2015-02-13 12:05:37 ----A---- C:\Windows\system32\ieui.dll 2015-02-13 12:05:37 ----A---- C:\Windows\system32\dxtrans.dll 2015-02-13 12:05:35 ----A---- C:\Windows\system32\ieframe.dll 2015-02-13 12:05:33 ----A---- C:\Windows\system32\mshtml.dll 2015-02-13 12:05:32 ----A---- C:\Windows\system32\wininet.dll 2015-02-13 12:05:32 ----A---- C:\Windows\system32\jscript.dll 2015-02-13 12:05:31 ----A---- C:\Windows\system32\iertutil.dll 2015-02-13 12:05:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-02-13 12:05:28 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-02-13 12:05:27 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-02-13 12:05:25 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-02-13 12:05:21 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe 2015-02-13 12:05:21 ----A---- C:\Windows\SYSWOW64\iesysprep.dll 2015-02-13 12:05:21 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2015-02-13 12:05:21 ----A---- C:\Windows\system32\iesysprep.dll 2015-02-13 03:04:54 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-02-13 03:04:53 ----A---- C:\Windows\SYSWOW64\msls31.dll 2015-02-13 03:04:53 ----A---- C:\Windows\SYSWOW64\inseng.dll 2015-02-13 03:04:53 ----A---- C:\Windows\SYSWOW64\elshyph.dll 2015-02-13 03:04:53 ----A---- C:\Windows\system32\elshyph.dll 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\wextract.exe 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\pngfilt.dll 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\occache.dll 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\mshta.exe 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\imgutil.dll 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\iexpress.exe 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\iepeers.dll 2015-02-13 03:04:52 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll 2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\url.dll 2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe 2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\mshtmler.dll 2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\licmgr10.dll 2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat 2015-02-13 03:04:51 ----A---- C:\Windows\SYSWOW64\icardie.dll 2015-02-13 03:04:50 ----A---- C:\Windows\system32\msls31.dll 2015-02-13 03:04:49 ----A---- C:\Windows\system32\wextract.exe 2015-02-13 03:04:49 ----A---- C:\Windows\system32\webcheck.dll 2015-02-13 03:04:49 ----A---- C:\Windows\system32\url.dll 2015-02-13 03:04:49 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-02-13 03:04:49 ----A---- C:\Windows\system32\licmgr10.dll 2015-02-13 03:04:49 ----A---- C:\Windows\system32\inseng.dll 2015-02-13 03:04:49 ----A---- C:\Windows\system32\iexpress.exe 2015-02-13 03:04:49 ----A---- C:\Windows\system32\ieUnatt.exe 2015-02-13 03:04:49 ----A---- C:\Windows\system32\ieapfltr.dll 2015-02-13 03:04:49 ----A---- C:\Windows\system32\ieapfltr.dat 2015-02-13 03:04:49 ----A---- C:\Windows\system32\icardie.dll 2015-02-13 03:04:48 ----A---- C:\Windows\system32\SetIEInstalledDate.exe 2015-02-13 03:04:48 ----A---- C:\Windows\system32\pngfilt.dll 2015-02-13 03:04:48 ----A---- C:\Windows\system32\occache.dll 2015-02-13 03:04:48 ----A---- C:\Windows\system32\mshtmler.dll 2015-02-13 03:04:48 ----A---- C:\Windows\system32\mshta.exe 2015-02-13 03:04:48 ----A---- C:\Windows\system32\msfeedssync.exe 2015-02-13 03:04:48 ----A---- C:\Windows\system32\msfeedsbs.dll 2015-02-13 03:04:48 ----A---- C:\Windows\system32\imgutil.dll 2015-02-13 03:04:48 ----A---- C:\Windows\system32\iepeers.dll 2015-02-13 03:04:48 ----A---- C:\Windows\system32\IEAdvpack.dll 2015-02-11 23:59:29 ----D---- C:\ProgramData\CheckPoint 2015-02-11 17:44:26 ----D---- C:\Windows\Minidump 2015-02-11 16:45:22 ----A---- C:\Windows\system32\generaltel.dll 2015-02-11 16:45:21 ----A---- C:\Windows\system32\invagent.dll 2015-02-11 16:45:21 ----A---- C:\Windows\system32\devinv.dll 2015-02-11 16:45:21 ----A---- C:\Windows\system32\appraiser.dll 2015-02-11 16:45:21 ----A---- C:\Windows\system32\aitstatic.exe 2015-02-11 16:45:21 ----A---- C:\Windows\system32\aepdu.dll 2015-02-11 16:45:21 ----A---- C:\Windows\system32\aeinv.dll 2015-02-11 16:45:20 ----A---- C:\Windows\system32\aepic.dll 2015-02-11 16:44:33 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2015-02-11 16:44:33 ----A---- C:\Windows\system32\WindowsCodecs.dll 2015-02-11 16:44:27 ----A---- C:\Windows\system32\lsasrv.dll 2015-02-11 16:44:27 ----A---- C:\Windows\system32\drivers\cng.sys 2015-02-11 16:44:27 ----A---- C:\Windows\system32\adtschema.dll 2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\secur32.dll 2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\msobjs.dll 2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\auditpol.exe 2015-02-11 16:44:26 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2015-02-11 16:44:26 ----A---- C:\Windows\system32\sspisrv.dll 2015-02-11 16:44:26 ----A---- C:\Windows\system32\sspicli.dll 2015-02-11 16:44:26 ----A---- C:\Windows\system32\secur32.dll 2015-02-11 16:44:26 ----A---- C:\Windows\system32\msobjs.dll 2015-02-11 16:44:26 ----A---- C:\Windows\system32\lsass.exe 2015-02-11 16:44:26 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-02-11 16:44:26 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-02-11 16:44:26 ----A---- C:\Windows\system32\auditpol.exe 2015-02-11 16:44:25 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2015-02-11 16:44:25 ----A---- C:\Windows\system32\msaudite.dll 2015-02-11 16:44:14 ----A---- C:\Windows\SYSWOW64\crypt32.dll 2015-02-11 16:44:14 ----A---- C:\Windows\system32\wintrust.dll 2015-02-11 16:44:14 ----A---- C:\Windows\system32\cryptsvc.dll 2015-02-11 16:44:14 ----A---- C:\Windows\system32\crypt32.dll 2015-02-11 16:44:13 ----A---- C:\Windows\SYSWOW64\wintrust.dll 2015-02-11 16:44:13 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll 2015-02-11 16:44:07 ----A---- C:\Windows\SYSWOW64\oleaut32.dll 2015-02-11 16:44:07 ----A---- C:\Windows\system32\oleaut32.dll 2015-02-11 16:44:04 ----A---- C:\Windows\system32\mstscax.dll 2015-02-11 16:44:03 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2015-02-11 16:44:03 ----A---- C:\Windows\SYSWOW64\aaclient.dll 2015-02-11 16:43:30 ----A---- C:\Windows\SYSWOW64\scesrv.dll 2015-02-11 16:43:30 ----A---- C:\Windows\system32\scesrv.dll 2015-02-11 16:43:21 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-02-11 16:43:20 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-02-11 16:43:20 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-02-11 16:43:17 ----A---- C:\Windows\system32\srcore.dll 2015-02-11 16:43:17 ----A---- C:\Windows\system32\rstrui.exe 2015-02-11 16:43:16 ----A---- C:\Windows\SYSWOW64\srclient.dll 2015-02-11 16:43:16 ----A---- C:\Windows\system32\srclient.dll 2015-02-11 16:42:30 ----A---- C:\Windows\system32\win32k.sys 2015-02-11 11:56:39 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys 2015-02-11 11:56:06 ----D---- C:\ProgramData\Malwarebytes 2015-02-11 11:56:06 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-02-11 11:56:06 ----A---- C:\Windows\system32\drivers\mwac.sys 2015-02-11 11:56:06 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys 2015-02-11 11:56:06 ----A---- C:\Windows\system32\drivers\mbam.sys 2015-02-10 13:27:27 ----D---- C:\Program Files (x86)\Reveal Sound 2015-02-08 23:43:50 ----D---- C:\Program Files (x86)\Rob Papen ======List of files/folders modified in the last 1 month====== 2015-03-06 12:44:08 ----RD---- C:\Program Files 2015-03-06 12:41:48 ----D---- C:\Windows\Temp 2015-03-06 12:34:01 ----D---- C:\Windows\Prefetch 2015-03-06 10:53:36 ----D---- C:\Windows\system32\config 2015-03-04 16:00:01 ----D---- C:\Windows\System32 2015-03-04 16:00:01 ----D---- C:\Windows\inf 2015-03-04 16:00:01 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-03-04 15:10:32 ----SHD---- C:\System Volume Information 2015-03-04 13:03:56 ----D---- C:\Windows 2015-03-04 13:02:49 ----D---- C:\Windows\SysWOW64 2015-03-04 12:39:54 ----D---- C:\Windows\system32\drivers 2015-03-04 12:39:46 ----D---- C:\Windows\system32\DriverStore 2015-03-04 12:35:38 ----D---- C:\Windows\SoftwareDistribution 2015-03-03 14:17:35 ----N---- C:\Windows\system32\MpSigStub.exe 2015-03-02 17:53:21 ----D---- C:\Users\ikke\AppData\Roaming\Adobe 2015-03-01 17:36:27 ----D---- C:\Windows\ModemLogs 2015-03-01 17:36:27 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-03-01 17:34:18 ----D---- C:\Users\ikke\AppData\Roaming\tixati 2015-03-01 17:23:35 ----HD---- C:\ProgramData 2015-03-01 17:21:59 ----RSD---- C:\Windows\Fonts 2015-03-01 17:21:42 ----SHD---- C:\Windows\Installer 2015-03-01 17:20:46 ----RD---- C:\Program Files (x86) 2015-03-01 17:17:28 ----D---- C:\Windows\winsxs 2015-03-01 17:15:45 ----D---- C:\Program Files\Common Files 2015-03-01 17:10:58 ----D---- C:\Program Files (x86)\Common Files 2015-02-26 13:33:38 ----D---- C:\Windows\Tasks 2015-02-26 13:33:38 ----D---- C:\Windows\system32\Tasks 2015-02-25 20:22:35 ----SD---- C:\Users\ikke\AppData\Roaming\Microsoft 2015-02-25 19:45:08 ----D---- C:\Windows\tracing 2015-02-24 15:40:42 ----D---- C:\Program Files (x86)\VstPlugins 2015-02-24 15:40:27 ----D---- C:\Program Files\Common Files\Native Instruments 2015-02-24 15:37:45 ----D---- C:\Program Files\Native Instruments 2015-02-20 13:28:35 ----D---- C:\Program Files\Common Files\Apple 2015-02-20 13:26:13 ----D---- C:\Windows\system32\catroot 2015-02-17 13:34:17 ----SHD---- C:\$Recycle.Bin 2015-02-17 12:24:24 ----D---- C:\Windows\Cursors 2015-02-17 12:21:56 ----RSD---- C:\Windows\assembly 2015-02-17 12:21:33 ----D---- C:\Windows\Microsoft.NET 2015-02-17 12:17:56 ----D---- C:\Windows\Logs 2015-02-17 12:17:05 ----D---- C:\ProgramData\Package Cache 2015-02-13 17:07:30 ----D---- C:\Program Files (x86)\Internet Explorer 2015-02-13 17:07:29 ----D---- C:\Program Files\Internet Explorer 2015-02-13 12:04:27 ----D---- C:\Windows\system32\catroot2 2015-02-13 11:53:36 ----D---- C:\Windows\rescache 2015-02-13 03:23:52 ----D---- C:\Windows\SYSWOW64\migration 2015-02-13 03:23:52 ----D---- C:\Windows\SYSWOW64\en-US 2015-02-13 03:23:52 ----D---- C:\Windows\system32\migration 2015-02-13 03:23:52 ----D---- C:\Windows\system32\en-US 2015-02-13 03:23:52 ----D---- C:\Windows\PolicyDefinitions 2015-02-12 11:48:27 ----D---- C:\Program Files\Common Files\Microsoft Shared 2015-02-12 03:23:05 ----SD---- C:\Windows\system32\CompatTel 2015-02-12 03:23:05 ----D---- C:\Windows\system32\appraiser 2015-02-12 03:05:48 ----D---- C:\Program Files\Microsoft Security Client 2015-02-12 03:05:47 ----D---- C:\Program Files (x86)\Microsoft Security Client 2015-02-12 03:05:08 ----D---- C:\Windows\system32\MRT 2015-02-12 03:02:14 ----A---- C:\Windows\system32\MRT.exe 2015-02-11 12:38:45 ----D---- C:\Windows\ehome 2015-02-11 00:48:33 ----D---- C:\Users\ikke\AppData\Roaming\FabFilter 2015-02-07 13:38:00 ----D---- C:\Program Files (x86)\FabFilter ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 274696] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2014-08-13 450456] R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 124560] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-10-16 10619296] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-09-20 3074664] R3 ManyCam;ManyCam Virtual Webcam; C:\Windows\system32\DRIVERS\mcvidrv.sys [2014-12-29 49304] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-11-21 25816] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-03-06 129752] R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-11-21 63704] R3 mcaudrv_simple;ManyCam Virtual Microphone; C:\Windows\system32\drivers\mcaudrv_x64.sys [2014-12-29 35992] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160] R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016] R2 Mikogo-Service;Mikogo-Service; C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Service.exe [2014-12-12 944480] R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 23784] R2 vsmon;TrueVector Internet Monitor; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2014-08-13 3596752] R2 YahooAUService;Yahoo! Updater; C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe [2008-11-09 602392] R2 ZAPrivacyService;ZoneAlarm Privacy Service; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [2014-08-13 96272] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880] R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 366512] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-26 107848] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-25 267440] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-26 107848] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-25 148080] S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-03-03 1910640] S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-02-01 1255736] -----------------EOF-----------------

Security check: Results of screen317's Security Check version 0.99.97 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 Out of date! ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Disabled! Microsoft Security Essentials Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java 8 Update 31 Java version 32-bit out of Date! Java 64-bit 8 Update 31 Adobe Flash Player 16.0.0.305 Mozilla Firefox (36.0) Google Chrome (40.0.2214.115) Google Chrome (41.0.2272.76) ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe CheckPoint ZoneAlarm vsmon.exe CheckPoint ZoneAlarm ZaPrivacyService.exe CheckPoint ZoneAlarm zatray.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 2% ````````````````````End of Log``````````````````````

WhyIGotInfected 1.10.0.0(by Tigzy) ******************************** Run : 6/03/2015 12:34:29 [Normal Mode] Machine : IKKE-PC (2 CPUs) [ikke : ADMIN] OS: Windows 7 Service Pack 1 (x64) ~~ Plugins check: ~~ UPTODATE [Windows 7 Service Pack 1] Current : Service Pack 1 -- Latest : Service Pack 1 OUTDATED [Firefox (x86)] Current : 36.0 -- Latest : 35.0.1 OUTDATED [internet Explorer] Current : 9.10.9200.17229 -- Latest : 9.11.9600.17239 OUTDATED [internet Explorer (x86)] Current : 9.10.9200.17229 -- Latest : 9.11.9600.17239 UPTODATE [Adobe Flash] Current : 16.0.0.305 -- Latest : 16.0.0.305 UPTODATE [Adobe Flash (x86)] Current : 16.0.0.305 -- Latest : 16.0.0.305 UPTODATE [Adobe Flash ActiveX] Current : 16.0.0.305 -- Latest : 16.0.0.305 UPTODATE [Adobe Flash ActiveX (x86)] Current : 16.0.0.305 -- Latest : 16.0.0.305 UPTODATE [Adobe Flash FF Plugin] Current : 16.0.0.305 -- Latest : 16.0.0.305 UPTODATE [Adobe Flash FF Plugin (x86)] Current : 16.0.0.305 -- Latest : 16.0.0.305 Finished <C:\Users\ikke\Desktop\WIGIReport[0].txt> WIGIReport[0].txt ------------------------ Security Check is nog altijd bij 'Performing system health check' ------------------------ Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 12:37:56, on 6/03/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.17229) FIREFOX: 36.0 (x86 nl) Boot mode: Normal Running processes: C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\ManyCam\ManyCam.exe C:\Program Files (x86)\Screen Recorder\NSR.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Users\ikke\Downloads\ProcessExplorer\procexp.exe C:\Users\ikke\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe" O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ijtwsoft] regsvr32.exe C:\Users\ikke\AppData\Local\Ijtwsoft\WEBAPPDBG.DLL O4 - HKCU\..\Run: [Ahcbworks] C:\Windows\SysWOW64\regsvr32.exe C:\Users\ikke\AppData\Local\AZCworks\cpuz.dll O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [Mikogo] "C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-host.exe" -asp O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_80EFCD58332697325F19C231D17DEA21] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Mikogo-Service - BeamYourScreen GmbH - C:\Users\ikke\AppData\Roaming\Mikogo\Mikogo-Service.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe -- End of file - 9684 bytes

Ok, graag zou ik even wat hulp willen met de diagnose van mijn PC. Een tijdje geleden vertoonde deze symptomen van een hacker. Mijn muis scrolde vaak uitzichzelf,dikwijls leek het alsof er iemand een 2de keer op vorige pagina klikte. Graag zou ik willen dat iemand me helpt met het vinden van een mogelijke hacker. Als ik MBAM & MSE moet geloven zou mijn pc vrij moeten zijn van bedreigingen. Maar omdat ik zekerheid wil kom ik hier even hulp vragen. Nu las ik dat er nieuw type diagnose programma is (RSIT) Moet ik dit beide posten dan of is Hijackthis genoeg?